last executing test programs: 23.794295535s ago: executing program 0 (id=723): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getresgid(&(0x7f0000002e00), &(0x7f0000002e40), &(0x7f0000002e80)) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r2, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x48840, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r2, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0xa569}], 0x1, 0x40010162, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) setitimer(0x2, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r3 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) open$dir(&(0x7f00000000c0)='./file0\x00', 0x8600, 0x0) openat(0xffffffffffffffff, 0x0, 0x10000, 0xa) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r5, 0x4000010000c2f, 0x5, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000000c0), 0x4) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000000)=0xa, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRESOCT=0x0, @ANYRES32=r6, @ANYRESOCT=0x0, @ANYRES64=r6, @ANYRES64=r7], 0x0) 23.267073861s ago: executing program 0 (id=734): ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xed, 0x0, 0x93d7}) (async, rerun: 32) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r1, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x7f11b2d5, 0x4, 0x6, 0xd2d0, 0x1, 0x6, 0x2, 0x91, 0xffffffff, 0x202, 0x3, 0x0, 0x8000, 0x0, 0x7, 0x0, 0x0, 0x200008, 0xd}}) (async) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) 22.69638281s ago: executing program 0 (id=739): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000011c0)=@newtaction={0x44, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0x9, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) recvfrom(r0, &(0x7f0000000800)=""/4084, 0xff4, 0x10003, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000011c0)=@newtaction={0x44, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0x9, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) (async) recvfrom(r0, &(0x7f0000000800)=""/4084, 0xff4, 0x10003, 0x0, 0x0) (async) 22.625034312s ago: executing program 0 (id=740): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/sync_on_suspend', 0x1a3001, 0x18) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x2) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010326bd7000fbdbdf051c0000000c00018008000100", @ANYRES32=r6, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000006) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000380)="5f4d6ef40f1cdd4a230ccfc7e1bb17de9c02b40ed03d437d33cfd9e4251e78776e6280cb5091a656b08ec6b19c621f0fc04c58028057a2381f2e9608b9788f7e8a2274dbce733105c6956c7b9f46b7950f9eab57177ffef7c94f31d42e5073e39d789e416ef2d8813365c270b5e799870b9f2c345bb0fb0855e89808da8e4e703ac3c68cb2c706bb092eefa39370bc341a01", 0x92}, {&(0x7f0000000440)="80bfc661e9175d2cb9c383f1fdbf98bbed70237fff9f68fa87395c75be90e201aaf65838cecede149be549cc", 0x2c}, {&(0x7f0000000480)="5b62cc8ad6752e1045cfb50afa58220065431f4030b3871d4ccaf96b46f2c7e6c2dc5638218a21f54d8eab256e0ee67b14e8c24912d40fdb415c53b3614267ec785dd8a62a5e233c4c24c43eed632cd9b417de31e5308ec87f041a357d266efeaced15ea18779dc94e5fbbb1ef956601ffa056a89150176a7cc4c544945622dc4a7a31d88685ba180155d34b82", 0x8d}, {&(0x7f0000000540)="da2efcc9c73076f73414871b977f19328de5920383035d61774b3ca6dcbbc37b215dbffea18dcb65ce4c9c04d853f501b12a856d7c310c4dde2d73d5a553433727dfd8d14eadd21ba257d3d1be23e75b5da2efe15ec23ce5b4a6a0a8dd50fad5ec99619e81f493ab8c351893e6fe4f441e22c105c8395fe23c9eacc22138da9076065c4631fa7a328c6b7957c95045f846e94b1cc39de8d4eb15960328aa8410498fd34d465473cc63376a0a9ec8f3ef213117dc08f2cdc6a102b9c84ae2a615bc8ad763f4fd649da7c2c3e169", 0xcd}], 0x4, 0x6f9, 0x2, 0x18) 22.554809704s ago: executing program 0 (id=741): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f0000003840)={[0x100]}, 0x8) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0x11, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0803d938fd27fa00000005004ef564918000be0e1c2074ed27c1c6", 0x1d) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x80000000) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES8=r3, @ANYRES8], 0x0) 22.535659745s ago: executing program 0 (id=742): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x80000037db, 0x538d28a0, 0x0, 0x0, 0x0, 0x1000000081, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x10000}) (async) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) (async) listen(r2, 0x0) (async) r3 = syz_open_dev$usbmon(&(0x7f0000000380), 0x9, 0x2a180) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r3, 0xffffc000) (async) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x1000) connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000440)=@file={0x1}, 0x6e) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x22, 0x0, 0x0) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000], 0x80a0000}) (async) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x2, 0x5, 0xd6, 0x98, 0x1, 0xf, 0x11, 0xc, 0xf7, 0x7, 0x5a, 0x3, 0x8}, {0xd5, 0x9, 0x4, 0x0, 0x7f, 0x7, 0x2, 0x2, 0xf7, 0x8, 0x2, 0x5, 0x6}, {0x2, 0x8, 0x76, 0x58, 0x0, 0x3, 0x2, 0x53, 0x7, 0x4, 0x0, 0x3, 0x7fff}], 0xa4}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000640)=ANY=[@ANYRES64=r0], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c094}, 0x2000cc11) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f0000000100)={0x0, 0x4, 0xa7, {0xa7, 0xd1b8e4477c7bbd46, "7d2b247d99420e8f631ff8f881fe0277a8989eeefc4a007e68b9d2c983f00a05212810bdf321486678da23d8a193c0e27e677e5657bf3fd4f8f096db194e8476dd990949b8d147b63b3779b69cce91ef7b69ddabd273a1f27650861c62f2c6bf88f3f8ce73f22e0b1194ab072b2e92406057f1036856a71be0345a07c339969b3484e7a70d404058b37bc73246d5f1a993aff2a7f2373d73afa9e027e596783b185ec109c0"}}, &(0x7f00000001c0)={0x0, 0x3, 0xe, @string={0xe, 0x3, "2502e42da71a4fff2c747e98"}}, &(0x7f0000000200)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0xa, "4583"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0x3c}}}}, &(0x7f0000000580)={0x2c, &(0x7f00000002c0)={0x0, 0xe, 0xb5, "bf9f7406a1c45582778b40f7d27f4ae8014e06b2ea8056c4f68ba3d9b7fa832325cac349640b258c7422966001876f188b05e711700b00ca68edc09f0c0e8cb066f1004dab09bf6a6ed59976cb8081990a392c98b3ab6b6700d87558f70f8a2fe640da6ba813f4382928fa82d13919d6233ced5565ba3fa76bdbef8d94a8d4a1873c449ec7b9e775ed13210c9404e04ffe55f7f7a8103d990af7b4f9275b0425a6a13ca63dbe88d548658c79f61bdbab03a9511d40"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000440)=ANY=[@ANYBLOB="2001ee000000dbfc3fa0956b4f02f6d31ead9b525bd242ff4795b314dce37ebdeb214ecfd8ff2a34aae3d253841d9c29087ab5c3ff80f30fdfebf56c23dd2201764b135fd7b6efe02628d331e21dfec7b63ee3187a0a72382e94599b80e94ada50ecfac9c5990a6402ab409f755d04023a8e5f4978b6e94dbfb562eca5358e0c0a76c0df8fe9508b9033d78c734cc97ff93405db284c1357ef209187784ad86f52b52cafdb0838029b952332ae4caa867cfc04e06885a723d154941142cff2bba6534f606aeea8c9ce0b8bd4e70f93aa4b4920da329b11ba66dda7e6ea90850ee5712666b5ebca58a311e41a8d9aba1ce6a40d20"], &(0x7f0000000540)={0x20, 0x3, 0x1, 0xc}}) (async) syz_usb_control_io(r7, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200d2c0000002c23e75bcf47a88a34d2dd23ee248c36105a7e746fb1400590136b7103bd4f114e2a60cefa13e8be"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22.501762606s ago: executing program 32 (id=742): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x80000037db, 0x538d28a0, 0x0, 0x0, 0x0, 0x1000000081, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x10000}) (async) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) (async) listen(r2, 0x0) (async) r3 = syz_open_dev$usbmon(&(0x7f0000000380), 0x9, 0x2a180) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r3, 0xffffc000) (async) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x1000) connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000440)=@file={0x1}, 0x6e) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x22, 0x0, 0x0) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000], 0x80a0000}) (async) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x2, 0x5, 0xd6, 0x98, 0x1, 0xf, 0x11, 0xc, 0xf7, 0x7, 0x5a, 0x3, 0x8}, {0xd5, 0x9, 0x4, 0x0, 0x7f, 0x7, 0x2, 0x2, 0xf7, 0x8, 0x2, 0x5, 0x6}, {0x2, 0x8, 0x76, 0x58, 0x0, 0x3, 0x2, 0x53, 0x7, 0x4, 0x0, 0x3, 0x7fff}], 0xa4}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000640)=ANY=[@ANYRES64=r0], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c094}, 0x2000cc11) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f0000000100)={0x0, 0x4, 0xa7, {0xa7, 0xd1b8e4477c7bbd46, "7d2b247d99420e8f631ff8f881fe0277a8989eeefc4a007e68b9d2c983f00a05212810bdf321486678da23d8a193c0e27e677e5657bf3fd4f8f096db194e8476dd990949b8d147b63b3779b69cce91ef7b69ddabd273a1f27650861c62f2c6bf88f3f8ce73f22e0b1194ab072b2e92406057f1036856a71be0345a07c339969b3484e7a70d404058b37bc73246d5f1a993aff2a7f2373d73afa9e027e596783b185ec109c0"}}, &(0x7f00000001c0)={0x0, 0x3, 0xe, @string={0xe, 0x3, "2502e42da71a4fff2c747e98"}}, &(0x7f0000000200)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0xa, "4583"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0x3c}}}}, &(0x7f0000000580)={0x2c, &(0x7f00000002c0)={0x0, 0xe, 0xb5, "bf9f7406a1c45582778b40f7d27f4ae8014e06b2ea8056c4f68ba3d9b7fa832325cac349640b258c7422966001876f188b05e711700b00ca68edc09f0c0e8cb066f1004dab09bf6a6ed59976cb8081990a392c98b3ab6b6700d87558f70f8a2fe640da6ba813f4382928fa82d13919d6233ced5565ba3fa76bdbef8d94a8d4a1873c449ec7b9e775ed13210c9404e04ffe55f7f7a8103d990af7b4f9275b0425a6a13ca63dbe88d548658c79f61bdbab03a9511d40"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000440)=ANY=[@ANYBLOB="2001ee000000dbfc3fa0956b4f02f6d31ead9b525bd242ff4795b314dce37ebdeb214ecfd8ff2a34aae3d253841d9c29087ab5c3ff80f30fdfebf56c23dd2201764b135fd7b6efe02628d331e21dfec7b63ee3187a0a72382e94599b80e94ada50ecfac9c5990a6402ab409f755d04023a8e5f4978b6e94dbfb562eca5358e0c0a76c0df8fe9508b9033d78c734cc97ff93405db284c1357ef209187784ad86f52b52cafdb0838029b952332ae4caa867cfc04e06885a723d154941142cff2bba6534f606aeea8c9ce0b8bd4e70f93aa4b4920da329b11ba66dda7e6ea90850ee5712666b5ebca58a311e41a8d9aba1ce6a40d20"], &(0x7f0000000540)={0x20, 0x3, 0x1, 0xc}}) (async) syz_usb_control_io(r7, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200d2c0000002c23e75bcf47a88a34d2dd23ee248c36105a7e746fb1400590136b7103bd4f114e2a60cefa13e8be"], 0x0, 0x0, 0x0, 0x0}, 0x0) 9.855132917s ago: executing program 1 (id=776): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') recvfrom(r1, &(0x7f0000000180)=""/252, 0xfc, 0x10060, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) syz_usb_connect$midi(0x5, 0x3e, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x81, 0x90, 0xbe, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x4, [], [{{0x9, 0x5, 0x8d, 0x3, 0x220, 0x7f, 0xfe, 0xf8, {0x4}}}, {{0x9, 0x5, 0x87, 0x2, 0x400, 0x9, 0x0, 0xe, {0x4}}}]}}}}}]}}, 0x0) recvfrom$inet6(r1, &(0x7f0000000380)=""/202, 0xca, 0x40000100, &(0x7f0000000480)={0xa, 0x4e23, 0x5ce, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_open_dev$loop(0x0, 0x272, 0x4000) syz_usb_connect$cdc_ecm(0x4, 0x50, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x1, 0x4, 0x80, 0x7, "", [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x8, 0x24, 0x6, 0x0, 0x0, "cd4c32"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x90, 0xd3}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x7, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0xa8, 0x8}}}}}]}}]}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_control_io(r3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000005c0), 0x8040, &(0x7f0000000040)={[{@redirect_dir_nofollow}, {@userxattr}]}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x2, 0x5, 0x0, 0x3, 0x2, 0x2, 0xfffffffffffffffd], 0x10000, 0x202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x8080000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xb000, 0xc, 0x0, 0xfc, 0x1, 0x0, 0x0, 0x3, 0x7}, {0x2000, 0x10000, 0x1f, 0xff, 0x7, 0x4, 0x4, 0xfd, 0x3, 0x0, 0x0, 0xfc}, {0x10000, 0xd000, 0xd, 0x0, 0x0, 0xfe, 0xff, 0x0, 0x8, 0xfc, 0x6, 0x10}, {0xffff1000, 0x7000, 0x10, 0x0, 0x4, 0x8, 0x10, 0x3, 0xfc, 0x3c}, {0x0, 0x0, 0xf, 0xfd, 0x8, 0x0, 0x2, 0x0, 0x6, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x13}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x4, 0x0, 0x0, 0x3}, {0x80a0000}, {0xdddd1000}, 0xddf8fffb, 0x0, 0x10000, 0x50, 0x3, 0xf801, 0x8000000, [0x80000000, 0x0, 0x1]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='ycpu \")'], 0x5) 9.854770447s ago: executing program 2 (id=777): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000204355313000000000000109022400e1ff00300909040000fe03000100092131fcfc0122280009058103ff030381023f617b0624d66a8f18fff68b7b0af2d079ed428a12a332d446f8b16ca9247de92e9fd4328dade1a72fe3de989f87ed750444f3d9e864e841681821bfb7764b80"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x28, {0x28, 0x8, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f545cb92e449c42123ec25cd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 9.854441547s ago: executing program 3 (id=778): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x10000}, 0xc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x2) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prctl$PR_SET_MM_MAP(0x34, 0xe, 0x0, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x28) r7 = dup(r5) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r9 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') read$FUSE(r9, &(0x7f0000003ac0)={0x2020}, 0x2023) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'erspan0\x00', @remote}) write$tun(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000009ffffffffffffbbbbbbbbbbbb0806000108000604"], 0x7b) 8.103313822s ago: executing program 1 (id=779): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) fcntl$addseals(r0, 0x409, 0x1) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x1016, 0x3, 0x2}, 0x18, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0xc00, r0}, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) close(0x3) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000200)={0x3, 0x9, &(0x7f0000000100)="5ff583f0918449e13f"}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="500100001000130700000000fcdbdf25e0000002000000000000000000000000fe8000"/64, @ANYRES32=r0, @ANYRES32=0xee00, @ANYRESHEX=r1, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRES32=r1], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x1000000000000, 0x2000}) 8.103064722s ago: executing program 2 (id=780): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x9, 0x4) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0xfffffffe, 0x930}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001600010000000000040000000a40"], 0x20}}, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r2, 0x40305829, &(0x7f0000000040)={0x2, 0x0, 0x6, 0xfffffffffffffffe, 0x8, 0xfffffffd}) recvmmsg(r1, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, 0x0, 0x0) 8.058768984s ago: executing program 3 (id=781): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0xe7) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00141202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) fcntl$getownex(r0, 0x10, &(0x7f0000003640)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae03, 0xa4) syz_usb_connect$uac1(0x0, 0xc8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3, @ANYRES32], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x4, [{0xc2, &(0x7f0000000580)=@string={0xc2, 0x3, "5e18e4c1f4926ea90be3d7f05429200e7d51cac234868d219fdc66026716fb20ab0c5315d1102ea45c8f7643082ef0935ff9c4c7141c889e92972bd97146b2ed5c489f8a341eeec875e72e5f73fc3d6c524389912281f4878763f7f6dde05a94d13ed69d15d99b2d4ad4a91f08118120f33dbe6ce3658386e6452d283b66f92d6c17767f9cb3918613b9e2f9e782c9ec79cb43553ea4fc4e78bf103894d3bb0ec9ffcb893af52c97581efcd7917809a24e0f74655e21b8e4711e65ba80b4d25d"}}, {0x44, &(0x7f0000000040)=@string={0x44, 0x3, "a924af0ba827dbb789a4ab67547a373c4ee3603aa25fa812fbd93aebc8705979021d46995fb4fb1d8fbfdc9917f4d239af9595a9c64e1f54e5006c58aae48ba300df"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x3001}}, {0xce, &(0x7f0000000700)=@string={0xce, 0x3, "2b42e0a0e24de5758f3221871583ed31c74c0ee7dae7bef7f7f3a713c3542f94774444968d3a34f4459cb1719f8e7b706de02089a7631afa0b7a3f6f0bdbdcc25e484184473999a38107c76e4cba46a6b301c36c65940ab5aa581138d2e980fcd773eca0d8204f171a3444cc0c20e7f36534967178d70a11bb44592dd1c8a0ee345fbe69dbec16d45b730c56f0173f984b7b19843a62ba094130fd0598400ceb10ff01fda6925182911068b00d66b1edcf25008f09c3807e4a3ec5f5397f6fe91a774866b2c2542083ec3e64"}}]}) syz_usb_connect$uac1(0x6, 0xd2, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x81, 0xf0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x2d}, [@feature_unit={0x9, 0x24, 0x6, 0x5, 0x5, 0x1, [0x3]}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x2}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x6, 0xa, "df3416"}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x329, 0xf, "8396d0fb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xa, 0xc0, 0x4, {0x7, 0x25, 0x1, 0xc, 0x0, 0xd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7b, 0x3, 0x8, 0x9}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x70, 0x3, 0xec, 0x8, "448353db38594f7837"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x1, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x7, 0x1, 0xf}, @as_header={0x7, 0x24, 0x1, 0xb, 0x4, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x9, 0x9, 0x2a}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x9, 0xf3, {0x7, 0x25, 0x1, 0x4, 0x4a, 0x2}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x2, 0xff, 0xff, 0x70, 0x7}, 