last executing test programs: 1m34.799485694s ago: executing program 0 (id=234): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r1 = socket$inet6(0xa, 0x80003, 0x5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in6=@private2}}, &(0x7f0000000200)=0xe8) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x101, 0x800000000000, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xb}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x6e6bb0, 0x1, 0x1, 0x1}, {{@in6=@private0, 0xfffffffe, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x20, 0x0}, 0x0, 0x3, 0x3, 0xb, 0x0, 0x400}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 1m34.771117215s ago: executing program 0 (id=235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x2000000, [{0x26e, 0x0, 0x9230}]}) 1m34.720921916s ago: executing program 0 (id=236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x26e, 0x0, 0x9230}]}) (fail_nth: 4) 1m34.419507953s ago: executing program 0 (id=239): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x8447, 0x1000009, 0xffffeffffffffffb, 0xffffffc, 0x10001, 0x3, 0x4002004c1, 0xa, 0xa8a, 0x0, 0x1, 0x0, 0x2, 0x4, 0xa, 0x1010100000089], 0x41000, 0x108102}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='#w\rs', 0x4) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f0000000600)="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", 0xfd) ptrace(0x10, r1) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/21, 0x15}], 0x1) ptrace$setregs(0xd, r1, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r1, 0x80000001, 0x4) 1m34.344945085s ago: executing program 0 (id=241): r0 = socket$inet6(0xa, 0x3, 0xff) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) iopl(0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = dup2(r0, r0) write$tun(r1, 0x0, 0x46) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000000)=@sg0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x26e, 0x0, 0x9230}]}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3, 0xff, 0xfe, 0x1}, {0x1, 0xd, 0x9, 0x1}, {0x0, 0x7, 0x1, 0xe}]}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00000000c0)=0x9, 0x4) 1m34.214860388s ago: executing program 0 (id=244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x26e, 0x2000000, 0x9230}]}) 1m34.173769459s ago: executing program 32 (id=244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x26e, 0x2000000, 0x9230}]}) 1m32.267631735s ago: executing program 4 (id=270): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="402004000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000c40)={0x1c, &(0x7f0000000100)={0x40, 0x1, 0x6, "ba1aaf540e87"}, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000500)={0x0, 0xc, 0x4, "591f6bf3"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x83, 0x1, "ed"}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000580)={0x60, 0x8}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000800)={0xc0, 0xa1, 0x4}, &(0x7f0000000840)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000000880)={0xc0, 0xa2, 0x2f, "47be2e669b9e02c860f10dfde5311bf8a43e83a04a095da968157f27f63bbfd72af27aeb8d2e444dd71dda6ce8ded0"}}) 1m29.441195002s ago: executing program 4 (id=303): r0 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) fcntl$addseals(r0, 0x409, 0x8) (async) fcntl$addseals(r0, 0x409, 0x8) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000040)) (async) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x5) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_to_batadv\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_to_batadv\x00'}) dup3(0xffffffffffffffff, r2, 0x80000) syz_usb_connect$uac2(0x5, 0x8d, &(0x7f0000000080)=ANY=[@ANYBLOB="077fd77820cee04c0b04b2483072d5a2e770c2b4b86c6b559e301e5d4add0b8af14b27c7ef5a7e382bbf96b712"], 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) eventfd2(0x0, 0x0) (async) r4 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)) (async) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r4, &(0x7f0000000000), 0x8) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) r6 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @mcast2, 0x5}, 0x1c) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x2cee) 1m26.419333294s ago: executing program 4 (id=339): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x1, 0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="13e522948e6f22e7ac303c97", 0xc}], 0x1}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000a80)="1cd2d176b105e80c4c6948cb8e03208676a247beee2e8079c3acecf7d41348143bb77f00f255ec126072189baa9cd36ab46f33aefd759eeedd359d6072abc0828f39002d90784457b6becc1e09605bb23066e9aabd5ecbbeae8fdd48b32d7a20472fd30a02597bc3d32221ded5c29d99f39b4fee7dead10267deeef489460ff04fa592950003137338aa2dc0ed9de834fc5329543e775ee8db9c778f57c4594dcd2f3f129310dfb10bb7ed508abd950c99467f8bd9", 0xb5}], 0x1}}], 0x2, 0x44040) 1m26.397605945s ago: executing program 4 (id=340): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0xc0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x8748, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @remote, 0xc}, 0x1c) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x7}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x0, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r5, 0x0, 0x14, 0x0, &(0x7f0000000e80)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000006c0)='./file2\x00', 0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000500)=[{&(0x7f0000000700)=""/209, 0xd1}], 0x1, 0xff, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000040)={0xa980000000000000, 0x40000, 0xe7, 0x0, 0x12}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f00000004c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f00000003c0)=0x6, 0x4) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002dbd6700fbdbdf251b000000070021006284"], 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/117, 0x75, 0x0, &(0x7f0000000100)=""/75, 0x4b}, &(0x7f0000000200)=0x40) 1m26.311480447s ago: executing program 4 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x22e, 0x2, 0xfe, 0x2, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x3600}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x7, 0x20, 0x0, 0x1000000}]}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x520000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000080)=0x7, 0x4) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208065000070501020002000705820200020009040001040806620007050102000200032401070502020002000324020705030200020003240307"], 0x0) 1m26.273775518s ago: executing program 4 (id=343): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x13, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) accept(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000240)=0x80) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\xc9\x8d\n$\x11J\x06t\x8e\xa6ZH\x88\x9967\xd1\xe6zy\xb1G\xcbB-\xacbe\xad\xc4\xc4o\x1f\xae\x1d\x82v\xe6\x8e\x9eAT\xe49\x17\x85hfr\xca\x03\xcf\x00\x00\x00\x00\x00\x001%w\x9e:X\x7f@\xe3\x93\x16\xe9\xd9\x8fM\xfc\x9co\x94\xca\xd8D~\xf3(t&\x9c\x17B\xde8\xfbdQ\x9f\xf0\xe2$\x91\xc7\x9e\xa8.\xc1\x016\x1b\xae0\a\xc5/\xfbh^\x99\xd8D\vQ\x94\xea\x06\x98\x0e1\\_t\x88G\xbb-kQ\xa8\x12a\xfdwAn\xbe\xeara\x95\xa8\x85\xeb\a\x99\xbf.\xf7[P\xfb|\"\v\xd3D\xa7\xb5\xc5\x113/\xd1\xa3\x8d\x17E*\x8e\v\x81PI\x98C\x15\xbf\xbbk\xbawA\xea?\xfe.\x1c\xf9\xf1\xd8\x10\x01', 0x0) 1m26.204744279s ago: executing program 33 (id=343): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x13, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) accept(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000240)=0x80) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\xc9\x8d\n$\x11J\x06t\x8e\xa6ZH\x88\x9967\xd1\xe6zy\xb1G\xcbB-\xacbe\xad\xc4\xc4o\x1f\xae\x1d\x82v\xe6\x8e\x9eAT\xe49\x17\x85hfr\xca\x03\xcf\x00\x00\x00\x00\x00\x001%w\x9e:X\x7f@\xe3\x93\x16\xe9\xd9\x8fM\xfc\x9co\x94\xca\xd8D~\xf3(t&\x9c\x17B\xde8\xfbdQ\x9f\xf0\xe2$\x91\xc7\x9e\xa8.\xc1\x016\x1b\xae0\a\xc5/\xfbh^\x99\xd8D\vQ\x94\xea\x06\x98\x0e1\\_t\x88G\xbb-kQ\xa8\x12a\xfdwAn\xbe\xeara\x95\xa8\x85\xeb\a\x99\xbf.\xf7[P\xfb|\"\v\xd3D\xa7\xb5\xc5\x113/\xd1\xa3\x8d\x17E*\x8e\v\x81PI\x98C\x15\xbf\xbbk\xbawA\xea?\xfe.\x1c\xf9\xf1\xd8\x10\x01', 0x0) 13.881346438s ago: executing program 5 (id=960): setgroups(0x0, 0x0) mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='drop=1 add=1\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x2b73, 0x13, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xb, 0x20, 0x40, {0x8, 0xb, 0x0, 0x1, 0x1, 0x4, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0xb, 0x9, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x5, 0x9, {0x8, 0x25, 0x1, 0x80, 0xc, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xd, 0x3, 0x40, {0x8, 0x25, 0x1, 0x83, 0x6c, 0x4, 0xb6}}}}}}}}]}}, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) lseek(r2, 0x9, 0x4) write(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mytrace/trace\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000040)) read(r3, &(0x7f0000000600), 0x3e8) setgroups(0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) (async) write(r0, &(0x7f0000000400)='drop=1 add=1\x00', 0xd) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) (async) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x2b73, 0x13, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xb, 0x20, 0x40, {0x8, 0xb, 0x0, 0x1, 0x1, 0x4, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0xb, 0x9, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x5, 0x9, {0x8, 0x25, 0x1, 0x80, 0xc, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xd, 0x3, 0x40, {0x8, 0x25, 0x1, 0x83, 0x6c, 0x4, 0xb6}}}}}}}}]}}, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) lseek(r2, 0x9, 0x4) (async) write(r1, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mytrace/trace\x00', 0x0, 0x0) (async) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000040)) (async) read(r3, &(0x7f0000000600), 0x3e8) (async) 13.123977686s ago: executing program 5 (id=965): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x40, 0x4) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) 10.051137159s ago: executing program 5 (id=972): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x802, 0x0) epoll_create1(0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000180)={'security\x00', 0x0, [0x6, 0x0, 0x3, 0x6, 0x17]}, &(0x7f0000000240)=0x54) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) 9.436878745s ago: executing program 5 (id=980): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x12, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 9.312286507s ago: executing program 5 (id=981): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r1 = syz_open_pts(r0, 0x80) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)={0x0, 0x0, 0xa}, 0x18) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) dup3(r1, r0, 0x80000) read(r1, &(0x7f00000003c0)=""/213, 0xd5) read(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) timer_getoverrun(r2) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfffff000) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 8.275342292s ago: executing program 5 (id=995): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x8000, 0x8000, 0x1, 0x1, {{0xf, 0x4, 0x0, 0x37, 0x3c, 0x67, 0x0, 0x5, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1f}, {[@timestamp_addr={0x44, 0x1c, 0xf6, 0x1, 0x1, [{@multicast1, 0x6d6}, {@empty, 0xfffffe14}, {@multicast1, 0xc}]}, @lsrr={0x83, 0xb, 0x50, [@broadcast, @local]}]}}}}}) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x0) accept(r1, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000140)='my_tracefs/events/task/task_rename/filter\x00', &(0x7f00000001c0), &(0x7f0000000440)="90260df9f19dffa0e87980b923e6f6e733a281cc818c5e5058f43e439f8dd376fe6292bfd9be21adfbaaafa0bac58d6ce26cc96f88f858171e3f416ff4d13330fd9ed14a1709c4439e0d5de42b37c3af7a20cbfd57d10010a9843c95bad879304db4001bc396122b95ba7e7a0dfd4a4e496042a9eca7147dc33562c851f6779c8e46d6156dd095ddd4a4bab09760793987b20b57d398e9ec4debc325a3083015bef01ebd502a72aeab822a3a013dfce8a5f3ba4e8dc426ea83c59f622dd20ac272927539b0d88be2", 0xc8, 0x0) r2 = inotify_init() ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)=0x400) shutdown(r1, 0x1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="201506000000210200cd"], 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000580)=ANY=[], 0x398}, 0x1, 0x0, 0x0, 0x800}, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000700)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c0086528aecebada202cf977c988df0c17b76c75288d6f40a7449899cb49a19fdbbe436a1295718ce798b1ed5a7d0394aabf33ba2eb327aebdc33c9683a8f558c63a170814d8c275faee445d32aa0fc2eae0972f206e827040d9cd37702df32807783"]) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="28f8", 0x2}], 0x1) syz_usb_connect$uac3(0x3, 0x98, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000008410e494240000102030109028600030109200c080b0001010130080904000000010130000a24010122000010000013240303000001060004dc0002050004000a001f240a06"], 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x200480c4) 1.63929244s ago: executing program 3 (id=1073): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0xff88, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1.609296081s ago: executing program 3 (id=1075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x11c, 0x4, 0x3e0, 0x108, 0x1f0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100, 0x108}}}, {{@arp={@rand_addr, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r0, &(0x7f0000000880)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x22eb, 0xc, 0x0, @opaque="1d71eb50"}}}}}}, 0x32) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000)={0x665, 0x0, 0x6a3, 0x2, 0x3ff}, 0x14) (async) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYBLOB="05", @ANYRES32=r5], 0x0) 1.547170543s ago: executing program 3 (id=1077): r0 = socket(0x10, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x4, &(0x7f0000000140)=[{0xffff, 0x26, 0x4, 0x80000001}, {0x7381, 0x4, 0x5, 0x3}, {0x40, 0x0, 0xd, 0x3ff}, {0x80, 0x0, 0xe, 0x855}]}, 0x10) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x20) preadv2(r7, &(0x7f00000018c0)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1, 0x40, 0x3, 0x20) r8 = dup(r6) syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x0, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4000, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8000, 0x10000400, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x2, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x402}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r9, 0x6, 0xb, 0x0, &(0x7f0000000080)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 991.683666ms ago: executing program 2 (id=1079): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x1, 0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000a80)="1cd2d176b105e80c4c6948cb8e03208676a247beee2e8079c3acecf7d41348143bb77f00f255ec126072189baa9cd36ab46f33aefd759eeedd359d6072abc0828f39002d90784457b6becc1e09605bb23066e9aabd5ecb", 0x57}], 0x1}}], 0x1, 0x44040) 933.936587ms ago: executing program 2 (id=1080): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) accept(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000180)=0x7f) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'lo\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x4, 0xffffff7f, 0xffff7fff, 0x0, 0x1ff, 0xfff, 0x1273, 0x9}}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000040)=""/70, 0x46, 0x12120, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}, 0x1c) 815.5422ms ago: executing program 2 (id=1081): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x400) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000080)=""/96) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f0000000140)=0x1c, 0x40000) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000180)={0x5, {{0xa, 0x4e23, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x88) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x42000000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp\x00') read$ptp(r4, &(0x7f0000000040)=""/123, 0x7b) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000003000)={0x1, 0x0, [{0x4d0, 0x0, 0x1ff}]}) syz_usb_connect$uac3(0x3, 0xa4, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x2e, 0x1003}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0x4, 0x8, 0x4, 0xa}, @extension_unit={0x11, 0x24, 0xa, 0x6, 0x1, [0x0, 0x173ea21786b5b7df, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x8, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2}}}}}}}}]}}, 0x0) 793.193981ms ago: executing program 3 (id=1082): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0x10000, 0xc, 0x9, 0xfd, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0xeeee8000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x7, 0x3, 0xb5}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x13, 0x7, 0x0, 0xb, 