last executing test programs: 4.425795839s ago: executing program 3 (id=539): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e22fcffffff000000007ecd00000000000000000000000000000000ffff"], 0x54}}, 0x20000080) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/175, 0xaf}], 0x2}}, {{0x0, 0x0, 0x0}, 0x1b20cfe5}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000100)) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010000000020f3044d0700000000000109022400010000002009040000ff030001400921000000012206000916810358e0fb0ff3"], 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x8971, &(0x7f0000000440)={'sit0\x00', 0x0}) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, &(0x7f00000001c0)={0x0, 0x23, 0xb, {0xb, 0x5, "594c75e0a880d05fda"}}, &(0x7f0000000240)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "dbe8a0870fa4c81403ad6a3cedfed30020a09780855d3706340e96ff616c13b93f56f9eb749b9f2fd0f707c3e092e211b5029e000601497d5d1fdf862d98fc4a327541c3aee75134f53271a61fa0e43b22567b552813843ca075b474dfaf644a58c934e30a3de6727d602802d8be7bae40b1b7a862c525aeae2bd6c6583eff91bd6e9a044cc567df0b8ae25077223412b56f3a657021bbea5e16fd9a5e7f46a3664f6aa575fbdfa8bc50351da00823870a8bb7500d6f6039f8d35a662f614362b071a77c1058e13b7ec14cc3b0f4a88d6896d77ec1e6c9e0c86c"}}, &(0x7f0000000340)={0x0, 0x22, 0x17, {[@main=@item_4={0x3, 0x0, 0xc, "49dd56ff"}, @local=@item_4={0x3, 0x2, 0x7, "3d52f01d"}, @global=@item_4={0x3, 0x1, 0x0, "f1a58434"}, @main=@item_4={0x3, 0x0, 0xa, "7683d602"}, @global=@item_012={0x2, 0x1, 0xb, 'K,'}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0xb, 0x1, {0x22, 0x7e3}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x0, 0xf, 0x87, "d495d4eaaa06ecf9dd68a80de4a72e6408aca9b6a9d89d5d2220a63e9321dab6590497f5fb6829c883fba7708345a0edfa78636000bb92830ac9a706bfb45183ec7eba750ae772790e387fa97bda28782fa1e48bb2e988e548d2edbd3579aa6208e20eee4b076ff53f4b57ddd1483fe54592a8cbee6f4696b23806fa96ef99d9501e8f037647f2"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000005c0)={0x20, 0x1, 0x24, "62af33f0f0898b1f1eeefd9319a392abdd4c917fa769831d9f16abdd00f2dc95225ee37a"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x9}}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = eventfd2(0xd6f0, 0x80801) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000180)=r6) mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000), 0x8c13, &(0x7f0000000200)={[{@size={'size', 0x3d, [0x67, 0x32, 0x25, 0x70, 0x67, 0x2d]}}], [{@hash}]}) r7 = userfaultfd(0x1) syz_usb_ep_write(r3, 0x9, 0x9e, &(0x7f0000000680)="f4af59f793cd89fb4aace7feed9d92ccc70a7a46276b52318a7745b971ed841a09ccbd1749af856f6505f2327d6ed7555f07d1b58e1ed32d738d790ec75bfdb0705f386fbd1129de4482b943d80b85919278246cc7e8ba42408c17a457d798159cffaa4ee033ada491dba04e668c1da056b57df8a669d7d7b7bc14637f61cb2b0d86737f1081fc069abaafa6c89e2ebd272b4c94302421b367ea5182a9c7") read(r7, &(0x7f0000000000)=""/5, 0x5) 3.700944947s ago: executing program 3 (id=548): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f0000000240), &(0x7f0000000480)=ANY=[@ANYBLOB="00fbae020776d5894a8866f2109f4d4a8b0b5aa7549030516a82129cacf56aa49ec1ad00b068d38947d0bb143d81b21a32ae4c0d254670f9eec8f786c84b55e13b560a96395c2cc348e5c4ac280037e9b5b9371e5d803c62fd67b5fd8bf865ceb610db89574ef16f8bd624bc0c4e5a005864a8968585c78a430ed3500e6c150dce0ba17b58c07c5db013a0cbdad0ba7bbd9e5af26044b61a2047b8b2a3a8be76afc1042326ef2d6517f16703d088"], 0xae, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x449) fchdir(r3) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000040), 0x800) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x2e}}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2080) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x800007, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) clock_adjtime(0x7, &(0x7f0000000100)={0x540, 0x7, 0xd26, 0xfffffffffffffff6, 0x4, 0x8, 0x7fff, 0x194d, 0x7ba, 0xffff, 0x7, 0x7f, 0x8000000000000000, 0x0, 0x100000000, 0x4000, 0x14000000, 0x400, 0x5, 0xd, 0x8, 0x715, 0x1ff, 0xff, 0x5f1, 0x8006}) syz_io_uring_setup(0x5b17, &(0x7f0000000000)={0x0, 0xc995, 0x4000, 0x0, 0x2de, 0x0, r8}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8943, &(0x7f0000000100)={'veth0_to_team\x00', @multicast}) syz_ublk_setup_queues(r3, r6, &(0x7f0000000380)={0x0, 0x2, 0x4, 0x1, 0x23c}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x2000, 0x1000000, 0x2033f, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8d60, 0x80, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x10, 0x8, 0x38a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x8000, 0x3, 0xdfffffff}}], 0x1, 0x0, 0x0) 2.582775405s ago: executing program 2 (id=558): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="20120600000076f8ffefa4be"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c7465720000000008000000000000000000000000000000000000000000855333815828b306cb2e1f"], &(0x7f0000000200)=0x2f) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) (async) ioctl$FICLONE(r1, 0x40049409, r1) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x20, 0x8, 0x4, "7149908d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.512457757s ago: executing program 3 (id=559): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0x6, "95053e799d37"}, &(0x7f0000000bc0)=0x2a) (async, rerun: 64) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 64) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000100), &(0x7f0000000140), 0x0) (async, rerun: 32) r3 = openat$binfmt(0xffffffffffffff9c, r1, 0x2, 0x0) (rerun: 32) write(r3, &(0x7f0000000180)="01010101", 0x4) (async) close(r3) (async) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f00000001c0), &(0x7f0000000200), 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) (async) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d10700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x37b1, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000040)={@host}) (async, rerun: 32) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x0, 0xb03}, 0x14}}, 0x0) (async, rerun: 32) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) (async, rerun: 32) r10 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) sendto$packet(r10, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) (async, rerun: 32) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) (rerun: 32) close(r11) (async) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000280), &(0x7f00000002c0), 0x0) (async) socket$netlink(0x10, 0x3, 0x0) 2.373019581s ago: executing program 3 (id=560): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000300, 0x0, 0x0) (async) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x9e, 0xba, 0xd6, 0x8, 0x1a0a, 0x108, 0x8642, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x23, 0x4, 0x60, 0x3, "", [{{0x9, 0x4, 0xdf, 0x67, 0x0, 0xd8, 0xf0, 0xcd, 0x9, [@hid_hid={0x9, 0x21, 0xef, 0x2, 0x1, {0x22, 0x938}}]}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 2.075491058s ago: executing program 0 (id=561): r0 = syz_clone(0x200000, &(0x7f0000000000)="6053ea011bac3cb72541f98413459cecf19eb5c4cdabf097f814ae5245045bfb6bbe95a28374bca6a1556036b0dd1c5e81e782f70d98df27c412ef1d447ac3ac5c1a82e3982314116b15a5f5bc8abfa51eac9a31a4d69589ef396a3617f7e7544a0202f68d17408508c24ed6362f692498ce7f4ed029297edfa0d8cb210d5c7f630bdd", 0x83, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="578a20761a2ccbc2d3dcdc38a9e64e9604738e1a2e6478bccf235823fd0d1631f3681781486e24d78ace07251ce0be83747f0e5a7baeae14ad0d4832239e73cff3bfd93dc31c7224c079a395c056d63928541b1e28d18853467aa944378f788e1503b62af94eabf0906eb29cbf7d9ba21cc28959b397430c38438b46a4ddd4bc4b42da8845817fd77ca82fa407c1e8665c7944e651b8f9ed59b4d20474c6f01e2991cae31899043d5ced464e2ab0ac82fcd329538a6fee294d482cb89dcb58363925a1fee80c5ec42af15d48eee820e1effc93559ff4e700") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = accept(r1, &(0x7f0000000240)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000002c0)=0x80) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) close(r4) getpeername$tipc(r2, &(0x7f0000000300), &(0x7f0000000340)=0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r2) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r5, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x400}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}]}]}, 0x68}}, 0x20040004) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40080c4) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000600)) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000640)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x1b4, r7, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x9b1}]}, @NL80211_ATTR_NAN_FUNC={0x188, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x3d}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x7}, @NL80211_NAN_FUNC_SRF={0x118, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x58, 0xb, "ae674c4a7914e8dbc134c481eebe0a79b27358c02b2abb9f1c173d229c033763bc345c0b16caf3bf9858f8741842cc16c2f6187b0fc9a1e7e371cbc8966bb45f3cdf756b699ec1ffd353b26730ae2000027a5638"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x18880}, 0x4024000) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000980)=@req={0x0, 0x4, 0xe3, 0x1ff}, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400011}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r9, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x45}, 0x4000010) unshare(0x12000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r10, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r7, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x42}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x1) r11 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x6) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) fchmodat(r12, &(0x7f0000000c80)='./file0\x00', 0x1) r13 = getpgrp(r0) ptrace$ARCH_MAP_VDSO_32(0x1e, r13, 0x2, 0x2002) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r12) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d40)={0x194, r14, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x154, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/selinux/mls\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(//\xb7\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'sip\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x40, 0x5, "02e9eedfb6f3738a163240cf0be2e3548008bdefe62e885a36951871282c9f1f68d02af18003caecbfe3155dc9fa67a93749e8916faea7b82505e70f"}, @ETHTOOL_A_BITSET_MASK={0x15, 0x5, "261344fe1a82c62df185acbc1ad7280f3b"}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000001040)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f00000010c0)=""/7, 0x7}, {&(0x7f0000001100)=""/198, 0xc6}], 0x2, &(0x7f0000001240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001300), 0x6e, &(0x7f0000002780)=[{&(0x7f0000001380)=""/47, 0x2f}, {&(0x7f00000013c0)=""/174, 0xae}, {&(0x7f0000001480)=""/53, 0x35}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/162, 0xa2}, {&(0x7f0000002580)=""/150, 0x96}, {&(0x7f0000002640)=""/186, 0xba}, {&(0x7f0000002700)=""/108, 0x6c}], 0x8}}, {{&(0x7f0000002800)=@abs, 0x6e, &(0x7f0000002980)=[{&(0x7f0000002880)=""/100, 0x64}, {&(0x7f0000002900)=""/31, 0x1f}, {&(0x7f0000002940)=""/4, 0x4}], 0x3, &(0x7f00000029c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x3, 0x40010100, &(0x7f0000002ac0)={0x0, 0x989680}) 1.99216847s ago: executing program 2 (id=562): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x16, 0xa01, 0x0, 0x1, {0xa}, [@nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}}, 0x0) syz_usb_connect$uac2(0x3, 0x8c, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x0, 0xf0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x6, 0x1a, 0x3}, [@processing_unit={0x11, 0x24, 0x8, 0x3, 0x6, [0x0, 0x0, 0x0, 0x2, 0x3, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x5, 0x0, {0x8, 0x25, 0x1, 0x1, 0x6, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xe6, 0x40, {0x8, 0x25, 0x1, 0x3, 0x3, 0xfe, 0x5}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 1.948941621s ago: executing program 0 (id=563): add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_io_uring_setup(0x48a9, &(0x7f0000000100)={0x0, 0xf40, 0x20, 0xffffffff, 0xab}, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3f}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) setuid(0xee01) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x480}, 0x20) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x65, 0x61, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x36, 0x33, 0x63, 0x30, 0x30, 0x36, 0x39]}, &(0x7f0000000100)={0x0, "0011223344555f778899aabbccddeeff00112233445566778899aaceccddeeff00112233445566778899aabbccddeeff00112233446166778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x8, "", [{{0x9, 0x4, 0x0, 0xfc, 0xdf, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3f, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1}}}}}]}}]}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="20082b0000002b21c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881"], 0x0, 0x0, 0x0, 0x0}, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 1.858881814s ago: executing program 3 (id=564): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$sock(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x18}}], 0x1, 0x80) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010004, 0x0, 0x10000000001780}]}) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010004, 0x0, 0x10000000001780}]}) pwritev2(r0, 0x0, 0x0, 0xfffffffb, 0x3, 0x4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) (async) syz_ublk_setup_queues(r7, r5, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, 0xd, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x2804) (async) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, 0xd, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x2804) syz_usb_connect$uac1(0x5, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e0420304000010203010902720003010970080904000000010100000a240106000a0002010209040100000102000009040101010102000009050109000405f70d0725010c0942000904020000010200000904020101010200000b2402010902fa01ff9f4f072401a4050110090582091e2c7982674cebb9ddfb45b3"], 0x0) 1.436672144s ago: executing program 2 (id=568): getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xe0000000, 0x8, 0x2, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) (async) userfaultfd(0x80001) (async, rerun: 64) r4 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x15) (async) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x28) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) (async, rerun: 32) setsockopt$inet6_tcp_int(r7, 0x11a, 0x4, &(0x7f0000000040), 0x4) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) r8 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r8, 0x10f, 0x85) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async, rerun: 64) r10 = dup(0xffffffffffffffff) (rerun: 64) syz_ublk_setup_queues(r10, r9, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x100002f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x41000001, 0x337, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e47, 0x200, 0x3, 0xffffffff}}], 0x1, 0x0, 0x0) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r10) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000e00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000dc0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="44030000", @ANYRES16=r11, @ANYBLOB="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"], 0x344}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 1.365101316s ago: executing program 0 (id=569): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x4011) 1.271658288s ago: executing program 0 (id=571): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r4, &(0x7f0000000000)=ANY=[], 0xc2) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x4) sched_setscheduler(r0, 0x3, &(0x7f0000001100)=0x8) r7 = openat$cgroup_ro(r6, &(0x7f0000001200)='cgroup.controllers\x00', 0x5000000, 0x0) readv(r7, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4080, 0xff0}], 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000240)) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r8, 0x400454d1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@md0, 0x0, &(0x7f00000001c0)={0x8e8, 0x9, 0x9, 0x0, 0x3, 0x2, 0x9, 0x6, 0x1c0a}) setns(r1, 0x24020000) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$RTC_IRQP_READ(r9, 0x8008700b, &(0x7f0000000040)) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000080)={0x4, {{0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, {{0xa, 0x4e24, 0x6, @mcast2}}}, 0x108) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 1.259711838s ago: executing program 1 (id=572): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000000)={0x13, 0x5, 0x6, 0x9, 0x401}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000000200)=""/86, 0x56}], 0x3) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xd) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000380)=0x6e, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f00000003c0)={{r2}, "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"}) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0xcd7) ftruncate(r0, 0x3505e659) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x6, 0x4000) r3 = creat(&(0x7f00000013c0)='./file0\x00', 0x70) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000001400)=[0xf98d, 0xf]) write$P9_RXATTRWALK(r3, &(0x7f0000001440)={0xf, 0x1f, 0x2, 0x7}, 0xf) mount$9p_tcp(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', &(0x7f0000001500), 0x8000c, &(0x7f0000001540)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@fscache}, {@loose}, {@nodevmap}, {@version_u}, {@nodevmap}, {@cache_loose}], [{@permit_directio}, {@obj_role={'obj_role', 0x3d, '*)%$^+\xd0\xe5,Z'}}, {@obj_role={'obj_role', 0x3d, '.