0x69, &(0x7f00000002c0)=ANY=[@ANYBLOB="000f0f810030c0ff00003f000030c00000000000003f000000071002046700000b100102c200030605000d0a100300020009e39a4a1410040577a59c093f73d5ecf1ebf058676afb7d1410040877026dee14e6bc7172f48cd5b256b2d900"/105], 0x2, [{0x52, &(0x7f0000000500)=ANY=[@ANYBLOB="52030a954a0b9752bdd38db7bf2371e5f55fa420a4129f002f5cc352a62bfa7623f07ef891269835aff8a93d1a7d940b7bab356ad285dc2c66998b060f2172bda5cd8804f2f65f053ad2a964ba82720000003ec56b9997cd13"]}, {0xcb, &(0x7f00000003c0)=@string={0xcb, 0x3, "82ed00d8171fdea6ce280ce68bddf67c1b012cf8388ff317e1c682b9cc060fbb60b2573ec02b6090b8b654473cbf90055530ccdce74223255dfcf864f997cdfd1875bcad5fd2e6150ec39970335c6b0bd40584ce4c267eaa2d19bbaea9a8cd8b5622ab58c6f4f28c93386e1c6f9c6d9cb20c8446797ec00084a5ef45ff75a0f4dddfc3f8a966e790400e1009ac36c34e5257bfb51dc7be83e6f670cf88ebdc9a987d59ea899b4d79b4e7cb95c11e4725a91ccaa5ad887713a567d2163cb107498ff63219f4771e9256"}}]}) 6.243890762s ago: executing program 1 (id=782): r0 = socket$tipc(0x1e, 0x2, 0x0) shutdown(r0, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c40000001900010000000000fedbdf25ff0100000000000000000000000000016401010200000000000000000000e3ff00000000000200000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000080000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000030000000000000000000000b86b6e0000010001000000000c0015005d0735000f"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 6.243670012s ago: executing program 2 (id=783): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x3, 0x2b}]}, 0x18}, 0x1, 0x7}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6.243327132s ago: executing program 3 (id=784): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xa27, 0x0, &(0x7f0000000280)}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000080)={0x9f8, 0x12, 0x0, 0x0, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffdcc, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xfeb3}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x70}}, 0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 4.260997115s ago: executing program 1 (id=785): socket$netlink(0x10, 0x3, 0x12) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200090d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000200000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x44, &(0x7f0000000140)={0x11, 0x8100, 0x0, 0x1, 0x6, 0x6, @random="2788eec0700d"}, 0x14) r1 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0xff, 0x2070, 0x1000, 0x6, 0x4, 0x9, 0xfffd, 0xec, 0x3906, 0x2, 0x6, 0x200}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) pipe(0x0) setresgid(0x0, 0x0, 0xee01) setfsgid(0xee01) 4.210845266s ago: executing program 2 (id=786): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x149800, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/prev\x00') setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080), 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 4.210444226s ago: executing program 3 (id=787): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="b512010000000001088f0e1200000000000001090224000b03000300092109000a01222c0009058103ff03100700000000120000000000"], 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081b3", 0x3, 0xffffffffffffffff) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)={0x20, 0xd, 0x2c, {0x2c, 0x23, "e75bcf47a88a34d2dd23ee248c36105a7e746fb1400590136b7103bd4f114e2a60cefa13e8bec3cd466f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect$cdc_ecm(0x2, 0x5f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x8, 0x30, 0x95, "", [{{0x9, 0x4, 0x0, 0x39, 0x3, 0x2, 0x6, 0x0, 0xe8, {{0x7, 0x24, 0x6, 0x0, 0x0, 'O1'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2382, 0xfa66, 0x6, 0xa}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x6942}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x59, 0x1, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x3, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x4, 0x5}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x5, 0x3, 0x8, 0xff, 0x30}, 0x100, &(0x7f0000000180)={0x5, 0xf, 0x100, 0x5, [@generic={0x1a, 0x10, 0xb, "80a0d69d055a9aaf4bd0367165f0ce6153c4185b3743fa"}, @ssp_cap={0x20, 0x10, 0xa, 0x95, 0x5, 0x4, 0xf000, 0xb, [0x0, 0xf, 0xc0, 0xfe803f, 0x8040c0]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "c9d7c722353f12a705c4b01911d88913"}, @generic={0xa2, 0x10, 0xa, "91ae96c34c32bec5c38fdb403cc7740ed62f7480321e9de294ec3c201d3074aff0cfb5352a1020da983fbfb8bf119ddada54edaee723556c54a397ba1d173053b73ef3a23009fe8fc4cc7310ae423375930c75f9ef1f7f733b5d33eba4d12a80b1b1f93b3b329140b98b303fd702102d1ef486d23375ccd91e5747fdbe0e1c825783938aa213d8a6622c97951edfe79e1c4d136fd7359001885d6b023c51d4"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x7, 0x6, 0x2, 0x6, 0x5}]}, 0x1, [{0xb6, &(0x7f0000000280)=@string={0xb6, 0x3, "8b98697d6c852714e70cf6bc327b5f40229923cc4f91ec3530f9d5b18c816295b34038c6b406758ee51f7ca883e7c74fe590666307b632b875a13fa265d12ef73fd7eff6f8e351dd3ac4f197508d226e352af320cc10c639399cf7d34ca6987b8e37d613ff02d9d4618e9ca377bada79cc340ae8705e70b5e8fd4bc3ffde70d6344fe08d6ab4f587caa6df55f263bdcdfd231b97756ae844aa61f84bace7780eaba0cfab480d692aed7fc50e55c8d9405067f1f9"}}]}) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xad, 0x91, 0x8d, 0x20, 0xb57, 0x89b6, 0xc8fb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x2, 0x0, 0x4, "", [{{0x9, 0x4, 0x25, 0x8, 0x0, 0x3, 0x1, 0x2, 0x14}}]}}]}}, 0x0) 2.19014058s ago: executing program 1 (id=788): syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100031bf5f708b4070a01f401010203010902120001000b80050904af09000806"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_connect(0x6, 0xce1, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0x16, 0x98, 0x58, 0xff, 0xbb4, 0xa47, 0x8f0e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xccf, 0x4, 0x1, 0x10, 0x10, 0x9, "", [{{0x9, 0x4, 0xc6, 0x8, 0xa, 0x1e, 0x88, 0x37, 0xa3, [], [{{0x9, 0x5, 0xf, 0x0, 0x200, 0x5, 0x81, 0x4a, [@generic={0x9d, 0x2, "0f6a449a804beb8938ff69cf0301c34e4fa36642fbcdd4c4482b5447d6043743bf41e9585bf1d2bfe7a49c1b25a05a4380ec3eaad1baac98d03a194b939eecc2e3b79768de30a02f4cca366e5721968aadeb0106d1301daecfd676291366dbc086990d1e371b07ee729c443ebdf7f1807248d1c303bdf3c9aa0cb2deeeec56970169d71eb44b4b114784ecf3ce261bb16f757cc8a6d1ae667ef5ca"}, @generic={0x5d, 0xb, "e9b369ca1d4c5293680e74f5cc321c39383cac15197536d95a7200633938c744a5dc43edf1e8b958f780bc398d53693f7dcb738e2e03d4f8f20088228c01e623fe4948fc9edd1c58c8594ff2abd7cd421b49d518dbe40498ee921c"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x648, 0xa5, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x84e}, @generic={0x87, 0x2, "62a3dfec91d6e4a4409020a5a4cfe924f2993538ea57c9331a114da39592441bbeec2a4843cea098ca16a7bb1e529607c249816ca2d20be06d66385ecb302e099b203ed9e5a94b411db6c40d257653b9e8bbf4e22e7d1f551d019df72aedce680d4e1390ee000b44d39a2eaaac68a3a790601464f5ae5e86c39114ce1799c94c5bddce5395"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x3ff, 0x5, 0x2, 0x6, [@generic={0x1f, 0x1, "715378ce29450d6561b2ea98d47b1dc647a7396bf97cb3b02e5b8af68a"}, @generic={0x4d, 0x8, "b9293f656c1f8c20e2f26cf5c4a38afe05eeff91a88c89c80dd4203569d463ca44e1df820829d7662e13534be1dd68f065598e0c538c79c8d0236bf680889bbdd5cbddc17ddada7c87cecc"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x7, 0x26, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x40}, @generic={0x1d, 0x28, "360258ab123836707f24d213cfac6c205470f518c0777b540f54e5"}]}}, {{0x9, 0x5, 0xb, 0x1f, 0x200, 0x9, 0x80, 0x3, [@generic={0x4f, 0x8, "66929047746b81cc34d47a068cb4aea7f614ac72f718ca7c07e4270f85d5bb9c069d15b5ebecda70a46bc10d818802bca60ee9fecf1ba95a1075da3ae9ecb1fe30de67446ccb0437bb8c9c05c6"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6a, 0x3ff}]}}, {{0x9, 0x5, 0xd, 0x4, 0x3ff, 0x2, 0x84, 0xad, [@generic={0x69, 0x1, "d7f08671ca9f1a23388c367c8f99d96777a3b6f69fe7f7c1ca64e9ee392d2aadd652d5c65ce6783682ad9cdba62894362ad0a6b80f29dc02c77e6df705875ddc36687e5798b361a479f2c205e295a68fec73c209221d8adc0a375b659b03f412b45cd306867b5d"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x4, 0x2, 0x5, [@generic={0x41, 0x21, "086fa9b1381d514e8675c0d7ecc72902ca763cdd9d6e84e9617be408811ddf93d3f9fb21e2c1912ad755d85e9e8a98e176faf2ede0a1d419fb8b2bf489995a"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0x5, 0xa, 0x9, [@generic={0x10, 0x30, "6b6ae920ffe1d0123617a112bbb8"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x4, 0x9, 0x40, [@generic={0xf9, 0x23, "6c01caccd132c34a2c60bf92edcfe06fc1c9e782a230964337c0f4bd507a7b6542ca8dc560045b3be50ade354c5fbe9b5f68f29b5c97a56db0464a68985040c4382bfcd99816a06797b07e6015b9b964c177a3088e27e29a18bd79454e684c99a4d68be039709ffd63cd3892f2a89f63644c22ce833589986f1a692b5233ecc1c0477b8f24f50c56e864fa25d2460fa4a688c07e8f1cb61a09178fc2b465232298922103dfbb7b0aba0bcfedc974d9c6f20866aa4200977656ce2f37feca5824c190a162196930940f1b48015257208a20eca3e3badf5bb0410744b8aa066b6d2711f709fdb0ebbb902716edf6a28657cf4fae6bea02e9"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x5}]}}, {{0x9, 0x5, 0x80, 0x1, 0x200, 0x3, 0xff, 0x4, [@generic={0xa6, 0x23, "e371ac0937152bf3ff7a629fe8449af7553fe222cd624488d37fd79e15e0d99ea0a39f8f8fb5875e597ae24a04f3e78e6e4ef5de5483c8124e4026e12a0f752edb015b86f17fc8da6695b600e9ae27c040828b4ddbcd3dfa14945bee581581685033ee522e172ae1c56f328038e21298b93c1c5195a23277d32ff6b6a3f8c276084b6dcfca4f9cd62ba907961318ad6d6d7c474e1a63030466d79ee1af02767610171623"}, @generic={0xb6, 0xb, "30f58f0f0a4e1fc8c3607890d4db3db3cbe82cff52e84de25c4f7654719e11dfe483282ce94b3996df8c8334735023c0a2245ee948c116ee6c2c0b3659fffe4fa7ab722200fa35f64b176d7eae314270666b37dd8d06624742a13f4c48cc40bc162e148f6f8907caddb6b3847426bf053feefdd91d90f8b22a4856bb0a25cbb71f734cdb686d74d252d9e1e81eeb68b22a73b4b075f1f0257497ba89070c91a15d90523fbba1615fe22c64d3b99be116be850d8f"}]}}]}}, {{0x9, 0x4, 0x1, 0x9, 0x8, 0xb6, 0x9e, 0x3c, 0x7, [], [{{0x9, 0x5, 0x2, 0x1, 0x3ff, 0x6, 0x7, 0x3, [@generic={0x5b, 0x10, "e884dd6ec8b36a0ebe9bb036767cf9903c007cd8b3d31e6d9229d2ce71c3bdf1a03b0b2f463e5cb938b8044dd59c17cf88dd3b7fdd6a90209790a3d7ee80bf2155c8095d660981235e6785b9ab763092938e392e56e25164ab"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x7, 0x7d, 0xc}}, {{0x9, 0x5, 0xa, 0xb3d66a92bc93fda2, 0x3ff, 0x3, 0x0, 0x9, [@generic={0xb4, 0xa, "9153caca9c80187df53491aafdc712e80ffdf2433ca5421df0e2badcf89176a6abe668801ee0bb31ed215c4e1fcdcb10297cee971dfb35b167aa99750d20644e1b3bc95b597c63ce96feac8538d250041c1a428c08bbef5004b95bba7af40854427089df212b12d7319f1fc7fd430a3017faa96f786b789a5d6f755c37a21affc5be855f5d37bd7c1c89db4916aee8b2c88082e750d914f0e0f26a23592803ccebb8f0e65f6d5554ecda72deb2543ec0174e"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x8}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x2, 0x4, 0x3}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x1, 0x7, 0x5, [@generic={0xa4, 0xa, "6b9ae7b07671539636ebe05b8d52f6ef2986c8d993e4a0beb6332111e65fa49eb65fa63c53e72ed14a773fa8e91b4cd3b8fb6ec2943564fd8d6c159751e5921cacac6bbeb832884f2892958b0d217ab859329af4c74829f5dbf4dc75cfd33ab5d9e4245dc5d60c359b6213f3bdf59bfc94d1a104c85714b782874a17c2b85839c1b82619fcbd51a2c10b5cb5e1dc7d0a6deceb995b3e7c25c69af364df75af9f36fe"}, @generic={0x7, 0x23, "872951d8f2"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0xa, 0x40, 0x4, [@generic={0x47, 0x21, "ad55bb5c7150c7dc52d55b6eb44c2e9741adfd1213747886c541e657e716105e8a212c54e15aadc4e1a3f295b2c7f539f92bd7c76c2b76026df9ce53dd9c2c7b3eb09fa978"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x8, 0x1, 0x4, [@generic={0xef, 0x10, "3aa78331f7206601d005c7a769622ff5cf4a5a3428001a11ea4532c2e53fbc34fc26ded8ec173871af8f2859f326bdeedceb73c216765a1c02153f7fb305c61209bed92575badd50038f2624a534844d987393b04f7535f66a8ec495335fc3255978f1ab37d687d0bb819707c4b4f7179e0f7f2102b85a264e42f7189f5ff4da88c99adab713b99cc1dbb73ff70ce6a3d35d51e7e6cbdcb0ccc4e005c8cbfd266411b14c3b892ad7dcc6a9899fd10a5903905dd4bdac48c93d0f8aabd0573a1740643fb62845c53d6afc39fdffdea91f1bc413153e8bfa3bd1835e8c84d104a157a1f8e897356cc149065ee74e"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0x3, 0x3}}]}}, {{0x9, 0x4, 0x6a, 0xb0, 0xd, 0x69, 0xc4, 0xa9, 0x88, [], [{{0x9, 0x5, 0xb, 0xc, 0x200, 0x2, 0xc4, 0x5}}, {{0x9, 0x5, 0x80, 0xd, 0x20, 0x3, 0x1, 0xc}}, {{0x9, 0x5, 0x4, 0x4, 0x75fd5c5bbf03f4b1, 0x7, 0x5, 0x3b, [@generic={0x16, 0x5, "831319044d3bc207ce45be35d74ce55aa18933cb"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x1, 0xec, 0xb}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0xe, 0x9, 0xf9}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x1, 0xd3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe3, 0x7}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x0, 0x9, 0x6a, [@generic={0xc8, 0x5, "2ad5673c2e557930c77d0011562ed1a47b273906e4929d2daf74fe55776b11860c5963ff1aeecae2fc8b48be36977cbfb7ad3e23d1475f2e8651da3f2eec512970e43f1e8226e70d0ce6e7e5a68ca090ee7f8f3f85829b02b9b1ecdbbce7ba8e84bf0030f93131f89f94c393cc09144dcbc6a76b33efb49ce8eac7aed9007bc72ba44e46661f569eee928e5eb4916baf30d2cdf02605de793196083fc9dba57d0b0d3d0308c5ce1af9c9ff1293cfa07d138bdb6df445fd4ff04b0bc82455863c554cc8412131"}, @generic={0x5b, 0x6, "e5b89a62466ab9ad058972dc8b7ffbea4e18255afbd9e5205eeb8439f00a3095cc12cf3e0e66584003ad4e23d8492d4266df7a282f091b3fbc50976de3b9a328f51796cccd50d463c23a79cedbe75f28319456cf3fe173de8d"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x4c, 0x6, 0x3}}, {{0x9, 0x5, 0xf, 0xc, 0x200, 0x7, 0x9, 0xa, [@generic={0x10, 0xb, "209d4dfc25b6f36542988d470a18"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xc, 0x5, 0x8}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x3, 0xff, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0x2}]}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0x0, 0x1, 0x3, [@generic={0x23, 0x30, "a6bf0e40933f95df5175c162231afaaae1b12e62574cd60860084dd9cae5f27e2d"}, @generic={0x3d, 0x1, "d85021e9c6c35556d463968f92fe1dfdf95dd5a0355e46adb44af22b86f9d91b702af52b1e4bfc325bf7b3f79425b8d0a9c2f3103821a628202b69"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x2, 0x6, 0x2}}]}}, {{0x9, 0x4, 0x31, 0x0, 0x4, 0xff, 0xff, 0xff, 0x3, [@hid_hid={0x9, 0x21, 0x4, 0x40, 0x1, {0x22, 0x813}}, @hid_hid={0x9, 0x21, 0x598, 0x7, 0x1, {0x22, 0xf94}}], [{{0x9, 0x5, 0x4, 0x4, 0x40, 0x3, 0x1, 0x55, [@generic={0x82, 0x2e, "f709390aa9e9290cdc01e161a1ae0d731b5d6ef3c57e01f9dc1442b72858d83a66155c4631c891b966a4f77eb25b517af0c31163d0777b9fdc54b103eaab8cd4df6259140c68cd1cf3c3aef290c030564f34192fcf6e86a85b60bf0ea07576700219a11e1584c8f2b889428b5f149285eef9a8f31f039f300f6bb6a6f026e07a"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x400, 0xce, 0x7f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfa, 0x5}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x4, 0xc, 0x9, [@generic={0x9a, 0x9, "664d0b804a4f0317355b2f37af6843526ff1a7218b081fdd4759c43e2eec985de43dbc7aa736bc1f21c0ea3d54de8cdd8c07c4d7e18382f48f855043233aaf303e2df572928679938e231a0fc129dfa7f88b94f209f965794f122a5abb442ad3b0b9b64b59f56bd43f505b7d9c232e8a9f1a0811cd2714114deadc490ce64c306a91d091f6f08ec2fe9b8e644014aeb1014cda3ee55f1460"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x40, 0x1, 0x6}}]}}]}}]}}, &(0x7f0000001a40)={0xa, &(0x7f0000001580)={0xa, 0x6, 0x110, 0x7, 0x9, 0x6, 0xff, 0xe}, 0x5, &(0x7f00000015c0)={0x5, 0xf, 0x5}, 0x8, [{0x94, &(0x7f0000001600)=@string={0x94, 0x3, "328238e2fd68c8d719fa583387e13ce1bcf5badac85295877e75cac1c5d937103e41a6b8ad9eca2420fe5bdb04d9789f7e40487ec8a0a842e4b4b1c61fe0e74c0c3b6e42462454851a691a4b8354ad9e53167402886e42817697682a955933fcc6a83a5be803d05668fb82d7ee6fd4491553cf461c9b8b49fe5ddb573f99228df4ae44c1d90b468440326e5913e852504597"}}, {0xef, &(0x7f00000016c0)=@string={0xef, 0x3, "86f4863235f329314cf371400364aa1f6d8e53e2410d8bc544040297be9a7a75854035cc2231b322502790449ce945ead6e7a971e57f4216fc0d0043e5f2689a2023851f049eaa62eb65b9df51c014dd84ce22cefcdaeb7abeb493141b942b44cbb1ffc37d5036ea467587067b6d61a8d778ebe55a37593bea2f22a9185c35d91f054dd72c89068b2ea270e743b613437abe05f9754d69f4869378a40e8debb3a544efe9bfc2f0080db2c57d9867a0b83f0bc07888218ca23f8fc31a8b0eebe25729555cd6d09467e0651da6a5f0e6cc8ce2b0647536fca63f7d11f73e731e5f008e1864c5295d607b6aa15cef"}}, {0x3b, &(0x7f00000017c0)=@string={0x3b, 0x3, "2c4a74b424d7de089be401e1fbcc30c19510fb36a0ef1627261baf73ad916aca18c1e265325626bf85f8ba97f2cd3a7d507dc2e806175a360d"}}, {0x5d, &(0x7f0000001800)=@string={0x5d, 0x3, "9fe0fc7af7f6e26dd99b8186b0712896465383cca06f1e5d1f0dda2757f6405277692f6c6c34083c337c5ba96e13bfaf6ce80f367daedb3755fd9af3287cbd2649cf427810fba8dfc830c0f55ba232e581d1e2cb4b1c8263528288"}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x437}}, {0xa8, &(0x7f0000001900)=@string={0xa8, 0x3, "acec21b396da3537898f4c10e725389ccd3ab67e9de4f94d6721c6da30fe9badf04795248520c5c6c2585615d4c1c8a517f3d7c2fb528188e3b70d7624d520f76ef7856e4a02ad722a4f6d0ce58023caa5dc3e427ffeeaf3689fa1fcdfbbb320258fcda6da043af36a549b70e41976dd2a253580e69adce19450e33e432d9c28a31eb62f07023342573b992e1dcefae1e1be67483636ff276b32bc4f2cae05541898c3338afd"}}, {0x45, &(0x7f00000019c0)=@string={0x45, 0x3, "706287df4360bcb8acd678c2dde088c16fa2b63b59456310c647fd9c655f9666552fa5bd5f0d19322c3ebfcb514409741f3c5795588da2f142677e9c64aac31ef80759"}}]}) (rerun: 32) 2.18981613s ago: executing program 2 (id=789): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8000000000007) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x12, 0x101, 0x0, 0x0, {0x2a, 0x0, 0x0, 0x0, {0x80, 0x0, [0x0, 0x4, 0x101], [0x6]}, 0x400}}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) (async) listen(r0, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8000000000007) (async) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x12, 0x101, 0x0, 0x0, {0x2a, 0x0, 0x0, 0x0, {0x80, 0x0, [0x0, 0x4, 0x101], [0x6]}, 