0x4, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0xd3cd94790be782a0, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xf}, {0x10000, 0xe000, 0x2, 0x3, 0x7, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdb}, {0x1000, 0x100000, 0xc, 0x7, 0x1, 0x8, 0x21, 0x80, 0x80, 0x0, 0x1, 0x1}, {0x60000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0xd000, 0x3, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x4, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8000004, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0x1002]}) (async, rerun: 32) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x1}}) (async, rerun: 32) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f00000002c0)='I', 0x1) 695.580033ms ago: executing program 3 (id=1084): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40008d0, &(0x7f0000000180)={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) (async) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) read$FUSE(r1, &(0x7f0000005300)={0x2020}, 0xf2) (async, rerun: 32) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 32) syz_clone(0xc881300, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) 678.045283ms ago: executing program 3 (id=1086): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) rt_sigqueueinfo(r3, 0x30, &(0x7f0000000380)={0x10, 0x8, 0x2}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000000340)="2e1221b23bb601c494d3df173e7596", 0xf}, {&(0x7f0000000300)="040000", 0x3}], 0x2) epoll_create(0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000001500)={@my=0x1}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREAD(r8, &(0x7f0000000400)=ANY=[@ANYRES16=r7], 0xb) io_setup(0x3, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000100)={0xf83, 0x0, 0x9, 0x1, 0x7f}) io_submit(r9, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0x1}]) r10 = socket(0x80000000000000a, 0x1, 0x0) r11 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r11, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000500)={'bridge_slave_1\x00', @local}) bind$inet(r10, &(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_usb_connect(0x3, 0x38, &(0x7f0000000780)={{0x12, 0x1, 0x110, 0x91, 0x8, 0x31, 0x20, 0x5ac, 0x1402, 0xe9d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x2, 0x6, 0xa4, 0x20, 0x1, "", [{{0x9, 0x4, 0xfb, 0x3, 0x1, 0x23, 0x58, 0xd7, 0x4, [@generic={0x2, 0x3b}], [{{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x7, 0x8}}]}}, {{0x9, 0x4, 0x9, 0x8, 0x0, 0x52, 0xef, 0x77, 0x40}}]}}]}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000427bd7000fcdbdf2538000000000058002800000000000000000058001b00000000000000000058007b00000000000000000058000e00000000000000000058000800000000000000000058002b00000000000000000058007900000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 676.473443ms ago: executing program 1 (id=1087): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r3, 0x65aebf9dafbebb59, 0x70bd28, 0x1, {{}, {@val={0x8, 0x12b, 0xffffffff}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x13}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='\x00\x00\x00\x00\x00\b', &(0x7f0000000100)='UepI:\xaa\x02\x00\x00\x00\x00\x00\x00\x00', 0x0) (async) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f00000000c0)='system_u:object_r:syslogd_initrc_exec_t:s0\x00', 0x2b, 0x3) 633.362935ms ago: executing program 1 (id=1088): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x1, 0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000a80)="1cd2d176b105e80c4c6948cb8e03208676a247beee2e8079c3acecf7d41348143bb77f00f255ec126072189baa9cd36ab46f33aefd759eeedd359d6072abc0828f39002d90784457b6becc1e09605bb23066e9aabd5ecbbe", 0x58}], 0x1}}], 0x1, 0x44040) 570.888436ms ago: executing program 1 (id=1089): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x1, 0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000a80)="1cd2d176b105e80c4c6948cb8e03208676a247beee2e8079c3acecf7d41348143bb77f00f255ec126072189baa9cd36ab46f33aefd759eeedd359d6072abc0828f39002d90784457b6becc1e09605bb23066e9aabd5ecbbe", 0x58}], 0x1}}], 0x1, 0x44040) (fail_nth: 1) 495.516318ms ago: executing program 1 (id=1090): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='dev_mnt/zram0\x00', 0x2, 0x0) ioctl$SIOCGETSGCNT(r0, 0x89e1, 0x0) mount(0x0, &(0x7f0000000040)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', &(0x7f00000000c0)='smb3\x00', 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x2, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x10, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f00000000c0)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.kill\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) fcntl$lock(r7, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x9}) close_range(r8, 0xffffffffffffffff, 0x0) recvmmsg(r5, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003d40)=""/4053, 0xfd5}, {&(0x7f00000008c0)=""/212, 0xd4}, {&(0x7f00000000c0)=""/110, 0x6e}, {&(0x7f0000002c00)=""/4100, 0x1004}, {&(0x7f0000000b00)=""/240, 0xf0}, {&(0x7f0000000500)=""/286, 0x11e}, {&(0x7f0000000140)=""/79, 0x4f}, {&(0x7f0000000cc0)=""/246, 0xf6}, {&(0x7f0000000280)=""/129, 0x81}, {&(0x7f0000000040)=""/62, 0x3e}], 0xa}, 0x72}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x1f77}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x2090d2}, {{0x0, 0x0, 0x0}, 0xe52}, {{0x0, 0x0, 0x0}, 0x1}], 0x8, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) r10 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r10, &(0x7f0000000400)='dummy_hcd.0', 0xb) 166.711476ms ago: executing program 1 (id=1091): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {0x0, 0x0, 0xd}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd00000000001000330002030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "532232e832c0a471d47b0c77f55be08ed719f05c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private}}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x33, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) 93.905827ms ago: executing program 1 (id=1092): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000880), &(0x7f00000008c0)=0x4) listen(r1, 0x0) r2 = socket(0x3, 0x5, 0x1) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b00)="98", 0x1}], 0x1}}], 0x1, 0x2400c090) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000000)={'sit0\x00', 0x0}) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xf, &(0x7f0000002ec0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000ac0)={0x34, &(0x7f00000007c0)={0x40, 0x18, 0x6, "037bbc9e48f7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f0000000480)={0x14, &(0x7f0000000300)={0x20, 0x3, 0xed, {0xed, 0x5, "4fada2910527c7d1d8278367ad954ea0d98cffb53e9a3486416c3ce21edc80974d56e19f8d50f93ed8bd5a83fb9362cb3d481bb1e43d1872942c79ae7cf526b81006880245d335e4fa486f3ad486f5d6e0535349baca4f58b4f39f2badbb1d5b845e4b103f2e23cc200943374633791e80baac38b8d3e57074ef72083ea7b1ab3f72a3a488cd88bbd6306a0f0a98960168a4fb6bd71e3d97a098e42507925820192bddf99b6fff1988300dcaf12d44cb463ec815d87c7b5a34a3cd1a088b8a86d32091d62220c158b5f32d9f8619953227b10b15ff9fd2c50ed7243b4c5bce6a422ad37ffea3379cf17ac4"}}, &(0x7f0000000400)={0x0, 0x3, 0x42, @string={0x42, 0x3, "21f542c9433887979eebd5bbae5442a5c5d593d03c28192a7ce3dba253f06de1961d1647f9cbd72782bd64faf62ca6cd74fc77bd4abb3101aca04d984386da8d"}}}, &(0x7f0000000800)={0x44, &(0x7f00000004c0)={0x40, 0x13, 0xb6, "c5cec2208acb9334fb36d6e8f0c5349790bd430aa06dd8bf73c9187a26111171ce606339fc36c2284539c0412f724daf0c593e154120f91a36384dca0766931fc21d2d993c2018e0b870fa9f39d686ec34e02df60101fb3a2b0900c565c46c61cd92486c8017877fc3df22fa338f60f180f531d0408d267e2ff535bdd46ad52c1af589a93773f247a4322795e57f29ec182cfa128d72d7ae3291a3cf3e077ae4e88d24a6da661c0d73c361022403e077aedc2d0e6f11"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x60}, &(0x7f0000000680)={0x20, 0x81, 0x2, "aeaa"}, &(0x7f00000006c0)={0x20, 0x82, 0x2, "b741"}, &(0x7f0000000900)={0x20, 0x83, 0x3, '\x00\x00\x00'}, &(0x7f0000000740)={0x20, 0x84, 0x3, "d6b4d0"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "995ab2"}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x20, 0xd, 0x55, {0x55, 0x8, "8f7f117ed423ebbd947c97cd255ee15c6168fd0cd3c64bc3a460fcee765a33a1c5ca3a5f554d82788316f8be755c98bbe913c71c518f674fbc2df6e2962cc8a237fada6e631ce36fdf8a6f70e87b7fae845e9d"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x0, 0x14, 0x95, "50e87be9b37bbc656ba8ff9c142fc5e614e3f6397b4ac18f5896a33b780a8e930252c3fab16a17728b14ecc1e56393f77bcb7963d9af26614885948535a44c3ac76128c745ddf1342931cbb6ab3bb0dc5cd20fa16f8bb95146d81070e27689134d4561738e74b3b511f773248f3c152cbc3c61805ea42ce6dcbcf7e0002a5a85acc8148e50fa7c54913074fc0e180cdfe1851593d5"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xcf}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x5}}) 93.587517ms ago: executing program 2 (id=1093): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x5e22, 0x7, @empty, 0x1fc}, 0x1c) (async) listen(r0, 0x80000003) (async, rerun: 32) syz_clone(0x15001080, &(0x7f0000000580)="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", 0x1000, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600)="be0d9b64538c4bd8742870812fcaafe11aab6cd43eafdbb9cb3582f8bde309b86aa34c84681fe769e32eb448806121e4ac493e28c314dd79361875497bd88c6989c4fc70a65f5d5ab7314c9cc5b620863ecb977375546e7561f909caaf75a870e2ec16e041c0c040ac448cbe304081034134a554387b6a13cc56884b5c1313b340578e7f1984fef84efca6b69c54f87362ad4d063aec79e2eaacb44296f23ff77a0580b338e7c92600136020b4a17ce32c82bcef") (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) 20.316969ms ago: executing program 2 (id=1094): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000340)={0x0, 0x8427, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff, 0x0, r3}}], 0x1, 0x0, 0x0) (async) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x3) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000000c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x6, "3090e3f9"}]}}}], 0x18}}], 0x1, 0x0) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x81001, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r5, 0x8004af80, &(0x7f00000000c0)) (async) syz_clone(0x2204000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000100)={'pimreg\x00', @random="92b8bfd0604f"}) (async) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8991, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) r8 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r8, 0x12) ptrace(0x10, r6) (async) ptrace$getregset(0x4204, r6, 0x204, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) 0s ago: executing program 2 (id=1095): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='dir0\x00', &(0x7f0000000080)={0x3, 0x108, 0x33}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SMI(r2, 0xaeb7) fchmodat(r1, &(0x7f00000000c0)='dir0\x00', 0x100) mount$incfs(&(0x7f0000000140)='dir0\x00', &(0x7f0000000240)='dir0\x00', &(0x7f0000000280), 0x1000001, &(0x7f0000000540)={[{@rlog_pages={'rlog_pages', 0x3d, 0xffff}}]}) kernel console output (not intermixed with test programs): avc: denied { open } for pid=1577 comm="syz.3.466" path="/115/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 65.920633][ T1578] virtio-fs: tag not found [ 65.948115][ T36] audit: type=1400 audit(1785486553.640:354): avc: denied { read write } for pid=1577 comm="syz.3.466" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 65.973140][ T310] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 65.977898][ T36] audit: type=1400 audit(1785486553.640:355): avc: denied { open } for pid=1577 comm="syz.3.466" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 66.139267][ T310] usb 6-1: unable to get BOS descriptor or descriptor too short [ 66.147596][ T310] usb 6-1: config 3 has an invalid interface number: 207 but max is 0 [ 66.155937][ T310] usb 6-1: config 3 has no interface number 0 [ 66.162177][ T310] usb 6-1: config 3 interface 207 has no altsetting 0 [ 66.170213][ T36] audit: type=1400 audit(1785486553.890:356): avc: denied { bind } for pid=1582 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.170612][ T310] usb 6-1: New USB device found, idVendor=0586, idProduct=3418, bcdDevice=5f.f6 [ 66.199210][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.207318][ T310] usb 6-1: Product: syz [ 66.211750][ T310] usb 6-1: Manufacturer: syz [ 66.216491][ T310] usb 6-1: SerialNumber: syz [ 66.446064][ T310] cdc_ether 6-1:3.207: More than one union descriptor, skipping ... [ 66.459237][ T310] usb 6-1: bad CDC descriptors [ 66.466050][ T310] usb 6-1: USB disconnect, device number 4 [ 66.945462][ T1586] FAULT_INJECTION: forcing a failure. [ 66.945462][ T1586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.967956][ T1586] CPU: 0 UID: 0 PID: 1586 Comm: syz.3.469 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 66.967992][ T1586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.968005][ T1586] Call Trace: [ 66.968011][ T1586] [ 66.968021][ T1586] __dump_stack+0x21/0x30 [ 66.968057][ T1586] dump_stack_lvl+0x140/0x1c0 [ 66.968084][ T1586] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.968110][ T1586] ? exc_page_fault+0x65/0xc0 [ 66.968148][ T1586] dump_stack+0x19/0x20 [ 66.968172][ T1586] should_fail_ex+0x3c2/0x510 [ 66.968196][ T1586] should_fail+0xf/0x20 [ 66.968215][ T1586] should_fail_usercopy+0x1e/0x30 [ 66.968238][ T1586] _copy_from_iter+0x1a6/0x1520 [ 66.968264][ T1586] ? __kasan_check_write+0x18/0x20 [ 66.968285][ T1586] ? _copy_from_iter+0x215/0x1520 [ 66.968311][ T1586] ? __cfi__copy_from_iter+0x10/0x10 [ 66.968336][ T1586] ? __virt_addr_valid+0x2a1/0x370 [ 66.968359][ T1586] ? __cfi__copy_from_iter+0x10/0x10 [ 66.968383][ T1586] ? __check_object_size+0x54c/0x870 [ 66.968404][ T1586] ? __cfi___check_object_size+0x10/0x10 [ 66.968424][ T1586] copy_page_from_iter+0x1e5/0x2a0 [ 66.968450][ T1586] skb_copy_datagram_from_iter+0x300/0x6f0 [ 66.968472][ T1586] packet_sendmsg+0x3be8/0x56b0 [ 66.968493][ T1586] ? avc_has_perm_noaudit+0x26b/0x360 [ 66.968520][ T1586] ? kstrtouint_from_user+0x117/0x170 [ 66.968543][ T1586] ? __x64_sys_openat+0x13a/0x170 [ 66.968573][ T1586] ? selinux_socket_sendmsg+0x281/0x380 [ 66.968599][ T1586] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 66.968624][ T1586] ? __cfi_packet_sendmsg+0x10/0x10 [ 66.968643][ T1586] ? check_stack_object+0x10f/0x150 [ 66.968663][ T1586] ? move_pages_ptes+0x862/0x2460 [ 66.968682][ T1586] ? __cfi___check_object_size+0x10/0x10 [ 66.968702][ T1586] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 66.968724][ T1586] ? security_socket_sendmsg+0x3d/0x100 [ 66.968750][ T1586] ? __cfi_packet_sendmsg+0x10/0x10 [ 66.968770][ T1586] __sys_sendto+0x68d/0x700 [ 66.968799][ T1586] ? __cfi___sys_sendto+0x10/0x10 [ 66.968829][ T1586] ? __kasan_check_write+0x18/0x20 [ 66.968850][ T1586] ? __cfi_ksys_write+0x10/0x10 [ 66.968872][ T1586] __x64_sys_sendto+0xe9/0x100 [ 66.968901][ T1586] x64_sys_call+0x2c2c/0x2ee0 [ 66.968918][ T1586] do_syscall_64+0x57/0xf0 [ 66.968939][ T1586] ? clear_bhb_loop+0x50/0xa0 [ 66.968965][ T1586] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.968989][ T1586] RIP: 0033:0x7f0abc99e019 [ 66.969006][ T1586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.969023][ T1586] RSP: 002b:00007f0abd87e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 66.969047][ T1586] RAX: ffffffffffffffda RBX: 00007f0abcc25fa0 RCX: 00007f0abc99e019 [ 66.969062][ T1586] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 66.969076][ T1586] RBP: 00007f0abd87e090 R08: 0000200000000140 R09: 0000000000000014 [ 66.969098][ T1586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.969111][ T1586] R13: 00007f0abcc26038 R14: 00007f0abcc25fa0 R15: 00007ffe38c81088 [ 66.969129][ T1586] [ 67.021285][ T1591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.471'. [ 67.267898][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 67.276371][ T1593] netlink: 12 bytes leftover after parsing attributes in process `syz.5.471'. [ 67.356484][ T36] audit: type=1400 audit(1785486555.070:357): avc: denied { write } for pid=1597 comm="syz.5.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.364112][ T1599] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 67.382898][ T1599] IPv6: NLM_F_CREATE should be set when creating new route [ 67.388056][ T36] audit: type=1400 audit(1785486555.110:358): avc: denied { connect } for pid=1597 comm="syz.5.