\\'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@seclabel}]}}) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000001600)={0x4, 0xfffffffc, 0xf}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001640)={'dvmrp0\x00'}) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17) r4 = accept4$inet(r3, 0x0, &(0x7f0000001680), 0x80800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000016c0)='/proc/vmstat\x00', 0x0, 0x0) r6 = accept4$inet6(r5, &(0x7f0000001700)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000001740)=0x1c, 0x81000) writev(r6, &(0x7f0000003c40)=[{&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000002780)="484fca9a75a0b0cc924c40e4e7354dc5384ec042f69cc7eae7eb4124da9c5fa4a5fb04b9551f53ffcbde893e17719e307e1c6cbc515b12134415c73d6e8f2cedbb21d59cc108928cea20bd1522ffc1cce2b488e0b855bd7bcfd51998a64353753532bfb1add1d048ce75b60de3c935bd90e13eb14ded902d34544210b368142cab685a26af6433f73080e53d81016e69b474135d90ba8316bf0abcbf6512f9bc17882c18470d80f21195b6748cc445", 0xaf}, {&(0x7f0000002840)="8965996b9dd3eed0216f49fb94ed00e3", 0x10}, {&(0x7f0000002880)="135bfc0be7e3240fb2f115b2fb5ea91af5086efc02159932e2cf176237d0f4f063fb2084948d7c44461e2e9378b72e472763515b034edbb800ae30d8167aa6be73ece011bcfeeea93a60160bcc70ba839df5655bcef4868a55152907", 0x5c}, {&(0x7f0000002900)="d3adb5c9f39c1853ed5842c7f69d6d497ecac5c242ce03447fae5307cf8c6250c64908a42d0a2473db6af808e281fb69561049546188ca8baf7c8b58117e930af1e124ccd174bb501c09ce955dbeaa40520af280039f05fcdd45061e066e3a1d1ee17f80f539e082d97844a731b3404a9a41", 0x72}, {&(0x7f0000002980)="9b1cae4c746c23a1bbdc82fe557f30e4962488af468aee6cfc2fba8754d77bcfc7a67d4652cb638428716e93e0dfea2495fcf3f737c11b16c32a34738ba23ce6d30cfde921c0edc4ffa878bf484436a07a32fa9b26652fab3b072c836fadeff6e1375a879ac3a5b0ba7a163aed3d48ca04a730c2c0fb96d6604694eab244f378c7bc5d048630553e1b95539cac284acc3cc80a642a28d2b865b18be6b8d521e93f6b3a60d88cedbbab5e58b4b8061d1285e15c9ebad8ef6974a7adc7979a87dbb063bc7105194058ac1b710906", 0xcd}, {&(0x7f0000002a80)="a26cb1c1fc41c4a7d1c08aa6b8cb0bb7129896ec7cad74916278ff5fa60abd5f8cde1d6d7b75843b722b8c7830f5c496bd774e110566ffc9064f01532ccede188ab03fae0e404fd7299b95d7bbd14f05fd2fcbcc02bbc0212caedc8c579da6f185d48a477b105b45c3dabe5b240d133e66a5b05c0c636c8470e9da99a782d2bdcc108efe588a7562d75d3833435f03405d39980d95e37db8d8544e3a0461be85ad", 0xa1}, {&(0x7f0000002b40)="cc7a97b63a1f1481d7c02b18eb73f02b56aefc7aaeeda3a746af50da5cebcb", 0x1f}, {&(0x7f0000002b80)="e2519cc4af48a41b254ce2d5fbec33428b098859a1eee2d859b577bbb0807e071f6672d9a6801709622161619a5c4debb105e41a6620b477ac43d99f0cf6d11c240cc8679f0efe6c38aa9529f706d62649ec9e4493375c82bfa8d06686ee2f43a411ffabf6ca24694d8c62d05dcbc08345119dc3f1d681d522cfba3152b9090e4881c56fa5129c803066e31660bb396652cd6b338d76fc87a2c3c1", 0x9b}, {&(0x7f0000002c40)="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", 0x1000}], 0xa) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003d40), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000003e00)={'ip6_vti0\x00', &(0x7f0000003d80)={'syztnl0\x00', 0x0, 0x2f, 0xef, 0x8, 0x401, 0x38, @remote, @mcast1, 0x8780, 0x8, 0x3, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003e40)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000003f40)={'syztnl1\x00', &(0x7f0000003e80)={'erspan0\x00', 0x0, 0x80, 0x0, 0x26f4, 0x100, {{0x20, 0x4, 0x2, 0x3e, 0x80, 0x68, 0x0, 0x1, 0x2f, 0x0, @local, @multicast1, {[@cipso={0x86, 0x53, 0x0, [{0x7, 0x10, "cdd4a9f83448dde08087f60326e1"}, {0x1, 0xc, "42d571520e675031bc74"}, {0x2, 0xf, "91df698e121d1c54ed06ecd403"}, {0x1, 0x10, "6b6663a491e4615e7eb07364cfb0"}, {0x5, 0x12, "2958590b57d9d8419595f4f453ebdce6"}]}, @timestamp_addr={0x44, 0x14, 0x2e, 0x1, 0x0, [{@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x24}, 0xfffffff7}]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000004300)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000042c0)={&(0x7f0000003f80)={0x340, r7, 0xe0e, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffffff0}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_OURS={0x290, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x6c, 0x5, "09d7bd45e73735a1f53df57a02fdf8fa101ae3d50c4d5d50531cbc5e992c6503eee3229f0ee7333e1ce47e998bb099d958a7ae970b0d6ea098251d64d63d94071d10138bde3f3d48bbad7ab26a94b0c128e6618f5679c2531548da3fc1cd8ca75fc69b435a8d4ec8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0xcf, 0x5, "aa61b8f28329005bb4c3c7c63eb3cab19ff7a5b38d99ca301bbcac3dfc5632707ca0eef265ad6d936f911b8e6d63a3c2b4301d7ac8b248afc95fd25c19bab1fb213c20fa5485d5d1d2177a1299e6ca8f9b5d991de6995761351594c6a3be98dcb9ac8f31de71aa84706bead6f83a69a0285fd8fa723a5f2a3118a956b1596dc0654e3bd8303fb702e54770c5d1416e2c60e07043fc616bdb3e15d22ef6a61ccb879877dc25d8567729469852b802dd7781102b37b1de832b39c1b7221fffed20af78e688b57bb630838e94"}, @ETHTOOL_A_BITSET_MASK={0x5c, 0x5, "247db857c9034a630f3e6368828b41e5a1a59ac7e26f52f2300dc2ca19f9fc71d3a3f2d841303496d4dbadafc2d03b149bbef0ecb51882342e11d1071d21e7705d1cff0e78adbb46736be522d2f6561697bf36ba0d07fe8a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'f}]\x14-!*\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'trans=tcp,'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/proc/vmstat\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x38, 0x4, "f8fa9742163b68d1ca69876b9f38517560dc3457c536548971b4ad8a32af55fa43302c1b1c9ed62f7087e1fb9b03ff4fd9481625"}, @ETHTOOL_A_BITSET_VALUE={0x65, 0x4, "3fe17fa82c547fd6ad7ff3ec1f28fb997d7ef0c442b73680d432b1f73890120fe8f641cedab54e2fb22b0f27b8764bb4b73bb6188eac9ce17808310d212054269a9d24807fda1ba797c0dc7f6cd605191027694d182d313d1f3d441f17b973ea94"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000004340)={0x6, 'caif0\x00', {0x56edbf6}, 0x8000}) 1.088952953s ago: executing program 0 (id=573): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) read(r0, &(0x7f0000000100)=""/90, 0x5a) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000080)={'mangle\x00', 0x2, [{}, {}]}, 0x48) (async) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x2172, r1, 0xffffe000) (async) munmap(&(0x7f0000004000/0x1000)=nil, 0x1000) futex(&(0x7f0000004000)=0x2, 0x8d, 0x1, 0x0, 0x0, 0x1) 1.088478673s ago: executing program 3 (id=574): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) setxattr$trusted_overlay_nlink(&(0x7f0000001540)='./cgroup\x00', &(0x7f0000001580), &(0x7f00000015c0)={'L+', 0x7fffffff}, 0x16, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001640)='./sys\x00', 0x40e040, 0x9c) r0 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="306663353a313232373a69e21021ce2f2a64d2ec9dff3e27a232d7f00dc73a08e457a1339630d32830acc8ae9fea9ab604e9b23b3e58fcad3e1b87e4b37ed4aec6eaef62cd0c01a5fbc351cef7fa8cc76a25ee5d26ba864efd050d0395099d652d9d3c718d88", 0x66) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100, 0x0, &(0x7f0000000840)="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"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) r2 = openat$incfs(r1, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) lsm_get_self_attr(0x68, &(0x7f0000000180)={0x0, 0x0, 0x99, 0x79, ""/121}, &(0x7f0000000040)=0x99, 0x1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x31, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, 0x0, 0x426c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0xffffff7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x7f, 0x0, 0x0, 0x400, 0x0, 0x7], [0x0, 0x0, 0x4, 0x0, 0x1000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x877, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x805, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffc, 0x4d]}, 0x45c) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x28, &(0x7f00000000c0)="66a75a9eac", 0x5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000019080)=0x31) openat2(r5, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40242, 0x0, 0x12}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000006a0015012000"], 0x1c}], 0x1}, 0x4000080) 1.004246395s ago: executing program 2 (id=575): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x1100, 0x1}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001800), 0x21, 0x0, &(0x7f0000001880)="38fbd7d7d18e54198e68a5bbafc856e0167efc7ed4eb5881bca643d841e33fd4bf"}) 1.003700175s ago: executing program 2 (id=576): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000380)="b838008ee0f30f9129660f38823566b9dc0200000f32b8e3000f00d0ba2000b8aa00ef66b99600004066b80008000066ba000000000f300f0139baa100b88863efbaa100b8b62def", 0x48}], 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000140)="c5fd1b8663379c59c06354fe9d5db135290d8170a9151893f23a0ba69594eddcfdfd96db2235372a72fe80380ef01eaec7e7577c2ebc3b4192db4fb099280d32194a55083324f9fcb4f435e969855f48bcf0c5631f175f498540b429d19428529c6070ae5f3a0983a8f7d6dc2c73211dfe5c895a741d4f40238feac775b08bb417a1c7542c4d726d6155c863800bf0e2292b4015db31f4e5d5e3a774ea6270d577a728be3b24ef1c092bdf2f44718ddabfb8bbb5e613243291552174", 0xbc, 0x40, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000300)={0x40, 0x15, 0x2, "e1ea"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000400)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, &(0x7f0000000780)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000340)={&(0x7f0000b87000/0x4000)=nil, &(0x7f00007f1000/0x4000)=nil, 0x4000, 0x2}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)="306663353a313232373a620afaf6379a248d1d6534518f10951005a36c66", 0x1e) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x4, 0x800, 0x6, 0x7f, 0x9, 0x2, 0xfffffffffffff920, 0x1c, 0x800000000000, 0xd6e, 0x1ff, 0xadb, 0x60c, 0x4a, 0xf], 0x9000, 0x20000}) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8090) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) r7 = socket$netlink(0x10, 0x3, 0x2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000001700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000016c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) read$rfkill(r6, &(0x7f0000000080), 0x8) 959.796726ms ago: executing program 0 (id=577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010329bd7000fbdbdf252100ffff1800018014000200"/38], 0x2c}, 0x1, 0x0, 0x0, 0x815}, 0x4004814) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r2, 0x0, 0x20, &(0x7f0000000000)="98f0814aaf99bc003ce01d87", 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x5d, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0xf000, 0x10001, 0x5, 0x8, 0x0, [{0x6, 0x2, 0x3e, '\x00', 0x8}, {0x1, 0x7f, 0x3, '\x00', 0x4}, {0xce, 0x9, 0x10, '\x00', 0x40}, {0x84, 0xfd, 0x6, '\x00', 0xe}, {0xc, 0x3, 0x4, '\x00', 0xf}, {0x9, 0x4, 0xc, '\x00', 0x4}, {0x0, 0x8, 0x0, '\x00', 0x8}, {0x4f, 0x4, 0xc, '\x00', 0x7f}, {0x7, 0x10, 0xf9, '\x00', 0x7}, {0xbd, 0x7f, 0x7f, '\x00', 0x9}, {0x8, 0xd, 0x4, '\x00', 0x5}, {0x0, 0x76, 0x5, '\x00', 0x3}, {0xbd, 0x6c, 0x0, '\x00', 0xf}, {0x1, 0x8, 0x9, '\x00', 0x1}, {0x9, 0x4, 0x1, '\x00', 0x40}, {0x0, 0x2, 0x7, '\x00', 0xdd}, {0x6, 0x6, 0x20, '\x00', 0x1}, {0x2, 0xfc, 0x2, '\x00', 0xe}, {0x1, 0xb, 0x7, '\x00', 0xcf}, {0x0, 0x3, 0x2, '\x00', 0x6}, {0x3, 0x1, 0xfd, '\x00', 0xff}, {0xc, 0xa2, 0x9, '\x00', 0x5}, {0x8, 0x4, 0xff, '\x00', 0xd8}, {0x2, 0x8, 0x92, '\x00', 0x6}]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r10 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x1b) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000080)=0x13) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r9, 0x20, &(0x7f0000000100)="64b6365de974de7a040000000000000000000000496e9000", 0x0, 0x18) r12 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000005c0)="f30fc7fe660fe3e0ff9106004f0f20e06635400000000f22e066b9800000c00f326635008000000f3066b9800000c00f326635002000000f30b8ff0f8ec0660f38805094e15d", 0x46}], 0x1, 0x14, 0x0, 0x0) 356.991421ms ago: executing program 2 (id=578): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') read$FUSE(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="401406000000cc171d8e18db2015565f19bdc1876776f39c18d5e4a253924ed01c450329ed56cd5565537ad6495da959cc6d6f35e271ec4bcc3c68c32e28f9fbf905c07abae4a9d06ef2224e0327a8c73e6b8fb27cdf0c2d8534b446da4cb2128d78df2cfa148c3234920cba6bf0adb656fee7ca6515cc8dfad2654a433ed98c6c64a7f2300166008e897891"], 0x0, 0x0}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r2, 0x5457, &(0x7f0000000000)={0x4, 0x10000629, 0xffffffff, 0x0, 0x9, "008405008a000000000000008000"}) 340.935992ms ago: executing program 1 (id=579): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmmsg$inet6(r2, &(0x7f0000009680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}], 0x28}}], 0x2, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$sock_linger(r2, 0x1, 0x3c, 0x0, 0x0) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) (async) sendmmsg$inet6(r2, &(0x7f0000009680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}], 0x28}}], 0x2, 0x4000000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) 208.641645ms ago: executing program 1 (id=580): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000000000000a004e2300000009ff01000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000ced0c7f9aa2cdaac2a684255d357a5ec2a0d2dd4cc89ff22134289a246464602d2264b8dd80b7e7a3d2fb78737ea27538a45a9c140761049b735c09636c2d818807b262c589a64412d8db2f3af7a6c0b842a7aeed3bd57cf4a0db76dc3affe7ce26a22bdc14dd99102406771e69450e8f6a4c955abb030b4ee6c7d3b44362b8b1f66c4eef80df4abff13601682c993465ede8f48062cef2f381957b7cf92aa7145d4c9596b5eb9b86087adf8094418ec1e4f4704c8ee318cf4811a43"], 0x90) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'veth1_to_bond\x00', {0x3}, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) getgroups(0x2, &(0x7f00000000c0)=[0xee01, 0xee01]) setfsgid(r1) setfsgid(r1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) request_key(&(0x7f0000000400)='.request_key_auth\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) landlock_create_ruleset(&(0x7f00000007c0)={0x2018, 0x3, 0x0, 0x200, 0x6, 0x1}, 0x30, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0x2710, @host}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x1e, 0x1, 0x70bd25, 0x25dfdbfb, {0x1a}, [@generic="9b05a331b5"]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x8703268b, @local}, 0x10) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x9, 0xffffffffffffffff}) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000580)='./tracefs_dir/buffer_subbuf_size_kb\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000180)='./tracefs_dir\x00', &(0x7f0000000480), 0x4, &(0x7f0000000640)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x6b, 0x6d, 0x37]}}, {@inode64}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x30, 0x67, 0x31, 0x39, 0x39, 0x30]}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x0]}}, {@mpol={'mpol', 0x3d, {'prefer', '', @void}}}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x38]}}, {@size={'size', 0x3d, [0x39, 0x38, 0x33, 0x34]}}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x31, 0x6b, 0x33, 0x70]}}, {@gid={'gid', 0x3d, r6}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x36, 0x38, 0x32, 0x74]}}], [{@euid_gt={'euid>', r7}}, {@fowner_lt}, {@dont_measure}, {@measure}, {@fsmagic={'fsmagic', 0x3d, 0x8}}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_GET_CPUID2(r8, 0xc008ae91, &(0x7f0000000040)) close(0x3) 117.085358ms ago: executing program 1 (id=581): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x2800c11, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r1, &(0x7f0000000dc0)=[{&(0x7f0000000a00)=""/221, 0xdd}, {0x0}], 0x2, 0x0, 0x81, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x50, 0x0, &(0x7f0000000180)) write(r0, &(0x7f0000000440)="6252657175657374547970653d2dd5", 0xf) 114.823877ms ago: executing program 1 (id=582): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x100, 0x10000000, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000340)={0x0, 0xd1fa, 0x80, 0x1, 0x343}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc6c, 0x4, 0x3, 0x2b8}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbba5, 0x1000, 0x0, 0x3c0, 0x0, r1}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x87b6, 0x0, 0xae2, 0x2a1}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd787, 0x200, 0x1, 0x5b}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x44, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xffff}, 0x0, r6, '\x00', {0x3, 0x438, 0x0, &(0x7f0000000dc0)=@buf_512="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"}}, &(0x7f0000001e40)) syz_ublk_setup_queues(r8, r7, &(0x7f00000003c0)={0x0, 0x652d, 0x400, 0x2, 0x37, 0x0, r11}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x70e5, 0x8000, 0x0, 0x13e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e9f, 0x100, 0x2, 0x86, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce43, 0x200, 0x1, 0x361, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8db8, 0x10000, 0x1, 0x23, 0x0, r12}}], 0x4, &(0x7f0000003040)={0x2e, 0x44, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x101}, 0x0, r13, '\x00', {0x1, 0xb00, 0x0, 0x0}}, &(0x7f00000030c0)) pread64$ublk_ch(r14, 0x0, 0x0, 0x40) r15 