0x400}}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) 2.18930495s ago: executing program 3 (id=790): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x3, r1, 0x1, 0x1, 0x6, @broadcast}, 0x14) (async) bind$packet(r0, &(0x7f0000000180)={0x11, 0x3, r1, 0x1, 0x1, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x4001) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8=r0], 0xdd12}], 0x1, 0x0, 0x0, 0x4008010}, 0x20040851) (async) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8=r0], 0xdd12}], 0x1, 0x0, 0x0, 0x4008010}, 0x20040851) 546.87µs ago: executing program 1 (id=791): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="81af00d30000000014008195eb60e99d9a3dff85743d1da857e8be083594bdc33f83d05ea472609be36fa1e7c53eead72ca62857dcfb626322ba62378ad8edf7c8cb69a10b332f817c3905a59094a80e12fec1364242b0860f4990f09d9f3cf426bbc7e02bc38e4fea0a11103b0a0000d1dba20c1e6bdc0e20cbadbf25de71771dfa49e7e145fc5f01254b80d89f53c5133c6b5900cabf0234f906cad6f8e658866e7183a9347879d4a9a8c4f761348288741570df50e6fb86a6c08ff0d9481e9c"], 0x28}], 0x1}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x180, 0x10, 0xf1, 0xf, 0x10, 0x5, 0x0, 0x29, 0x0, 0xa, 0x0, 0xbd9], 0x4000, 0x43180}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x3, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x10000, 0x8, 0x0, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x6, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0xd000, 0x9, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x2, 0xb, 0x0, 0x8, 0x7, 0xf}, {0xf000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0x60000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x3, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x10000, 0xf, 0x5, 0x7, 0xd, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0x6, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x40}, {0xf000, 0x7}, 0x80000021, 0x0, 0x200000, 0x242025, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x20008]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x28, 0x4) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, &(0x7f0000000480)={0x2, 0x100, 0x0, 0x80, 0x6, 0x5}) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa7ae6000) waitid(0x0, 0x0, 0x0, 0xb, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000087d1e502d000000000001090224000100000020090400080903000000092104000c0122280009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000d80)={0x2c, &(0x7f0000000b80)=ANY=[@ANYBLOB="2003f0000000f00de4522dd4ea6291f9f088af2d6db605f707e2fd0daf142ebde0aff4cad6c0fae5e9fef5949660fee0c0637e71c229d36a6d12d7e8677ed43b841510ca865b07e36393ac73bc17fdb6a35b14fcf458287251eff9ebd6f05b587433f582669d39f691f34af2293b03b6ec5d6d6ac482b2fb43cda036f2511afeb6dcf5c1f2b9d2d4a596c58b0d290362094e6f636ad860e7f4aa9a832464c0c7dcefc965e724ffa1ab590b71c822978b52a49e0b6df1c9f24c30597c70bc4dca206f865879852c0b8c2ef24a91f9ed520784a800dba3cb25d9cd000000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0000040411020000680000000100000061030000fcffffff0000000000000000231e6617482cf5ebfb0c571d9f54c9981809fa088e993869d40e19b038d7a064bc832c34e5a48ad8734654b0f59b92c8198566578d6f9b94c5e60f094dcdbe2af0a17e08dbc13aff8246e32c515e7425a33426db4226d4982d8c08b71971312f175fb6f79dc64c8a7c96a02bd1d4371c29e13aaf72e19c908d0e71303b0e391aab6d835b43d174a224355c1e53e6af07111f1b"], 0xb3) keyctl$restrict_keyring(0xa, r7, 0x0, &(0x7f0000000000)='id\xbacb2e') 254.9µs ago: executing program 2 (id=792): r0 = memfd_create(&(0x7f0000000b80)='[\v\xdbX\xa6[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;\x97YlCS&\xc8~\xc25(\xb5\xe1jS\xd6\x91%||/\x00\x04\x00\x00\xa0\x8ez\xadT\xc8\x8c\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\xb3\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\x19CYZ\f`\x9cA7\x94z\xad.\xd9T\xd9\xd7G!t\xcd HID v0.00 Device [syz1] on syz0 [ 65.995289][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 66.002777][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 66.010246][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 66.017587][ T342] usb 3-1: device descriptor read/8, error -32 [ 66.136162][ T366] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 66.168694][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 66.176033][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 66.183775][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 66.191010][ T342] usb 3-1: device descriptor read/8, error -32 [ 66.298573][ T366] usb 2-1: Using ep0 maxpacket: 32 [ 66.305139][ T366] usb 2-1: config 32 has an invalid interface number: 85 but max is 0 [ 66.313382][ T366] usb 2-1: config 32 has no interface number 0 [ 66.319605][ T366] usb 2-1: config 32 interface 85 altsetting 7 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 66.320324][ T342] raw-gadget.0 gadget.2: failed to queue suspend event [ 66.331530][ T366] usb 2-1: config 32 interface 85 altsetting 7 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 66.340928][ T342] raw-gadget.0 gadget.2: failed to queue reset event [ 66.349233][ T366] usb 2-1: config 32 interface 85 altsetting 7 endpoint 0x88 has invalid wMaxPacketSize 0 [ 66.365802][ T366] usb 2-1: config 32 interface 85 has no altsetting 0 [ 66.374051][ T366] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 66.383210][ T366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.391270][ T366] usb 2-1: Product: syz [ 66.395482][ T366] usb 2-1: Manufacturer: syz [ 66.400201][ T366] usb 2-1: SerialNumber: syz [ 66.413303][ T1241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.422179][ T1241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.430046][ T342] raw-gadget.0 gadget.2: failed to queue resume event [ 66.437480][ T36] audit: type=1400 audit(1780300506.766:294): avc: denied { write } for pid=1240 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.493663][ T342] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 66.515559][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 66.522875][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 66.530206][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 66.537387][ T342] usb 3-1: device descriptor read/8, error -32 [ 66.678041][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 66.685388][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 66.688688][ C1] Adjusting tsc more than 11% (6083271 vs 8464875) [ 66.692822][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 66.706095][ T342] usb 3-1: device descriptor read/8, error -32 [ 66.726118][ T1243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 66.754419][ T1245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.763104][ T1245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.851711][ T342] raw-gadget.0 gadget.2: failed to queue suspend event [ 66.858655][ T342] usb usb3-port1: unable to enumerate USB device [ 66.868416][ T342] usb 2-1: USB disconnect, device number 29 [ 67.045892][ T1250] rust_binder: Write failure EFAULT in pid:264 [ 67.060145][ T1252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.075692][ T1253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.084439][ T1252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.092438][ T1253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.113378][ T36] audit: type=1400 audit(1780300507.342:295): avc: denied { setopt } for pid=1256 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.115231][ T1257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.140437][ T311] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 67.143408][ T1257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.330713][ T311] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 67.339839][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.347897][ T311] usb 1-1: Product: syz [ 67.352081][ T311] usb 1-1: Manufacturer: syz [ 67.356720][ T311] usb 1-1: SerialNumber: syz [ 67.420452][ T36] audit: type=1400 audit(1780300507.590:296): avc: denied { append } for pid=1259 comm="syz.2.257" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.549644][ T36] audit: type=1400 audit(1780300507.693:297): avc: denied { load_policy } for pid=1261 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 67.555200][ T1262] SELinux: ebitmap start bit (1048576) is beyond the end of the bitmap (1472) [ 67.580270][ T1262] SELinux: failed to load policy [ 69.099956][ T311] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 69.170975][ T1294] bridge0: port 3(dummy0) entered blocking state [ 69.177389][ T1294] bridge0: port 3(dummy0) entered disabled state [ 69.183878][ T1294] dummy0: entered allmulticast mode [ 69.189545][ T1294] dummy0: entered promiscuous mode [ 69.194929][ T1294] bridge0: port 3(dummy0) entered blocking state [ 69.201337][ T1294] bridge0: port 3(dummy0) entered forwarding state [ 69.209766][ T1294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.269'. [ 69.233401][ T1296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.242098][ T1296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.277255][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 69.283557][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.294474][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.304267][ T311] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 69.313326][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.322287][ T311] usb 2-1: config 0 descriptor?? [ 69.328671][ T311] hub 2-1:0.0: USB hub found [ 69.798361][ T311] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 69.807783][ T311] usbhid 2-1:0.0: can't add hid device: -71 [ 69.813774][ T311] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 69.840663][ T311] usb 2-1: USB disconnect, device number 30 [ 70.378615][ T311] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 70.464659][ T342] usb 1-1: USB disconnect, device number 26 [ 70.551042][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 70.557546][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.568636][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.578497][ T311] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 70.587582][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.596341][ T311] usb 2-1: config 0 descriptor?? [ 70.602891][ T311] hub 2-1:0.0: USB hub found [ 70.748934][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 70.748951][ T36] audit: type=1400 audit(1780300510.379:301): avc: denied { mounton } for pid=1302 comm="syz.3.273" path="/94/file0" dev="tmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 70.790295][ T36] audit: type=1400 audit(1780300510.405:302): avc: denied { map } for pid=1302 comm="syz.3.273" path="socket:[11209]" dev="sockfs" ino=11209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.813872][ T36] audit: type=1400 audit(1780300510.405:303): avc: denied { accept } for pid=1302 comm="syz.3.273" path="socket:[11209]" dev="sockfs" ino=11209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.834247][ T311] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 70.837510][ T36] audit: type=1400 audit(1780300510.405:304): avc: denied { create } for pid=1302 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 70.872907][ T342] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 70.890243][ T1305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.898997][ T1305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.056822][ T342] usb 1-1: device descriptor read/64, error -71 [ 71.076936][ T311] usbhid 2-1:0.0: can't add hid device: -71 [ 71.083004][ T311] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 71.114748][ T311] usb 2-1: USB disconnect, device number 31 [ 71.332677][ T342] usb 1-1: device descriptor read/64, error -71 [ 71.607236][ T342] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 71.631462][ T1314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.640014][ T1314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.649223][ T1314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.657803][ T1314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.776202][ T342] usb 1-1: device descriptor read/64, error -71 [ 71.968678][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 72.047930][ T342] usb 1-1: device descriptor read/64, error -71 [ 72.140961][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.151987][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.162545][ T10] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 72.171689][ T10] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 72.179863][ T342] usb usb1-port1: attempt power cycle [ 72.185326][ T10] usb 2-1: Manufacturer: syz [ 72.190714][ T10] usb 2-1: config 0 descriptor?? [ 72.334546][ T1329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.343777][ T1329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.568781][ T342] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 72.592644][ T342] usb 1-1: device descriptor read/8, error -71 [ 72.704271][ T1331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.282'. [ 72.713827][ T1332] cgroup: Invalid name [ 72.719271][ T36] audit: type=1400 audit(1780300512.110:305): avc: denied { mount } for pid=1319 comm="syz.1.278" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 72.722959][ T1332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.750747][ T1332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.760845][ T342] usb 1-1: device descriptor read/8, error -71 [ 72.806905][ T36] audit: type=1400 audit(1780300512.190:306): avc: denied { wake_alarm } for pid=1333 comm="syz.2.283" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.886959][ T36] audit: type=1400 audit(1780300512.262:307): avc: denied { read } for pid=1339 comm="syz.2.284" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 72.933788][ T36] audit: type=1400 audit(1780300512.298:308): avc: denied { ioctl } for pid=1339 comm="syz.2.284" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 72.990687][ T1344] netlink: 'syz.2.284': attribute type 12 has an invalid length. [ 72.996818][ T1342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.016948][ T1344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.017419][ T1342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.032988][ T1344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.039418][ T342] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 73.043920][ T36] audit: type=1400 audit(1780300512.405:309): avc: denied { create } for pid=1339 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 73.074052][ T342] usb 1-1: device descriptor read/8, error -71 [ 73.080489][ T36] audit: type=1400 audit(1780300512.432:310): avc: denied { name_bind } for pid=1341 comm="syz.3.285" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 73.088121][ T1342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.133062][ T1342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.224090][ T342] usb 1-1: device descriptor read/8, error -71 [ 73.352985][ T342] usb usb1-port1: unable to enumerate USB device [ 73.835170][ T1347] loop9: detected capacity change from 0 to 7 [ 73.843263][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.856670][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 73.865863][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 73.874024][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 73.883295][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 73.891781][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 73.900953][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 73.909057][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 73.918257][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 73.926466][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 73.935631][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.045555][ T1368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.054146][ T1368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.062689][ T1368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.071328][ T1368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.533011][ T311] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 74.700754][ T311] usb 1-1: config 223 has an invalid interface number: 68 but max is 0 [ 74.709374][ T311] usb 1-1: config 223 has no interface number 0 [ 74.715932][ T311] usb 1-1: config 223 interface 68 has no altsetting 0 [ 74.724544][ T311] usb 1-1: New USB device found, idVendor=05e1, idProduct=0480, bcdDevice=d4.d1 [ 74.738541][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.747154][ T311] usb 1-1: Product: syz [ 74.751405][ T311] usb 1-1: Manufacturer: syz [ 74.756265][ T311] usb 1-1: SerialNumber: syz [ 74.773285][ T1378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.782414][ T1378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.070121][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 75.076646][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 75.085724][ T10] usb 2-1: USB disconnect, device number 32 [ 75.666880][ T1393] overlayfs: workdir and upperdir must be separate subtrees [ 75.936521][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 76.101316][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 76.107812][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.118795][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.128565][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 76.137686][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.146449][ T10] usb 2-1: config 0 descriptor?? [ 76.702432][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 76.702467][ T36] audit: type=1400 audit(1780300515.700:316): avc: denied { read } for pid=1400 comm="syz.3.305" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 