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.390120][ T1599] IPv6: NLM_F_CREATE should be set when creating new route [ 67.449004][ T9] usb 4-1: config 2 has an invalid interface number: 36 but max is 0 [ 67.457220][ T9] usb 4-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 67.466168][ T9] usb 4-1: config 2 has no interface number 0 [ 67.469043][ T1605] overlay: filesystem on ./file0 not supported as upperdir [ 67.472590][ T9] usb 4-1: config 2 interface 36 has no altsetting 0 [ 67.487868][ T9] usb 4-1: New USB device found, idVendor=1bc7, idProduct=3000, bcdDevice=69.9a [ 67.497008][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.505081][ T9] usb 4-1: Product: syz [ 67.509286][ T9] usb 4-1: Manufacturer: syz [ 67.513918][ T9] usb 4-1: SerialNumber: syz [ 67.577031][ T66] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 67.593820][ T66] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 67.603411][ T66] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 67.614550][ T66] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 67.624749][ T66] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 67.635273][ T66] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 67.644921][ T66] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 67.658063][ T66] usb 2-1: USB disconnect, device number 22 [ 67.683588][ T1610] FAULT_INJECTION: forcing a failure. [ 67.683588][ T1610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.696804][ T1610] CPU: 1 UID: 0 PID: 1610 Comm: syz.5.478 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 67.696832][ T1610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.696840][ T1610] Call Trace: [ 67.696845][ T1610] [ 67.696850][ T1610] __dump_stack+0x21/0x30 [ 67.696876][ T1610] dump_stack_lvl+0x140/0x1c0 [ 67.696900][ T1610] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.696934][ T1610] ? exc_page_fault+0x65/0xc0 [ 67.696962][ T1610] dump_stack+0x19/0x20 [ 67.696979][ T1610] should_fail_ex+0x3c2/0x510 [ 67.696992][ T1610] should_fail+0xf/0x20 [ 67.697003][ T1610] should_fail_usercopy+0x1e/0x30 [ 67.697016][ T1610] _copy_from_iter+0x1a6/0x1520 [ 67.697039][ T1610] ? __kasan_check_write+0x18/0x20 [ 67.697058][ T1610] ? _copy_from_iter+0x215/0x1520 [ 67.697081][ T1610] ? __cfi__copy_from_iter+0x10/0x10 [ 67.697104][ T1610] ? __virt_addr_valid+0x2a1/0x370 [ 67.697123][ T1610] ? __cfi__copy_from_iter+0x10/0x10 [ 67.697136][ T1610] ? __check_object_size+0x54c/0x870 [ 67.697148][ T1610] ? __cfi___check_object_size+0x10/0x10 [ 67.697159][ T1610] copy_page_from_iter+0x1e5/0x2a0 [ 67.697174][ T1610] skb_copy_datagram_from_iter+0x300/0x6f0 [ 67.697195][ T1610] packet_sendmsg+0x3be8/0x56b0 [ 67.697214][ T1610] ? avc_has_perm_noaudit+0x26b/0x360 [ 67.697239][ T1610] ? kstrtouint_from_user+0x117/0x170 [ 67.697258][ T1610] ? __x64_sys_openat+0x13a/0x170 [ 67.697277][ T1610] ? selinux_socket_sendmsg+0x281/0x380 [ 67.697291][ T1610] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 67.697304][ T1610] ? __cfi_packet_sendmsg+0x10/0x10 [ 67.697315][ T1610] ? check_stack_object+0x10f/0x150 [ 67.697334][ T1610] ? move_pages_ptes+0x862/0x2460 [ 67.697352][ T1610] ? __cfi___check_object_size+0x10/0x10 [ 67.697372][ T1610] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 67.697394][ T1610] ? security_socket_sendmsg+0x3d/0x100 [ 67.697416][ T1610] ? __cfi_packet_sendmsg+0x10/0x10 [ 67.697431][ T1610] __sys_sendto+0x68d/0x700 [ 67.697446][ T1610] ? __cfi___sys_sendto+0x10/0x10 [ 67.697463][ T1610] ? __kasan_check_write+0x18/0x20 [ 67.697476][ T1610] ? __cfi_ksys_write+0x10/0x10 [ 67.697496][ T1610] __x64_sys_sendto+0xe9/0x100 [ 67.697523][ T1610] x64_sys_call+0x2c2c/0x2ee0 [ 67.697540][ T1610] do_syscall_64+0x57/0xf0 [ 67.697560][ T1610] ? clear_bhb_loop+0x50/0xa0 [ 67.697584][ T1610] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.697599][ T1610] RIP: 0033:0x7f855a39e019 [ 67.697609][ T1610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.697619][ T1610] RSP: 002b:00007f855b33a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 67.697637][ T1610] RAX: ffffffffffffffda RBX: 00007f855a625fa0 RCX: 00007f855a39e019 [ 67.697651][ T1610] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 67.697664][ T1610] RBP: 00007f855b33a090 R08: 0000200000000140 R09: 0000000000000014 [ 67.697678][ T1610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.697690][ T1610] R13: 00007f855a626038 R14: 00007f855a625fa0 R15: 00007ffc0cb72258 [ 67.697706][ T1610] [ 68.111912][ T9] cdc_acm 4-1:2.36: More than one union descriptor, skipping ... [ 68.119872][ T9] cdc_acm 4-1:2.36: skipping garbage [ 68.130423][ T9] usb 4-1: USB disconnect, device number 22 [ 68.142830][ T1617] tipc: Started in network mode [ 68.147871][ T1617] tipc: Node identity e0000001, cluster identity 4711 [ 68.154676][ T1617] tipc: Enabling of bearer rejected, failed to enable media [ 68.258744][ T313] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 68.390129][ T1625] syzkaller1: entered promiscuous mode [ 68.395732][ T1625] syzkaller1: entered allmulticast mode [ 68.407883][ T66] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 68.407909][ T313] usb 6-1: Using ep0 maxpacket: 8 [ 68.423072][ T313] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 68.432219][ T313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.440310][ T313] usb 6-1: Product: syz [ 68.444484][ T313] usb 6-1: Manufacturer: syz [ 68.449165][ T313] usb 6-1: SerialNumber: syz [ 68.558926][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.569125][ T66] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.579476][ T66] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.588662][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.596695][ T66] usb 2-1: Product: syz [ 68.600925][ T66] usb 2-1: Manufacturer: syz [ 68.605623][ T66] usb 2-1: SerialNumber: syz [ 68.737881][ T313] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 68.754753][ T313] usb 6-1: USB disconnect, device number 5 [ 68.971647][ T66] usb 2-1: 0:2 : does not exist [ 68.976796][ T66] usb 2-1: unit 9 not found! [ 68.983698][ T66] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4) [ 68.993442][ T66] usb 2-1: 4:0: cannot get min/max values for control 2 (id 4) [ 69.002904][ T66] usb 2-1: 4:0: cannot get min/max values for control 4 (id 4) [ 69.012382][ T66] usb 2-1: 4:0: cannot get min/max values for control 7 (id 4) [ 69.022059][ T66] usb 2-1: 4:0: cannot get min/max values for control 8 (id 4) [ 69.031380][ T66] usb 2-1: 4:0: cannot get min/max values for control 9 (id 4) [ 69.040726][ T66] usb 2-1: 4:0: cannot get min/max values for control 10 (id 4) [ 69.050142][ T66] usb 2-1: USB disconnect, device number 23 [ 69.254698][ T1645] FAULT_INJECTION: forcing a failure. [ 69.254698][ T1645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.267867][ T1645] CPU: 0 UID: 0 PID: 1645 Comm: syz.3.488 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 69.267901][ T1645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.267915][ T1645] Call Trace: [ 69.267928][ T1645] [ 69.267937][ T1645] __dump_stack+0x21/0x30 [ 69.267962][ T1645] dump_stack_lvl+0x140/0x1c0 [ 69.267976][ T1645] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.267991][ T1645] ? exc_page_fault+0x65/0xc0 [ 69.268008][ T1645] dump_stack+0x19/0x20 [ 69.268029][ T1645] should_fail_ex+0x3c2/0x510 [ 69.268050][ T1645] should_fail+0xf/0x20 [ 69.268061][ T1645] should_fail_usercopy+0x1e/0x30 [ 69.268074][ T1645] _copy_from_iter+0x1a6/0x1520 [ 69.268088][ T1645] ? __kasan_check_write+0x18/0x20 [ 69.268100][ T1645] ? _copy_from_iter+0x215/0x1520 [ 69.268114][ T1645] ? __cfi__copy_from_iter+0x10/0x10 [ 69.268128][ T1645] ? __virt_addr_valid+0x2a1/0x370 [ 69.268142][ T1645] ? __cfi__copy_from_iter+0x10/0x10 [ 69.268156][ T1645] ? __check_object_size+0x54c/0x870 [ 69.268167][ T1645] ? __cfi___check_object_size+0x10/0x10 [ 69.268179][ T1645] copy_page_from_iter+0x1e5/0x2a0 [ 69.268194][ T1645] skb_copy_datagram_from_iter+0x300/0x6f0 [ 69.268206][ T1645] packet_sendmsg+0x3be8/0x56b0 [ 69.268219][ T1645] ? avc_has_perm_noaudit+0x26b/0x360 [ 69.268235][ T1645] ? kstrtouint_from_user+0x117/0x170 [ 69.268247][ T1645] ? __x64_sys_openat+0x13a/0x170 [ 69.268263][ T1645] ? selinux_socket_sendmsg+0x281/0x380 [ 69.268277][ T1645] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 69.268291][ T1645] ? __cfi_packet_sendmsg+0x10/0x10 [ 69.268302][ T1645] ? check_stack_object+0x10f/0x150 [ 69.268314][ T1645] ? move_pages_ptes+0x862/0x2460 [ 69.268325][ T1645] ? __cfi___check_object_size+0x10/0x10 [ 69.268337][ T1645] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 69.268349][ T1645] ? security_socket_sendmsg+0x3d/0x100 [ 69.268364][ T1645] ? __cfi_packet_sendmsg+0x10/0x10 [ 69.268375][ T1645] __sys_sendto+0x68d/0x700 [ 69.268391][ T1645] ? __cfi___sys_sendto+0x10/0x10 [ 69.268411][ T1645] ? __kasan_check_write+0x18/0x20 [ 69.268422][ T1645] ? __cfi_ksys_write+0x10/0x10 [ 69.268434][ T1645] __x64_sys_sendto+0xe9/0x100 [ 69.268450][ T1645] x64_sys_call+0x2c2c/0x2ee0 [ 69.268461][ T1645] do_syscall_64+0x57/0xf0 [ 69.268473][ T1645] ? clear_bhb_loop+0x50/0xa0 [ 69.268488][ T1645] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.268502][ T1645] RIP: 0033:0x7f0abc99e019 [ 69.268514][ T1645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.268527][ T1645] RSP: 002b:00007f0abd87e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 69.268541][ T1645] RAX: ffffffffffffffda RBX: 00007f0abcc25fa0 RCX: 00007f0abc99e019 [ 69.268550][ T1645] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 69.268558][ T1645] RBP: 00007f0abd87e090 R08: 0000200000000140 R09: 0000000000000014 [ 69.268566][ T1645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.268574][ T1645] R13: 00007f0abcc26038 R14: 00007f0abcc25fa0 R15: 00007ffe38c81088 [ 69.268583][ T1645] [ 69.599293][ T313] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 69.627931][ T312] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 69.767930][ T313] usb 4-1: Using ep0 maxpacket: 32 [ 69.773230][ T312] usb 2-1: device descriptor read/64, error -71 [ 69.780707][ T313] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 69.788953][ T313] usb 4-1: config 0 has no interface number 0 [ 69.795565][ T313] usb 4-1: config 0 interface 184 has no altsetting 0 [ 69.804032][ T313] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 69.813130][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.821165][ T313] usb 4-1: Product: syz [ 69.825351][ T313] usb 4-1: Manufacturer: syz [ 69.829995][ T313] usb 4-1: SerialNumber: syz [ 69.835194][ T313] usb 4-1: config 0 descriptor?? [ 69.841027][ T313] smsc75xx v1.0.0 [ 69.907933][ T310] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 70.017898][ T312] usb 2-1: device descriptor read/64, error -71 [ 70.058938][ T310] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 70.071256][ T310] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.083261][ T310] usb 6-1: config 0 has no interfaces? [ 70.088804][ T310] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 70.097869][ T310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.106505][ T310] usb 6-1: config 0 descriptor?? [ 70.160879][ T1672] netlink: 'syz.2.500': attribute type 4 has an invalid length. [ 70.168577][ T1672] netlink: 'syz.2.500': attribute type 6 has an invalid length. [ 70.176219][ T1672] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.500'. [ 70.257903][ T312] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 70.314646][ T1668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.323310][ T1668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.331440][ T1668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.339981][ T1668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.348102][ T1668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.356579][ T1668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.364691][ T1668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.373166][ T1668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.381317][ T1668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.389850][ T1668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.397868][ T312] usb 2-1: device descriptor read/64, error -71 [ 70.401358][ T333] usb 6-1: USB disconnect, device number 6 [ 70.637899][ T312] usb 2-1: device descriptor read/64, error -71 [ 70.713412][ T1676] netlink: 104 bytes leftover after parsing attributes in process `syz.2.502'. [ 70.748037][ T312] usb usb2-port1: attempt power cycle [ 70.781091][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 70.781110][ T36] audit: type=1400 audit(1785486558.500:361): avc: denied { relabelfrom } for pid=1677 comm="syz.2.503" name="NETLINK" dev="sockfs" ino=14802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.811681][ T36] audit: type=1401 audit(1785486558.500:362): op=setxattr invalid_context="system_u:object_r:crypt_device_t:s0" [ 71.087931][ T312] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 71.109151][ T312] usb 2-1: device descriptor read/8, error -71 [ 71.238917][ T312] usb 2-1: device descriptor read/8, error -71 [ 71.287878][ T310] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 71.440376][ T310] usb 6-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 71.449616][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.457639][ T310] usb 6-1: Product: syz [ 71.461864][ T310] usb 6-1: Manufacturer: syz [ 71.466484][ T310] usb 6-1: SerialNumber: syz [ 71.477871][ T312] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 71.499335][ T312] usb 2-1: device descriptor read/8, error -71 [ 71.629161][ T312] usb 2-1: device descriptor read/8, error -71 [ 71.649934][ T313] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 71.661190][ T313] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 71.670607][ T313] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 71.681650][ T313] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 71.682401][ T36] audit: type=1400 audit(1785486559.410:363): avc: denied { bind } for pid=1733 comm="syz.5.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.691351][ T313] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 71.712124][ T36] audit: type=1400 audit(1785486559.430:364): avc: denied { watch } for pid=1733 comm="syz.5.510" path="/51/file0" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 71.721189][ T313] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 71.746601][ T36] audit: type=1400 audit(1785486559.430:365): avc: denied { watch } for pid=1733 comm="syz.5.510" path="/51" dev="tmpfs" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.753609][ T312] usb usb2-port1: unable to enumerate USB device [ 71.781085][ T313] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 71.792465][ T313] usb 4-1: USB disconnect, device number 23 [ 71.799091][ T310] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 71.806058][ T310] usb 6-1: found format II with max.bitrate = 44931, frame size=8 [ 71.816067][ T310] usb 6-1: found format II with max.bitrate = 44931, frame size=8 [ 71.824724][ T310] usb 6-1: 2:1: cannot set freq 4584960 to ep 0x82 [ 71.835342][ T310] usb 6-1: USB disconnect, device number 7 [ 71.852268][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.221265][ T36] audit: type=1400 audit(1785486559.940:366): avc: denied { search } for pid=1741 comm="syz.3.514" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 72.242956][ T36] audit: type=1400 audit(1785486559.940:367): avc: denied { append } for pid=1741 comm="syz.3.514" name="trace_pipe" dev="tracefs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 72.303242][ T1755] overlayfs: failed to resolve './bus': -2 [ 72.335537][ T36] audit: type=1400 audit(1785486560.050:368): avc: denied { create } for pid=1758 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 72.357371][ T36] audit: type=1400 audit(1785486560.060:369): avc: denied { ioctl } for pid=1758 comm="syz.3.520" path="socket:[15104]" dev="sockfs" ino=15104 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 72.527919][ T333] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 72.617938][ T66] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 72.657910][ T333] usb 6-1: device descriptor read/64, error -71 [ 72.769866][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.780044][ T66] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 72.780820][ T1774] netlink: 72 bytes leftover after parsing attributes in process `syz.2.524'. [ 72.788986][ T66] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.813396][ T66] usb 4-1: string descriptor 0 read error: -22 [ 72.819653][ T66] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.828830][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.838591][ T66] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 72.845404][ T66] cdc_ncm 4-1:1.0: bind() failure [ 72.907909][ T333] usb 6-1: device descriptor read/64, error -71 [ 73.147905][ T333] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 73.277918][ T333] usb 6-1: device descriptor read/64, error -71 [ 73.517916][ T333] usb 6-1: device descriptor read/64, error -71 [ 73.628136][ T333] usb usb6-port1: attempt power cycle [ 73.967919][ T333] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 73.989194][ T333] usb 6-1: device descriptor read/8, error -71 [ 74.119160][ T333] usb 6-1: device descriptor read/8, error -71 [ 74.357914][ T333] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 74.379118][ T333] usb 6-1: device descriptor read/8, error -71 [ 74.509058][ T333] usb 6-1: device descriptor read/8, error -71 [ 74.618054][ T333] usb usb6-port1: unable to enumerate USB device [ 75.372374][ T310] usb 4-1: USB disconnect, device number 24 [ 75.470501][ T1782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.528'. [ 75.576355][ T36] audit: type=1400 audit(1785486563.290:370): avc: denied { listen } for pid=1789 comm="syz.5.