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r15, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) ioctl$BTRFS_IOC_DEV_INFO(r15, 0xd000941e, &(0x7f0000002040)={0x0, "8af8b06e4d411c04e1be41255cbab248"}) 0s ago: executing program 1 (id=583): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400000000000000000000000000000000000c00028005000100000000003c0000802c00018014000300fe80000000000000000000000000000914000400fe8000000000000000000000000000aa0c000280050001000000000008000740000003fc44000d0dec000500fe88000000000000000000000000010108000200e00000010800020064010100080002006401010014000400fc00"/216], 0xd8}}, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, 0x0, 0x0) unshare(0x28020600) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xb, 0x100000000, 0x1, 0x9, 0xaae5, 0x2, 0x101}, 0x0, 0x0, 0x0, 0x0) unshare(0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0x0, 0x0, 0x2, 0x80000000}) sendto$inet(r1, &(0x7f0000000240)='+', 0x1, 0x40088c0, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x9000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000050603000000000000000000050000010900ffff73797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x84080}, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/fs/file-max\x00', 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000580)="580000007fbd45ff810500000000000058000b480400e071cd9edb001f945f6400947e570028925a01000000000000005a0d793beea1e607b1a6168012800066d688b84cab900c38f0fffeffe809000000fff5dd000d00100001000d081000418e00000004fcff09c29bfd29db7062b43681eaa3f55d82662c18f1658d4771d89aa49c749ef1972d04e403086c4525ed72359d1578572f7463efb82b2d7d23a6d9413d87b21528736e3cd356722dc53d65a732c34b731e67ee70feae9fce24b30a73991fb0db2b47eeb266612c7d7b1e6ae7a593e4b50f81f5f4dbfef9abb7b4877c23f31f7f083d5fca715205bb9aab5f9b3c86523232bdfd", 0xf9}], 0x1) write(r2, &(0x7f0000000100)='0', 0x1) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c000000000000f7ffffffff"], 0x24}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00%'], 0x30}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r5, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000002100090002000000ffdbdf2501"], 0xc8}, 0x1, 0x0, 0x0, 0x24000000}, 0x40090) kernel console output (not intermixed with test programs): rfaces, different from the descriptor's value: 1 [ 27.753333][ T31] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 27.764090][ T31] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 27.774460][ T31] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 27.784892][ T31] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 27.795437][ T31] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=8a.38 [ 27.804542][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.812632][ T31] usb 4-1: Product: syz [ 27.816834][ T31] usb 4-1: Manufacturer: syz [ 27.821469][ T31] usb 4-1: SerialNumber: syz [ 27.979156][ T311] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 28.002606][ T36] audit: type=1400 audit(1785880723.010:191): avc: denied { getopt } for pid=539 comm="syz.0.63" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.004210][ T311] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 28.032297][ T521] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.037175][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.045642][ T311] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 28.053224][ T36] audit: type=1400 audit(1785880723.060:192): avc: denied { setopt } for pid=520 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.062651][ T311] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 28.095485][ T311] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 28.105876][ T311] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 28.115396][ T311] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 28.125928][ T311] usb 1-1: USB disconnect, device number 3 [ 28.199899][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 28.206330][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 28.214663][ T9] usb 3-1: config 179 has no interface number 0 [ 28.221008][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 28.232556][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 28.244012][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 28.255272][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 28.266719][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 28.280352][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 28.289377][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.315453][ T532] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 28.323099][ T36] audit: type=1400 audit(1785880723.320:193): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 28.337763][ T542] netlink: 276 bytes leftover after parsing attributes in process `syz.1.64'. [ 28.345990][ T36] audit: type=1400 audit(1785880723.330:194): avc: denied { create } for pid=541 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 28.589875][ T311] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.740996][ T311] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 28.749936][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.752775][ T9] usb 3-1: USB disconnect, device number 2 [ 28.760532][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 28.760567][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 28.762031][ T311] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 28.792557][ T311] usb 2-1: config 1 has no interface number 1 [ 28.798692][ T311] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 28.811707][ T311] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 28.826381][ T311] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.835553][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.843783][ T311] usb 2-1: Product: syz [ 28.847957][ T311] usb 2-1: Manufacturer: syz [ 28.852748][ T311] usb 2-1: SerialNumber: syz [ 29.113637][ T311] usb 2-1: MIDIStreaming interface descriptor not found [ 29.123841][ T311] usb 2-1: USB disconnect, device number 3 [ 29.329828][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.412598][ T553] rust_binder: 551:553 got transaction to invalid handle 2 [ 29.420161][ T553] rust_binder: 551:553 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 29.479816][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 29.486146][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.496639][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 29.505860][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 29.518664][ T9] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 29.528156][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.536388][ T9] usb 1-1: Product: syz [ 29.540961][ T9] usb 1-1: Manufacturer: syz [ 29.545629][ T9] usb 1-1: SerialNumber: syz [ 29.612480][ T414] rust_binder: 551: undelivered TRANSACTION_ERROR: 29201 [ 29.619616][ T414] rust_binder: 551: undelivered transaction 15, process died [ 29.629894][ T10] rust_binder: 551: undelivered TRANSACTION_COMPLETE [ 29.702263][ T566] netlink: 108 bytes leftover after parsing attributes in process `syz.2.72'. [ 29.883349][ T575] tmpfs: Unknown parameter 'fowner' [ 30.179663][ T311] usb 4-1: USB disconnect, device number 3 [ 30.393139][ T588] rust_binder: 586:588 got transaction to invalid handle 2 [ 30.409606][ T588] rust_binder: 586:588 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 30.715778][ T10] rust_binder: 586: undelivered TRANSACTION_ERROR: 29201 [ 30.723039][ T10] rust_binder: 586: undelivered transaction 20, process died [ 30.739863][ T10] rust_binder: 586: undelivered TRANSACTION_COMPLETE [ 31.219844][ T311] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.309849][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.375227][ T311] usb 2-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 31.384511][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.392602][ T311] usb 2-1: Product: syz [ 31.396815][ T311] usb 2-1: Manufacturer: syz [ 31.401462][ T311] usb 2-1: SerialNumber: syz [ 31.459831][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 31.467818][ T31] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 31.476081][ T31] usb 4-1: config 0 has no interface number 0 [ 31.482241][ T31] usb 4-1: config 0 interface 184 has no altsetting 0 [ 31.492953][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 31.502107][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.510324][ T31] usb 4-1: Product: syz [ 31.514521][ T31] usb 4-1: Manufacturer: syz [ 31.519142][ T31] usb 4-1: SerialNumber: syz [ 31.526433][ T31] usb 4-1: config 0 descriptor?? [ 31.535388][ T31] smsc75xx v1.0.0 [ 31.612923][ T311] usb 2-1: MIDIStreaming interface descriptor not found [ 31.634703][ T311] usb 2-1: USB disconnect, device number 4 [ 31.689608][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.740105][ T36] kauditd_printk_skb: 317 callbacks suppressed [ 31.740132][ T36] audit: type=1400 audit(1785880726.750:512): avc: denied { ioctl } for pid=608 comm="syz.3.83" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.772235][ T36] audit: type=1400 audit(1785880726.750:513): avc: denied { ioctl } for pid=608 comm="syz.3.83" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.796939][ T36] audit: type=1400 audit(1785880726.750:514): avc: denied { ioctl } for pid=608 comm="syz.3.83" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.822773][ T36] audit: type=1400 audit(1785880726.750:515): avc: denied { ioctl } for pid=608 comm="syz.3.83" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.847633][ T36] audit: type=1400 audit(1785880726.750:516): avc: denied { ioctl } for pid=608 comm="syz.3.83" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.960807][ T36] audit: type=1400 audit(1785880726.970:517): avc: denied { ioctl } for pid=608 comm="syz.3.83" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.985459][ T36] audit: type=1400 audit(1785880726.970:518): avc: denied { ioctl } for pid=608 comm="syz.3.83" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.102537][ T36] audit: type=1400 audit(1785880727.110:519): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 32.149085][ T36] audit: type=1400 audit(1785880727.130:520): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.170044][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 32.170761][ T9] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 32.197299][ T9] usb 1-1: 1:1 : format type 33 is not supported yet [ 32.205182][ T36] audit: type=1400 audit(1785880727.140:521): avc: denied { read write } for pid=296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.205985][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 32.230222][ T9] usb 1-1: 0:2 : does not exist [ 32.250835][ T9] usb 1-1: USB disconnect, device number 4 [ 32.363970][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.478768][ T618] rust_binder: 616:618 got transaction to invalid handle 2 [ 32.511910][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 32.512746][ T618] rust_binder: 616:618 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 32.537639][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 32.548994][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 32.559593][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 32.569115][ T31] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 32.581100][ T31] usb 4-1: USB disconnect, device number 4 [ 32.609818][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.775740][ T414] rust_binder: 616: undelivered TRANSACTION_ERROR: 29201 [ 32.792771][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.802784][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 32.831458][ T9] usb 1-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 32.841028][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.849744][ T9] usb 1-1: Product: syz [ 32.854178][ T9] usb 1-1: Manufacturer: syz [ 32.858774][ T9] usb 1-1: SerialNumber: syz [ 33.087693][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 33.134286][ T9] usb 1-1: USB disconnect, device number 5 [ 33.329322][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.379830][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.550717][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 33.560715][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 33.576237][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.586827][ T31] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 33.646020][ T645] capability: warning: `syz.1.93' uses deprecated v2 capabilities in a way that may be insecure [ 33.649826][ T31] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 33.669801][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.677835][ T31] usb 3-1: Product: syz [ 33.699802][ T31] usb 3-1: Manufacturer: syz [ 33.704447][ T31] usb 3-1: SerialNumber: syz [ 33.830082][ T650] rust_binder: 646:650 got transaction to invalid handle 2 [ 33.892243][ T650] rust_binder: 646:650 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 33.957613][ T31] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 33.966084][ T31] usb 3-1: 3:0: failed to get current value for ch 1 (-71) [ 33.995299][ T31] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 34.006909][ T658] SELinux: failed to load policy [ 34.016876][ T31] usb 3-1: 3:0: cannot get min/max values for control 11 (id 3) [ 34.059909][ T31] usb 3-1: USB disconnect, device number 3 [ 34.251855][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.405542][ T9] rust_binder: 646: undelivered TRANSACTION_ERROR: 29201 [ 34.429818][ T311] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 34.515376][ T310] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.524721][ T678] fuse: Bad value for 'user_id' [ 34.529803][ T678] fuse: Bad value for 'user_id' [ 34.599810][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 34.629814][ T311] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 34.638030][ T311] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 34.640327][ T681] 9pnet: p9_errstr2errno: server reported unknown error  [ 34.667264][ T311] usb 2-1: config 3 has no interface number 0 [ 34.679894][ T311] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.699307][ T311] usb 2-1: config 3 interface 45 has no altsetting 0 [ 34.709811][ T310] usb 1-1: Using ep0 maxpacket: 8 [ 34.728662][ T689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=689 comm=syz.2.106 [ 34.731657][ T310] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.779808][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 34.790703][ T310] usb 1-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 34.810742][ T311] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 34.824071][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.830228][ T691] can: request_module (can-proto-7) failed. [ 34.832170][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.849513][ T311] usb 2-1: Product: syz [ 34.855349][ T311] usb 2-1: Manufacturer: syz [ 34.861297][ T311] usb 2-1: SerialNumber: syz [ 34.879933][ T310] usb 1-1: config 0 descriptor?? [ 35.097411][ T669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.110099][ T669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.125117][ T669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.133809][ T669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.169836][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 35.267390][ T311] usb 2-1: USB disconnect, device number 5 [ 35.289826][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 35.325617][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.341668][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 35.352579][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.368855][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 35.384766][ T10] usb 3-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 35.394403][ T10] usb 3-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 35.403120][ T10] usb 3-1: Product: syz [ 35.410654][ T10] usb 3-1: config 0 descriptor?? [ 35.462370][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 35.472637][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 35.482474][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 35.492187][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 35.505333][ T9] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 35.515414][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.524282][ T9] usb 4-1: Product: syz [ 35.528480][ T9] usb 4-1: Manufacturer: syz [ 35.533169][ T9] usb 4-1: SerialNumber: syz [ 35.539970][ T9] usb 4-1: config 0 descriptor?? [ 35.551747][ T9] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 35.625511][ T691] bridge0: port 3(macsec0) entered blocking state [ 35.632018][ T691] bridge0: port 3(macsec0) entered disabled state [ 35.638550][ T691] macsec0: entered allmulticast mode [ 35.643886][ T691] veth1_macvtap: entered allmulticast mode [ 35.650284][ T691] macsec0: entered promiscuous mode [ 35.655695][ T691] bridge0: port 3(macsec0) entered blocking state [ 35.662172][ T691] bridge0: port 3(macsec0) entered forwarding state [ 35.760437][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 35.779521][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 35.804740][ T9] ums-isd200 4-1:0.0: probe with driver ums-isd200 failed with error -22 [ 35.830107][ T10] usb 3-1: USB disconnect, device number 4 [ 36.031947][ T310] usbhid 1-1:0.0: can't add hid device: -71 [ 36.038112][ T310] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 