76.731072][ T36] audit: type=1400 audit(1780300515.700:317): avc: denied { open } for pid=1400 comm="syz.3.305" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 76.817894][ T1403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.827118][ T1403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.493992][ T311] usb 1-1: unknown interface protocol 0xd8, assuming v1 [ 77.501033][ T311] usb 1-1: cannot find UAC_HEADER [ 77.509177][ T311] snd-usb-audio 1-1:223.68: probe with driver snd-usb-audio failed with error -22 [ 77.520903][ T311] usb 1-1: USB disconnect, device number 31 [ 77.533478][ T1405] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 77.535413][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:223.68/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.719779][ T311] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 78.885035][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.893539][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.903687][ T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.914041][ T311] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 78.923134][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.931186][ T311] usb 1-1: Product: syz [ 78.935357][ T311] usb 1-1: Manufacturer: syz [ 78.940100][ T311] usb 1-1: SerialNumber: syz [ 78.971023][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 78.980439][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 78.989853][ T10] usb 2-1: USB disconnect, device number 33 [ 79.020044][ T1410] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 79.028712][ T1410] kvm: requested 139123 ns i8254 timer period limited to 200000 ns [ 79.039116][ T1410] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 79.047208][ T1410] kvm: requested 139123 ns i8254 timer period limited to 200000 ns [ 79.055601][ T1410] kvm: requested 119009 ns i8254 timer period limited to 200000 ns [ 79.063861][ T1410] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 79.071967][ T1410] kvm: requested 119009 ns i8254 timer period limited to 200000 ns [ 79.080476][ T1410] kvm: requested 152533 ns i8254 timer period limited to 200000 ns [ 79.327251][ T36] audit: type=1400 audit(1780300518.104:318): avc: denied { append } for pid=1423 comm="syz.2.312" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 79.349984][ T36] audit: type=1400 audit(1780300518.104:319): avc: denied { write } for pid=1423 comm="syz.2.312" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 79.453892][ T36] audit: type=1400 audit(1780300518.223:320): avc: denied { write } for pid=1423 comm="syz.2.312" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.454728][ T1426] rust_binder: 1423:1426 transaction to 0 failed: ENOENT [ 79.505547][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 79.679954][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 79.686581][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 79.694691][ T10] usb 2-1: config 0 has no interface number 0 [ 79.700822][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.711753][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.721627][ T10] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 79.730895][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.739595][ T10] usb 2-1: config 0 descriptor?? [ 80.001363][ T1430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.010086][ T1430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.185843][ T10] usbhid 2-1:0.1: can't add hid device: -71 [ 80.192658][ T10] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 80.204287][ T1434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.212831][ T1434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.224553][ T10] usb 2-1: USB disconnect, device number 34 [ 80.863230][ T36] audit: type=1326 audit(1780300519.508:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.2.321" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b419ce59 code=0x7ffc0000 [ 80.889863][ T1440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.898338][ T1440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.906172][ T36] audit: type=1326 audit(1780300519.508:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.2.321" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b419ce59 code=0x7ffc0000 [ 80.931412][ T36] audit: type=1326 audit(1780300519.508:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.2.321" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b419ce59 code=0x7ffc0000 [ 80.956987][ T36] audit: type=1326 audit(1780300519.508:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.2.321" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b419ce59 code=0x7ffc0000 [ 80.982200][ T36] audit: type=1326 audit(1780300519.508:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.2.321" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f01b419ce59 code=0x7ffc0000 [ 81.065414][ T1459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.074155][ T1459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.083565][ T1459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.092098][ T1459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.095866][ T311] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 81.271157][ T311] usb 2-1: config index 0 descriptor too short (expected 64575, got 68) [ 81.279613][ T311] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 81.289761][ T311] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 81.303421][ T311] usb 2-1: config index 1 descriptor too short (expected 64575, got 68) [ 81.311769][ T311] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 81.321947][ T311] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 81.336227][ T311] usb 2-1: string descriptor 0 read error: -71 [ 81.342486][ T311] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 81.351605][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.360947][ T311] usb 2-1: can't set config #1, error -71 [ 81.367849][ T311] usb 2-1: USB disconnect, device number 35 [ 81.501534][ T1464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.510146][ T1464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.519467][ T1464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.528305][ T1464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.739817][ T311] usb 1-1: USB disconnect, device number 32 [ 82.058125][ T1473] netlink: 'syz.1.327': attribute type 4 has an invalid length. [ 82.118204][ T311] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 82.292133][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 82.299710][ T311] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 82.308134][ T311] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 82.316828][ T311] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 82.325870][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.340353][ T311] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 82.350064][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 82.365262][ T1489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.374106][ T1489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.375496][ T311] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 82.391098][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.399798][ T311] usb 1-1: config 0 descriptor?? [ 82.445271][ T1490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.453893][ T1490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.462466][ T1490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.471034][ T1490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.623725][ T311] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 82.842307][ T36] kauditd_printk_skb: 82 callbacks suppressed [ 82.842324][ T36] audit: type=1400 audit(1780300521.329:408): avc: denied { read write } for pid=1469 comm="syz.0.326" name="lp0" dev="devtmpfs" ino=591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 82.843982][ C0] usblp0: nonzero read bulk status received: -71 [ 82.849111][ T36] audit: type=1400 audit(1780300521.329:409): avc: denied { open } for pid=1469 comm="syz.0.326" path="/dev/usb/lp0" dev="devtmpfs" ino=591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 82.872628][ T10] usb 1-1: USB disconnect, device number 33 [ 83.099712][ T36] audit: type=1400 audit(1780300521.568:410): avc: denied { setopt } for pid=1469 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.153333][ T1507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.161895][ T1507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.169803][ T1507] netlink: 'syz.3.339': attribute type 28 has an invalid length. [ 83.346168][ T311] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 83.389567][ T366] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 83.509068][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 83.515655][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 83.524335][ T311] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 191, changing to 7 [ 83.535467][ T366] usb 1-1: device descriptor read/64, error -71 [ 83.543442][ T311] usb 2-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 83.552598][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.560594][ T311] usb 2-1: Product: syz [ 83.564793][ T311] usb 2-1: Manufacturer: syz [ 83.569407][ T311] usb 2-1: SerialNumber: syz [ 83.796891][ T36] audit: type=1400 audit(1780300522.213:411): avc: denied { mount } for pid=1495 comm="syz.1.335" name="/" dev="configfs" ino=1115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 83.824453][ T366] usb 1-1: device descriptor read/64, error -71 [ 83.832169][ T311] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 83.838912][ T1522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.843057][ T1522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.848897][ T36] audit: type=1400 audit(1780300522.240:412): avc: denied { search } for pid=1495 comm="syz.1.335" name="/" dev="configfs" ino=1115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.878805][ T36] audit: type=1400 audit(1780300522.240:413): avc: denied { setattr } for pid=1495 comm="syz.1.335" name="/" dev="configfs" ino=1115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.901059][ T311] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 83.904238][ T1522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.922082][ T311] usb 2-1: USB disconnect, device number 36 [ 83.934352][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.961984][ T1522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.106266][ T366] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 84.247409][ T366] usb 1-1: device descriptor read/64, error -71 [ 84.507989][ T366] usb 1-1: device descriptor read/64, error -71 [ 84.627603][ T366] usb usb1-port1: attempt power cycle [ 84.735993][ T31] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 84.749617][ T1538] netlink: 'syz.3.349': attribute type 49 has an invalid length. [ 84.780722][ T1538] team_slave_1: entered promiscuous mode [ 84.786466][ T1538] team_slave_1: entered allmulticast mode [ 84.814626][ T1538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.823978][ T1538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.887909][ T31] usb 2-1: device descriptor read/64, error -71 [ 84.996536][ T366] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 85.025815][ T1469] usblp0: removed [ 85.026072][ T366] usb 1-1: device descriptor read/8, error -71 [ 85.148347][ T31] usb 2-1: device descriptor read/64, error -71 [ 85.170551][ T366] usb 1-1: device descriptor read/8, error -71 [ 85.408899][ T31] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 85.543621][ T1571] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 85.560778][ T31] usb 2-1: device descriptor read/64, error -71 [ 85.640196][ T1573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.648810][ T1573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.657493][ T1573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.659991][ T366] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 85.667318][ T1573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.691329][ T366] usb 1-1: Using ep0 maxpacket: 16 [ 85.697639][ T366] usb 1-1: config 0 interface 0 has no altsetting 0 [ 85.704308][ T366] usb 1-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 85.713491][ T366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.722094][ T366] usb 1-1: config 0 descriptor?? [ 85.821169][ T31] usb 2-1: device descriptor read/64, error -71 [ 85.940604][ T31] usb usb2-port1: attempt power cycle [ 86.168829][ T1567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.177874][ T1567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.190543][ T366] logitech-djreceiver 0003:046D:C51B.0009: ignoring exceeding usage max [ 86.200171][ T366] logitech-djreceiver 0003:046D:C51B.0009: unknown main item tag 0x0 [ 86.208308][ T366] logitech-djreceiver 0003:046D:C51B.0009: unknown main item tag 0x0 [ 86.216434][ T366] logitech-djreceiver 0003:046D:C51B.0009: unknown main item tag 0x0 [ 86.224593][ T366] logitech-djreceiver 0003:046D:C51B.0009: unknown main item tag 0x0 [ 86.232717][ T366] logitech-djreceiver 0003:046D:C51B.0009: unknown main item tag 0x0 [ 86.242185][ T366] logitech-djreceiver 0003:046D:C51B.0009: hidraw0: USB HID v0.81 Device [HID 046d:c51b] on usb-dummy_hcd.0-1/input0 [ 86.311137][ T31] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 86.332014][ T31] usb 2-1: device descriptor read/8, error -71 [ 86.346679][ T1583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.358677][ T1584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.368002][ T1583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.375960][ T1586] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.377915][ T1584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.385402][ T1586] IPv6: NLM_F_REPLACE set, but no existing node found! [ 86.418983][ T1588] raw_sendmsg: syz.3.359 forgot to set AF_INET. Fix it! [ 86.426024][ T36] audit: type=1400 audit(1780300524.627:414): avc: denied { getopt } for pid=1587 comm="syz.3.359" lport=103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.474065][ T366] usb 1-1: USB disconnect, device number 37 [ 86.484037][ T31] usb 2-1: device descriptor read/8, error -71 [ 86.491784][ T1594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.500590][ T1594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.743317][ T31] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 86.766203][ T31] usb 2-1: device descriptor read/8, error -71 [ 86.907202][ T31] usb 2-1: device descriptor read/8, error -71 [ 87.025457][ T31] usb usb2-port1: unable to enumerate USB device [ 87.056257][ T36] audit: type=1400 audit(1780300525.208:415): avc: denied { append } for pid=1601 comm="syz.0.363" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.103871][ T1608] netlink: 'syz.3.366': attribute type 16 has an invalid length. [ 87.111685][ T1608] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.366'. [ 87.205060][ T36] audit: type=1400 audit(1780300525.346:416): avc: denied { shutdown } for pid=1609 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.972065][ T1635] netlink: 'syz.3.375': attribute type 3 has an invalid length. [ 88.099051][ T31] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 88.262974][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.273978][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.283786][ T31] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 88.292853][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.301544][ T31] usb 2-1: config 0 descriptor?? [ 88.526353][ T1629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.534964][ T1629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.761895][ T31] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 88.769363][ T31] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 88.776803][ T31] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 88.784252][ T31] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 88.791634][ T31] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 88.799851][ T31] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 88.976139][ T36] audit: type=1400 audit(1780300526.978:417): avc: denied { create } for pid=1651 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 89.068994][ T1658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.077694][ T1658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.122714][ T36] audit: type=1400 audit(1780300527.116:418): avc: denied { write } for pid=1653 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.431088][ T31] playstation 0003:054C:0DF2.000A: Failed to retrieve feature with reportID 5: -71 [ 89.440524][ T31] playstation 0003:054C:0DF2.000A: Failed to retrieve DualSense calibration info: -71 [ 89.450296][ T31] playstation 0003:054C:0DF2.000A: Failed to get calibration data from DualSense [ 89.459487][ T31] playstation 0003:054C:0DF2.000A: Failed to create dualsense. [ 89.467761][ T31] playstation 0003:054C:0DF2.000A: probe with driver playstation failed with error -71 [ 89.478718][ T31] usb 2-1: USB disconnect, device number 41 [ 89.668371][ T1669] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.668399][ T1669] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.671102][ T1670] rust_binder: 1668:1670 transaction to 0 failed: ENOENT [ 89.675382][ T1669] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.704862][ T1674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.721427][ T1674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.989104][ T1679] syz_tun: entered allmulticast mode [ 90.074357][ T1677] rust_binder: 1676:1677 transaction to 0 failed: ENOENT [ 90.245987][ T342] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 90.331519][ T1684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 90.340568][ T31] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 90.342578][ T1684] dummy0: left allmulticast mode [ 90.353452][ T1684] dummy0: left promiscuous mode [ 90.358449][ T1684] bridge0: port 3(dummy0) entered disabled state [ 90.365501][ T1684] bridge_slave_1: left allmulticast mode [ 90.371148][ T1684] bridge_slave_1: left promiscuous mode [ 90.376847][ T1684] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.384348][ T1684] bridge_slave_0: left allmulticast mode [ 90.390152][ T1684] bridge_slave_0: left promiscuous mode [ 90.395782][ T1684] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.419432][ T342] usb 2-1: Using ep0 maxpacket: 16 [ 90.425759][ T342] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.434137][ T342] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.446001][ T342] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 90.455142][ T342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.463364][ T342] usb 2-1: Product: syz [ 90.467598][ T342] usb 2-1: Manufacturer: syz [ 90.472249][ T342] usb 2-1: SerialNumber: syz [ 90.516978][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 90.523271][ T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 90.531442][ T31] usb 1-1: config 0 has no interface number 0 [ 90.539104][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 90.548195][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.556243][ T31] usb 1-1: Product: syz [ 90.560471][ T31] usb 1-1: Manufacturer: syz [ 90.565086][ T31] usb 1-1: SerialNumber: syz [ 90.571411][ T31] usb 1-1: config 0 descriptor?? [ 90.578210][ T31] smsc95xx v2.0.0 [ 90.595952][ T1688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.604673][ T1688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.700812][ T342] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 90.711914][ T342] usb 2-1: USB disconnect, device number 42 [ 91.011445][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 91.022258][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 91.225290][ T1691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.233943][ T1691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.249242][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 91.267488][ T31] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 91.363974][ T1699] tmpfs: Bad value for 'gid' [ 91.368728][ T1699] tmpfs: Bad value for 'gid' [ 91.422988][ T1701] SELinux: failed to load policy [ 91.449974][ T1706] tmpfs: Bad value for 'nr_blocks' [ 91.458488][ T36] audit: type=1400 audit(1780300529.275:419): avc: denied { read } for pid=1705 comm="syz.3.397" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.486699][ T36] audit: type=1400 audit(1780300529.275:420): avc: denied { open } for pid=1705 comm="syz.3.397" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.487708][ T1708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.519924][ T1708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.541075][ T1708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.554502][ T1711] veth1: entered allmulticast mode [ 91.566215][ T1708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.579383][ T366] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 91.694770][ T1710] veth1: left allmulticast mode [ 91.742024][ T366] usb 2-1: Using ep0 maxpacket: 32 [ 91.749007][ T366] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1600, setting to 1024 [ 91.761581][ T366] usb 2-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 91.770748][ T366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.778803][ T366] usb 2-1: Product: ф [ 91.782880][ T366] usb 2-1: Manufacturer: Н [ 91.787658][ T366] usb 2-1: SerialNumber: Ꭼ獓Ҵ孁궊䪩猣ⅰ튥谺䱷睯ѹ㟋佥嗱럣߀ၟ๲덴㓓齵蛣๬읞민뗛苞荰绒ࡢꢟꡃ횑珵 [ 92.024214][ T1695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.032799][ T1695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.043685][ T366] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 92.053682][ T366] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 92.064827][ T366] usb 2-1: USB disconnect, device number 43 [ 92.075795][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 92.142826][ T1716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.151466][ T1716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.253795][ T342] usb 1-1: USB disconnect, device number 38 [ 92.275444][ T36] audit: type=1400 audit(1780300530.031:421): avc: denied { write } for pid=1718 comm="syz.0.401" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 92.275452][ T1719] random: crng reseeded on system resumption [ 92.415875][ T1731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.424570][ T1731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.463065][ T1734] 9pnet: Unknown protocol version 9 [ 92.470476][ T1735] syzkaller1: entered promiscuous mode [ 92.476437][ T1735] syzkaller1: entered allmulticast mode [ 92.587108][ T36] audit: type=1400 audit(1780300530.308:422): avc: denied { getopt } for pid=1746 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.684958][ T36] audit: type=1400 audit(1780300530.400:423): avc: denied { read append } for pid=1752 comm="syz.0.410" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 92.728024][ T36] audit: type=1400 audit(1780300530.400:424): avc: denied { open } for pid=1752 comm="syz.0.410" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 92.801969][ T36] audit: type=1400 audit(1780300530.511:425): avc: denied { ioctl } for pid=1752 comm="syz.0.410" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 92.858226][ T1766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.872252][ T1766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.086323][ T36] audit: type=1400 audit(1780300530.769:426): avc: denied { setopt } for pid=1781 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.106939][ T1780] 8021q: VLANs not supported on lo [ 93.151213][ T342] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 93.240751][ T1788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.249372][ T1788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.313893][ T342] usb 2-1: Using ep0 maxpacket: 32 [ 93.320074][ T342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.331136][ T342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.340951][ T342] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 93.354490][ T342] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 93.363580][ T342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.372322][ T342] usb 2-1: config 0 descriptor?? [ 93.684722][ T1797] usb usb9: usbfs: process 1797 (syz.3.423) did not claim interface 47 before use [ 93.708129][ T1799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.718062][ T1799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.728241][ T1799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.736900][ T1799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.814864][ T342] hid (null): unknown global tag 0xd [ 93.821374][ T1802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.831323][ T1802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.842212][ T342] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000B/input/input11 [ 93.860940][ T342] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000B/input/input12 [ 93.878534][ T342] kye 0003:0458:5011.000B: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 94.303895][ T1813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.312559][ T1813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.400403][ T1817] overlay: Unknown parameter ' [ 94.400403][ T1817] ' [ 94.595052][ T1836] netlink: 'syz.0.435': attribute type 27 has an invalid length. [ 94.950478][ T31] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 94.954603][ T1851] netlink: 'syz.3.440': attribute type 29 has an invalid length. [ 95.031095][ T1853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.039764][ C0] kye 0003:0458:5011.000B: usb_submit_urb(ctrl) failed: -1 [ 95.047149][ T1853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.113063][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 95.119333][ T31] usb 1-1: config 0 interface 0 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.130632][ T31] usb 1-1: config 0 interface 0 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.140735][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 95.147460][ T31] usb 1-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 95.158235][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.170288][ T31] usb 1-1: config 0 descriptor?? [ 95.612911][ T31] a4tech 0003:09DA:0006.000C: unknown main item tag 0x6 [ 95.619931][ T31] a4tech 0003:09DA:0006.000C: unknown main item tag 0x3 [ 95.634276][ T31] a4tech 0003:09DA:0006.000C: unknown main item tag 0x6 [ 95.641390][ T31] a4tech 0003:09DA:0006.000C: unexpected long global item [ 95.649059][ T31] a4tech 0003:09DA:0006.000C: parse failed [ 95.655139][ T31] a4tech 0003:09DA:0006.000C: probe with driver a4tech failed with error -22 [ 95.674255][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 95.674272][ T36] audit: type=1400 audit(1780300533.159:433): avc: denied { accept } for pid=1869 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.873501][ T1879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.882559][ T1879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.891830][ T36] audit: type=1400 audit(1780300533.362:434): avc: denied { connect } for pid=1878 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.897283][ T1881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.920867][ T1879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.929552][ T1881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.937612][ T1879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.163639][ T36] audit: type=1400 audit(1780300533.611:435): avc: denied { ioctl } for pid=1880 comm="syz.2.451" path="socket:[16536]" dev="sockfs" ino=16536 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.189403][ T311] usb 2-1: reset high-speed USB device number 44 using dummy_hcd [ 96.197570][ T311] usb 2-1: device reset changed ep0 maxpacket size! [ 96.204363][ T366] usb 2-1: USB disconnect, device number 44 [ 96.348684][ T366] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 96.511244][ T366] usb 2-1: Using ep0 maxpacket: 16 [ 96.517568][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.528529][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.538320][ T366] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 96.547426][ T366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.556160][ T366] usb 2-1: config 0 descriptor?? [ 96.728795][ T36] audit: type=1400 audit(1780300534.137:436): avc: denied { mounton } for pid=1899 comm="syz.2.452" path="/file0" dev="ramfs" ino=15399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 96.763957][ T1903] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 96.782236][ T1906] syzkaller1: entered promiscuous mode [ 96.879091][ T1906] syzkaller1: entered allmulticast mode [ 96.958276][ T1915] netlink: 'syz.2.456': attribute type 4 has an invalid length. [ 96.992172][ T1920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.001443][ T1920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.010341][ T366] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 97.018730][ T366] konepure 0003:1E7D:2DB4.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 97.250502][ T342] usb 2-1: USB disconnect, device number 45 [ 97.634995][ T36] audit: type=1400 audit(1780300534.967:437): avc: denied { shutdown } for pid=1924 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.654957][ T36] audit: type=1400 audit(1780300534.995:438): avc: denied { getopt } for pid=1924 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.844364][ T36] audit: type=1326 audit(1780300535.161:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1935 comm="syz.1.462" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41f0b9ce59 code=0x0 [ 97.885339][ T342] usb 1-1: USB disconnect, device number 39 [ 98.158720][ T366] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 98.256256][ T342] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 98.299603][ T366] usb 2-1: device descriptor read/64, error -71 [ 98.420018][ T342] usb 1-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config [ 98.430442][ T342] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.440865][ T342] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.449993][ T342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.458068][ T342] usb 1-1: Product: syz [ 98.462355][ T342] usb 1-1: Manufacturer: syz [ 98.466984][ T342] usb 1-1: SerialNumber: syz [ 98.492521][ T1942] syzkaller1: entered promiscuous mode [ 98.498442][ T1942] syzkaller1: entered allmulticast mode [ 98.505354][ T1942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.514014][ T1942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.560196][ T366] usb 2-1: device descriptor read/64, error -71 [ 98.692154][ T342] usb 1-1: 0:2 : does not exist [ 98.702326][ T342] usb 1-1: unit 9 not found! [ 98.711679][ T342] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 98.717155][ T1949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 98.738208][ T342] usb 1-1: 4:0: cannot get min/max values for control 3 (id 4) [ 98.753695][ T342] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 98.773633][ T342] usb 1-1: 4:0: cannot get min/max values for control 8 (id 4) [ 98.786856][ T342] usb 1-1: 4:0: cannot get min/max values for control 9 (id 4) [ 98.801707][ T342] usb 1-1: USB disconnect, device number 40 [ 98.819797][ T366] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 98.960714][ T366] usb 2-1: device descriptor read/64, error -71 [ 98.998913][ T1956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.007514][ T1956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.027793][ T36] audit: type=1400 audit(1780300536.259:440): avc: denied { create } for pid=1960 comm="syz.2.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 99.171965][ T1975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.181360][ T1975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.189188][ T1977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.198141][ T1975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.206695][ T1977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.214847][ T1975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.231669][ T366] usb 2-1: device descriptor read/64, error -71 [ 99.352386][ T366] usb usb2-port1: attempt power cycle [ 99.446709][ T1986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.477'. [ 99.470019][ T1986] tmpfs: Invalid uid '0x00000000ffffffff' [ 99.476160][ T1986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=1986 comm=syz.0.477 [ 99.526225][ T1989] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.478'. [ 99.719391][ T366] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 99.742307][ T366] usb 2-1: device descriptor read/8, error -71 [ 99.806137][ T335] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 99.843282][ T2000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.482'. [ 99.882994][ T366] usb 2-1: device descriptor read/8, error -71 [ 99.899449][ T2005] UHID_CREATE from different security context by process 427 (syz.2.484), this is not allowed. [ 99.974425][ T36] audit: type=1400 audit(1780300537.126:441): avc: denied { bind } for pid=2010 comm="syz.3.