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.957894][ T66] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 76.087906][ T66] usb 4-1: device descriptor read/64, error -71 [ 76.337979][ T66] usb 4-1: device descriptor read/64, error -71 [ 76.467904][ T313] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 76.537936][ T310] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 76.577937][ T66] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 76.629086][ T1828] netlink: 'syz.2.543': attribute type 16 has an invalid length. [ 76.629508][ T313] usb 6-1: No LPM exit latency info found, disabling LPM. [ 76.645015][ T1828] netlink: 'syz.2.543': attribute type 3 has an invalid length. [ 76.653176][ T1828] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.543'. [ 76.665201][ T313] usb 6-1: string descriptor 0 read error: -22 [ 76.671786][ T313] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 76.681520][ T313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.692519][ T313] usb 6-1: MIDIStreaming interface descriptor not found [ 76.699607][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 76.706053][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.707253][ T1829] cgroup: fork rejected by pids controller in [ 76.716229][ T66] usb 4-1: device descriptor read/64, error -71 [ 76.717135][ T310] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 37, changing to 7 [ 76.723448][ T1829] /syz2 [ 76.732452][ T310] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 76.743392][ T1829] [ 76.745062][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.763039][ T310] usb 2-1: Product: syz [ 76.767376][ T310] usb 2-1: Manufacturer: syz [ 76.776895][ T310] usb 2-1: SerialNumber: syz [ 76.897474][ T313] usb 6-1: USB disconnect, device number 12 [ 76.899501][ T1866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 76.977923][ T66] usb 4-1: device descriptor read/64, error -71 [ 76.990243][ T310] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 76.997414][ T310] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 77.005393][ T310] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 77.013908][ T310] usb 2-1: 2:1 : sample bitwidth 60 in over sample bytes 3 [ 77.021183][ T310] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 77.031035][ T310] usb 2-1: USB disconnect, device number 28 [ 77.040980][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.098153][ T66] usb usb4-port1: attempt power cycle [ 77.440154][ T66] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 77.465804][ T1872] netlink: 64 bytes leftover after parsing attributes in process `syz.2.547'. [ 77.468962][ T66] usb 4-1: device descriptor read/8, error -71 [ 77.501948][ T1874] sock: sock_set_timeout: `syz.1.548' (pid 1874) tries to set negative timeout [ 77.549636][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 77.549653][ T36] audit: type=1400 audit(1785486565.270:377): avc: granted { setsecparam } for pid=1873 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 77.575656][ T1874] af_packet: tpacket_rcv: packet too big, clamped from 65512 to 4294967272. macoff=96 [ 77.609034][ T66] usb 4-1: device descriptor read/8, error -71 [ 77.677887][ T313] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 77.801157][ T1899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.555'. [ 77.847936][ T66] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 77.849358][ T313] usb 6-1: unable to get BOS descriptor or descriptor too short [ 77.863585][ T313] usb 6-1: not running at top speed; connect to a high speed hub [ 77.868926][ T66] usb 4-1: device descriptor read/8, error -71 [ 77.872213][ T313] usb 6-1: config 129 has an invalid interface number: 80 but max is 0 [ 77.886067][ T313] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 77.894346][ T313] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 77.903849][ T313] usb 6-1: config 129 has no interface number 0 [ 77.910141][ T313] usb 6-1: config 129 has no interface number 1 [ 77.916422][ T313] usb 6-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 77.929668][ T313] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 77.940655][ T313] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 77.953788][ T313] usb 6-1: config 129 interface 80 has no altsetting 0 [ 77.960687][ T313] usb 6-1: config 129 interface 5 has no altsetting 0 [ 77.968944][ T313] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 77.978052][ T313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.986128][ T313] usb 6-1: Product: syz [ 77.990436][ T313] usb 6-1: Manufacturer: syz [ 77.995048][ T313] usb 6-1: SerialNumber: syz [ 78.004520][ T36] audit: type=1400 audit(1785486565.720:378): avc: denied { associate } for pid=1905 comm="syz.2.557" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 78.009125][ T1904] fuse: Unknown parameter '000000000000000000000xffffffffffffffff' [ 78.034765][ T66] usb 4-1: device descriptor read/8, error -71 [ 78.047013][ T1904] overlayfs: failed to resolve './bus': -2 [ 78.057885][ T333] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 78.078724][ T1907] sit0: entered promiscuous mode [ 78.085435][ T1907] netlink: 'syz.2.558': attribute type 1 has an invalid length. [ 78.093403][ T1907] netlink: 1 bytes leftover after parsing attributes in process `syz.2.558'. [ 78.107329][ T1907] overlayfs: failed to clone upperpath [ 78.134208][ T1909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=1909 comm=syz.2.559 [ 78.147959][ T66] usb usb4-port1: unable to enumerate USB device [ 78.217924][ T333] usb 2-1: Using ep0 maxpacket: 16 [ 78.222721][ T313] usb 6-1: MIDIStreaming interface descriptor not found [ 78.229205][ T333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.249297][ T333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.255869][ T313] usb 6-1: USB disconnect, device number 13 [ 78.263779][ T333] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.293714][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:129.5/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.313492][ T333] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 78.326589][ T333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.336802][ T333] usb 2-1: config 0 descriptor?? [ 78.556766][ T1901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.565494][ T1901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.580091][ T333] usbhid 2-1:0.0: can't add hid device: -71 [ 78.586378][ T333] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 78.598648][ T333] usb 2-1: USB disconnect, device number 29 [ 78.921989][ T36] audit: type=1400 audit(1785486566.640:379): avc: denied { create } for pid=1950 comm="syz.2.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 78.922622][ T1951] fuse: Bad value for 'fd' [ 78.963213][ T36] audit: type=1400 audit(1785486566.680:380): avc: denied { create } for pid=1952 comm="syz.5.573" name="#d" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.966436][ T1953] syzkaller1: entered promiscuous mode [ 78.999353][ T36] audit: type=1400 audit(1785486566.680:381): avc: denied { link } for pid=1952 comm="syz.5.573" name="#d" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 79.005505][ T1953] syzkaller1: entered allmulticast mode [ 79.037866][ T36] audit: type=1400 audit(1785486566.680:382): avc: denied { rename } for pid=1952 comm="syz.5.573" name="#e" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 79.141583][ T36] audit: type=1400 audit(1785486566.860:383): avc: denied { watch_reads } for pid=1958 comm="syz.2.576" path="/187" dev="tmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.316180][ T36] audit: type=1400 audit(1785486567.030:384): avc: denied { create } for pid=1972 comm="syz.2.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.391185][ T1975] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 79.418538][ T36] audit: type=1400 audit(1785486567.140:385): avc: denied { create } for pid=1976 comm="syz.1.581" name="ecm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 79.446128][ T36] audit: type=1400 audit(1785486567.160:386): avc: denied { write } for pid=1976 comm="syz.1.581" name="UDC" dev="configfs" ino=16722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 79.568667][ T1987] netlink: 'syz.3.586': attribute type 4 has an invalid length. [ 79.837931][ T31] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 79.987874][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 79.994222][ T31] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 70, changing to 10 [ 80.005561][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 80.012237][ T31] usb 2-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 80.021601][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.030314][ T31] usb 2-1: config 0 descriptor?? [ 80.038141][ T66] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 80.177877][ T66] usb 4-1: device descriptor read/64, error -71 [ 80.243707][ T1990] fuse: Unknown parameter 'fd+0x0000000000000006' [ 80.251240][ T1990] 9pnet_fd: Insufficient options for proto=fd [ 80.417962][ T66] usb 4-1: device descriptor read/64, error -71 [ 80.634409][ T2047] netlink: 88 bytes leftover after parsing attributes in process `syz.5.607'. [ 80.657875][ T66] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 80.767275][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 80.773688][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 80.782744][ T31] usb 2-1: USB disconnect, device number 30 [ 80.787891][ T66] usb 4-1: device descriptor read/64, error -71 [ 80.852532][ T1161] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.858805][ T2055] netlink: 'syz.1.610': attribute type 27 has an invalid length. [ 81.047919][ T66] usb 4-1: device descriptor read/64, error -71 [ 81.158105][ T66] usb usb4-port1: attempt power cycle [ 81.497914][ T66] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 81.529033][ T66] usb 4-1: device descriptor read/8, error -71 [ 81.658986][ T66] usb 4-1: device descriptor read/8, error -71 [ 81.908100][ T66] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 81.929162][ T66] usb 4-1: device descriptor read/8, error -71 [ 82.068975][ T66] usb 4-1: device descriptor read/8, error -71 [ 82.178018][ T66] usb usb4-port1: unable to enumerate USB device [ 82.657947][ T31] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 82.808172][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 82.814830][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 82.824719][ T31] usb 6-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 82.835178][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.847514][ T31] usb 6-1: Product: syz [ 82.851850][ T31] usb 6-1: Manufacturer: syz [ 82.855516][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 82.855533][ T36] audit: type=1400 audit(1785486570.580:397): avc: denied { write } for pid=2095 comm="syz.3.622" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 82.856465][ T31] usb 6-1: SerialNumber: syz [ 82.881699][ T36] audit: type=1400 audit(1785486570.590:398): avc: denied { execute } for pid=2095 comm="syz.3.622" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.908061][ T2058] Bluetooth: hci0: command 0x1003 tx timeout [ 82.915411][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.091666][ T31] usb 6-1: Fast Track Pro config OK [ 83.098622][ T31] usb 6-1: MIDIStreaming interface descriptor not found [ 83.109717][ T31] usb 6-1: USB disconnect, device number 14 [ 83.177901][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 83.337880][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 83.344208][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 83.352619][ T10] usb 2-1: config 0 has no interface number 0 [ 83.358901][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 83.367115][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 83.376535][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.384681][ T10] usb 2-1: Product: syz [ 83.389021][ T10] usb 2-1: Manufacturer: syz [ 83.393657][ T10] usb 2-1: SerialNumber: syz [ 83.400333][ T10] usb 2-1: config 0 descriptor?? [ 83.406284][ T10] smsc75xx v1.0.0 [ 83.975659][ T2124] netlink: 84 bytes leftover after parsing attributes in process `syz.5.632'. [ 84.126898][ T2151] batadv_slave_0: entered promiscuous mode [ 84.178469][ T66] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 84.196329][ T2162] ip6gre0: mtu less than device minimum [ 84.205537][ T36] audit: type=1400 audit(1785486571.930:399): avc: denied { mount } for pid=2161 comm="syz.2.645" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 84.228774][ T36] audit: type=1400 audit(1785486571.940:400): avc: denied { accept } for pid=2161 comm="syz.2.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.306020][ T2154] batadv_slave_0: left promiscuous mode [ 84.339006][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.349181][ T66] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.358904][ T66] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 84.368484][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 84.376652][ T66] usb 4-1: SerialNumber: syz [ 84.584481][ T66] usb 4-1: 0:2 : does not exist [ 84.589447][ T66] usb 4-1: unit 5 not found! [ 84.595833][ T66] usb 4-1: USB disconnect, device number 33 [ 84.649651][ T2165] netlink: 104 bytes leftover after parsing attributes in process `syz.5.646'. [ 84.827424][ T36] audit: type=1400 audit(1785486572.540:401): avc: denied { execute } for pid=2170 comm="syz.2.649" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.907955][ T31] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 85.057867][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 85.064548][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 85.073091][ T31] usb 6-1: config 8 has an invalid interface number: 131 but max is 0 [ 85.081312][ T31] usb 6-1: config 8 has no interface number 0 [ 85.093492][ T31] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=37.6a [ 85.102855][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.112372][ T31] usb 6-1: Product: syz [ 85.116608][ T31] usb 6-1: Manufacturer: syz [ 85.121289][ T31] usb 6-1: SerialNumber: syz [ 85.173654][ T2178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2178 comm=syz.3.652 [ 85.186522][ T2179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.652'. [ 85.195844][ T2178] netlink: 16 bytes leftover after parsing attributes in process `syz.3.652'. [ 85.214686][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 85.225998][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 85.235817][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 85.246815][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 85.257877][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 85.269527][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 85.279986][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 85.291916][ T10] usb 2-1: USB disconnect, device number 31 [ 85.333401][ T36] audit: type=1326 audit(1785486829.050:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.5.647" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f855a39e019 code=0x0 [ 85.454415][ T2192] overlayfs: failed to resolve './cgroup': -2 [ 85.457845][ T36] audit: type=1400 audit(1785486829.171:403): avc: denied { read } for pid=2191 comm="syz.2.