36.051889][ T310] usb 1-1: USB disconnect, device number 6 [ 36.110455][ T694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.118986][ T694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.142046][ T694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.158075][ T694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.183015][ T710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.215252][ T694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.215388][ T710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.249954][ T694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.256017][ T708] rust_binder: 705:708 got transaction to invalid handle 2 [ 36.275141][ T708] rust_binder: 705:708 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 36.345855][ T310] usb 4-1: USB disconnect, device number 5 [ 36.409824][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.569834][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 36.588560][ T45] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 36.602657][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.617537][ T45] usb 2-1: Product: syz [ 36.622709][ T45] usb 2-1: Manufacturer: syz [ 36.627493][ T45] usb 2-1: SerialNumber: syz [ 36.707671][ T611] rust_binder: 705: undelivered TRANSACTION_ERROR: 29201 [ 36.730035][ T310] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 36.731789][ T718] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 36.759851][ T718] syzkaller0: group set to 0 [ 36.764511][ T36] kauditd_printk_skb: 552 callbacks suppressed [ 36.764529][ T36] audit: type=1400 audit(1785880731.770:1074): avc: denied { ioctl } for pid=712 comm="syz.3.112" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.847566][ T36] audit: type=1400 audit(1785880731.800:1075): avc: denied { read } for pid=717 comm="syz.2.114" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 36.899819][ T36] audit: type=1400 audit(1785880731.800:1076): avc: denied { read open } for pid=717 comm="syz.2.114" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 36.915224][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.929433][ T721] audit: audit_backlog=65 > audit_backlog_limit=64 [ 36.938600][ T713] audit: audit_backlog=65 > audit_backlog_limit=64 [ 36.942716][ T36] audit: type=1400 audit(1785880731.810:1077): avc: denied { create } for pid=717 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.949859][ T713] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 36.966713][ T721] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 36.989940][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.995190][ T721] audit: backlog limit exceeded [ 37.011397][ T721] audit: audit_backlog=65 > audit_backlog_limit=64 [ 37.019904][ T310] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 37.030212][ T725] tipc: Failed to remove unknown binding: 66,0,0/0:877527905/877527906 [ 37.039024][ T725] tipc: Failed to remove unknown binding: 66,0,0/0:877527905/877527906 [ 37.039357][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.072486][ T310] usb 4-1: config 0 descriptor?? [ 37.122966][ T45] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 37.130352][ T45] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 37.159899][ T45] usb 2-1: USB disconnect, device number 6 [ 37.294390][ T610] udevd[610]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.349817][ T611] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 37.459864][ T311] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.506456][ T713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.515422][ T713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.521019][ T611] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 37.537156][ T611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.548271][ T611] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 37.561302][ T611] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 37.570395][ T611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.579856][ T611] usb 1-1: config 0 descriptor?? [ 37.609849][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 37.618305][ T311] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 37.626594][ T311] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.637897][ T311] usb 3-1: config 0 has no interface number 0 [ 37.659858][ T311] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 37.678743][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.688165][ T311] usb 3-1: Product: syz [ 37.697069][ T311] usb 3-1: Manufacturer: syz [ 37.707889][ T311] usb 3-1: SerialNumber: syz [ 37.715593][ T311] usb 3-1: config 0 descriptor?? [ 37.731855][ T311] uvcvideo 3-1:0.105: Found Unit with invalid ID 0 [ 37.738456][ T311] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 37.744954][ T311] usb 3-1: No valid video chain found. [ 37.919836][ T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 37.945071][ T10] usb 3-1: USB disconnect, device number 5 [ 37.990716][ T611] itetech 0003:06CB:73F6.0001: item fetching failed at offset 5/6 [ 37.998893][ T611] itetech 0003:06CB:73F6.0001: probe with driver itetech failed with error -22 [ 38.074233][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 38.082921][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 38.096918][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.110427][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 38.119593][ T9] usb 2-1: New USB device strings: Mfr=1, Product=226, SerialNumber=2 [ 38.127818][ T9] usb 2-1: Product: syz [ 38.132429][ T9] usb 2-1: Manufacturer: syz [ 38.137030][ T9] usb 2-1: SerialNumber: syz [ 38.207699][ T611] usb 1-1: USB disconnect, device number 7 [ 38.363493][ T9] usb 2-1: 1:1 : bogus bTerminalLink 3 [ 38.383585][ T9] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 38.413157][ T9] usb 2-1: USB disconnect, device number 7 [ 38.515447][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.631299][ T751] rust_binder: 747:751 got transaction to invalid handle 2 [ 38.670894][ T751] rust_binder: 747:751 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 39.292123][ T775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.130'. [ 39.305418][ T775] netlink: 64 bytes leftover after parsing attributes in process `syz.3.130'. [ 39.411009][ T311] rust_binder: 747: undelivered TRANSACTION_ERROR: 29201 [ 39.549828][ T696] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 39.637095][ T784] rust_binder: 781:784 got transaction to invalid handle 1 [ 39.649791][ T784] rust_binder: 781:784 transaction async to 0:0 failed ENOENT, code 0 size 72-24 [ 39.696783][ T311] rust_binder: 781: undelivered TRANSACTION_ERROR: 29201 [ 39.716212][ T696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.729821][ T696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.739592][ T696] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 39.749501][ T696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.761494][ T696] usb 1-1: config 0 descriptor?? [ 39.822037][ T802] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.995803][ T767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.016131][ T767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.245744][ T696] pyra 0003:1E7D:2CF6.0002: item fetching failed at offset 5/7 [ 40.259996][ T696] pyra 0003:1E7D:2CF6.0002: parse failed [ 40.265707][ T696] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -22 [ 40.288517][ T815] rust_binder: 813:815 got transaction to invalid handle 2 [ 40.320195][ T815] rust_binder: 813:815 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 40.459396][ T696] usb 1-1: USB disconnect, device number 8 [ 40.607549][ T819] bridge0: port 4(dummy0) entered blocking state [ 40.624085][ T819] bridge0: port 4(dummy0) entered disabled state [ 40.643243][ T819] dummy0: entered allmulticast mode [ 40.661696][ T819] dummy0: entered promiscuous mode [ 40.709980][ T819] bridge0: port 4(dummy0) entered blocking state [ 40.716444][ T819] bridge0: port 4(dummy0) entered forwarding state [ 40.724605][ T822] dummy0: left allmulticast mode [ 40.730777][ T822] dummy0: left promiscuous mode [ 40.735865][ T822] bridge0: port 4(dummy0) entered disabled state [ 40.849055][ T827] mmap: syz.2.143 (827): VmData 29192192 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 40.909341][ T9] rust_binder: 813: undelivered TRANSACTION_ERROR: 29201 [ 41.257576][ T855] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 41.280903][ T855] overlayfs: overlapping lowerdir path [ 41.295530][ T860] fuse: Unknown parameter 'm0x0000000000000008' [ 41.383016][ T861] rust_binder: 858:861 got transaction to invalid handle 2 [ 41.426719][ T861] rust_binder: 858:861 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 41.795007][ T36] kauditd_printk_skb: 765 callbacks suppressed [ 41.795025][ T36] audit: type=1400 audit(1785880736.800:1840): avc: denied { read write } for pid=495 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.868778][ T36] audit: type=1400 audit(1785880736.800:1841): avc: denied { read write open } for pid=495 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.894795][ T36] audit: type=1400 audit(1785880736.800:1842): avc: denied { ioctl } for pid=495 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.921420][ T36] audit: type=1400 audit(1785880736.820:1843): avc: denied { create } for pid=869 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.949255][ T36] audit: type=1400 audit(1785880736.820:1844): avc: denied { write } for pid=869 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.949390][ T9] rust_binder: 858: undelivered TRANSACTION_ERROR: 29201 [ 41.971415][ T36] audit: type=1400 audit(1785880736.820:1845): avc: denied { read } for pid=869 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.998300][ T36] audit: type=1400 audit(1785880736.820:1846): avc: denied { read } for pid=869 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.052763][ T36] audit: type=1400 audit(1785880736.820:1847): avc: denied { create } for pid=869 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.075949][ T36] audit: type=1400 audit(1785880736.820:1848): avc: denied { write } for pid=869 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.094386][ T878] binder: Unknown parameter 'fscontext?}' [ 42.109966][ T36] audit: type=1400 audit(1785880736.820:1849): avc: denied { read } for pid=869 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.161061][ T878] 9pnet: p9_errstr2errno: server reported unknown error  [ 42.482921][ T890] netlink: 1072 bytes leftover after parsing attributes in process `syz.3.164'. [ 42.495639][ T890] netlink: 280 bytes leftover after parsing attributes in process `syz.3.164'. [ 42.550446][ T310] usbhid 4-1:0.0: can't add hid device: -32 [ 42.557921][ T310] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 42.569865][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 42.729831][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 42.750912][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 42.772557][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.793813][ T901] rust_binder: Failed to allocate buffer. len:1120, is_oneway:true [ 42.796317][ T9] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 42.800554][ T901] rust_binder: 899:901 got transaction to invalid handle 2 [ 42.814531][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 8 [ 42.839800][ T901] rust_binder: 899:901 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 42.844870][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 42.869258][ T9] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 42.882085][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.891090][ T9] usb 3-1: Product: syz [ 42.895285][ T9] usb 3-1: Manufacturer: syz [ 42.914659][ T9] usb 3-1: SerialNumber: syz [ 42.937853][ T882] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 43.022691][ T906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.169'. [ 43.149208][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 43.188501][ T9] usb 3-1: USB disconnect, device number 6 [ 43.223545][ T310] rust_binder: 899: undelivered TRANSACTION_ERROR: 29189 [ 43.247568][ T310] rust_binder: 899: undelivered TRANSACTION_ERROR: 29201 [ 43.288311][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.619825][ T310] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 43.759864][ T310] usb 2-1: device descriptor read/64, error -71 [ 43.843846][ T933] netlink: 'syz.2.179': attribute type 10 has an invalid length. [ 43.957393][ T935] netlink: 'syz.2.179': attribute type 10 has an invalid length. [ 44.009834][ T310] usb 2-1: device descriptor read/64, error -71 [ 44.205171][ T944] rust_binder: Failed to allocate buffer. len:1120, is_oneway:true [ 44.205810][ T944] rust_binder: 942:944 got transaction to invalid handle 2 [ 44.222278][ T944] rust_binder: 942:944 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 44.252601][ T310] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 44.351541][ T9] rust_binder: 942: undelivered TRANSACTION_ERROR: 29189 [ 44.362362][ T9] rust_binder: 942: undelivered TRANSACTION_ERROR: 29201 [ 44.409815][ T310] usb 2-1: device descriptor read/64, error -71 [ 44.566156][ T954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.586682][ T954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.659810][ T310] usb 2-1: device descriptor read/64, error -71 [ 44.669865][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 44.755621][ T958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 44.764961][ T958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 44.769963][ T310] usb usb2-port1: attempt power cycle [ 44.819854][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 44.839822][ T9] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 44.849683][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 44.867903][ T9] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 44.898304][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.907957][ T9] usb 3-1: config 0 descriptor?? [ 45.119830][ T310] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 45.126818][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 45.142809][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 45.161799][ T310] usb 2-1: device descriptor read/8, error -71 [ 45.180345][ T9] usb 3-1: USB disconnect, device number 7 [ 45.200969][ T971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.229129][ T971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.292694][ T310] usb 2-1: device descriptor read/8, error -71 [ 45.353761][ T976] rust_binder: Failed to allocate buffer. len:1120, is_oneway:true [ 45.354385][ T976] rust_binder: 972:976 got transaction to invalid handle 2 [ 45.371213][ T976] rust_binder: 972:976 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 45.500247][ T9] rust_binder: 972: undelivered TRANSACTION_ERROR: 29189 [ 45.507395][ T9] rust_binder: 972: undelivered TRANSACTION_ERROR: 29201 [ 45.549821][ T310] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 45.582221][ T310] usb 2-1: device descriptor read/8, error -71 [ 45.664292][ T981] netlink: 48 bytes leftover after parsing attributes in process `syz.0.192'. [ 45.723845][ T310] usb 2-1: device descriptor read/8, error -71 [ 45.830815][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 45.840651][ T310] usb usb2-port1: unable to enumerate USB device [ 45.881394][ T988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.890802][ T988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.989864][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 45.997272][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 46.009330][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 46.018467][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.026543][ T9] usb 3-1: Product: syz [ 46.030739][ T9] usb 3-1: Manufacturer: syz [ 46.035334][ T9] usb 3-1: SerialNumber: syz [ 46.043518][ T9] usb 3-1: config 0 descriptor?? [ 46.049816][ T611] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 46.056830][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 46.066302][ T9] usb 3-1: Detected FT232R [ 46.205260][ T611] usb 1-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 46.214422][ T611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.222507][ T611] usb 1-1: Product: syz [ 46.226685][ T611] usb 1-1: Manufacturer: syz [ 46.231328][ T611] usb 1-1: SerialNumber: syz [ 46.259200][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 46.459990][ T611] usb 1-1: MIDIStreaming interface descriptor not found [ 46.474119][ T9] ftdi_sio 3-1:0.0: GPIO initialisation failed: -5 [ 46.483488][ T611] usb 1-1: USB disconnect, device number 9 [ 46.506894][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 46.564832][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.679276][ T979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 46.689504][ T9] usb 3-1: USB disconnect, device number 8 [ 46.696661][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 46.721055][ T9] ftdi_sio 3-1:0.0: device disconnected [ 46.799851][ T696] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 46.808067][ T36] kauditd_printk_skb: 618 callbacks suppressed [ 46.808084][ T36] audit: type=1400 audit(1785880741.810:2468): avc: denied { ioctl } for pid=989 comm="syz.1.195" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.839021][ T36] audit: type=1400 audit(1785880741.810:2469): avc: denied { ioctl } for pid=989 comm="syz.1.195" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.864267][ T36] audit: type=1400 audit(1785880741.810:2470): avc: denied { ioctl } for pid=989 comm="syz.1.195" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.890464][ T36] audit: type=1400 audit(1785880741.900:2471): avc: denied { ioctl } for pid=989 comm="syz.1.195" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.970626][ T36] audit: type=1400 audit(1785880741.980:2472): avc: denied { ioctl } for pid=989 comm="syz.1.195" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.995837][ T36] audit: type=1400 audit(1785880742.000:2473): avc: denied { ioctl } for pid=989 comm="syz.1.195" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.020818][ T36] audit: type=1400 audit(1785880742.000:2474): avc: denied { ioctl } for pid=989 comm="syz.1.195" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.046103][ T36] audit: type=1400 audit(1785880742.030:2475): avc: denied { ioctl } for pid=989 comm="syz.1.195" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.079873][ T696] usb 2-1: config index 0 descriptor too short (expected 45, got 14) [ 47.088003][ T696] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 47.109835][ T36] audit: type=1400 audit(1785880742.050:2476): avc: denied { ioctl } for pid=989 comm="syz.1.195" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.138765][ T696] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 47.149610][ T36] audit: type=1400 audit(1785880742.050:2477): avc: denied { read write } for pid=295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.180438][ T696] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 47.189591][ T696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.198862][ T696] usb 2-1: Product: syz [ 47.204054][ T696] usb 2-1: Manufacturer: syz [ 47.208691][ T696] usb 2-1: SerialNumber: syz [ 47.302719][ T998] mmap: syz.0.197 (998) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.334769][ T998] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(131081.1702047603.26220), cmd(18) [ 47.709810][ T611] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 47.736390][ T1009] rust_binder: 1007:1009 got transaction to invalid handle 2 [ 47.744405][ T1009] rust_binder: 1007:1009 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 47.882554][ T9] rust_binder: 1007: undelivered TRANSACTION_ERROR: 29189 [ 47.882909][ T611] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.901406][ T611] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 47.911414][ T611] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 47.920487][ T9] rust_binder: 1007: undelivered TRANSACTION_ERROR: 29201 [ 47.923505][ T611] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12324, setting to 8 [ 47.941193][ T611] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 47.951068][ T611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.963366][ T1004] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 47.979113][ T611] hub 1-1:1.0: bad descriptor, ignoring hub [ 47.985321][ T611] hub 1-1:1.0: probe with driver hub failed with error -5 [ 48.000269][ T611] cdc_wdm 1-1:1.0: skipping garbage [ 48.005667][ T611] cdc_wdm 1-1:1.0: skipping garbage [ 48.013537][ T611] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 48.019594][ T611] cdc_wdm 1-1:1.0: Unknown control protocol [ 48.058403][ T1017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.202'. [ 48.145585][ T1018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.156688][ T1018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.289966][ T9] usb 1-1: USB disconnect, device number 10 [ 48.309832][ T611] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 48.459834][ T611] usb 3-1: Using ep0 maxpacket: 8 [ 48.467712][ T611] usb 3-1: unable to get BOS descriptor or descriptor too short [ 48.477160][ T611] usb 3-1: config 9 has an invalid interface number: 212 but max is 0 [ 48.485394][ T611] usb 3-1: config 9 has no interface number 0 [ 48.491521][ T611] usb 3-1: config 9 interface 212 has no altsetting 0 [ 48.501041][ T611] usb 3-1: New USB device found, idVendor=0499, idProduct=1036, bcdDevice=cc.d5 [ 48.510180][ T611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.518174][ T611] usb 3-1: Product: syz [ 48.522389][ T611] usb 3-1: Manufacturer: syz [ 48.526997][ T611] usb 3-1: SerialNumber: syz [ 48.966106][ T611] snd-usb-audio 3-1:9.212: probe with driver snd-usb-audio failed with error -2 [ 48.979249][ T311] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 49.000312][ T611] usb 3-1: USB disconnect, device number 9 [ 49.057187][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.212/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.159827][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 49.166966][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.178154][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.188088][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 49.210085][ T311] usb 1-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 49.229346][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.230737][ T1033] netlink: 'syz.3.207': attribute type 1 has an invalid length. [ 49.248363][ T311] usb 1-1: config 0 descriptor?? [ 49.265897][ T1033] capability: warning: `syz.3.207' uses 32-bit capabilities (legacy support in use) [ 49.440275][ T611] usb 2-1: USB disconnect, device number 12 [ 49.642400][ T1040] rust_binder: 1037:1040 got transaction to invalid handle 2 [ 49.650077][ T1040] rust_binder: 1037:1040 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 49.684195][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.692933][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.702511][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.711788][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.721125][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.729527][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.739226][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x3 [ 49.748524][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.757993][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.767221][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.777235][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.786666][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x2 [ 49.795961][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.805306][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.814747][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.824076][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x1 [ 49.833459][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.843583][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.852828][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.862146][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.872017][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.881259][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.889653][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.899808][ T611] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 49.909671][ T311] logitech-hidpp-device 0003:046D:C262.0003: unknown main item tag 0x0 [ 49.922274][ T311] logitech-hidpp-device 0003:046D:C262.0003: hidraw0: USB HID v0.00 Device [HID 046d:c262] on usb-dummy_hcd.0-1/input0 [ 49.929972][ T9] rust_binder: 1037: undelivered TRANSACTION_ERROR: 29189 [ 49.941174][ T311] usb 1-1: USB disconnect, device number 11 [ 49.972870][ T45] rust_binder: 1037: undelivered TRANSACTION_ERROR: 29201 [ 50.045775][ T1041] fido_id[1041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 50.089801][ T611] usb 2-1: Using ep0 maxpacket: 8 [ 50.103997][ T611] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 50.120036][ T611] usb 2-1: config 0 has no interface number 0 [ 50.137849][ T611] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 50.147906][ T611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.157330][ T611] usb 2-1: Product: syz [ 50.167965][ T611] usb 2-1: Manufacturer: syz [ 50.179800][ T611] usb 2-1: SerialNumber: syz [ 50.192914][ T611] usb 2-1: config 0 descriptor?? [ 50.413394][ T611] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 50.429865][ T611] usb 2-1: No valid video chain found. [ 50.445612][ T611] usb 2-1: USB disconnect, device number 13 [ 50.547709][ T1061] x_tables: duplicate underflow at hook 1 [ 50.743944][ T1064] rust_binder: 1062:1064 got transaction to invalid handle 2 [ 50.749813][ T311] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 50.760388][ T1064] rust_binder: 1062:1064 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 50.881316][ T696] rust_binder: 1062: undelivered TRANSACTION_ERROR: 29189 [ 50.911391][ T696] rust_binder: 1062: undelivered TRANSACTION_ERROR: 29201 [ 50.920620][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 50.940422][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.955388][ T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.980379][ T311] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 50.990739][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.005703][ T311] usb 1-1: Product: syz [ 51.026091][ T311] usb 1-1: Manufacturer: syz [ 51.033815][ T311] usb 1-1: SerialNumber: syz [ 51.183869][ T611] rust_binder: 611:611 release transaction 55 in, still active [ 51.336314][ T311] usb 1-1: 0:2 : does not exist [ 51.352193][ T311] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 51.374305][ T311] usb 1-1: USB disconnect, device number 12 [ 51.439431][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.621396][ T1093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.637272][ T1093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.879790][ T36] kauditd_printk_skb: 617 callbacks suppressed [ 51.879811][ T36] audit: type=1400 audit(1785880746.880:3095): avc: denied { read write } for pid=295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 51.931539][ T36] audit: type=1400 audit(1785880746.880:3096): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 51.966515][ T36] audit: type=1400 audit(1785880746.880:3097): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.023125][ T36] audit: type=1400 audit(1785880746.940:3098): avc: denied { read write } for pid=296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.048123][ T36] audit: type=1400 audit(1785880746.940:3099): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.075293][ T36] audit: type=1400 audit(1785880746.940:3100): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.110112][ T36] audit: type=1400 audit(1785880746.940:3101): avc: denied { create } for pid=1097 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.130191][ T36] audit: type=1400 audit(1785880747.010:3102): avc: denied { create } for pid=1101 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.158508][ T36] audit: type=1400 audit(1785880747.020:3103): avc: denied { create } for pid=1101 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.186165][ T36] audit: type=1400 audit(1785880747.020:3104): avc: denied { write } for pid=1101 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.254493][ T1107] netlink: 32 bytes leftover after parsing attributes in process `syz.1.232'. [ 52.427488][ T1114] input: syz1 as /devices/virtual/input/input7 [ 52.434131][ T9] rust_binder: 1094: undelivered TRANSACTION_ERROR: 29189 [ 52.720258][ T1126] Wgq: renamed from bridge_slave_0 (while UP) [ 53.052098][ T1137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=1137 comm=syz.3.244 [ 53.129854][ T611] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 53.286376][ T611] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 53.296040][ T611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.304129][ T611] usb 2-1: Product: syz [ 53.308639][ T611] usb 2-1: Manufacturer: syz [ 53.313300][ T611] usb 2-1: SerialNumber: syz [ 53.551081][ T1123] device-mapper: ioctl: Invalid data size in the ioctl structure: 1946157368 [ 53.607515][ T1123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.635939][ T1123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.702079][ T611] rtl8150 2-1:1.0: couldn't reset the device [ 53.718433][ T611] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 53.730820][ T611] usb 2-1: USB disconnect, device number 14 [ 54.147016][ T1158] fuse: Bad value for 'fd' [ 54.289840][ T696] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 54.459872][ T696] usb 1-1: Using ep0 maxpacket: 32 [ 54.467123][ T696] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 54.475426][ T696] usb 1-1: config 0 has no interface number 0 [ 54.481613][ T696] usb 1-1: config 0 interface 184 has no altsetting 0 [ 54.491704][ T696] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 54.500898][ T696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.508888][ T696] usb 1-1: Product: syz [ 54.513205][ T696] usb 1-1: Manufacturer: syz [ 54.517830][ T696] usb 1-1: SerialNumber: syz [ 54.524154][ T696] usb 1-1: config 0 descriptor?? [ 54.533732][ T696] smsc75xx v1.0.0 [ 54.559823][ T611] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 54.710764][ T611] usb 2-1: Using ep0 maxpacket: 16 [ 54.718623][ T611] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 54.731715][ T611] usb 2-1: config 0 interface 0 has no altsetting 0 [ 54.738477][ T611] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 54.747603][ T611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.757311][ T611] usb 2-1: config 0 descriptor?? [ 55.032573][ T1179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.050125][ T1179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.151291][ T696] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 55.174819][ T1187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.190095][ T1187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.192511][ T696] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 55.218700][ T611] cypress 0003:04B4:07B1.0004: ignoring exceeding usage max [ 55.235036][ T611] cypress 0003:04B4:07B1.0004: hidraw0: USB HID v0.05 Device [HID 04b4:07b1] on usb-dummy_hcd.1-1/input0 [ 55.419057][ T696] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 55.431134][ T611] usb 2-1: USB disconnect, device number 15 [ 55.449988][ T696] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 55.472461][ T696] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 55.484972][ T696] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 55.496977][ T696] usb 1-1: USB disconnect, device number 13 [ 55.768829][ T1197] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 55.777414][ T1197] overlayfs: missing 'lowerdir' [ 56.009591][ T1209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.036603][ T1209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.219859][ T696] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 56.239859][ T611] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 56.371857][ T696] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.382310][ T696] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.394272][ T696] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 56.404014][ T696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.409806][ T611] usb 1-1: Using ep0 maxpacket: 32 [ 56.412832][ T696] usb 2-1: Product: syz [ 56.419905][ T611] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 56.422242][ T696] usb 2-1: Manufacturer: syz [ 56.430119][ T611] usb 1-1: config 0 has no interface number 0 [ 56.434856][ T696] usb 2-1: SerialNumber: syz [ 56.440384][ T611] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.456818][ T611] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.466722][ T611] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 56.475783][ T611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.486869][ T611] usb 1-1: config 0 descriptor?? [ 56.661477][ T696] usb 2-1: unit 4 not found! [ 56.699932][ T696] usb 2-1: USB disconnect, device number 16 [ 56.740578][ T1223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 56.745109][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.872673][ T1226] rust_binder: 1224:1226 got transaction to invalid handle 2 [ 56.890079][ T1226] rust_binder: 1224:1226 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 56.909288][ T36] kauditd_printk_skb: 588 callbacks suppressed [ 56.909307][ T36] audit: type=1400 audit(1785880751.910:3693): avc: denied { ioctl } for pid=1205 comm="syz.0.265" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.973329][ T36] audit: type=1400 audit(1785880751.910:3694): avc: denied { ioctl } for pid=1205 comm="syz.0.265" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.021744][ T36] audit: type=1400 audit(1785880752.030:3695): avc: denied { create } for pid=1230 comm="syz.2.272" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.058890][ T1232] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.065108][ T36] audit: type=1400 audit(1785880752.030:3696): avc: denied { map } for pid=1230 comm="syz.2.272" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.066136][ T1234] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.089516][ T36] audit: type=1400 audit(1785880752.030:3697): avc: denied { read write } for pid=1230 comm="syz.2.272" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.110321][ T1233] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.120959][ T1235] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.133721][ T36] audit: type=1400 audit(1785880752.030:3698): avc: denied { map } for pid=1230 comm="syz.2.272" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.168942][ T611] uclogic 0003:28BD:0094.0005: pen parameters not found [ 57.177116][ T611] uclogic 0003:28BD:0094.0005: interface is invalid, ignoring [ 57.431954][ T10] rust_binder: 1224: undelivered TRANSACTION_ERROR: 29201 [ 57.439365][ T10] rust_binder: 1224: undelivered transaction 58, process died [ 57.449836][ T10] rust_binder: 1224: undelivered TRANSACTION_COMPLETE [ 57.667683][ T1259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.708122][ T1259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.872888][ T1273] netlink: 'syz.1.280': attribute type 16 has an invalid length. [ 57.880712][ T1273] netlink: 'syz.1.280': attribute type 2 has an invalid length. [ 57.888444][ T1273] netlink: 64110 bytes leftover after parsing attributes in process `syz.1.280'. [ 57.981097][ T1278] rust_binder: 1277:1278 got transaction to invalid handle 2 [ 57.988555][ T1278] rust_binder: 1277:1278 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 58.004682][ T10] rust_binder: 1277: undelivered TRANSACTION_ERROR: 29201 [ 58.019960][ T10] rust_binder: 1277: undelivered transaction 63, process died [ 58.040022][ T10] rust_binder: 1277: undelivered TRANSACTION_COMPLETE [ 58.104610][ T1282] fuse: Unknown parameter 'usev_id' [ 58.467879][ T1298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.481504][ T1298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.989032][ T611] usb 1-1: USB disconnect, device number 14 [ 59.122697][ T1322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.147168][ T1322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.179703][ T1322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.202223][ T1322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.228923][ T1327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.239856][ T1327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.459898][ T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 59.565022][ T611] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 59.603692][ T1345] syz.2.304 uses obsolete (PF_INET,SOCK_PACKET) [ 59.643762][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.654439][ T45] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 59.664031][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.675199][ T45] usb 1-1: config 0 descriptor?? [ 59.719801][ T611] usb 2-1: Using ep0 maxpacket: 8 [ 59.732213][ T611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.757306][ T611] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 59.789552][ T611] usb 2-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 59.800035][ T611] usb 2-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 59.808522][ T611] usb 2-1: Product: syz [ 59.823134][ T611] usb 2-1: config 0 descriptor?? [ 60.048259][ T611] usbhid 2-1:0.0: can't add hid device: -71 [ 60.069125][ T611] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 60.085538][ T611] usb 2-1: USB disconnect, device number 17 [ 60.158400][ T1370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.168788][ T1370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.588163][ T1372] tipc: Started in network mode [ 60.593172][ T1372] tipc: Node identity 1, cluster identity 4711 [ 60.599468][ T1372] tipc: Node number set to 1 [ 60.605216][ T1372] tipc: New replicast peer: 127.0.0.1 [ 60.611034][ T1372] tipc: Enabled bearer , priority 10 [ 60.621066][ T1372] tipc: Disabling bearer [ 60.630830][ T1372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'. [ 60.641301][ T1372] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 60.691722][ T1377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.315'. [ 60.828461][ T1388] process 'syz.1.318' launched './file1' with NULL argv: empty string added [ 60.857471][ T1389] rust_binder: 1387:1389 got transaction to invalid handle 2 [ 60.865033][ T1389] rust_binder: 1387:1389 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 60.876215][ T611] rust_binder: 1387: undelivered TRANSACTION_ERROR: 29189 [ 60.889975][ T611] rust_binder: 1387: undelivered TRANSACTION_ERROR: 29201 [ 60.957969][ T611] usb 1-1: USB disconnect, device number 15 [ 61.034933][ T1399] raw_sendmsg: syz.3.323 forgot to set AF_INET. Fix it! [ 61.173589][ T1405] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 61.181768][ T1406] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 61.343361][ T1418] rust_binder: 1417:1418 got transaction to invalid handle 2 [ 61.351072][ T1418] rust_binder: 1417:1418 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 61.363476][ T10] rust_binder: 1417: undelivered TRANSACTION_ERROR: 29189 [ 61.384236][ T696] rust_binder: 1417: undelivered TRANSACTION_ERROR: 29201 [ 61.619815][ T10] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 61.663483][ T1438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.689939][ T1438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.738086][ T1439] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 61.753725][ T1439] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 61.762204][ T1439] kvm: requested 109790 ns i8254 timer period limited to 200000 ns [ 61.770433][ T1439] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 61.785809][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 61.793407][ T1447] fuse: Bad value for 'fd' [ 61.800225][ T10] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 61.816421][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.833661][ T10] usb 2-1: config 0 descriptor?? [ 61.922562][ T36] kauditd_printk_skb: 1331 callbacks suppressed [ 61.922599][ T36] audit: type=1400 audit(1785880756.930:4785): avc: denied { read } for pid=1451 comm="syz.0.339" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.927421][ T1452] rust_binder: 1451:1452 got transaction to invalid handle 2 [ 61.928925][ T36] audit: type=1400 audit(1785880756.930:4786): avc: denied { read open } for pid=1451 comm="syz.0.339" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.951746][ T1452] rust_binder: 1451:1452 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 61.963696][ T36] audit: type=1400 audit(1785880756.930:4787): avc: denied { ioctl } for pid=1451 comm="syz.0.339" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.005971][ T45] rust_binder: 1451: undelivered TRANSACTION_ERROR: 29189 [ 62.020360][ T36] audit: type=1400 audit(1785880756.930:4788): avc: denied { map } for pid=1451 comm="syz.0.339" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.035488][ T611] rust_binder: 1451: undelivered TRANSACTION_ERROR: 29201 [ 62.052458][ T36] audit: type=1400 audit(1785880756.930:4789): avc: denied { read } for pid=1451 comm="syz.0.339" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.083053][ T36] audit: type=1400 audit(1785880756.930:4790): avc: denied { read write } for pid=1451 comm="syz.0.339" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.106934][ T36] audit: type=1400 audit(1785880756.930:4791): avc: denied { read write open } for pid=1451 comm="syz.0.339" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.137852][ T36] audit: type=1400 audit(1785880756.930:4792): avc: denied { ioctl } for pid=1451 comm="syz.0.339" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.164738][ T36] audit: type=1400 audit(1785880756.930:4793): avc: denied { ioctl } for pid=1451 comm="syz.0.339" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.190105][ T36] audit: type=1400 audit(1785880757.070:4794): avc: denied { read write } for pid=295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.317806][ T10] elecom 0003:056E:00FC.0006: unknown main item tag 0x3 [ 62.327969][ T10] elecom 0003:056E:00FC.0006: unknown main item tag 0x2 [ 62.339861][ T696] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 62.347508][ T10] elecom 0003:056E:00FC.0006: unknown main item tag 0x0 [ 62.355888][ T10] elecom 0003:056E:00FC.0006: unknown main item tag 0x0 [ 62.362932][ T10] elecom 0003:056E:00FC.0006: unknown main item tag 0x0 [ 62.370615][ T10] elecom 0003:056E:00FC.0006: unknown main item tag 0x0 [ 62.377721][ T10] elecom 0003:056E:00FC.0006: unknown main item tag 0x0 [ 62.384784][ T10] elecom 0003:056E:00FC.0006: unknown main item tag 0x0 [ 62.391851][ T10] elecom 0003:056E:00FC.0006: unknown main item tag 0x0 [ 62.398842][ T10] elecom 0003:056E:00FC.0006: unknown main item tag 0x0 [ 62.405834][ T10] elecom 0003:056E:00FC.0006: unknown main item tag 0x0 [ 62.412818][ T10] elecom 0003:056E:00FC.0006: unknown main item tag 0x0 [ 62.420552][ T10] elecom 0003:056E:00FC.0006: unknown main item tag 0x0 [ 62.428822][ T10] elecom 0003:056E:00FC.0006: hidraw0: USB HID v0.c1 Device [HID 056e:00fc] on usb-dummy_hcd.1-1/input0 [ 62.499815][ T696] usb 1-1: Using ep0 maxpacket: 16 [ 62.520064][ T611] usb 2-1: USB disconnect, device number 18 [ 62.521633][ T696] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.557400][ T696] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 62.585094][ T696] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 62.609797][ T696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.618821][ T696] usb 1-1: Product: syz [ 62.627123][ T1471] syzkaller1: entered promiscuous mode [ 62.628660][ T696] usb 1-1: Manufacturer: syz [ 62.633646][ T1471] syzkaller1: entered allmulticast mode [ 62.647634][ T696] usb 1-1: SerialNumber: syz [ 62.861118][ T696] usb 1-1: unit 2 not found! [ 62.865860][ T696] usb 1-1: unit 236 not found! [ 62.877648][ T696] usb 1-1: USB disconnect, device number 16 [ 62.890347][ T610] udevd[610]: setting mode of /dev/bus/usb/001/016 to 020664 failed: No such file or directory [ 62.901194][ T610] udevd[610]: setting owner of /dev/bus/usb/001/016 to uid=0, gid=0 failed: No such file or directory [ 62.944783][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.329847][ T696] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 63.491852][ T696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.503154][ T696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.514160][ T696] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.528006][ T696] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.537179][ T696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.546804][ T696] usb 2-1: config 0 descriptor?? [ 63.606788][ T1484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.617997][ T1484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.629815][ T611] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 63.675169][ T1486] tipc: Started in network mode [ 63.680135][ T1486] tipc: Node identity ac14142f, cluster identity 4711 [ 63.686961][ T1486] tipc: New replicast peer: 255.255.255.255 [ 63.693122][ T1486] tipc: Enabled bearer , priority 10 [ 63.729328][ T1488] fuse: Bad value for 'fd' [ 63.781903][ T611] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 63.790060][ T611] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 63.798946][ T611] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 63.808006][ T611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.817481][ T611] usb 1-1: config 0 descriptor?? [ 63.824651][ T611] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 63.831584][ T611] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 63.839698][ T611] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 63.959365][ T696] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 63.967034][ T696] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 63.975230][ T696] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 63.983123][ T696] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 63.990546][ T696] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 63.997982][ T696] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 64.005446][ T696] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 64.012904][ T696] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 64.020321][ T696] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 64.025884][ T611] usb 1-1: USB disconnect, device number 17 [ 64.028980][ T696] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 64.050171][ T696] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 64.265874][ T1496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.274638][ T1496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.322701][ T1499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.333246][ T1499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.379338][ T1504] netlink: 'syz.3.358': attribute type 9 has an invalid length. [ 64.387169][ T1504] netlink: 'syz.3.358': attribute type 2 has an invalid length. [ 64.505057][ T1512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.515872][ T1512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.530463][ T1512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.539897][ T1512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.610185][ T1514] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 64.809815][ T696] tipc: Node number set to 2886997039 [ 64.983828][ T1519] overlay: Unknown parameter 'smackfshat' [ 65.001500][ T1519] overlayfs: failed to clone upperpath [ 65.139804][ T1527] rust_binder: 1526:1527 got transaction to invalid handle 2 [ 65.151031][ T1527] rust_binder: 1526:1527 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 65.168171][ T45] rust_binder: 1526: undelivered TRANSACTION_ERROR: 29201 [ 65.269806][ T696] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 65.299850][ T1531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.319859][ T1531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.419853][ T696] usb 1-1: Using ep0 maxpacket: 32 [ 65.426893][ T696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.437821][ T696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.448024][ T696] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 65.457126][ T696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.468506][ T696] usb 1-1: config 0 descriptor?? [ 65.891790][ T696] savu 0003:1E7D:2D5A.0008: hiddev97,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 65.927236][ T1549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.374'. [ 66.019815][ T45] usb 2-1: reset high-speed USB device number 19 using dummy_hcd [ 66.151400][ T696] usb 1-1: USB disconnect, device number 18 [ 66.190998][ T45] usb 2-1: device firmware changed [ 66.200456][ T611] usb 2-1: USB disconnect, device number 19 [ 66.276285][ T1558] rust_binder: 1557:1558 got transaction to invalid handle 2 [ 66.283834][ T1558] rust_binder: 1557:1558 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 66.310547][ T45] rust_binder: 1557: undelivered TRANSACTION_ERROR: 29201 [ 66.359808][ T611] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 66.379129][ T1564] netlink: 'syz.2.380': attribute type 4 has an invalid length. [ 66.386877][ T1564] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.380'. [ 66.525387][ T611] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 66.552885][ T611] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 66.571144][ T611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.579311][ T611] usb 2-1: Product: syz [ 66.584068][ T611] usb 2-1: Manufacturer: syz [ 66.590422][ T611] usb 2-1: SerialNumber: syz [ 66.831113][ T611] usb 2-1: USB disconnect, device number 20 [ 66.892135][ T1583] netlink: 72 bytes leftover after parsing attributes in process `syz.3.386'. [ 66.929827][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 66.944647][ T1211] udevd[1211]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.956421][ T36] kauditd_printk_skb: 550 callbacks suppressed [ 66.956439][ T36] audit: type=1400 audit(1785880761.950:5345): avc: denied { read write } for pid=495 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.015975][ T36] audit: type=1400 audit(1785880761.980:5346): avc: denied { create } for pid=1586 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.048421][ T1589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.061850][ T36] audit: type=1400 audit(1785880761.990:5347): avc: denied { create } for pid=1586 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.082438][ T1589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.114916][ T36] audit: type=1400 audit(1785880761.990:5348): avc: denied { write } for pid=1586 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.137651][ T36] audit: type=1400 audit(1785880761.990:5349): avc: denied { read } for pid=1586 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.158806][ T36] audit: type=1400 audit(1785880761.990:5350): avc: denied { read } for pid=1586 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.179203][ T36] audit: type=1400 audit(1785880761.990:5351): avc: denied { write } for pid=1586 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.204342][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 67.209560][ T36] audit: type=1400 audit(1785880762.000:5352): avc: denied { read write open } for pid=495 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.235900][ T36] audit: type=1400 audit(1785880762.000:5353): avc: denied { ioctl } for pid=495 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.244744][ T1594] netlink: 5 bytes leftover after parsing attributes in process `syz.2.391'. [ 67.262403][ T36] audit: type=1400 audit(1785880762.010:5354): avc: denied { ioctl } for pid=1576 comm="syz.0.385" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.283160][ T1593] netlink: 5 bytes leftover after parsing attributes in process `syz.2.391'. [ 67.299785][ T9] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 67.304031][ T1593] 0{X: renamed from z00X (while UP) [ 67.315281][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 67.327061][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.328219][ T1593] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 67.335959][ T9] usb 1-1: Product: syz [ 67.335980][ T9] usb 1-1: Manufacturer: syz [ 67.361975][ T9] usb 1-1: SerialNumber: syz [ 67.371824][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 67.378109][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 67.597237][ T9] r8152-cfgselector 1-1: Needed 2 retries to read version [ 67.609789][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 67.616474][ T9] r8152-cfgselector 1-1: bad CDC descriptors [ 67.793718][ T1606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.810050][ T45] r8152-cfgselector 1-1: USB disconnect, device number 19 [ 67.834467][ T1606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.918179][ T1607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.949431][ T1606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.983117][ T1607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.009139][ T1606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.112558][ T1612] rust_binder: 1611:1612 got transaction to invalid handle 2 [ 68.129785][ T1612] rust_binder: 1611:1612 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 68.160480][ T45] rust_binder: 1611: undelivered TRANSACTION_ERROR: 29201 [ 68.597723][ T1627] netlink: 44 bytes leftover after parsing attributes in process `syz.1.402'. [ 68.617155][ T1627] netlink: 43 bytes leftover after parsing attributes in process `syz.1.402'. [ 68.638871][ T1627] netlink: 'syz.1.402': attribute type 6 has an invalid length. [ 68.660551][ T1629] ======================================================= [ 68.660551][ T1629] WARNING: The mand mount option has been deprecated and [ 68.660551][ T1629] and is ignored by this kernel. Remove the mand [ 68.660551][ T1629] option from the mount to silence this warning. [ 68.660551][ T1629] ======================================================= [ 68.696338][ T1627] netlink: 'syz.1.402': attribute type 5 has an invalid length. [ 68.704164][ T1627] netlink: 43 bytes leftover after parsing attributes in process `syz.1.402'. [ 68.867738][ T1637] rust_binder: 1636:1637 got transaction to invalid handle 2 [ 68.886670][ T1637] rust_binder: 1636:1637 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 68.925599][ T45] rust_binder: 1636: undelivered TRANSACTION_ERROR: 29201 [ 69.037854][ T1646] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 69.037877][ T1646] rust_binder: Read failure Err(EFAULT) in pid:245 [ 69.114585][ T1646] rust_binder: Write failure EINVAL in pid:245 [ 69.179827][ T1652] netlink: 'syz.2.410': attribute type 15 has an invalid length. [ 69.406076][ T1666] netlink: 'syz.2.413': attribute type 13 has an invalid length. [ 69.479830][ T1666] erspan0: refused to change device tx_queue_len [ 69.689447][ T1678] devtmpfs: Unknown parameter 'rootcontextnmƟ2va' [ 69.699817][ T696] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 69.714740][ T1678] netlink: 40 bytes leftover after parsing attributes in process `syz.2.416'. [ 69.864177][ T696] usb 2-1: unable to get BOS descriptor or descriptor too short [ 69.878209][ T696] usb 2-1: config 1 has an invalid interface number: 182 but max is 0 [ 69.896592][ T696] usb 2-1: config 1 has no interface number 0 [ 69.909942][ T696] usb 2-1: config 1 interface 182 has no altsetting 0 [ 69.931779][ T696] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=8a.38 [ 69.957535][ T696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.977802][ T696] usb 2-1: Product: 扻뷰谑ⴳ⎣昅迹⊕䅵ᮞ〃樚➧튓ắ튵俑쐲ᩌ굀戔푃荅嬖ꪍ잯뷟퓍檍衱厎뫙퓠蒛㟕ꤎꛟেᑉࡆ⫻좤綃黦⎰똢㈍飜摢뷪趃㴚昑翢溃䀓顄工鱕咏鴣쉉㴪瑌ϭ䚗ǔᦶ끨縷☩赴ᥠ緦䆶紒釲 [ 70.038569][ T696] usb 2-1: Manufacturer: 쇳Љԡॽ箣跽ஃﲢ೯ [ 70.046055][ T696] usb 2-1: SerialNumber: ⠊ [ 70.179818][ T611] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 70.259534][ T696] usb 2-1: MBOX3: Invalid descriptor size=18. [ 70.272061][ T696] usb 2-1: USB disconnect, device number 21 [ 70.333298][ T611] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 70.344234][ T611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.355373][ T611] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 70.369942][ T611] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 70.379086][ T611] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 70.387221][ T611] usb 1-1: Manufacturer: syz [ 70.393211][ T611] usb 1-1: config 0 descriptor?? [ 70.815697][ T611] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 70.823187][ T611] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 70.846431][ T611] appleir 0003:05AC:8243.0009: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 71.072754][ T611] usb 1-1: USB disconnect, device number 20 [ 71.080873][ T1697] pim6reg1: entered promiscuous mode [ 71.095974][ T1697] pim6reg1: entered allmulticast mode [ 71.129442][ T1699] rust_binder: 1698:1699 got transaction to invalid handle 2 [ 71.137047][ T1699] rust_binder: 1698:1699 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 71.155313][ T45] rust_binder: 1698: undelivered TRANSACTION_ERROR: 29201 [ 71.218225][ T1697] Config c/1 of g1 needs at least one function. [ 71.231836][ T1697] udc dummy_udc.0: failed to start g1: -22 [ 71.245239][ T1697] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 71.268906][ T1697] UDC core: g1: couldn't find an available UDC or it's busy [ 71.517621][ T1715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.526715][ T1715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.559249][ T1715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.572496][ T1715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.729860][ T611] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 71.849844][ T45] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 71.879855][ T611] usb 2-1: Using ep0 maxpacket: 16 [ 71.886070][ T611] usb 2-1: too many configurations: 112, using maximum allowed: 8 [ 71.906596][ T611] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 71.915755][ T611] usb 2-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 71.924742][ T611] usb 2-1: Product: syz [ 71.928927][ T611] usb 2-1: Manufacturer: syz [ 71.939477][ T611] r8152-cfgselector 2-1: Unknown version 0x0000 [ 71.945899][ T611] r8152-cfgselector 2-1: config 0 descriptor?? [ 71.953821][ T36] kauditd_printk_skb: 1654 callbacks suppressed [ 71.953838][ T36] audit: type=1400 audit(1785880766.960:7009): avc: denied { ioctl } for pid=1712 comm="syz.1.428" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.955435][ T611] cdc_acm 2-1:0.0: Zero length descriptor references [ 71.961459][ T36] audit: type=1400 audit(1785880766.960:7010): avc: denied { ioctl } for pid=1712 comm="syz.1.428" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.985243][ T611] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 71.992876][ T36] audit: type=1400 audit(1785880766.960:7011): avc: denied { ioctl } for pid=1712 comm="syz.1.428" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.029798][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 72.057558][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.064890][ T36] audit: type=1400 audit(1785880767.060:7012): avc: denied { ioctl } for pid=1716 comm="syz.0.430" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.074708][ T45] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 72.099168][ T36] audit: type=1400 audit(1785880767.060:7013): avc: denied { ioctl } for pid=1716 comm="syz.0.430" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.103603][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.148227][ T36] audit: type=1400 audit(1785880767.060:7014): avc: denied { ioctl } for pid=1716 comm="syz.0.430" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.186721][ T45] usb 1-1: Product: syz [ 72.187716][ T1713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.196317][ T45] usb 1-1: Manufacturer: syz [ 72.213482][ T45] usb 1-1: SerialNumber: syz [ 72.229844][ T36] audit: type=1400 audit(1785880767.060:7015): avc: denied { ioctl } for pid=1716 comm="syz.0.430" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.245149][ T1713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.254943][ T45] usb 1-1: config 0 descriptor?? [ 72.267768][ T36] audit: type=1400 audit(1785880767.060:7016): avc: denied { ioctl } for pid=1716 comm="syz.0.430" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.287540][ T9] r8152-cfgselector 2-1: USB disconnect, device number 22 [ 72.300029][ T45] usb 1-1: bad CDC descriptors [ 72.304998][ T45] usb 1-1: unsupported MDLM descriptors [ 72.313674][ T36] audit: type=1400 audit(1785880767.070:7017): avc: denied { ioctl } for pid=1716 comm="syz.0.430" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.348453][ T36] audit: type=1400 audit(1785880767.080:7018): avc: denied { ioctl } for pid=1716 comm="syz.0.430" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.511880][ T9] usb 1-1: USB disconnect, device number 21 [ 72.688085][ T1724] tipc: Enabling of bearer rejected, already enabled [ 72.909276][ T1747] IPv6: Can't replace route, no match found [ 73.085333][ T1766] rust_binder: 1765:1766 got transaction to invalid handle 2 [ 73.119800][ T1766] rust_binder: 1765:1766 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 73.173469][ T9] rust_binder: 1765: undelivered TRANSACTION_ERROR: 29201 [ 73.275305][ T1780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.308703][ T1780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.339826][ T45] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 73.503935][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 73.516582][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 73.530173][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 73.547862][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.558272][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.570837][ T45] usb 1-1: Product: syz [ 73.575370][ T45] usb 1-1: Manufacturer: syz [ 73.587927][ T45] usb 1-1: SerialNumber: syz [ 73.596801][ T1768] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 73.836523][ T1768] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 74.076768][ T1814] rust_binder: 1811:1814 got transaction to invalid handle 2 [ 74.092580][ T1814] rust_binder: 1811:1814 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 74.107940][ T696] rust_binder: 1811: undelivered TRANSACTION_ERROR: 29201 [ 74.163052][ T1818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 74.241986][ T1821] tipc: Started in network mode [ 74.247343][ T1821] tipc: Node identity 360432607342, cluster identity 4711 [ 74.254617][ T1821] tipc: Enabled bearer , priority 10 [ 74.264145][ T1821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.273101][ T1821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.280121][ T1768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.289997][ T1768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.302089][ T1820] tipc: Resetting bearer [ 74.308810][ T1820] tipc: Disabling bearer [ 74.449814][ T696] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 74.500781][ T1768] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 74.599802][ T696] usb 2-1: Using ep0 maxpacket: 32 [ 74.607213][ T696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.619026][ T696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.629485][ T696] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 74.638602][ T696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.648256][ T696] usb 2-1: config 0 descriptor?? [ 74.656394][ T696] hub 2-1:0.0: USB hub found [ 74.713036][ T1768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.721692][ T1768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.786367][ T45] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 74.793162][ T45] cdc_ncm 1-1:1.0: dwNtbInMaxSize=1024 is too small. Using 2048 [ 74.801007][ T45] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 74.859511][ T696] hub 2-1:0.0: 1 port detected [ 74.956320][ T1828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.966480][ T1828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.004168][ T45] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 75.016456][ T45] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 75.045722][ T45] usb 1-1: USB disconnect, device number 22 [ 75.058207][ T45] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 75.470239][ T696] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 75.605241][ T1839] netlink: 'syz.0.463': attribute type 1 has an invalid length. [ 75.648703][ T1841] rust_binder: Failure in copy_transaction_data: EINVAL [ 75.648734][ T1841] rust_binder: 1840:1841 transaction async to 1840:0 failed EINVAL, code 0 size 0-24 [ 75.667543][ T1841] rust_binder: 1840:1841 got transaction to invalid handle 2 [ 75.675837][ T1841] rust_binder: 1840:1841 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 75.687191][ T10] rust_binder: 1840: undelivered TRANSACTION_ERROR: 29201 [ 75.723214][ T10] rust_binder: 1840: undelivered TRANSACTION_ERROR: 29201 [ 75.784338][ T1855] netlink: 132 bytes leftover after parsing attributes in process `syz.2.469'. [ 75.799899][ T45] usb 2-1: USB disconnect, device number 23 [ 76.029849][ T310] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 76.179827][ T310] usb 1-1: Using ep0 maxpacket: 8 [ 76.187086][ T310] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 76.195448][ T310] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 76.204124][ T310] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 76.213258][ T310] usb 1-1: config 250 has no interface number 0 [ 76.219551][ T310] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 76.239822][ T310] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 76.260468][ T310] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 76.277090][ T310] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 76.288569][ T310] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 76.302135][ T310] usb 1-1: config 250 interface 228 has no altsetting 0 [ 76.311570][ T310] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 76.320882][ T310] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 76.329145][ T310] usb 1-1: Product: syz [ 76.333418][ T310] usb 1-1: SerialNumber: syz [ 76.341703][ T310] hub 1-1:250.228: bad descriptor, ignoring hub [ 76.348045][ T310] hub 1-1:250.228: probe with driver hub failed with error -5 [ 76.489868][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 76.546106][ T310] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 23 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 76.643285][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 76.653093][ T10] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 76.664837][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 76.673926][ T10] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 48, using maximum allowed: 30 [ 76.684750][ T10] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 76.702475][ T10] usb 2-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 76.716501][ T10] usb 2-1: New USB device strings: Mfr=1, Product=21, SerialNumber=3 [ 76.720563][ T1866] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 76.724724][ T10] usb 2-1: Product: syz [ 76.738948][ T10] usb 2-1: Manufacturer: syz [ 76.744055][ T10] usb 2-1: SerialNumber: syz [ 76.970925][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 76.988181][ T10] usb 2-1: USB disconnect, device number 24 [ 77.068786][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.189998][ T696] usb 1-1: USB disconnect, device number 23 [ 77.197250][ T696] usblp0: removed [ 77.261165][ T36] kauditd_printk_skb: 1516 callbacks suppressed [ 77.261185][ T36] audit: type=1400 audit(1785880772.270:8535): avc: denied { create } for pid=1868 comm="syz.2.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.288027][ T36] audit: type=1400 audit(1785880772.270:8536): avc: denied { create } for pid=1868 comm="syz.2.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.308387][ T36] audit: type=1400 audit(1785880772.270:8537): avc: denied { create } for pid=1868 comm="syz.2.