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.995508][ T335] usb 1-1: device descriptor read/64, error -71 [ 100.062835][ T2013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.071946][ T2013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.082115][ T2013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.092435][ T2013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.152895][ T366] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 100.158401][ T2020] 9pnet_fd: Insufficient options for proto=fd [ 100.179178][ T366] usb 2-1: device descriptor read/8, error -71 [ 100.261296][ T335] usb 1-1: device descriptor read/64, error -71 [ 100.327367][ T366] usb 2-1: device descriptor read/8, error -71 [ 100.445624][ T366] usb usb2-port1: unable to enumerate USB device [ 100.521421][ T335] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 100.662337][ T335] usb 1-1: device descriptor read/64, error -71 [ 100.695203][ T36] audit: type=1400 audit(1780300537.800:442): avc: denied { listen } for pid=2025 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 100.698993][ T2026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.723260][ T2026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.922412][ T335] usb 1-1: device descriptor read/64, error -71 [ 101.041934][ T335] usb usb1-port1: attempt power cycle [ 101.131841][ T2038] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2038 comm=syz.1.498 [ 101.132795][ T2035] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 101.155027][ T2035] SELinux: failed to load policy [ 101.161508][ T2035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.170166][ T2035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.287228][ T2041] netlink: 'syz.2.499': attribute type 27 has an invalid length. [ 101.410102][ T335] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 101.418205][ T2056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.428361][ T2056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.443630][ T335] usb 1-1: device descriptor read/8, error -71 [ 101.540192][ T311] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 101.584494][ T335] usb 1-1: device descriptor read/8, error -71 [ 101.702736][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 101.709411][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 101.718038][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.728319][ T311] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 101.739189][ T311] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 101.751236][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.756217][ T2058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.760694][ T311] usb 2-1: Product: syz [ 101.769538][ T2058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.773958][ T311] usb 2-1: Manufacturer: syz [ 101.784261][ T2058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.787231][ T311] usb 2-1: SerialNumber: syz [ 101.794453][ T2058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.843715][ T335] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 101.866468][ T335] usb 1-1: device descriptor read/8, error -71 [ 102.008598][ T335] usb 1-1: device descriptor read/8, error -71 [ 102.028794][ T2060] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 102.126071][ T335] usb usb1-port1: unable to enumerate USB device [ 102.216043][ T36] audit: type=1400 audit(1780300539.202:443): avc: denied { getopt } for pid=2069 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.251790][ T311] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 102.262712][ T311] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 102.273765][ T311] usb 2-1: 1:2 : does not exist [ 102.279188][ T2075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.295109][ T311] usb 2-1: USB disconnect, device number 50 [ 102.325016][ T2075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.335257][ T2075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.344494][ T2075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.360534][ T2075] overlayfs: conflicting options: userxattr,redirect_dir=on [ 102.753996][ T311] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 102.905769][ T311] usb 2-1: device descriptor read/64, error -71 [ 102.960006][ T2099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.970156][ T2099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.165851][ T311] usb 2-1: device descriptor read/64, error -71 [ 103.220039][ T2049] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 103.394563][ T2049] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.425975][ T2049] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 103.436794][ T311] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 103.445791][ T2049] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 103.470819][ T2049] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 103.479971][ T2049] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.512634][ T2049] usb 1-1: Product: syz [ 103.516852][ T2049] usb 1-1: Manufacturer: syz [ 103.532383][ T2049] usb 1-1: SerialNumber: syz [ 103.545891][ T2049] usb 1-1: config 0 descriptor?? [ 103.562827][ T2049] usb 1-1: Found UVC 34.00 device syz (8086:0b5b) [ 103.577727][ T2049] usb 1-1: No valid video chain found. [ 103.579893][ T311] usb 2-1: device descriptor read/64, error -71 [ 103.735542][ T2106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.745010][ T2106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.881148][ T311] usb 2-1: device descriptor read/64, error -71 [ 104.000463][ T311] usb usb2-port1: attempt power cycle [ 104.162915][ T36] audit: type=1400 audit(1780300540.992:444): avc: denied { nlmsg_read } for pid=2089 comm="syz.0.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.329367][ T2110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.338712][ T2110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.379702][ T311] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 104.402485][ T311] usb 2-1: device descriptor read/8, error -71 [ 104.554199][ T311] usb 2-1: device descriptor read/8, error -71 [ 104.834867][ T311] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 104.857713][ T311] usb 2-1: device descriptor read/8, error -71 [ 104.925229][ T2114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.936186][ T2114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.946362][ T2115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.956488][ T2114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.965385][ T2115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.974736][ T2114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.998565][ T311] usb 2-1: device descriptor read/8, error -71 [ 105.116777][ T311] usb usb2-port1: unable to enumerate USB device [ 105.638716][ T36] audit: type=1400 audit(1780300542.358:445): avc: denied { mount } for pid=2123 comm="syz.2.526" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 105.691054][ T36] audit: type=1400 audit(1780300542.358:446): avc: denied { mounton } for pid=2123 comm="syz.2.526" path="/153/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 105.733462][ T36] audit: type=1326 audit(1780300542.358:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2123 comm="syz.2.526" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01b419ce59 code=0x0 [ 105.777772][ T36] audit: type=1400 audit(1780300542.432:448): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 105.994555][ T311] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 106.109484][ T335] usb 1-1: USB disconnect, device number 45 [ 106.158800][ T311] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 106.172824][ T311] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 106.181918][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.189944][ T311] usb 2-1: Product: 㠁 [ 106.194108][ T311] usb 2-1: SerialNumber: syz [ 106.301710][ T36] audit: type=1400 audit(1780300542.967:449): avc: denied { shutdown } for pid=2155 comm="syz.2.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.313452][ T2156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.330224][ T2156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.418937][ T311] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 106.425930][ T311] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 106.436022][ T311] usb 2-1: USB disconnect, device number 55 [ 106.452338][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 106.482221][ T335] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 106.644801][ T335] usb 1-1: Using ep0 maxpacket: 16 [ 106.651027][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 106.662192][ T335] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 106.675135][ T335] usb 1-1: New USB device found, idVendor=1477, idProduct=1007, bcdDevice= 0.00 [ 106.684218][ T335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.692930][ T335] usb 1-1: config 0 descriptor?? [ 106.899596][ T2158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.908393][ T2158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.999230][ T36] audit: type=1400 audit(1780300543.613:450): avc: denied { write } for pid=2164 comm="syz.1.541" name="file0" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 107.021952][ T36] audit: type=1400 audit(1780300543.613:451): avc: denied { open } for pid=2164 comm="syz.1.541" path="/105/file0" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 107.268664][ T2177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.277638][ T2177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.285435][ T36] audit: type=1326 audit(1780300543.871:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2150 comm="syz.0.535" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd64ff9ce59 code=0x0 [ 107.311186][ T2177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.319686][ T2049] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 107.327564][ T2177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.468465][ T2049] usb 2-1: device descriptor read/64, error -71 [ 107.528940][ T2180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.537569][ T2180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.728577][ T2049] usb 2-1: device descriptor read/64, error -71 [ 107.894689][ T2182] rust_binder: Write failure EFAULT in pid:571 [ 107.895678][ T2182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.910631][ T2182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.988676][ T2049] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 108.124580][ T2190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 108.129662][ T2049] usb 2-1: device descriptor read/64, error -71 [ 108.201944][ T36] audit: type=1400 audit(1780300544.720:453): avc: denied { map } for pid=2197 comm="syz.2.551" path="socket:[16369]" dev="sockfs" ino=16369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 108.224970][ T36] audit: type=1400 audit(1780300544.720:454): avc: denied { cmd } for pid=2197 comm="syz.2.551" path="socket:[16369]" dev="sockfs" ino=16369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 108.292553][ T2201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.301766][ T2201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.338643][ T2201] kvm: emulating exchange as write [ 108.400558][ T2049] usb 2-1: device descriptor read/64, error -71 [ 108.479013][ T36] audit: type=1400 audit(1780300544.978:455): avc: denied { mount } for pid=2203 comm="syz.3.553" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 108.481065][ T2204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.510111][ T2204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.519813][ T2049] usb usb2-port1: attempt power cycle [ 108.888222][ T2049] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 108.910994][ T2049] usb 2-1: device descriptor read/8, error -71 [ 109.001352][ T2206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.009934][ T2206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.051875][ T2049] usb 2-1: device descriptor read/8, error -71 [ 109.075096][ T2209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.083696][ T2209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.097513][ T2209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.106125][ T2209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.115199][ T2209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.123874][ T2209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.310892][ T2049] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 109.333698][ T2049] usb 2-1: device descriptor read/8, error -71 [ 109.405556][ T335] usbhid 1-1:0.0: can't add hid device: -71 [ 109.415088][ T335] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 109.426531][ T335] usb 1-1: USB disconnect, device number 46 [ 109.474557][ T2049] usb 2-1: device descriptor read/8, error -71 [ 109.492530][ T36] audit: type=1400 audit(1780300545.910:456): avc: denied { read } for pid=2218 comm="syz.0.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 109.603906][ T2049] usb usb2-port1: unable to enumerate USB device [ 109.734988][ T2226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.743574][ T2226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.810164][ T2228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.819070][ T2228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.842394][ T2230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.851099][ T2230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.852973][ T335] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 110.027288][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 110.038144][ T335] usb 1-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 110.047179][ T335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.056348][ T335] usb 1-1: config 0 descriptor?? [ 110.061683][ T2219] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 110.287516][ T2219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.296244][ T2219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.335284][ T36] audit: type=1400 audit(1780300546.694:457): avc: denied { append } for pid=2235 comm="syz.3.565" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 110.519111][ T2252] syzkaller1: entered promiscuous mode [ 110.524657][ T2252] syzkaller1: entered allmulticast mode [ 110.534508][ T335] usbhid 1-1:0.0: can't add hid device: -71 [ 110.540828][ T335] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 110.553440][ T335] usb 1-1: USB disconnect, device number 47 [ 110.938150][ T2255] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 110.983176][ T2258] netlink: 188 bytes leftover after parsing attributes in process `syz.1.573'. [ 111.093302][ T2280] netlink: 'syz.1.580': attribute type 3 has an invalid length. [ 111.156694][ T2285] fuse: Bad value for 'user_id' [ 111.164143][ T2285] fuse: Bad value for 'user_id' [ 111.172399][ T2287] input: syz1 as /devices/virtual/input/input13 [ 111.189579][ T36] audit: type=1400 audit(1780300547.479:458): avc: denied { relabelfrom } for pid=2288 comm="syz.3.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 111.210057][ T2289] netlink: 'syz.3.584': attribute type 4 has an invalid length. [ 111.218675][ T2293] netlink: 388 bytes leftover after parsing attributes in process `syz.2.585'. [ 111.237915][ T2289] syzkaller0: entered promiscuous mode [ 111.247366][ T36] audit: type=1400 audit(1780300547.506:459): avc: denied { relabelto } for pid=2288 comm="syz.3.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 111.267592][ T2289] syzkaller0: entered allmulticast mode [ 111.277417][ T2289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.286176][ T2289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.445959][ T2049] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 111.608513][ T2049] usb 2-1: Using ep0 maxpacket: 16 [ 111.614771][ T2049] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 111.623077][ T2049] usb 2-1: config 0 has no interface number 0 [ 111.629173][ T2049] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 111.639048][ T2049] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 111.649042][ T2049] usb 2-1: config 0 interface 41 has no altsetting 0 [ 111.657196][ T2049] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 111.666304][ T2049] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.674376][ T2049] usb 2-1: Product: syz [ 111.678562][ T2049] usb 2-1: Manufacturer: syz [ 111.683178][ T2049] usb 2-1: SerialNumber: syz [ 111.688546][ T2049] usb 2-1: config 0 descriptor?? [ 111.693803][ T2283] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 111.701043][ T2283] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 111.929477][ T2283] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 111.936978][ T2283] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 111.984365][ T2314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.993427][ T2314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.024593][ T2316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.025412][ T2317] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 112.041115][ T36] audit: type=1400 audit(1780300548.263:460): avc: granted { setsecparam } for pid=2315 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 112.098900][ T2319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.107633][ T2319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.163669][ T1222] Bluetooth: hci0: Frame reassembly failed (-84) [ 112.170104][ T36] audit: type=1326 audit(1780300548.383:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2282 comm="syz.1.581" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41f0b9ce59 code=0x0 [ 112.529714][ T335] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 112.573952][ T2328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.582520][ T2328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.693444][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.707404][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.717373][ T335] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 112.730402][ T335] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 112.739753][ T335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.748973][ T335] usb 1-1: config 0 descriptor?? [ 112.770096][ T2338] netlink: 176 bytes leftover after parsing attributes in process `syz.3.600'. [ 112.820492][ T2343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.829179][ T2343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.040365][ T335] usbhid 1-1:0.0: can't add hid device: -71 [ 113.049946][ T335] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 113.060808][ T335] usb 1-1: USB disconnect, device number 48 [ 113.147530][ T36] audit: type=1400 audit(1780300549.287:462): avc: denied { append } for pid=2349 comm="syz.2.603" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 113.185167][ T2353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.193906][ T2353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.396739][ T335] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 113.560500][ T2360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.562354][ T335] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.569646][ T2360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.580876][ T335] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 113.597853][ T335] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 113.606996][ T335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.615077][ T335] usb 1-1: Product: syz [ 113.619321][ T335] usb 1-1: Manufacturer: syz [ 113.623983][ T335] usb 1-1: SerialNumber: syz [ 113.761990][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 113.762007][ T36] audit: type=1400 audit(1780300549.850:464): avc: denied { read } for pid=2361 comm="syz.2.608" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.818172][ T2363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.827379][ T2363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.836229][ T2363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.844871][ T2363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.858344][ T2348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.867733][ T2348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.892148][ T36] audit: type=1326 audit(1780300549.970:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2368 comm="syz.0.609" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd64ff9ce59 code=0x0 [ 113.917957][ T2370] kernel profiling enabled (shift: 9) [ 113.924875][ T36] audit: type=1400 audit(1780300549.998:466): avc: denied { map } for pid=2368 comm="syz.0.609" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.333392][ T335] usb 1-1: USB disconnect, device number 49 [ 114.349512][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 114.384303][ T2049] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 114.405663][ T2049] usb 2-1: USB disconnect, device number 60 [ 114.415529][ T364] Bluetooth: hci0: command 0x1003 tx timeout [ 114.421607][ T365] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 114.783973][ T2049] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 114.807676][ T2380] tipc: Started in network mode [ 114.812608][ T2380] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 114.821712][ T2380] tipc: Enabling of bearer rejected, failed to enable media [ 114.842626][ T2382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'. [ 114.867007][ T2384] syzkaller0: entered promiscuous mode [ 114.872548][ T2384] syzkaller0: entered allmulticast mode [ 114.924844][ T2049] usb 2-1: device descriptor read/64, error -71 [ 115.185035][ T2049] usb 2-1: device descriptor read/64, error -71 [ 115.202595][ T2390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.211183][ T2048] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 115.218958][ T2390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.328881][ T2397] input: syz1 as /devices/virtual/input/input15 [ 115.380102][ T2048] usb 1-1: Using ep0 maxpacket: 32 [ 115.386507][ T2048] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.397666][ T2048] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.417793][ T2048] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 115.435884][ T2048] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.449372][ T2048] usb 1-1: config 0 descriptor?? [ 115.455930][ T2049] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 115.604201][ T2049] usb 2-1: device descriptor read/64, error -71 [ 115.768772][ T2409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.777452][ T2409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.889415][ T2049] usb 2-1: device descriptor read/64, error -71 [ 115.898274][ T2048] usbhid 1-1:0.0: can't add hid device: -71 [ 115.904689][ T2048] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 115.914828][ T2048] usb 1-1: USB disconnect, device number 50 [ 116.008743][ T2049] usb usb2-port1: attempt power cycle [ 116.343086][ T2411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.351647][ T2411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.377143][ T2049] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 116.399853][ T2049] usb 2-1: device descriptor read/8, error -71 [ 116.540647][ T2049] usb 2-1: device descriptor read/8, error -71 [ 116.799947][ T2049] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 116.822594][ T2049] usb 2-1: device descriptor read/8, error -71 [ 116.843121][ T335] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 116.917130][ T2418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.925687][ T2418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.963311][ T2049] usb 2-1: device descriptor read/8, error -71 [ 117.005702][ T335] usb 1-1: Using ep0 maxpacket: 16 [ 117.011921][ T335] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.022211][ T335] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.035736][ T335] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 117.038772][ T2421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.048059][ T335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.053971][ T2421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.064393][ T335] usb 1-1: Product: syz [ 117.071843][ T2421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.075997][ T335] usb 1-1: Manufacturer: syz [ 117.083164][ T2049] usb usb2-port1: unable to enumerate USB device [ 117.086477][ T335] usb 1-1: SerialNumber: syz [ 117.096024][ T2421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.500758][ T2425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.509532][ T2425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.675572][ T2429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.684316][ T2429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.073458][ T2442] 9pnet_fd: p9_fd_create_unix (2442): problem connecting socket: ./cgroup/file0: -2 [ 118.102007][ T2444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.110888][ T2444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.143716][ T31] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 118.311350][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 118.319941][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 118.334947][ T31] usb 2-1: New USB device found, idVendor=0499, idProduct=5007, bcdDevice= 0.40 [ 118.344267][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.347651][ T2448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.356127][ T31] usb 2-1: Manufacturer: 镆ꠤ떣ᄔ䠨篕ỷ콼㍟⡵罦⩑ﮔ隸ࠬ膩蝜ᔀ왯杋뢯齏ꖊꀯ㦃⣪᷇푴⬦鰚鉟岂㭱솅䊇ꎪᴢ 镩ᣌ棞╁⽀긪邗乕邤㲫੤뚿閥俖趵ꇭ쎮퉼颟ｇ峽䢕ኊꪅꫦኤ哊伭൙Ὸ᥎ㅙᅠߏꦙ杄꽹᳛ [ 118.361449][ T2448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.391309][ T31] usb 2-1: SerialNumber: 瘂뽕舴䗑쌞쇁喌懇㻂㉷ꎂ㐈鈓ﶝޟ耿ꋁ鱳쮴흣䮫왞埲祮烜콠罪鉐磊﬒碌ᛞ㧋얐꽑턹錦胸懗綟奭刴臝둎ᕼ칥竞郏΁㳦젶乃ꧯ쾓횈せ韚姘坻㕗ᾣ咧헵腤놣⥕걣䌈污䲾ຬ↪⢿﷧蟷ླྀཀፊᶪ紌뢟둍淾Õଜ扐ꦸἊ춽 ᜌ懡묎䮮ᕱ췹ꊽ輧쟻 [ 118.650533][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 118.660239][ T31] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 118.673143][ T31] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 118.689338][ T2450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.690242][ T31] usb 2-1: USB disconnect, device number 65 [ 118.708186][ T2450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.717935][ T2450] fuse: Bad value for 'fd' [ 118.721914][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 118.956956][ T2453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.965511][ T2453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.973672][ T2454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.982185][ T2454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.316684][ T2458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.326025][ T2459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.334645][ T2459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.342721][ T2458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.470775][ T2049] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 119.490188][ T36] audit: type=1400 audit(1780300555.137:467): avc: denied { accept } for pid=2462 comm="syz.3.644" path="socket:[19872]" dev="sockfs" ino=19872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.520313][ T2463] GUP no longer grows the stack in syz.3.644 (2463): 200000008000-20000000a000 (200000007000) [ 119.530677][ T2463] CPU: 0 UID: 0 PID: 2463 Comm: syz.3.644 Not tainted syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 119.530709][ T2463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 119.530740][ T2463] Call Trace: [ 119.530747][ T2463] [ 119.530756][ T2463] __dump_stack+0x21/0x30 [ 119.530790][ T2463] dump_stack_lvl+0x140/0x1c0 [ 119.530826][ T2463] ? __cfi_dump_stack_lvl+0x10/0x10 [ 119.530863][ T2463] ? find_vma+0xd3/0x120 [ 119.530885][ T2463] ? __reset_page_owner+0x450/0x450 [ 119.530914][ T2463] dump_stack+0x19/0x20 [ 119.530942][ T2463] __get_user_pages+0x1e37/0x22d0 [ 119.530984][ T2463] ? __kasan_check_write+0x18/0x20 [ 119.531000][ T2463] ? __update_page_owner_handle+0x318/0x370 [ 119.531020][ T2463] ? rwsem_read_trylock+0x274/0x5b0 [ 119.531064][ T2463] ? down_read_killable+0x7f/0x100 [ 119.531092][ T2463] ? populate_vma_page_range+0x220/0x220 [ 119.531122][ T2463] ? post_alloc_hook+0x37d/0x3b0 [ 119.531143][ T2463] __gup_longterm_locked+0xc5a/0x1600 [ 119.531165][ T2463] ? try_grab_folio_fast+0x155/0x520 [ 119.531201][ T2463] ? prep_new_page+0x7c/0x190 [ 119.531226][ T2463] ? follow_pfn_pte+0x110/0x110 [ 119.531252][ T2463] ? get_page_from_freelist+0x496e/0x4a20 [ 119.531280][ T2463] ? __pte_offset_map+0x1b0/0x230 [ 119.531304][ T2463] gup_fast_fallback+0x12d7/0x14d0 [ 119.531339][ T2463] ? get_user_pages_fast_only+0xc0/0xc0 [ 119.531369][ T2463] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 119.531398][ T2463] ? static_key_count+0x45/0x70 [ 119.531424][ T2463] get_user_pages_fast+0x73/0xb0 [ 119.531452][ T2463] __iov_iter_get_pages_alloc+0x3ca/0xa30 [ 119.531474][ T2463] iov_iter_get_pages2+0x68/0xb0 [ 119.531512][ T2463] sk_msg_zerocopy_from_iter+0x212/0x890 [ 119.531541][ T2463] ? __cfi_sk_msg_zerocopy_from_iter+0x10/0x10 [ 119.531568][ T2463] ? skb_page_frag_refill+0x22e/0x4f0 [ 119.531587][ T2463] tls_sw_sendmsg+0xa35/0x2260 [ 119.531618][ T2463] ? __cfi_tls_sw_sendmsg+0x10/0x10 [ 119.531661][ T2463] ? check_preempt_wakeup_fair+0x776/0xb10 [ 119.531682][ T2463] ? preempt_schedule_common+0x2d/0x60 [ 119.531705][ T2463] ? avc_has_perm_noaudit+0x1d7/0x360 [ 119.531729][ T2463] ? inet_send_prepare+0x64/0x4e0 [ 119.531746][ T2463] ? __cfi_tls_sw_sendmsg+0x10/0x10 [ 119.531765][ T2463] inet6_sendmsg+0x113/0x120 [ 119.531791][ T2463] ? __cfi_inet6_sendmsg+0x10/0x10 [ 119.531813][ T2463] sock_write_iter+0x2f2/0x490 [ 119.531835][ T2463] ? __cfi_sock_write_iter+0x10/0x10 [ 119.531863][ T2463] ? selinux_file_permission+0x8a4/0xb60 [ 119.531888][ T2463] do_iter_readv_writev+0x62f/0x820 [ 119.531906][ T2463] ? vfs_iter_read+0x5f0/0x5f0 [ 119.531932][ T2463] ? bpf_lsm_file_permission+0xd/0x20 [ 119.531961][ T2463] vfs_writev+0x4a8/0xe50 [ 119.531986][ T2463] ? do_writev+0x2e0/0x2e0 [ 119.532026][ T2463] do_writev+0x151/0x2e0 [ 119.532043][ T2463] ? vfs_readv+0xa10/0xa10 [ 119.532061][ T2463] ? __kasan_check_write+0x18/0x20 [ 119.532088][ T2463] ? fpregs_restore_userregs+0x11c/0x260 [ 119.532113][ T2463] __x64_sys_writev+0x81/0x90 [ 119.532133][ T2463] x64_sys_call+0x1fbb/0x2ee0 [ 119.532153][ T2463] do_syscall_64+0x57/0xf0 [ 119.532168][ T2463] ? clear_bhb_loop+0x50/0xa0 [ 119.532185][ T2463] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 119.532202][ T2463] RIP: 0033:0x7f7a2bb9ce59 [ 119.532231][ T2463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.532248][ T2463] RSP: 002b:00007f7a2ca9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 119.532276][ T2463] RAX: ffffffffffffffda RBX: 00007f7a2be15fa0 RCX: 00007f7a2bb9ce59 [ 119.532290][ T2463] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 000000000000000a [ 119.532305][ T2463] RBP: 00007f7a2bc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 119.532314][ T2463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.532322][ T2463] R13: 00007f7a2be16038 R14: 00007f7a2be15fa0 R15: 00007fffb827c0e8 [ 119.532335][ T2463] [ 119.939292][ T335] usb 1-1: 0:1 : does not exist [ 119.944337][ T335] usb 1-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 119.954370][ T335] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 119.965580][ T335] usb 1-1: USB disconnect, device number 51 [ 119.981188][ T2451] udevd[2451]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 119.996999][ T2049] usb 2-1: Using ep0 maxpacket: 16 [ 119.998626][ T2049] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.013102][ T2049] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.018291][ T36] audit: type=1400 audit(1780300555.626:468): avc: denied { create } for pid=2473 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 120.023383][ T2049] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.043638][ T2474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.055929][ T2049] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 120.073271][ T2049] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.082369][ T2474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.090370][ T2049] usb 2-1: config 0 descriptor?? [ 120.151575][ T36] audit: type=1400 audit(1780300555.746:469): avc: denied { create } for pid=2485 comm="syz.3.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.263961][ T36] audit: type=1404 audit(1780300555.848:470): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 120.314409][ T36] audit: type=1400 audit(1780300555.903:471): avc: denied { ioctl } for pid=2455 comm="syz.1.642" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 120.325971][ T2049] usbhid 2-1:0.0: can't add hid device: -71 [ 120.345349][ T2049] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 120.345972][ T36] audit: type=1400 audit(1780300555.912:472): avc: denied { ioctl } for pid=2455 comm="syz.1.642" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 120.363920][ T2049] usb 2-1: USB disconnect, device number 66 [ 120.387087][ T36] audit: type=1400 audit(1780300555.912:473): avc: denied { ioctl } for pid=2455 comm="syz.1.642" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 120.412392][ T36] audit: type=1400 audit(1780300555.940:474): avc: denied { read write } for pid=2495 comm="syz.3.653" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 120.438408][ T36] audit: type=1400 audit(1780300555.940:475): avc: denied { read } for pid=2495 comm="syz.3.653" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 120.460985][ T36] audit: type=1400 audit(1780300555.940:476): avc: denied { ioctl } for pid=2495 comm="syz.3.653" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 120.919219][ T2511] bridge0: entered promiscuous mode [ 120.924496][ T2511] bridge0: entered allmulticast mode [ 120.942113][ T2513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=2513 comm=syz.1.659 [ 122.354437][ T2559] netlink: 'syz.1.676': attribute type 11 has an invalid length. [ 123.617761][ T2586] syzkaller1: entered promiscuous mode [ 123.623350][ T2586] syzkaller1: entered allmulticast mode [ 123.629878][ T2586] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 123.635695][ T2586] syzkaller1: Linktype set failed because interface is up [ 124.096431][ T2603] syzkaller1: entered promiscuous mode [ 124.102084][ T2603] syzkaller1: entered allmulticast mode [ 125.001547][ T36] kauditd_printk_skb: 249 callbacks suppressed [ 125.001564][ T36] audit: type=1400 audit(1780300560.221:726): avc: denied { read write } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 125.031871][ T36] audit: type=1400 audit(1780300560.240:727): avc: denied { read } for pid=2622 comm="syz.3.701" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 125.054365][ T36] audit: type=1400 audit(1780300560.240:728): avc: denied { append } for pid=2622 comm="syz.3.701" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 125.081110][ T36] audit: type=1400 audit(1780300560.240:729): avc: denied { read write } for pid=2622 comm="syz.3.701" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 125.106786][ T36] audit: type=1400 audit(1780300560.240:730): avc: denied { create } for pid=2622 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 125.129668][ T36] audit: type=1400 audit(1780300560.240:731): avc: denied { read write } for pid=2622 comm="syz.3.701" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 125.152913][ T36] audit: type=1400 audit(1780300560.240:732): avc: denied { read write } for pid=2622 comm="syz.3.701" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 125.176535][ T36] audit: type=1400 audit(1780300560.295:733): avc: denied { read write } for pid=299 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 125.200486][ T36] audit: type=1400 audit(1780300560.314:734): avc: denied { create } for pid=2624 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 125.220721][ T36] audit: type=1400 audit(1780300560.323:735): avc: denied { create } for pid=2624 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 125.237305][ T2629] syzkaller1: entered promiscuous mode [ 125.245500][ T2629] syzkaller1: entered allmulticast mode [ 125.953490][ T2652] netlink: 'syz.0.712': attribute type 4 has an invalid length. [ 125.961309][ T2652] netlink: 'syz.0.712': attribute type 2 has an invalid length. [ 126.612848][ T2683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.722'. [ 127.118153][ T1219] Bluetooth: hci0: Frame reassembly failed (-84) [ 127.124626][ T2708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'. [ 127.751214][ T2725] tc_dump_action: action bad kind [ 128.368179][ T2744] netlink: 'syz.1.747': attribute type 12 has an invalid length. [ 129.328285][ T364] Bluetooth: hci0: command 0x1003 tx timeout [ 129.328299][ T365] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 131.246423][ T36] kauditd_printk_skb: 197 callbacks suppressed [ 131.246438][ T36] audit: type=1400 audit(1780300565.979:933): avc: denied { execmem } for pid=2768 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 131.278685][ T36] audit: type=1400 audit(1780300565.979:934): avc: denied { create } for pid=2771 comm="syz.1.