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.557840][ T312] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 85.708616][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 85.715082][ T312] usb 4-1: unable to get BOS descriptor or descriptor too short [ 85.723786][ T312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.734208][ T312] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 85.745941][ T312] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 85.758356][ T312] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 85.767415][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.775593][ T312] usb 4-1: Product: syz [ 85.779821][ T312] usb 4-1: Manufacturer: syz [ 85.784512][ T312] usb 4-1: SerialNumber: syz [ 85.799250][ T36] audit: type=1400 audit(1785486829.521:404): avc: denied { shutdown } for pid=2197 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.849317][ T2203] tipc: New replicast peer: 255.255.255.255 [ 85.855549][ T2203] tipc: Enabled bearer , priority 10 [ 86.013273][ T312] usb 4-1: USB disconnect, device number 34 [ 86.097772][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 86.247754][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 86.254096][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.264251][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.274952][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40 [ 86.284077][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.292181][ T10] usb 2-1: Product: syz [ 86.296363][ T10] usb 2-1: Manufacturer: syz [ 86.300993][ T10] usb 2-1: SerialNumber: syz [ 86.531392][ T10] usb 2-1: unit 0 not found! [ 86.550783][ T10] usb 2-1: USB disconnect, device number 32 [ 86.567800][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.597166][ T36] audit: type=1400 audit(1785486830.311:405): avc: denied { setopt } for pid=2214 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.618808][ T2215] netlink: 'syz.3.663': attribute type 12 has an invalid length. [ 86.693366][ T2218] overlayfs: conflicting options: metacopy=off,verity=on [ 86.867672][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 86.967679][ T66] tipc: Node number set to 3758096385 [ 87.018859][ T10] usb 2-1: config 4 has an invalid interface number: 29 but max is 0 [ 87.027125][ T10] usb 2-1: config 4 has no interface number 0 [ 87.033439][ T10] usb 2-1: config 4 interface 29 altsetting 0 endpoint 0x4 has invalid maxpacket 2039, setting to 64 [ 87.044537][ T10] usb 2-1: config 4 interface 29 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 87.054331][ T10] usb 2-1: config 4 interface 29 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 87.065559][ T10] usb 2-1: Dual-Role OTG device on HNP port [ 87.071750][ T10] usb 2-1: New USB device found, idVendor=0bda, idProduct=c811, bcdDevice=b0.13 [ 87.080957][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.088984][ T10] usb 2-1: Product: syz [ 87.093238][ T10] usb 2-1: Manufacturer: syz [ 87.097983][ T10] usb 2-1: SerialNumber: syz [ 87.309329][ T10] usb 2-1: USB disconnect, device number 33 [ 87.555830][ T2223] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 87.760432][ T31] usb_ehset_test 6-1:8.131: probe with driver usb_ehset_test failed with error -32 [ 87.783381][ T31] usb 6-1: USB disconnect, device number 15 [ 87.790835][ T2225] fuse: Bad value for 'user_id' [ 87.795819][ T2225] fuse: Bad value for 'user_id' [ 87.807581][ T312] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 87.832543][ T36] audit: type=1400 audit(1785486831.551:406): avc: granted { setsecparam } for pid=2230 comm="syz.5.668" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 87.864463][ T2235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.670'. [ 87.873875][ T2235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.670'. [ 87.967621][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 87.981523][ T312] usb 4-1: unable to get BOS descriptor or descriptor too short [ 87.993441][ T312] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 88.009265][ T312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.023008][ T312] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.035238][ T312] usb 4-1: string descriptor 0 read error: -22 [ 88.045006][ T312] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.056550][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.071513][ T312] usb 4-1: 0:2 : does not exist [ 88.247543][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 88.272379][ T312] usb 4-1: USB disconnect, device number 35 [ 88.347543][ T66] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 88.400089][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.409392][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.417394][ T10] usb 2-1: Product: syz [ 88.421594][ T10] usb 2-1: Manufacturer: syz [ 88.426190][ T10] usb 2-1: SerialNumber: syz [ 88.508564][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 88.518449][ T66] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 88.528230][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 88.538042][ T66] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 88.549140][ T66] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 88.558327][ T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.566355][ T66] usb 6-1: Product: syz [ 88.570565][ T66] usb 6-1: Manufacturer: syz [ 88.575184][ T66] usb 6-1: SerialNumber: syz [ 88.580913][ T66] usb 6-1: config 0 descriptor?? [ 88.586690][ T66] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 88.788488][ T36] audit: type=1400 audit(1785486832.511:407): avc: denied { bind } for pid=2264 comm="syz.5.679" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.809033][ T36] audit: type=1400 audit(1785486832.511:408): avc: denied { name_bind } for pid=2264 comm="syz.5.679" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 88.837936][ T36] audit: type=1400 audit(1785486832.511:409): avc: denied { node_bind } for pid=2264 comm="syz.5.679" saddr=fe80::aa src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 88.861695][ T66] ums-isd200 6-1:0.0: probe with driver ums-isd200 failed with error -22 [ 88.873709][ T36] audit: type=1400 audit(1785486832.521:410): avc: denied { ioctl } for pid=2264 comm="syz.5.679" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.902281][ T36] audit: type=1404 audit(1785486832.531:411): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 88.918276][ T36] audit: type=1404 audit(1785486832.551:412): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 88.934116][ T36] audit: type=1400 audit(1785486832.551:413): avc: denied { ioctl } for pid=2251 comm="syz.1.676" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.959819][ T36] audit: type=1400 audit(1785486832.551:414): avc: denied { ioctl } for pid=2251 comm="syz.1.676" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.985404][ T36] audit: type=1400 audit(1785486832.551:415): avc: denied { ioctl } for pid=2251 comm="syz.1.676" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.017462][ T36] audit: type=1400 audit(1785486832.551:416): avc: denied { ioctl } for pid=2251 comm="syz.1.676" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.067851][ T2265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.097232][ T2265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.114728][ T66] usb 6-1: USB disconnect, device number 16 [ 89.124491][ T2278] netlink: 64 bytes leftover after parsing attributes in process `syz.2.682'. [ 89.202776][ T2280] netlink: 64 bytes leftover after parsing attributes in process `syz.2.682'. [ 89.270228][ T2286] raw_sendmsg: syz.2.684 forgot to set AF_INET. Fix it! [ 89.450938][ T2252] rust_binder: Write failure EFAULT in pid:386 [ 89.452415][ T10] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 89.466303][ T10] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 89.474471][ T10] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 89.675529][ T10] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 89.707465][ T10] usb 2-1: USB disconnect, device number 34 [ 89.726633][ T10] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 89.973720][ T2299] tipc: Enabling of bearer rejected, failed to enable media [ 89.987298][ T66] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 90.086618][ T2307] netlink: 'syz.2.693': attribute type 10 has an invalid length. [ 90.094660][ T2307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.693'. [ 90.103584][ T2307] veth1: entered promiscuous mode [ 90.147271][ T66] usb 6-1: Using ep0 maxpacket: 32 [ 90.168386][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.200199][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.212011][ T66] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 90.221753][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.236072][ T66] usb 6-1: config 0 descriptor?? [ 90.248314][ T66] hub 6-1:0.0: USB hub found [ 90.372897][ T2340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.391572][ T2340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.650587][ T66] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 90.668402][ T66] usbhid 6-1:0.0: can't add hid device: -71 [ 90.674412][ T66] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 90.707617][ T66] usb 6-1: USB disconnect, device number 17 [ 90.707720][ T2370] 9pnet_fd: p9_fd_create_unix (2370): problem connecting socket: ./cgroup/file0: -2 [ 90.807227][ T312] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 90.967194][ T312] usb 4-1: Using ep0 maxpacket: 16 [ 90.974329][ T312] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 90.984713][ T312] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.994976][ T312] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 91.004095][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 91.012144][ T312] usb 4-1: SerialNumber: syz [ 91.020499][ T312] usb 4-1: 0:2 : does not exist [ 91.057206][ T66] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 91.110714][ T2375] netlink: 32 bytes leftover after parsing attributes in process `syz.2.711'. [ 91.209633][ T66] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 91.220560][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 91.231527][ T66] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 91.244841][ T66] usb 6-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 91.254132][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.264036][ T66] usb 6-1: config 0 descriptor?? [ 91.270312][ T2370] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 91.566280][ T312] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 91.581194][ T312] usb 4-1: 5:0: failed to get current value for ch 2 (-22) [ 91.592631][ T312] usb 4-1: 5:0: failed to get current value for ch 3 (-22) [ 91.604470][ T312] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 91.616110][ T312] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 91.626330][ T312] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 91.636515][ T312] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 91.646868][ T312] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 91.657113][ T312] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 91.667257][ T312] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 91.677289][ T312] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 91.688393][ T312] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 91.698985][ T66] hid (null): global environment stack underflow [ 91.706482][ T312] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 91.706927][ T66] uclogic 0003:28BD:0075.0003: interface is invalid, ignoring [ 91.738432][ T312] usb 4-1: 5:0: failed to get current value for ch 2 (-22) [ 91.750383][ T312] usb 4-1: 5:0: failed to get current value for ch 3 (-22) [ 91.762877][ T312] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 91.775420][ T312] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5) [ 91.785926][ T312] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5) [ 91.807218][ T312] usb 4-1: USB disconnect, device number 36 [ 91.838345][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.982139][ T2388] fuse: Bad value for 'group_id' [ 91.997081][ T2388] fuse: Bad value for 'group_id' [ 92.088021][ T2396] netlink: 'syz.5.716': attribute type 49 has an invalid length. [ 92.155230][ T2396] team_slave_1: entered promiscuous mode [ 92.168857][ T2396] team_slave_1: entered allmulticast mode [ 92.350292][ T2417] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=55 sclass=netlink_audit_socket pid=2417 comm=syz.1.721 [ 92.364252][ T2417] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=2417 comm=syz.1.721 [ 92.381344][ T2417] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=59 sclass=netlink_audit_socket pid=2417 comm=syz.1.721 [ 92.402498][ T2417] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=62 sclass=netlink_audit_socket pid=2417 comm=syz.1.721 [ 92.441278][ T2417] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=2417 comm=syz.1.721 [ 92.479421][ T2422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2422 comm=syz.1.721 [ 92.786941][ T66] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 92.873466][ T2442] netlink: 80 bytes leftover after parsing attributes in process `syz.5.726'. [ 92.906934][ T389] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 92.955723][ T66] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 92.975237][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.995453][ T66] usb 4-1: Product: syz [ 93.004153][ T66] usb 4-1: Manufacturer: syz [ 93.016901][ T66] usb 4-1: SerialNumber: syz [ 93.047189][ T389] usb 2-1: device descriptor read/64, error -71 [ 93.296881][ T389] usb 2-1: device descriptor read/64, error -71 [ 93.536889][ T389] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 93.546673][ T414] usb 6-1: USB disconnect, device number 18 [ 93.676879][ T389] usb 2-1: device descriptor read/64, error -71 [ 93.857280][ T36] kauditd_printk_skb: 841 callbacks suppressed [ 93.857309][ T36] audit: type=1400 audit(1785486837.582:1258): avc: denied { ioctl } for pid=2431 comm="syz.1.724" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.916867][ T389] usb 2-1: device descriptor read/64, error -71 [ 94.025771][ T36] audit: type=1400 audit(1785486837.742:1259): avc: denied { sys_admin } for pid=2454 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 94.031058][ T389] usb usb2-port1: attempt power cycle [ 94.047962][ T36] audit: type=1400 audit(1785486837.742:1260): avc: denied { sys_admin } for pid=2454 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 94.073615][ T36] audit: type=1400 audit(1785486837.742:1261): avc: denied { sys_admin } for pid=2454 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 94.095449][ T36] audit: type=1400 audit(1785486837.742:1262): avc: denied { sys_admin } for pid=2454 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 94.116711][ T36] audit: type=1400 audit(1785486837.752:1263): avc: denied { sys_admin } for pid=2454 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 94.137936][ T36] audit: type=1400 audit(1785486837.752:1264): avc: denied { ioctl } for pid=2431 comm="syz.1.724" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.163446][ T36] audit: type=1400 audit(1785486837.772:1265): avc: denied { ioctl } for pid=2431 comm="syz.1.724" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.188801][ T36] audit: type=1400 audit(1785486837.772:1266): avc: denied { ioctl } for pid=2431 comm="syz.1.724" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.213812][ T36] audit: type=1400 audit(1785486837.862:1267): avc: denied { ioctl } for pid=2431 comm="syz.1.724" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.406819][ T389] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 94.429974][ T389] usb 2-1: device descriptor read/8, error -71 [ 94.558790][ T389] usb 2-1: device descriptor read/8, error -71 [ 94.796799][ T389] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 94.818760][ T389] usb 2-1: device descriptor read/8, error -71 [ 94.948786][ T389] usb 2-1: device descriptor read/8, error -71 [ 95.056826][ T389] usb usb2-port1: unable to enumerate USB device [ 95.334112][ T389] usb 4-1: USB disconnect, device number 37 [ 99.027251][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 99.027270][ T36] audit: type=1400 audit(1785486842.752:1304): avc: denied { sys_admin } for pid=2455 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 99.054624][ T36] audit: type=1400 audit(1785486842.752:1305): avc: denied { sys_admin } for pid=2455 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 99.075911][ T36] audit: type=1400 audit(1785486842.752:1306): avc: denied { sys_admin } for pid=2455 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 99.097043][ T36] audit: type=1400 audit(1785486842.752:1307): avc: denied { sys_admin } for pid=2455 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 99.118334][ T36] audit: type=1400 audit(1785486842.752:1308): avc: denied { sys_admin } for pid=2455 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 103.515677][ T36] audit: type=1400 audit(1785486847.233:1309): avc: denied { search } for pid=2456 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.537829][ T36] audit: type=1400 audit(1785486847.243:1310): avc: denied { search } for pid=2456 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.547421][ T2457] audit: audit_backlog=65 > audit_backlog_limit=64 [ 103.561209][ T36] audit: type=1400 audit(1785486847.243:1311): avc: denied { search } for pid=2456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.567113][ T2457] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 107.694285][ T36] kauditd_printk_skb: 169 callbacks suppressed [ 107.694305][ T36] audit: type=1400 audit(1785486851.413:1480): avc: denied { execmem } for pid=2470 comm="syz.5.