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.495755][ T36] audit: type=1400 audit(1785880772.500:8538): avc: denied { unlink } for pid=296 comm="syz-executor" name="file2" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 77.540703][ T36] audit: type=1400 audit(1785880772.510:8539): avc: denied { read write } for pid=296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.567159][ T36] audit: type=1400 audit(1785880772.510:8540): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.592217][ T1873] rust_binder: Failure in copy_transaction_data: EINVAL [ 77.592276][ T1873] rust_binder: 1872:1873 transaction async to 1872:0 failed EINVAL, code 0 size 0-24 [ 77.593554][ T36] audit: type=1400 audit(1785880772.510:8541): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.604248][ T1873] rust_binder: 1872:1873 got transaction to invalid handle 2 [ 77.643184][ T1873] rust_binder: 1872:1873 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 77.655962][ T36] audit: type=1400 audit(1785880772.530:8542): avc: denied { sys_module } for pid=1870 comm="syz.1.475" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 77.670550][ T696] rust_binder: 1872: undelivered TRANSACTION_ERROR: 29201 [ 77.678802][ T36] audit: type=1400 audit(1785880772.540:8543): avc: denied { read write } for pid=296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.696501][ T9] rust_binder: 1872: undelivered TRANSACTION_ERROR: 29201 [ 77.759900][ T36] audit: type=1400 audit(1785880772.540:8544): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.470109][ T1926] netlink: 393 bytes leftover after parsing attributes in process `syz.2.488'. [ 78.559827][ T310] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 78.712354][ T310] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 78.720652][ T310] usb 2-1: config 1 has no interface number 0 [ 78.727047][ T310] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 78.736866][ T310] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 78.749907][ T310] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 78.759081][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.767161][ T310] usb 2-1: Product: syz [ 78.771427][ T310] usb 2-1: Manufacturer: syz [ 78.776031][ T310] usb 2-1: SerialNumber: syz [ 78.785855][ T1918] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 78.793600][ T1918] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 79.799821][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 79.949814][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 79.957245][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 140, changing to 7 [ 79.971871][ T9] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 79.981455][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.989722][ T9] usb 1-1: Product: syz [ 79.994024][ T9] usb 1-1: Manufacturer: syz [ 79.998615][ T9] usb 1-1: SerialNumber: syz [ 80.217314][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 80.227141][ T9] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 80.237525][ T9] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 80.249881][ T9] usb 1-1: USB disconnect, device number 24 [ 81.009828][ T311] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 81.163073][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 81.171509][ T311] usb 1-1: not running at top speed; connect to a high speed hub [ 81.181579][ T311] usb 1-1: config 8 has an invalid interface number: 43 but max is 1 [ 81.189803][ T311] usb 1-1: config 8 has an invalid interface number: 35 but max is 1 [ 81.197923][ T311] usb 1-1: config 8 has no interface number 0 [ 81.204315][ T311] usb 1-1: config 8 has no interface number 1 [ 81.210578][ T311] usb 1-1: config 8 interface 43 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 81.222261][ T311] usb 1-1: config 8 interface 43 has no altsetting 0 [ 81.228955][ T311] usb 1-1: config 8 interface 35 has no altsetting 0 [ 81.239230][ T311] usb 1-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 81.248355][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.256372][ T311] usb 1-1: Product: syz [ 81.260574][ T311] usb 1-1: Manufacturer: syz [ 81.265165][ T311] usb 1-1: SerialNumber: syz [ 81.318069][ T9] usb 2-1: USB disconnect, device number 25 [ 81.376601][ T1951] rust_binder: 1950:1951 got transaction to invalid handle 2 [ 81.384216][ T1951] rust_binder: 1950:1951 transaction async to 0:0 failed ENOENT, code 0 size 104-24 [ 81.394358][ T310] rust_binder: 1950: undelivered TRANSACTION_COMPLETE [ 81.407773][ T310] rust_binder: 1950: undelivered TRANSACTION_ERROR: 29201 [ 81.415795][ T310] rust_binder: 1950: undelivered transaction 97, process died [ 81.710101][ T311] ums-alauda 1-1:8.43: USB Mass Storage device detected [ 81.719204][ T311] scsi host1: usb-storage 1-1:8.43 [ 81.730019][ T311] hub 1-1:8.35: Invalid hub with more than one config or interface [ 81.738010][ T311] hub 1-1:8.35: probe with driver hub failed with error -22 [ 81.745581][ T311] ums-alauda 1-1:8.35: USB Mass Storage device detected [ 81.775944][ T311] usb 1-1: USB disconnect, device number 25 [ 81.809806][ T310] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 81.971880][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.982110][ T310] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 81.991142][ T310] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 82.005288][ T310] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.014465][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.022553][ T310] usb 2-1: Product: syz [ 82.027616][ T310] usb 2-1: Manufacturer: syz [ 82.032307][ T310] usb 2-1: SerialNumber: syz [ 82.073685][ T1964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1964 comm=syz.2.499 [ 82.087430][ T1965] netlink: 'syz.2.499': attribute type 58 has an invalid length. [ 82.204931][ T1978] incfs: Error accessing: /dev/vhost-vsock. [ 82.211011][ T1978] incfs: mount failed -2 [ 82.282447][ T36] kauditd_printk_skb: 383 callbacks suppressed [ 82.282467][ T36] audit: type=1400 audit(1785880777.290:8928): avc: denied { create } for pid=1981 comm="syz.2.504" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.318910][ T36] audit: type=1400 audit(1785880777.290:8929): avc: denied { map } for pid=1981 comm="syz.2.504" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.345151][ T36] audit: type=1400 audit(1785880777.290:8930): avc: denied { read write } for pid=1981 comm="syz.2.504" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.372766][ T36] audit: type=1400 audit(1785880777.290:8931): avc: denied { map } for pid=1981 comm="syz.2.504" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.436305][ T36] audit: type=1400 audit(1785880777.290:8932): avc: denied { read write } for pid=1981 comm="syz.2.504" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.475607][ T36] audit: type=1400 audit(1785880777.350:8933): avc: denied { read write } for pid=495 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.496747][ T1994] audit: audit_backlog=65 > audit_backlog_limit=64 [ 82.502369][ T36] audit: type=1400 audit(1785880777.350:8934): avc: denied { read write open } for pid=495 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.533020][ T36] audit: type=1400 audit(1785880777.350:8935): avc: denied { ioctl } for pid=495 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.536825][ T1994] audit: audit_lost=87 audit_rate_limit=0 audit_backlog_limit=64 [ 82.601922][ T1999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 82.777608][ T2003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.798012][ T2003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.810310][ T2003] netlink: 'syz.3.511': attribute type 10 has an invalid length. [ 83.611763][ T2035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.622033][ T2035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.939828][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 84.093335][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 84.102779][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.113113][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 84.143262][ T9] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 84.158996][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.174278][ T9] usb 1-1: Product: syz [ 84.178489][ T9] usb 1-1: Manufacturer: syz [ 84.189798][ T9] usb 1-1: SerialNumber: syz [ 84.207870][ T2041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.216668][ T2041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.235533][ T2041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.269953][ T2041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.405138][ T2037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.413729][ T2037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.427627][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 84.437373][ T9] usb 1-1: USB disconnect, device number 26 [ 84.481386][ T610] udevd[610]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.510485][ T310] usb 2-1: 1:1 : invalid UAC_AS_GENERAL desc [ 84.529323][ T310] usb 2-1: 0:2 : does not exist [ 84.551612][ T310] usb 2-1: USB disconnect, device number 26 [ 84.637704][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.765598][ T310] rust_binder: 2045: undelivered TRANSACTION_COMPLETE [ 84.777953][ T310] rust_binder: 2045: undelivered transaction 100, process died [ 84.837584][ T2052] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.976791][ T2059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'. [ 85.040591][ T2061] MTRR 1 not used [ 85.103940][ T2066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.535'. [ 85.113970][ T2064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.129977][ T2064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.140862][ T2064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.534'. [ 85.369872][ T310] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 85.521982][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.532152][ T310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.544155][ T310] usb 1-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 85.553262][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.561284][ T310] usb 1-1: Product: syz [ 85.565458][ T310] usb 1-1: Manufacturer: syz [ 85.570112][ T310] usb 1-1: SerialNumber: syz [ 85.731724][ T2073] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.745704][ T2073] netlink: 'syz.2.538': attribute type 1 has an invalid length. [ 85.754185][ T2073] netlink: 9 bytes leftover after parsing attributes in process `syz.2.538'. [ 85.794258][ T2075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.794637][ T310] usb 1-1: 0:1 : does not exist [ 85.807578][ T310] usb 1-1: unit 6 not found! [ 85.812275][ T310] usb 1-1: unit 2 not found! [ 85.819973][ T2075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.831146][ T310] usb 1-1: USB disconnect, device number 27 [ 85.853248][ T2079] netlink: 'syz.2.541': attribute type 7 has an invalid length. [ 85.867442][ T2078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=2078 comm=syz.1.540 [ 85.906281][ T2078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2078 comm=syz.1.540 [ 85.947429][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.024685][ T2083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 86.028755][ T2085] incfs_lookup_dentry err:-13 [ 86.420667][ T9] rust_binder: 2094: undelivered TRANSACTION_COMPLETE [ 86.434471][ T9] rust_binder: 2094: undelivered transaction 102, process died [ 86.809789][ T310] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 87.009814][ T310] usb 1-1: Using ep0 maxpacket: 8 [ 87.059790][ T310] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 87.068797][ T310] usb 1-1: config 1 has no interface number 0 [ 87.082931][ T2120] netlink: 32 bytes leftover after parsing attributes in process `syz.2.553'. [ 87.100545][ T310] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 87.119787][ T310] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7 [ 87.151797][ T310] usb 1-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 87.167935][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.200876][ T310] usb 1-1: Product: syz [ 87.205113][ T310] usb 1-1: Manufacturer: syz [ 87.209731][ T310] usb 1-1: SerialNumber: syz [ 87.229814][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 87.290234][ T36] kauditd_printk_skb: 1612 callbacks suppressed [ 87.290253][ T36] audit: type=1400 audit(1785880782.300:10461): avc: denied { cmd } for pid=2098 comm="iou-wrk-2099" path="socket:[13932]" dev="sockfs" ino=13932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 87.313058][ T2104] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.327771][ T2118] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.334673][ T2118] audit: audit_lost=117 audit_rate_limit=0 audit_backlog_limit=64 [ 87.344373][ T2103] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.351794][ T2118] audit: backlog limit exceeded [ 87.357149][ T2100] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.364543][ T36] audit: type=1400 audit(1785880782.300:10462): avc: denied { cmd } for pid=2098 comm="iou-wrk-2099" path="socket:[13932]" dev="sockfs" ino=13932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 87.366593][ T2102] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.389500][ T2127] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.425202][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 87.449801][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 87.484871][ T9] usb 2-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 87.496027][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.519790][ T9] usb 2-1: Product: syz [ 87.526825][ T310] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 87.530799][ T9] usb 2-1: Manufacturer: syz [ 87.551315][ T310] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 87.556254][ T9] usb 2-1: SerialNumber: syz [ 87.581147][ T310] usb 1-1: USB disconnect, device number 28 [ 87.726677][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.745953][ T2142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.755456][ T2142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.800107][ T2144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.808790][ T2144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.821321][ T9] usb 2-1: BAAD MICROPHONE c_chmask mismatch [ 87.835141][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 87.846020][ T9] usb 2-1: USB disconnect, device number 27 [ 87.856422][ T610] udevd[610]: setting owner of /dev/bus/usb/002/027 to uid=0, gid=0 failed: No such file or directory [ 87.896280][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.362506][ T2153] kvm: kvm [2152]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x10000000001780 [ 88.391467][ T2154] kvm: kvm [2152]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x10000000001780 [ 88.434733][ T2153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.452957][ T2153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.510681][ T311] rust_binder: 2157: undelivered TRANSACTION_COMPLETE [ 88.523717][ T311] rust_binder: 2157: undelivered transaction 104, process died [ 89.141894][ T2185] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 89.163561][ T1801] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.181067][ T2185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.574'. [ 90.096833][ T1806] ------------[ cut here ]------------ [ 90.102388][ T1806] WARNING: CPU: 1 PID: 1806 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x351/0x410 [ 90.113070][ T1806] Modules linked in: [ 90.116979][ T1806] CPU: 1 UID: 0 PID: 1806 Comm: kworker/u8:14 Not tainted syzkaller #0 1c659cfea3877f078df945e50c8eb7045fd035a9 [ 90.128837][ T1806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.138939][ T1806] Workqueue: iou_exit io_ring_exit_work [ 90.144546][ T1806] RIP: 0010:ublk_uring_cmd_cancel_fn+0x351/0x410 [ 90.150950][ T1806] Code: 5d e9 c3 bc 52 02 cc e8 9d 8f 33 fe 0f 0b eb e3 e8 94 8f 33 fe 0f 0b eb da e8 8b 8f 33 fe 0f 0b e9 4d fe ff ff e8 7f 8f 33 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0a fd ff ff 4c 89 [ 90.170622][ T1806] RSP: 0018:ffffc900091ff990 EFLAGS: 00010293 [ 90.176722][ T1806] RAX: ffffffff8353e241 RBX: 1ffff11023772455 RCX: ffff88810ca4b900 [ 90.184754][ T1806] RDX: 0000000000000000 RSI: 0000000000000024 RDI: 0000000000000104 [ 90.192769][ T1806] RBP: ffffc900091ff9e0 R08: 0000000000000003 R09: 0000000000000004 [ 90.200783][ T1806] R10: 0000000000000000 R11: ffffffff8353d220 R12: ffff888108689300 [ 90.208767][ T1806] R13: ffff88811bb92280 R14: ffff88811b8e4000 R15: ffff88811b8e4010 [ 90.216766][ T1806] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 90.225727][ T1806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.232355][ T1806] CR2: 0000200000e5f000 CR3: 000000012625c000 CR4: 00000000003526b0 [ 90.240387][ T1806] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.247422][ T2214] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48511 sclass=netlink_tcpdiag_socket pid=2214 comm=syz.1.583 [ 90.248375][ T1806] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 90.248396][ T1806] Call Trace: [ 90.272512][ T1806] [ 90.275474][ T1806] ublk_ch_uring_cmd+0x6f/0xa0 [ 90.280316][ T1806] io_uring_try_cancel_uring_cmd+0x196/0x280 [ 90.286319][ T1806] io_uring_try_cancel_requests+0x4d6/0x5b5 [ 90.292273][ T1806] ? io_uring_cancel_generic+0x6eb/0x6eb [ 90.297934][ T1806] io_ring_exit_work+0x23d/0x83b [ 90.302926][ T1806] ? finish_task_switch+0x139/0x770 [ 90.308146][ T1806] ? __cfi_io_ring_exit_work+0x10/0x10 [ 90.313737][ T1806] ? kick_pool+0xb9/0x540 [ 90.318084][ T1806] process_scheduled_works+0x7f7/0x1060 [ 90.323779][ T1806] worker_thread+0xc99/0x13f0 [ 90.328476][ T1806] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 90.334229][ T1806] ? __kasan_check_read+0x15/0x20 [ 90.339272][ T1806] kthread+0x2c7/0x360 [ 90.343376][ T1806] ? __cfi_worker_thread+0x10/0x10 [ 90.348502][ T1806] ? __cfi_kthread+0x10/0x10 [ 90.353141][ T1806] ret_from_fork+0x67/0xa0 [ 90.357600][ T1806] ? __cfi_kthread+0x10/0x10 [ 90.362243][ T1806] ret_from_fork_asm+0x1a/0x30 [ 90.367027][ T1806] [ 90.370065][ T1806] ---[ end trace 0000000000000000 ]--- [ 91.190156][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110