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 131.298089][ T36] audit: type=1400 audit(1780300565.988:935): avc: denied { read write } for pid=2771 comm="syz.1.755" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 131.321594][ T36] audit: type=1400 audit(1780300566.016:936): avc: denied { read write } for pid=2769 comm="syz.3.757" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 131.345307][ T36] audit: type=1400 audit(1780300566.016:937): avc: denied { read write } for pid=2769 comm="syz.3.757" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 131.368928][ T36] audit: type=1400 audit(1780300566.016:938): avc: denied { read write } for pid=299 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 131.393060][ T36] audit: type=1400 audit(1780300566.016:939): avc: denied { create } for pid=2778 comm="syz.2.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 131.412610][ T36] audit: type=1400 audit(1780300566.016:940): avc: denied { read write } for pid=2778 comm="syz.2.758" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 131.511705][ T36] audit: type=1400 audit(1780300566.228:941): avc: denied { read } for pid=2778 comm="syz.2.758" dev="nsfs" ino=4026532411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 131.534326][ T36] audit: type=1400 audit(1780300566.246:942): avc: denied { read write } for pid=299 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 134.575380][ T2811] futex_wake_op: syz.3.768 tries to shift op by -1; fix this program [ 135.901830][ T2819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.769'. [ 137.319804][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 137.319974][ T36] audit: type=1400 audit(1780300571.589:996): avc: denied { execmem } for pid=2821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 137.351171][ T36] audit: type=1400 audit(1780300571.617:997): avc: denied { read write } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 137.377259][ T36] audit: type=1400 audit(1780300571.644:998): avc: denied { read write } for pid=299 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 137.852697][ T36] audit: type=1400 audit(1780300572.078:999): avc: denied { read write } for pid=294 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 138.875003][ T36] audit: type=1400 audit(1780300573.019:1000): avc: denied { create } for pid=2832 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 138.899518][ T36] audit: type=1400 audit(1780300573.019:1001): avc: denied { read } for pid=2832 comm="syz.3.773" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 138.906098][ T2833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=2833 comm=syz.3.773 [ 138.950411][ T36] audit: type=1400 audit(1780300573.028:1002): avc: denied { create } for pid=2832 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 138.970735][ T36] audit: type=1400 audit(1780300573.028:1003): avc: denied { create } for pid=2832 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 138.990932][ T36] audit: type=1400 audit(1780300573.028:1004): avc: denied { create } for pid=2832 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 139.011069][ T36] audit: type=1400 audit(1780300573.028:1005): avc: denied { create } for pid=2832 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 140.549913][ T2844] erspan0: entered allmulticast mode [ 142.845074][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 142.845091][ T36] audit: type=1400 audit(1780300576.691:1076): avc: denied { read write } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 144.147983][ T36] audit: type=1400 audit(1780300577.891:1077): avc: denied { execmem } for pid=2855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 144.172611][ T36] audit: type=1400 audit(1780300577.909:1078): avc: denied { create } for pid=2856 comm="syz.3.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 144.192548][ T36] audit: type=1400 audit(1780300577.909:1079): avc: denied { read } for pid=2856 comm="syz.3.784" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 144.215351][ T36] audit: type=1400 audit(1780300577.909:1080): avc: denied { create } for pid=2859 comm="syz.1.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 144.234874][ T36] audit: type=1400 audit(1780300577.909:1081): avc: denied { create } for pid=2859 comm="syz.1.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 144.255092][ T36] audit: type=1400 audit(1780300577.919:1082): avc: denied { read write } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 144.279121][ T36] audit: type=1400 audit(1780300577.928:1083): avc: denied { create } for pid=2859 comm="syz.1.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 144.299244][ T36] audit: type=1400 audit(1780300577.928:1084): avc: denied { create } for pid=2857 comm="syz.2.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 144.318581][ T36] audit: type=1400 audit(1780300577.928:1085): avc: denied { mounton } for pid=2857 comm="syz.2.783" path="/221/file0" dev="tmpfs" ino=1193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 148.765515][ T36] kauditd_printk_skb: 86 callbacks suppressed [ 148.765533][ T36] audit: type=1400 audit(1780300582.154:1172): avc: denied { read write } for pid=294 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 150.390695][ T36] audit: type=1400 audit(1780300583.649:1173): avc: denied { execmem } for pid=2879 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 150.414048][ T2882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.791'. [ 150.440162][ T36] audit: type=1400 audit(1780300583.676:1174): avc: denied { create } for pid=2884 comm="syz.3.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 150.478288][ T36] audit: type=1400 audit(1780300583.676:1175): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[1429]" dev="pipefs" ino=1429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 150.501950][ T36] audit: type=1400 audit(1780300583.676:1176): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[1429]" dev="pipefs" ino=1429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 150.546434][ T36] audit: type=1400 audit(1780300583.676:1177): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[1429]" dev="pipefs" ino=1429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 150.601438][ T36] audit: type=1400 audit(1780300583.685:1178): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[1429]" dev="pipefs" ino=1429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 150.631126][ T915] raw-gadget.0 gadget.2: failed to queue disconnect event [ 150.638351][ T36] audit: type=1400 audit(1780300583.685:1179): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[1429]" dev="pipefs" ino=1429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 150.671540][ T36] audit: type=1400 audit(1780300583.685:1180): avc: denied { read write } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 150.706403][ T36] audit: type=1400 audit(1780300583.695:1181): avc: denied { read write } for pid=2880 comm="syz.2.792" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 150.784737][ T2520] syz_tun (unregistering): left allmulticast mode [ 150.800829][ T2049] usb 4-1: USB disconnect, device number 5 [ 150.929251][ T387] bridge_slave_1: left allmulticast mode [ 150.935021][ T387] bridge_slave_1: left promiscuous mode [ 150.940719][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.948261][ T387] bridge_slave_0: left allmulticast mode [ 150.954079][ T387] bridge_slave_0: left promiscuous mode [ 150.959694][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.070893][ T387] veth1_macvtap: left promiscuous mode [ 151.076448][ T387] veth0_vlan: left promiscuous mode [ 160.457776][ T387] bridge_slave_1: left allmulticast mode [ 160.463446][ T387] bridge_slave_1: left promiscuous mode [ 160.469167][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.476653][ T387] bridge_slave_0: left allmulticast mode [ 160.482301][ T387] bridge_slave_0: left promiscuous mode [ 160.488047][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.597957][ T387] veth1_macvtap: left promiscuous mode [ 160.603495][ T387] veth0_vlan: left promiscuous mode [ 160.626358][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 160.626375][ T36] audit: type=1400 audit(1780300593.088:1185): avc: denied { search } for pid=2890 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 160.662288][ T36] audit: type=1400 audit(1780300593.134:1186): avc: denied { search } for pid=2891 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 160.696383][ T36] audit: type=1400 audit(1780300593.134:1187): avc: denied { search } for pid=2891 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 160.721298][ T36] audit: type=1400 audit(1780300593.134:1188): avc: denied { search } for pid=2891 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 160.746882][ T36] audit: type=1400 audit(1780300593.134:1189): avc: denied { search } for pid=2891 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 160.769155][ T36] audit: type=1400 audit(1780300593.134:1190): avc: denied { search } for pid=2891 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 160.791399][ T36] audit: type=1400 audit(1780300593.134:1191): avc: denied { search } for pid=2891 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 160.817157][ T36] audit: type=1400 audit(1780300593.134:1192): avc: denied { search } for pid=2891 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 160.839621][ T36] audit: type=1400 audit(1780300593.134:1193): avc: denied { search } for pid=2891 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 160.861891][ T36] audit: type=1400 audit(1780300593.134:1194): avc: denied { search } for pid=2891 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 160.923962][ T387] ------------[ cut here ]------------ [ 160.929477][ T387] WARNING: CPU: 0 PID: 387 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 160.939686][ T387] Modules linked in: [ 160.943631][ T387] CPU: 0 UID: 0 PID: 387 Comm: kworker/u8:18 Not tainted syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 160.955414][ T387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 160.965529][ T387] Workqueue: netns cleanup_net [ 160.970365][ T387] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 160.976406][ T387] Code: e8 c1 fc d2 fc 4b 83 3c 3e 00 75 19 e8 a5 5a 7a fc 49 81 ff f8 07 00 00 74 1b e8 97 5a 7a fc 49 83 c7 08 eb c9 e8 8c 5a 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 160.996100][ T387] RSP: 0018:ffffc9000da37b90 EFLAGS: 00010293 [ 161.002198][ T387] RAX: ffffffff850d6c44 RBX: ffff88812d6d58c0 RCX: ffff888133989300 [ 161.010227][ T387] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888103f907f0 [ 161.018253][ T387] RBP: ffffc9000da37bb0 R08: 0000000000000003 R09: 0000000000000004 [ 161.026255][ T387] R10: dffffc0000000000 R11: fffff52001b46f04 R12: dffffc0000000000 [ 161.034288][ T387] R13: dffffc0000000000 R14: ffff888103f90000 R15: 00000000000007f0 [ 161.042314][ T387] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 161.051298][ T387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.057908][ T387] CR2: 00007f120eef3e9c CR3: 00000000074aa000 CR4: 00000000003526b0 [ 161.065967][ T387] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000007fffdff5 [ 161.073993][ T387] DR3: 0000800000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 161.081992][ T387] Call Trace: [ 161.085323][ T387] [ 161.088280][ T387] cleanup_net+0x6bd/0xc90 [ 161.092726][ T387] ? __cfi_cleanup_net+0x10/0x10 [ 161.097719][ T387] process_scheduled_works+0x7d4/0x1020 [ 161.103308][ T387] worker_thread+0xc51/0x1370 [ 161.108051][ T387] kthread+0x2c9/0x370 [ 161.112157][ T387] ? __cfi_worker_thread+0x10/0x10 [ 161.117340][ T387] ? __cfi_kthread+0x10/0x10 [ 161.121960][ T387] ret_from_fork+0x67/0xa0 [ 161.126431][ T387] ? __cfi_kthread+0x10/0x10 [ 161.131059][ T387] ret_from_fork_asm+0x1a/0x30 [ 161.135853][ T387] [ 161.138931][ T387] ---[ end trace 0000000000000000 ]--- [ 161.145566][ T387] ------------[ cut here ]------------ [ 161.151073][ T387] WARNING: CPU: 0 PID: 387 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 161.161198][ T387] Modules linked in: [ 161.165157][ T387] CPU: 0 UID: 0 PID: 387 Comm: kworker/u8:18 Tainted: G W syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 161.178418][ T387] Tainted: [W]=WARN [ 161.182292][ T387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.192401][ T387] Workqueue: netns cleanup_net [ 161.197210][ T387] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 161.203341][ T387] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 50 5a 7a fc 49 81 ff f8 07 00 00 74 1b e8 42 5a 7a fc 49 83 c7 08 eb c5 e8 37 5a 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 27 5a 7a fc 5b 41 5c 41 5e 41 [ 161.223001][ T387] RSP: 0018:ffffc9000da37b90 EFLAGS: 00010293 [ 161.229115][ T387] RAX: ffffffff850d6c99 RBX: ffff888103f90800 RCX: ffff888133989300 [ 161.237127][ T387] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888103f90808 [ 161.245129][ T387] RBP: ffffc9000da37bb0 R08: 0000000000000003 R09: 0000000000000004 [ 161.253157][ T387] R10: dffffc0000000000 R11: fffff52001b46f04 R12: dffffc0000000000 [ 161.261172][ T387] R13: dffffc0000000000 R14: ffff888103f90000 R15: 0000000000000008 [ 161.269189][ T387] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 161.278184][ T387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.284793][ T387] CR2: 00007f120eef3e9c CR3: 000000010c7c4000 CR4: 00000000003526b0 [ 161.292810][ T387] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000007fffdff5 [ 161.300834][ T387] DR3: 0000800000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 161.308840][ T387] Call Trace: [ 161.312167][ T387] [ 161.315117][ T387] cleanup_net+0x6bd/0xc90 [ 161.319596][ T387] ? __cfi_cleanup_net+0x10/0x10 [ 161.324596][ T387] process_scheduled_works+0x7d4/0x1020 [ 161.330172][ T387] worker_thread+0xc51/0x1370 [ 161.334904][ T387] kthread+0x2c9/0x370 [ 161.339010][ T387] ? __cfi_worker_thread+0x10/0x10 [ 161.344172][ T387] ? __cfi_kthread+0x10/0x10 [ 161.348791][ T387] ret_from_fork+0x67/0xa0 [ 161.353249][ T387] ? __cfi_kthread+0x10/0x10 [ 161.357888][ T387] ret_from_fork_asm+0x1a/0x30 [ 161.362676][ T387] [ 161.365732][ T387] ---[ end trace 0000000000000000 ]--- [ 161.383294][ T387] ------------[ cut here ]------------ [ 161.388840][ T387] WARNING: CPU: 0 PID: 387 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 161.398370][ T387] Modules linked in: [ 161.402292][ T387] CPU: 0 UID: 0 PID: 387 Comm: kworker/u8:18 Tainted: G W syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 161.415615][ T387] Tainted: [W]=WARN [ 161.419471][ T387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.429558][ T387] Workqueue: netns cleanup_net [ 161.434388][ T387] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 161.439971][ T387] Code: 3c 20 00 74 08 48 89 df e8 8f d7 ed fc 48 8b 3b e8 d7 de d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 62 35 95 fc <0f> 0b e9 b0 fd ff ff e8 56 35 95 fc 0f 0b e9 18 fe ff ff e8 4a 35 [ 161.459642][ T387] RSP: 0018:ffffc9000da37b70 EFLAGS: 00010293 [ 161.465768][ T387] RAX: ffffffff84f2916e RBX: ffff88812d6d58c0 RCX: ffff888133989300 [ 161.473794][ T387] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888133989300 [ 161.481785][ T387] RBP: ffffc9000da37b98 R08: ffffffff87d49987 R09: 1ffffffff0fa9330 [ 161.489810][ T387] R10: dffffc0000000000 R11: fffffbfff0fa9331 R12: 1ffffffff0fa9080 [ 161.497827][ T387] R13: dffffc0000000000 R14: ffff88812d6d64c0 R15: dffffc0000000000 [ 161.505860][ T387] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 161.514814][ T387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.521467][ T387] CR2: 00007f120eef3e9c CR3: 000000010c7c4000 CR4: 00000000003526b0 [ 161.529492][ T387] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000007fffdff5 [ 161.537502][ T387] DR3: 0000800000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 161.545546][ T387] Call Trace: [ 161.548881][ T387] [ 161.551840][ T387] xfrm_net_exit+0x31/0x80 [ 161.556333][ T387] cleanup_net+0x6bd/0xc90 [ 161.560826][ T387] ? __cfi_cleanup_net+0x10/0x10 [ 161.565801][ T387] process_scheduled_works+0x7d4/0x1020 [ 161.571459][ T387] worker_thread+0xc51/0x1370 [ 161.576174][ T387] kthread+0x2c9/0x370 [ 161.580276][ T387] ? __cfi_worker_thread+0x10/0x10 [ 161.585459][ T387] ? __cfi_kthread+0x10/0x10 [ 161.590085][ T387] ret_from_fork+0x67/0xa0 [ 161.594553][ T387] ? __cfi_kthread+0x10/0x10 [ 161.599170][ T387] ret_from_fork_asm+0x1a/0x30 [ 161.603988][ T387] [ 161.607024][ T387] ---[ end trace 0000000000000000 ]--- [ 166.047018][ T36] kauditd_printk_skb: 50379 callbacks suppressed [ 166.047035][ T36] audit: type=1400 audit(1780300598.098:51574): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.074010][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 166.076550][ T36] audit: type=1400 audit(1780300598.098:51575): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.081238][ T150] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 166.102042][ T36] audit: type=1400 audit(1780300598.098:51576): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.111377][ T150] audit: backlog limit exceeded [ 166.130704][ T36] audit: type=1400 audit(1780300598.098:51577): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.137208][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 166.156718][ T36] audit: type=1400 audit(1780300598.098:51578): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.163615][ T150] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64