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 107.755111][ T36] audit: type=1400 audit(1785486851.423:1481): avc: denied { name_bind } for pid=2471 comm="syz.1.728" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 107.805122][ T36] audit: type=1400 audit(1785486851.423:1482): avc: denied { node_bind } for pid=2471 comm="syz.1.728" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 107.846750][ T36] audit: type=1400 audit(1785486851.423:1483): avc: denied { read write } for pid=296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.873327][ T36] audit: type=1400 audit(1785486851.423:1484): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.936094][ T36] audit: type=1400 audit(1785486851.423:1485): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.977923][ T36] audit: type=1400 audit(1785486851.443:1486): avc: denied { create } for pid=2472 comm="syz.3.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.002449][ T313] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 108.033465][ T36] audit: type=1400 audit(1785486851.473:1487): avc: denied { read write } for pid=2472 comm="syz.3.730" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.063185][ T36] audit: type=1400 audit(1785486851.473:1488): avc: denied { read write open } for pid=2472 comm="syz.3.730" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.116031][ T36] audit: type=1400 audit(1785486851.473:1489): avc: denied { ioctl } for pid=2472 comm="syz.3.730" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.178463][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 108.190481][ T313] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 108.200491][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 108.212232][ T313] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 108.238569][ T313] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 108.249289][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.257340][ T313] usb 4-1: Product: syz [ 108.262270][ T313] usb 4-1: Manufacturer: syz [ 108.267145][ T313] usb 4-1: SerialNumber: syz [ 108.275376][ T313] usb 4-1: config 0 descriptor?? [ 108.283289][ T313] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 108.515033][ T312] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 108.528194][ T313] ums-isd200 4-1:0.0: probe with driver ums-isd200 failed with error -22 [ 108.668234][ T312] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 108.678431][ T312] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 108.689779][ T2474] block device autoloading is deprecated and will be removed. [ 108.710593][ T312] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.730369][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 108.745319][ T313] usb 4-1: USB disconnect, device number 38 [ 108.751971][ T312] usb 2-1: SerialNumber: syz [ 108.769021][ T2502] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 108.984995][ T9] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 108.989748][ T312] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 109.005026][ T312] usb 2-1: USB disconnect, device number 39 [ 109.147213][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 109.160199][ T9] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 109.164936][ T313] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 109.169765][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.186957][ T9] usb 6-1: config 0 descriptor?? [ 109.328761][ T313] usb 4-1: unable to get BOS descriptor or descriptor too short [ 109.339914][ T313] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 109.348292][ T2542] sock: sock_timestamping_bind_phc: sock not bind to device [ 109.355629][ T313] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 109.365814][ T313] usb 4-1: config 63 has no interface number 0 [ 109.372000][ T313] usb 4-1: config 63 interface 66 has no altsetting 0 [ 109.382894][ T313] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 109.392439][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.400706][ T313] usb 4-1: Product: syz [ 109.405710][ T313] usb 4-1: Manufacturer: syz [ 109.410515][ T313] usb 4-1: SerialNumber: syz [ 109.564097][ T2550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'. [ 109.609857][ T9] kye 0003:0458:0138.0004: unknown main item tag 0x3 [ 109.621726][ T9] kye 0003:0458:0138.0004: unexpected long global item [ 109.628920][ T9] kye 0003:0458:0138.0004: parse failed [ 109.634567][ T9] kye 0003:0458:0138.0004: probe with driver kye failed with error -22 [ 109.676714][ T2551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.750'. [ 109.819487][ T2523] can0: slcan on ttynull. [ 109.985375][ T2522] can0 (unregistered): slcan off ttynull. [ 109.992577][ T9] usb 6-1: USB disconnect, device number 19 [ 110.152549][ T313] usb 4-1: USB disconnect, device number 39 [ 110.254997][ T2564] capability: warning: `syz.3.751' uses 32-bit capabilities (legacy support in use) [ 110.606007][ T313] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 110.786986][ T313] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.795730][ T313] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.805908][ T313] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.814772][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 110.815328][ T313] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.838095][ T313] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 110.847195][ T313] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 110.855511][ T313] usb 4-1: Product: syz [ 110.859712][ T313] usb 4-1: Manufacturer: syz [ 110.871875][ T313] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 110.894735][ T389] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 110.974768][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 110.981930][ T9] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 110.990394][ T9] usb 6-1: config 0 has no interface number 0 [ 110.996653][ T9] usb 6-1: config 0 interface 184 has no altsetting 0 [ 111.006844][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 111.015915][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.023916][ T9] usb 6-1: Product: syz [ 111.028221][ T9] usb 6-1: Manufacturer: syz [ 111.032894][ T9] usb 6-1: SerialNumber: syz [ 111.039209][ T9] usb 6-1: config 0 descriptor?? [ 111.044728][ T389] usb 2-1: Using ep0 maxpacket: 32 [ 111.053921][ T9] smsc75xx v1.0.0 [ 111.059439][ T389] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 111.067677][ T389] usb 2-1: config 0 has no interface number 0 [ 111.073773][ T389] usb 2-1: config 0 interface 184 has no altsetting 0 [ 111.082032][ T313] usb 4-1: USB disconnect, device number 40 [ 111.084883][ T389] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 111.102614][ T389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.110702][ T389] usb 2-1: Product: syz [ 111.115138][ T389] usb 2-1: Manufacturer: syz [ 111.120055][ T389] usb 2-1: SerialNumber: syz [ 111.128055][ T389] usb 2-1: config 0 descriptor?? [ 111.137668][ T389] smsc75xx v1.0.0 [ 111.341329][ T2589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.352684][ T2589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.617469][ T2595] netlink: 200 bytes leftover after parsing attributes in process `syz.3.757'. [ 112.369738][ T389] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 112.387696][ T389] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 112.397541][ T389] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 112.408482][ T389] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 112.418686][ T389] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 112.430603][ T389] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 112.440963][ T389] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 112.454623][ T389] usb 2-1: USB disconnect, device number 40 [ 112.696047][ T36] kauditd_printk_skb: 832 callbacks suppressed [ 112.696066][ T36] audit: type=1400 audit(1785486856.424:2322): avc: denied { read } for pid=2613 comm="syz.3.764" dev="nsfs" ino=4026532307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 112.723608][ T36] audit: type=1400 audit(1785486856.424:2323): avc: denied { read open } for pid=2613 comm="syz.3.764" path="net:[4026532307]" dev="nsfs" ino=4026532307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 112.749402][ T36] audit: type=1400 audit(1785486856.424:2324): avc: denied { create } for pid=2613 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.770038][ T36] audit: type=1400 audit(1785486856.434:2325): avc: denied { write } for pid=2613 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.790644][ T36] audit: type=1400 audit(1785486856.434:2326): avc: denied { read } for pid=2613 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.811710][ T36] audit: type=1400 audit(1785486856.434:2327): avc: denied { read } for pid=2613 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.832316][ T36] audit: type=1400 audit(1785486856.434:2328): avc: denied { write } for pid=2613 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.852873][ T36] audit: type=1400 audit(1785486856.434:2329): avc: denied { read } for pid=2613 comm="syz.3.764" dev="nsfs" ino=4026532307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 112.874396][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 112.874680][ T36] audit: type=1400 audit(1785486856.434:2330): avc: denied { read open } for pid=2613 comm="syz.3.764" path="net:[4026532307]" dev="nsfs" ino=4026532307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 112.902670][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 112.925857][ T36] audit: type=1400 audit(1785486856.434:2331): avc: denied { create } for pid=2613 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.950332][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 112.966250][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 112.977819][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 112.989127][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 113.016534][ T9] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 113.032980][ T9] usb 6-1: USB disconnect, device number 20 [ 113.099544][ T2625] tipc: Started in network mode [ 113.104548][ T2625] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 113.264580][ T2644] random: crng reseeded on system resumption [ 113.888539][ T2691] futex_wake_op: syz.3.789 tries to shift op by 32; fix this program [ 114.059751][ T2695] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 114.070706][ T2695] overlayfs: failed to clone lowerpath [ 114.554347][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 114.717266][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 114.724377][ T2708] netlink: 188 bytes leftover after parsing attributes in process `syz.5.794'. [ 114.738575][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 114.763975][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 114.773131][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.781282][ T10] usb 2-1: Product: syz [ 114.786191][ T10] usb 2-1: Manufacturer: syz [ 114.790812][ T10] usb 2-1: SerialNumber: syz [ 114.799605][ T10] usb 2-1: config 0 descriptor?? [ 114.810115][ T10] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 115.015789][ T10] usb 2-1: USB disconnect, device number 41 [ 115.051468][ T2712] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 115.068020][ T2712] overlayfs: overlapping lowerdir path [ 115.214936][ T2534] udevd[2534]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 115.399963][ T2736] netlink: 96 bytes leftover after parsing attributes in process `syz.3.804'. [ 115.442609][ T2738] fuse: Bad value for 'fd' [ 115.494190][ T313] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 115.644135][ T313] usb 6-1: Using ep0 maxpacket: 32 [ 115.660608][ T313] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 115.674372][ T313] usb 6-1: config 0 has no interface number 0 [ 115.694136][ T313] usb 6-1: config 0 interface 184 has no altsetting 0 [ 115.720581][ T313] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 115.739839][ T313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.754115][ T313] usb 6-1: Product: syz [ 115.764123][ T313] usb 6-1: Manufacturer: syz [ 115.774113][ T313] usb 6-1: SerialNumber: syz [ 115.786328][ T313] usb 6-1: config 0 descriptor?? [ 115.815068][ T313] smsc75xx v1.0.0 [ 116.028431][ T2771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'. [ 116.173213][ T2777] netlink: 72 bytes leftover after parsing attributes in process `syz.3.814'. [ 116.366334][ T2790] 9pnet_fd: Insufficient options for proto=fd [ 116.393644][ T2791] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 116.401378][ T2791] SELinux: failed to load policy [ 116.764053][ T31] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 116.835553][ T2727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.844557][ T2727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.904011][ T31] usb 2-1: device descriptor read/64, error -71 [ 116.996763][ T2808] netlink: 108 bytes leftover after parsing attributes in process `syz.3.825'. [ 117.153959][ T31] usb 2-1: device descriptor read/64, error -71 [ 117.393944][ T31] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 117.533961][ T31] usb 2-1: device descriptor read/64, error -71 [ 117.610235][ T2820] overlayfs: failed to clone upperpath [ 117.655309][ T2822] netlink: 65 bytes leftover after parsing attributes in process `syz.3.830'. [ 117.689592][ T2824] veth0_vlan: entered allmulticast mode [ 117.716607][ T36] kauditd_printk_skb: 1372 callbacks suppressed [ 117.716626][ T36] audit: type=1400 audit(1785486861.444:3704): avc: denied { ioctl } for pid=2799 comm="syz.1.822" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.770093][ T36] audit: type=1400 audit(1785486861.494:3705): avc: denied { create } for pid=2825 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.789494][ T31] usb 2-1: device descriptor read/64, error -71 [ 117.809397][ T36] audit: type=1400 audit(1785486861.534:3706): avc: denied { execmem } for pid=2827 comm="syz.3.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 117.828655][ T36] audit: type=1400 audit(1785486861.534:3707): avc: denied { mmap_zero } for pid=2827 comm="syz.3.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 117.864997][ T36] audit: type=1400 audit(1785486861.594:3708): avc: denied { ioctl } for pid=2726 comm="syz.5.801" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.889889][ T36] audit: type=1400 audit(1785486861.594:3709): avc: denied { ioctl } for pid=2726 comm="syz.5.801" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.903963][ T31] usb usb2-port1: attempt power cycle [ 117.916397][ T36] audit: type=1400 audit(1785486861.644:3710): avc: denied { ioctl } for pid=2799 comm="syz.1.822" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.945061][ T36] audit: type=1400 audit(1785486861.644:3711): avc: denied { ioctl } for pid=2799 comm="syz.1.822" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.970112][ T36] audit: type=1400 audit(1785486861.644:3712): avc: denied { ioctl } for pid=2799 comm="syz.1.822" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.004427][ T36] audit: type=1400 audit(1785486861.734:3713): avc: denied { ioctl } for pid=2799 comm="syz.1.822" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.273861][ T31] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 118.291465][ T313] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 118.314548][ T313] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 118.324999][ T31] usb 2-1: device descriptor read/8, error -71 [ 118.331261][ T313] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 118.342078][ T313] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 118.351758][ T313] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 118.362067][ T313] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 118.371551][ T313] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 118.381911][ T313] usb 6-1: USB disconnect, device number 21 [ 118.466184][ T31] usb 2-1: device descriptor read/8, error -71 [ 118.703840][ T31] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 118.726175][ T31] usb 2-1: device descriptor read/8, error -71 [ 118.859941][ T31] usb 2-1: device descriptor read/8, error -71 [ 118.974306][ T31] usb usb2-port1: unable to enumerate USB device [ 119.134558][ T2853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.143091][ T2853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.194740][ T2855] netlink: 'syz.3.843': attribute type 46 has an invalid length. [ 119.373734][ T31] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 119.523726][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 119.532371][ T31] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 119.544814][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.561751][ T31] usb 6-1: config 0 descriptor?? [ 119.776492][ T31] usb 6-1: string descriptor 0 read error: -71 [ 119.792031][ T31] uvcvideo 6-1:0.0: Found multiple Units with ID 1 [ 119.799443][ T31] usb 6-1: Found UVC 0.00 device (2833:0201) [ 119.806382][ T31] usb 6-1: No valid video chain found. [ 119.814205][ T31] usb 6-1: USB disconnect, device number 22 [ 119.953732][ T310] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 120.103641][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 120.110774][ T310] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 120.119796][ T310] usb 2-1: config 0 has no interface number 0 [ 120.126378][ T310] usb 2-1: config 0 interface 184 has no altsetting 0 [ 120.136208][ T310] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 120.145304][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.153288][ T310] usb 2-1: Product: syz [ 120.157465][ T310] usb 2-1: Manufacturer: syz [ 120.162208][ T310] usb 2-1: SerialNumber: syz [ 120.168396][ T310] usb 2-1: config 0 descriptor?? [ 120.176591][ T310] smsc75xx v1.0.0 [ 120.524775][ T2888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.856'. [ 120.593753][ T31] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 120.766762][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 120.774387][ T31] usb 6-1: config 5 has an invalid interface number: 48 but max is 0 [ 120.782477][ T31] usb 6-1: config 5 has no interface number 0 [ 120.788595][ T31] usb 6-1: config 5 interface 48 has no altsetting 0 [ 120.798342][ T31] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=bb.44 [ 120.807546][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 120.818349][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.826353][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 120.835500][ T31] usb 6-1: Product: syz [ 120.839651][ T31] usb 6-1: Manufacturer: syz [ 120.844311][ T31] usb 6-1: SerialNumber: syz [ 121.015259][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 121.026957][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 121.036785][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 121.047231][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 121.060034][ T310] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 121.141370][ T31] usb 6-1: USB disconnect, device number 23 [ 121.833467][ T2938] netlink: 'syz.5.870': attribute type 4 has an invalid length. [ 121.843205][ T2938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.870'. [ 121.999046][ T2944] Invalid ELF header len 7 [ 122.153387][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 122.306320][ T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 122.315161][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.325330][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 122.334238][ T9] usb 6-1: config 1 has no interface number 0 [ 122.340892][ T9] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 122.351740][ T9] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 122.368496][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.378032][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.386185][ T9] usb 6-1: Product: syz [ 122.390419][ T9] usb 6-1: Manufacturer: syz [ 122.395108][ T9] usb 6-1: SerialNumber: syz [ 122.609563][ T313] hid-generic FFF9:0FFF:0003.0005: unknown main item tag 0xe [ 122.615809][ T2942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.625306][ T313] hid-generic FFF9:0FFF:0003.0005: hidraw0: HID v0.02 Device [syz1] on syz0 [ 122.638371][ T2942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.650465][ T10] usb 2-1: USB disconnect, device number 46 [ 122.697722][ T2942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.713326][ T2942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.742595][ T36] kauditd_printk_skb: 1177 callbacks suppressed [ 122.742611][ T36] audit: type=1400 audit(1785486866.465:4891): avc: denied { append } for pid=2957 comm="syz.1.878" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 122.793257][ T36] audit: type=1400 audit(1785486866.465:4892): avc: denied { append } for pid=2957 comm="syz.1.878" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 122.822964][ T36] audit: type=1400 audit(1785486866.505:4893): avc: denied { create } for pid=2957 comm="syz.1.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 122.863996][ T36] audit: type=1400 audit(1785486866.505:4894): avc: denied { append } for pid=2957 comm="syz.1.878" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 122.879604][ T9] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 122.895173][ T36] audit: type=1400 audit(1785486866.505:4895): avc: denied { append } for pid=2957 comm="syz.1.878" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 122.933325][ T9] usb 6-1: USB disconnect, device number 24 [ 122.953413][ T36] audit: type=1400 audit(1785486866.515:4896): avc: denied { create } for pid=2957 comm="syz.1.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 122.973755][ T36] audit: type=1400 audit(1785486866.575:4897): avc: denied { read write } for pid=296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.018963][ T36] audit: type=1400 audit(1785486866.575:4898): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.064792][ T36] audit: type=1400 audit(1785486866.575:4899): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.109997][ T36] audit: type=1326 audit(1785486866.585:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2943 comm="syz.2.873" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25cb9e019 code=0x7fc00000 [ 123.393249][ T66] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 123.553172][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 123.561374][ T66] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 123.570868][ T66] usb 2-1: config 0 has no interface number 0 [ 123.577741][ T66] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 123.588408][ T66] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 123.603576][ T66] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 123.613232][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.621331][ T66] usb 2-1: Product: syz [ 123.627086][ T66] usb 2-1: Manufacturer: syz [ 123.631871][ T66] usb 2-1: SerialNumber: syz [ 123.643282][ T66] usb 2-1: config 0 descriptor?? [ 123.654862][ T2979] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 123.668297][ T2979] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 123.880387][ T2980] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 123.893141][ T2980] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 123.914548][ T66] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 123.933187][ T66] asix 2-1:0.34: probe with driver asix failed with error -32 [ 124.362639][ T3023] netlink: 56 bytes leftover after parsing attributes in process `syz.3.898'. [ 124.563085][ T66] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 124.681355][ T3039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.903'. [ 124.715889][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.726893][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.737624][ T66] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 124.747789][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.763147][ T66] usb 6-1: config 0 descriptor?? [ 125.143006][ T2058] Bluetooth: hci0: command 0x1003 tx timeout [ 125.149148][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 125.169092][ T31] usb 2-1: USB disconnect, device number 47 [ 125.285147][ T3021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.303201][ T3021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.479011][ T3066] veth1_to_bond: entered allmulticast mode [ 125.485859][ T3066] veth1_to_bond: entered promiscuous mode [ 125.498108][ T66] usbhid 6-1:0.0: can't add hid device: -71 [ 125.510350][ T66] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 125.529487][ T66] usb 6-1: USB disconnect, device number 25 [ 125.768669][ T3072] overlayfs: conflicting options: userxattr,verity=on [ 125.775674][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 125.888985][ T3078] tipc: Enabling of bearer rejected, failed to enable media [ 125.913100][ T3076] tipc: Enabling of bearer rejected, failed to enable media [ 125.933066][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 125.941098][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.950872][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 125.965014][ T10] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 125.974149][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.982412][ T10] usb 2-1: Product: syz [ 125.986647][ T10] usb 2-1: Manufacturer: syz [ 125.991244][ T10] usb 2-1: SerialNumber: syz [ 126.152891][ T66] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 126.202936][ T3065] veth1_to_bond: left promiscuous mode [ 126.208527][ T3065] veth1_to_bond: left allmulticast mode [ 126.211461][ T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 126.221873][ T10] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 126.236801][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 126.247592][ T10] usb 2-1: USB disconnect, device number 48 [ 126.309837][ T66] usb 6-1: New USB device found, idVendor=17cc, idProduct=0808, bcdDevice= 0.40 [ 126.329121][ T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.334640][ T2482] udevd[2482]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.338271][ T66] usb 6-1: Product: syz [ 126.358068][ T66] usb 6-1: Manufacturer: syz [ 126.362697][ T66] usb 6-1: SerialNumber: syz [ 126.577751][ T66] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 126.590251][ T66] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 126.608691][ T66] usb 6-1: USB disconnect, device number 26 [ 126.621029][ T3088] netlink: 36 bytes leftover after parsing attributes in process `syz.3.921'. [ 126.687455][ T2483] udevd[2483]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 127.547688][ T3127] tipc: Failed to remove unknown binding: 66,0,0/0:3857493230/3857493231 [ 127.556477][ T3127] tipc: Failed to remove unknown binding: 66,0,0/0:3857493230/3857493231 [ 127.776470][ T36] kauditd_printk_skb: 558 callbacks suppressed [ 127.776488][ T36] audit: type=1400 audit(1785486871.506:5459): avc: denied { read write } for pid=296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.835943][ T36] audit: type=1400 audit(1785486871.506:5460): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.844535][ T3133] netlink: 'syz.3.935': attribute type 2 has an invalid length. [ 127.861977][ T36] audit: type=1400 audit(1785486871.506:5461): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.894263][ T36] audit: type=1400 audit(1785486871.546:5462): avc: denied { read write } for pid=296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.918680][ T36] audit: type=1400 audit(1785486871.546:5463): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.944148][ T36] audit: type=1400 audit(1785486871.546:5464): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.970718][ T36] audit: type=1400 audit(1785486871.566:5465): avc: denied { create } for pid=3130 comm="syz.1.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.976482][ T3133] tipc: New replicast peer: 255.255.255.255 [ 127.991477][ T36] audit: type=1400 audit(1785486871.566:5466): avc: denied { setopt } for pid=3130 comm="syz.1.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.001065][ T3133] tipc: Enabled bearer , priority 9 [ 128.037022][ T36] audit: type=1400 audit(1785486871.566:5467): avc: denied { ioctl } for pid=3130 comm="syz.1.934" path="socket:[20420]" dev="sockfs" ino=20420 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.061877][ T36] audit: type=1400 audit(1785486871.566:5468): avc: denied { write } for pid=3130 comm="syz.1.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.082516][ T3135] syzkaller1: entered promiscuous mode [ 128.089129][ T3133] netlink: 16 bytes leftover after parsing attributes in process `syz.3.935'. [ 128.091939][ T3135] syzkaller1: entered allmulticast mode [ 128.305529][ T3149] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock [ 128.322622][ T31] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 128.472618][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 128.480380][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.492117][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 128.502058][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 128.513156][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 128.527960][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.537087][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 128.545865][ T31] usb 2-1: SerialNumber: syz [ 128.562129][ T3137] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 128.569835][ T3137] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 128.578138][ T31] hub 2-1:1.0: bad descriptor, ignoring hub [ 128.584120][ T31] hub 2-1:1.0: probe with driver hub failed with error -5 [ 128.813300][ T3135] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 128.821329][ T3135] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 128.928470][ T3188] netlink: 16 bytes leftover after parsing attributes in process `syz.5.954'. [ 128.970402][ T3190] netlink: 'syz.2.955': attribute type 4 has an invalid length. [ 128.993861][ T3190] netlink: 'syz.2.955': attribute type 4 has an invalid length. [ 129.112538][ T313] tipc: Node number set to 2035774871 [ 129.245827][ T31] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 129.432473][ T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 129.608557][ T10] usb 6-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 129.617844][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.626555][ T10] usb 6-1: Product: syz [ 129.637851][ T10] usb 6-1: Manufacturer: syz [ 129.647227][ T10] usb 6-1: SerialNumber: syz [ 129.727508][ T3221] overlayfs: missing 'lowerdir' [ 129.901134][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 129.913818][ T10] usb 6-1: USB disconnect, device number 27 [ 130.040659][ T2483] udevd[2483]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 130.292376][ T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 130.422372][ T10] usb 6-1: device descriptor read/64, error -71 [ 130.672365][ T10] usb 6-1: device descriptor read/64, error -71 [ 130.922343][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 131.062284][ T10] usb 6-1: device descriptor read/64, error -71 [ 131.302316][ T10] usb 6-1: device descriptor read/64, error -71 [ 131.412391][ T10] usb usb6-port1: attempt power cycle [ 131.752211][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 131.774405][ T10] usb 6-1: device descriptor read/8, error -71 [ 131.904435][ T10] usb 6-1: device descriptor read/8, error -71 [ 132.142192][ T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 132.164150][ T10] usb 6-1: device descriptor read/8, error -71 [ 132.294244][ T10] usb 6-1: device descriptor read/8, error -71 [ 132.402203][ T10] usb usb6-port1: unable to enumerate USB device [ 132.787092][ T36] kauditd_printk_skb: 522 callbacks suppressed [ 132.787111][ T36] audit: type=1400 audit(1785486876.516:5991): avc: denied { name_bind } for pid=3233 comm="syz.3.966" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 132.816537][ T36] audit: type=1400 audit(1785486876.516:5992): avc: denied { node_bind } for pid=3233 comm="syz.3.966" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 132.819951][ T66] usb 2-1: USB disconnect, device number 49 [ 132.853313][ T3219] netlink: 64 bytes leftover after parsing attributes in process `syz.2.962'. [ 132.880912][ T66] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 132.904430][ T36] audit: type=1400 audit(1785486876.636:5993): avc: denied { create } for pid=3237 comm="syz.3.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.950937][ T36] audit: type=1400 audit(1785486876.636:5994): avc: denied { read write } for pid=296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.987488][ T3243] netlink: 72 bytes leftover after parsing attributes in process `syz.2.969'. [ 133.052024][ T36] audit: type=1400 audit(1785486876.636:5995): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.132014][ T36] audit: type=1400 audit(1785486876.636:5996): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.164644][ T3251] audit: audit_backlog=65 > audit_backlog_limit=64 [ 133.171199][ T3251] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 133.181229][ T3251] audit: backlog limit exceeded [ 133.192052][ T36] audit: type=1400 audit(1785486876.656:5997): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 133.325963][ T66] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 133.465704][ T3270] 9p: Unknown uid 00000000004294967295 [ 133.481984][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 133.495426][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 133.506582][ T66] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 133.518063][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.529153][ T66] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.562065][ T66] usb 2-1: string descriptor 0 read error: -22 [ 133.568734][ T66] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.579099][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.592611][ T66] usb 2-1: 0:2 : does not exist [ 133.856134][ T3242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.889666][ T3242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.913725][ T9] usb 2-1: USB disconnect, device number 50 [ 133.949701][ T2483] udevd[2483]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 134.250967][ T3292] tipc: Can't bind to reserved service type 0 [ 134.279980][ T3292] tipc: Enabling of bearer rejected, failed to enable media [ 134.572402][ T3311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3311 comm=syz.2.991 [ 134.751830][ T66] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 134.921848][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 134.929238][ T66] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 134.941180][ T66] usb 2-1: config 0 interface 0 has no altsetting 0 [ 134.947867][ T66] usb 2-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.00 [ 134.957087][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.966486][ T66] usb 2-1: config 0 descriptor?? [ 135.061878][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 135.203046][ T3331] overlay: ./file0 is not a directory [ 135.212576][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 135.221544][ T9] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 135.236200][ T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 135.245336][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.253402][ T9] usb 6-1: Product: syz [ 135.257601][ T9] usb 6-1: Manufacturer: syz [ 135.262297][ T9] usb 6-1: SerialNumber: syz [ 135.271147][ T9] r8152-cfgselector 6-1: Unknown version 0x0000 [ 135.278500][ T9] r8152-cfgselector 6-1: config 0 descriptor?? [ 135.391811][ T3307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.404168][ T3307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.414432][ T66] apple 0003:05AC:0267.0006: unknown main item tag 0x7 [ 135.421342][ T66] apple 0003:05AC:0267.0006: unknown main item tag 0x0 [ 135.429404][ T66] apple 0003:05AC:0267.0006: unknown main item tag 0x1 [ 135.437071][ T66] apple 0003:05AC:0267.0006: item fetching failed at offset 33/37 [ 135.445187][ T66] apple 0003:05AC:0267.0006: parse failed [ 135.451022][ T66] apple 0003:05AC:0267.0006: probe with driver apple failed with error -22 [ 135.495828][ T3347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1004'. [ 135.615594][ T9] usb 2-1: USB disconnect, device number 51 [ 135.746318][ T3322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.760751][ T3322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.780778][ T3355] overlayfs: failed to clone upperpath [ 136.358730][ T3363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1010'. [ 136.411625][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 136.442816][ T3368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'. [ 136.449893][ T3371] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65305 sclass=netlink_xfrm_socket pid=3371 comm=syz.2.1013 [ 136.571600][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 136.581206][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 136.591059][ T9] usb 2-1: config 0 has no interface number 0 [ 136.597997][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 136.612901][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 136.622161][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.630230][ T9] usb 2-1: Product: syz [ 136.634535][ T9] usb 2-1: Manufacturer: syz [ 136.639142][ T9] usb 2-1: SerialNumber: syz [ 136.645510][ T9] usb 2-1: config 0 descriptor?? [ 136.654925][ T9] smsc75xx v1.0.0 [ 136.856095][ T3361] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1009'. [ 137.558311][ T3390] overlay: ./file0 is not a directory [ 137.874910][ T36] kauditd_printk_skb: 1527 callbacks suppressed [ 137.874950][ T36] audit: type=1400 audit(1785486881.597:7324): avc: denied { ioctl } for pid=3360 comm="syz.1.1009" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.906281][ T36] audit: type=1400 audit(1785486881.597:7325): avc: denied { ioctl } for pid=3360 comm="syz.1.1009" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.013985][ T36] audit: type=1400 audit(1785486881.737:7326): avc: denied { name_bind } for pid=3391 comm="syz.3.1021" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 138.035983][ T36] audit: type=1400 audit(1785486881.737:7327): avc: denied { node_bind } for pid=3391 comm="syz.3.1021" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 138.061933][ T36] audit: type=1400 audit(1785486881.787:7328): avc: denied { create } for pid=3393 comm="syz.3.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.065673][ T3394] tc_dump_action: action bad kind [ 138.087280][ T36] audit: type=1400 audit(1785486881.787:7329): avc: denied { bind } for pid=3393 comm="syz.3.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.109726][ T36] audit: type=1400 audit(1785486881.787:7330): avc: denied { create } for pid=3393 comm="syz.3.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 138.131406][ T36] audit: type=1400 audit(1785486881.787:7331): avc: denied { setopt } for pid=3393 comm="syz.3.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.147233][ T3397] batadv_slave_1: entered promiscuous mode [ 138.161234][ T36] audit: type=1400 audit(1785486881.807:7332): avc: denied { ioctl } for pid=3360 comm="syz.1.1009" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.186761][ T3396] batadv_slave_1: left promiscuous mode [ 138.192673][ T36] audit: type=1400 audit(1785486881.807:7333): avc: denied { ioctl } for pid=3360 comm="syz.1.1009" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.350392][ T3417] futex_wake_op: syz.3.1029 tries to shift op by 144; fix this program [ 138.709806][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 138.720756][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 138.730190][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 138.741078][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 138.750748][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 138.765035][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 138.774817][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 138.784530][ T9] usb 2-1: USB disconnect, device number 52 [ 138.796480][ T2483] udevd[2483]: setting owner of /dev/bus/usb/002/052 to uid=0, gid=0 failed: No such file or directory [ 138.987871][ T3431] netlink: 'syz.3.1036': attribute type 27 has an invalid length. [ 139.237511][ T3451] tmpfs: Bad value for 'uid' [ 139.242265][ T3451] tmpfs: Bad value for 'uid' [ 139.591269][ T310] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 139.731246][ T310] usb 2-1: device descriptor read/64, error -71 [ 139.817688][ T3491] fuse: Bad value for 'fd' [ 139.971252][ T310] usb 2-1: device descriptor read/64, error -71 [ 140.211195][ T310] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 140.341177][ T310] usb 2-1: device descriptor read/64, error -71 [ 140.581172][ T310] usb 2-1: device descriptor read/64, error -71 [ 140.698166][ T3507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'. [ 140.707372][ T3507] netlink: 'syz.2.1064': attribute type 2 has an invalid length. [ 140.715342][ T310] usb usb2-port1: attempt power cycle [ 141.051122][ T310] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 141.073325][ T310] usb 2-1: device descriptor read/8, error -71 [ 141.203181][ T310] usb 2-1: device descriptor read/8, error -71 [ 141.347397][ T3523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'. [ 141.374913][ T3525] veth1: entered promiscuous mode [ 141.380168][ T3525] veth1: entered allmulticast mode [ 141.451023][ T310] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 141.498586][ T310] usb 2-1: device descriptor read/8, error -71 [ 141.635068][ T310] usb 2-1: device descriptor read/8, error -71 [ 141.761050][ T310] usb usb2-port1: unable to enumerate USB device [ 142.323000][ T3578] overlayfs: failed to resolve './file0': -2 [ 142.415060][ T3586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 142.480320][ T3590] FAULT_INJECTION: forcing a failure. [ 142.480320][ T3590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.493459][ T3590] CPU: 1 UID: 0 PID: 3590 Comm: syz.1.1089 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 142.493490][ T3590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.493502][ T3590] Call Trace: [ 142.493509][ T3590] [ 142.493514][ T3590] __dump_stack+0x21/0x30 [ 142.493534][ T3590] dump_stack_lvl+0x140/0x1c0 [ 142.493549][ T3590] ? __cfi_dump_stack_lvl+0x10/0x10 [ 142.493563][ T3590] ? is_bpf_text_address+0x17b/0x1a0 [ 142.493579][ T3590] ? kernel_text_address+0xa9/0xe0 [ 142.493594][ T3590] dump_stack+0x19/0x20 [ 142.493608][ T3590] should_fail_ex+0x3c2/0x510 [ 142.493621][ T3590] should_fail+0xf/0x20 [ 142.493631][ T3590] should_fail_usercopy+0x1e/0x30 [ 142.493644][ T3590] _copy_from_user+0x20/0xa0 [ 142.493659][ T3590] ___sys_sendmsg+0x1c7/0x370 [ 142.493671][ T3590] ? __sys_sendmsg+0x2a0/0x2a0 [ 142.493682][ T3590] ? kstrtouint+0x78/0xf0 [ 142.493695][ T3590] ? __fget_files+0x2bc/0x330 [ 142.493709][ T3590] __sys_sendmmsg+0x2b4/0x4e0 [ 142.493721][ T3590] ? __cfi___sys_sendmmsg+0x10/0x10 [ 142.493734][ T3590] ? __cfi_ksys_write+0x10/0x10 [ 142.493746][ T3590] __x64_sys_sendmmsg+0xa4/0xc0 [ 142.493757][ T3590] x64_sys_call+0xfec/0x2ee0 [ 142.493771][ T3590] do_syscall_64+0x57/0xf0 [ 142.493784][ T3590] ? clear_bhb_loop+0x50/0xa0 [ 142.493799][ T3590] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 142.493813][ T3590] RIP: 0033:0x7f649ad9e019 [ 142.493825][ T3590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.493836][ T3590] RSP: 002b:00007f649bceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 142.493850][ T3590] RAX: ffffffffffffffda RBX: 00007f649b025fa0 RCX: 00007f649ad9e019 [ 142.493860][ T3590] RDX: 0000000000000001 RSI: 0000200000003c00 RDI: 0000000000000003 [ 142.493867][ T3590] RBP: 00007f649bceb090 R08: 0000000000000000 R09: 0000000000000000 [ 142.493875][ T3590] R10: 0000000000044040 R11: 0000000000000246 R12: 0000000000000001 [ 142.493883][ T3590] R13: 00007f649b026038 R14: 00007f649b025fa0 R15: 00007ffea1f2b5f8 [ 142.493893][ T3590] [ 142.886095][ T36] kauditd_printk_skb: 2814 callbacks suppressed [ 142.886115][ T36] audit: type=1400 audit(1785486886.607:10148): avc: denied { create } for pid=3595 comm="syz.1.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 142.912233][ T36] audit: type=1400 audit(1785486886.607:10149): avc: denied { setopt } for pid=3595 comm="syz.1.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 142.941745][ T36] audit: type=1400 audit(1785486886.607:10150): avc: denied { write } for pid=3595 comm="syz.1.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 142.965942][ T36] audit: type=1400 audit(1785486886.607:10151): avc: denied { write } for pid=3595 comm="syz.1.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 142.994482][ T36] audit: type=1400 audit(1785486886.607:10152): avc: denied { create } for pid=3595 comm="syz.1.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 143.015406][ T36] audit: type=1400 audit(1785486886.607:10153): avc: denied { write } for pid=3595 comm="syz.1.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 143.035755][ T36] audit: type=1400 audit(1785486886.607:10154): avc: denied { create } for pid=3595 comm="syz.1.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 143.056001][ T36] audit: type=1400 audit(1785486886.617:10155): avc: denied { write } for pid=3595 comm="syz.1.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 143.081788][ T36] audit: type=1400 audit(1785486886.647:10156): avc: denied { read write } for pid=296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.106703][ T36] audit: type=1400 audit(1785486886.647:10157): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.136091][ T3614] ------------[ cut here ]------------ [ 143.141628][ T3614] WARNING: CPU: 0 PID: 3614 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 143.151159][ T3614] Modules linked in: [ 143.155088][ T3614] CPU: 0 UID: 0 PID: 3614 Comm: syz.2.1095 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 143.166737][ T3614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.176877][ T3614] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 143.182930][ T3614] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 64 d2 0b 06 00 0f 85 c2 00 00 00 c6 05 57 d2 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 143.202647][ T3614] RSP: 0018:ffffc9001166f880 EFLAGS: 00010246 [ 143.208759][ T3614] RAX: 0000000000000000 RBX: 000000000000000f RCX: 0000000000000000 [ 143.216924][ T3614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9001166f938 [ 143.224974][ T3614] RBP: ffffc9001166f9a8 R08: ffffc9001166f937 R09: 0000000000000000 [ 143.232997][ T3614] R10: ffffc9001166f920 R11: fffff520022cdf27 R12: ffffc9001166f8c0 [ 143.241021][ T3614] R13: dffffc0000000000 R14: 1ffff920022cdf14 R15: 0000000000000000 [ 143.249031][ T3614] FS: 00007ff25d9fc6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 143.258022][ T3614] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.264671][ T3614] CR2: 0000200000001000 CR3: 000000012f820000 CR4: 00000000003526b0 [ 143.272708][ T3614] Call Trace: [ 143.276012][ T3614] [ 143.278962][ T3614] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 143.285094][ T3614] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 143.290873][ T3614] ? incfs_realloc_mount_info+0xa7/0x4c0 [ 143.296542][ T3614] ___kmalloc_large_node+0x81/0x220 [ 143.301967][ T3614] ? incfs_realloc_mount_info+0xa7/0x4c0 [ 143.307643][ T3614] __kmalloc_large_node_noprof+0x1e/0xd0 [ 143.313331][ T3614] ? incfs_realloc_mount_info+0xa7/0x4c0 [ 143.318999][ T3614] __kmalloc_noprof+0x326/0x510 [ 143.323919][ T3614] ? __cfi_lockref_get+0x10/0x10 [ 143.328893][ T3614] incfs_realloc_mount_info+0xa7/0x4c0 [ 143.334400][ T3614] ? incfs_add_sysfs_node+0x118/0x230 [ 143.339800][ T3614] ? __kasan_check_write+0x18/0x20 [ 143.344973][ T3614] incfs_alloc_mount_info+0x478/0x5f0 [ 143.350468][ T3614] incfs_mount_fs+0x3ca/0x970 [ 143.355205][ T3614] ? __cfi_incfs_mount_fs+0x10/0x10 [ 143.360443][ T3614] ? selinux_capable+0x38/0x50 [ 143.365269][ T3614] legacy_get_tree+0x103/0x1b0 [ 143.370073][ T3614] ? __cfi_incfs_mount_fs+0x10/0x10 [ 143.375325][ T3614] vfs_get_tree+0x9e/0x290 [ 143.379776][ T3614] do_new_mount+0x251/0xb40 [ 143.384353][ T3614] ? security_capable+0x44/0x130 [ 143.389584][ T3614] path_mount+0x66a/0xff0 [ 143.393966][ T3614] ? putname+0x113/0x150 [ 143.398240][ T3614] __se_sys_mount+0x2bf/0x480 [ 143.402964][ T3614] ? __x64_sys_mount+0xf0/0xf0 [ 143.407763][ T3614] ? __kasan_check_write+0x18/0x20 [ 143.412931][ T3614] ? fpregs_restore_userregs+0x11c/0x260 [ 143.418600][ T3614] __x64_sys_mount+0xc3/0xf0 [ 143.423252][ T3614] x64_sys_call+0x2021/0x2ee0 [ 143.427958][ T3614] do_syscall_64+0x57/0xf0 [ 143.432433][ T3614] ? clear_bhb_loop+0x50/0xa0 [ 143.437144][ T3614] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 143.443095][ T3614] RIP: 0033:0x7ff25cb9e019 [ 143.447540][ T3614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.467204][ T3614] RSP: 002b:00007ff25d9fc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 143.475845][ T3614] RAX: ffffffffffffffda RBX: 00007ff25ce25fa0 RCX: 00007ff25cb9e019 [ 143.483860][ T3614] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 0000200000000140 [ 143.491888][ T3614] RBP: 00007ff25cc3500c R08: 0000200000000540 R09: 0000000000000000 [ 143.499877][ T3614] R10: 0000000001000001 R11: 0000000000000246 R12: 0000000000000000 [ 143.507897][ T3614] R13: 00007ff25ce26038 R14: 00007ff25ce25fa0 R15: 00007fffa0e28128 [ 143.515912][ T3614] [ 143.518939][ T3614] ---[ end trace 0000000000000000 ]--- [ 143.524466][ T3614] incfs: Error allocating mount info. -12 [ 143.530322][ T3614] incfs: mount failed -12 [ 143.580861][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 143.730756][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 143.738055][ T10] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 143.746207][ T10] usb 2-1: config 0 has no interface number 0 [ 143.752352][ T10] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 143.762396][ T10] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 143.775922][ T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 143.785017][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.793063][ T10] usb 2-1: Product: syz [ 143.797233][ T10] usb 2-1: Manufacturer: syz [ 143.801849][ T10] usb 2-1: SerialNumber: syz [ 143.807914][ T10] usb 2-1: config 0 descriptor?? [ 143.814513][ T3607] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 143.822146][ T3607] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 144.096641][ T3616] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 144.105015][ T3616] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 144.315018][ T10] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 144.517265][ T10] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 206 [ 145.952046][ T10] usb 2-1: USB disconnect, device number 57