last executing test programs: 6.864894846s ago: executing program 1 (id=557): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x7}, 0x1c) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r1, 0x400, 0x1) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x55) fcntl$getflags(r1, 0x401) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000040)={r2, r3+10000000}, &(0x7f0000000100)) 6.004068669s ago: executing program 1 (id=568): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_create(&(0x7f0000001000)='(]%~\x00', 0x5) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000007600"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$unix(r0, &(0x7f0000001040)=@file={0x0, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 5.769693195s ago: executing program 1 (id=572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000020c0)="0fc72a0f00532d66b9e200000066b80000008066ba000000000f300f209166b94e06000066b857c6d38966ba000000000f3082b3006096ba4100ecbaa100ecbaf80c66b89a7d5c8666efbafc0ced0f5c29", 0x51}], 0x1, 0x9, 0x0, 0x0) (async) r3 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4003, 0x14c) r5 = open_tree(r4, &(0x7f0000000180)='./file0\x00', 0x8000) (async) pipe(&(0x7f0000000040)) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x62001, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000000440)={0x0, 0x0, @pic={0xac, 0x9, 0xb2, 0x5, 0x2, 0x3, 0x0, 0x40, 0xa, 0x6, 0x6, 0x7, 0x1, 0xf1, 0x2, 0x6}}) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000140)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x40, 0x101) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xa2601, 0x48) flock(r9, 0x5) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002280)=ANY=[@ANYRESOCT=r5, @ANYBLOB="9870c55dd714505301ef53989e093ff8119ede85d194ce5279cfc59311e87ca9445362f332c3ee07332f1b3578db813c80277fc8c231e28ad87cd71af2d87ab3233f4b7c8552798460cea9119c53165756ab71bfd61b50a53f79bbab88bb544aec78a23991beb9a6744b95cdd8eb580c018eac1d7e0dfdcd429e503c02bf750e915570f0a009075a1c244d78bcfff83b3c8da26c4750670ec1d66d85d9454a1c34163a0bb58a8a4e9b9b3b215baec67ea9164b9a1a458744386c77d61ff97a6b00"/204, @ANYBLOB="68656e88bf276594eb4f03fd0f30a47253d503fe0897007ba775", @ANYRES64=r3], 0x28}}, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x0, 0x12, r10, 0xe9c22000) gettid() (async) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0x3, 0x1e5}, &(0x7f0000002140)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r11, r12, r13, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, 0x0) (async) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r14, &(0x7f0000000080), 0x8) (async) sigaltstack(&(0x7f0000001040)={&(0x7f0000001080)=""/4122, 0x0, 0x101a}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) rt_sigqueueinfo(r15, 0x27, &(0x7f00000001c0)={0x13, 0xa, 0x8}) (async) pivot_root(0x0, 0x0) 5.669966938s ago: executing program 1 (id=574): syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r4 = gettid() tkill(r4, 0x12) io_setup(0x401, &(0x7f00000001c0)=0x0) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0}) io_pgetevents(r5, 0x4, 0x4a6d730c7316a803, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0), 0x8}) (async) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffff4) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r6, &(0x7f0000000040)='#w\rs', 0x4) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async) ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') (async) prctl$PR_GET_SPECULATION_CTRL(0x53564d41, 0x0, 0x4) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 4.764377552s ago: executing program 1 (id=582): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a000a000000000000000000110008000e00000000ff", 0x24) syz_usb_connect(0x2, 0x48, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYBLOB="95648af13ef3d48e5cbd08ecfac7299dde0db4d0ddef61c5c98807fb2862e30c01ebef517e476ca0a81d83", @ANYRES8=0x0], 0x0) 3.73440923s ago: executing program 3 (id=586): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) (async) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x3, 0x2e, 0xd, 0x17, 0x7, 0x80000010, 0x6, 0xa0, 0x1}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r2 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000500), 0x4) (async) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) (async) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x0, 0x0) 3.621263672s ago: executing program 3 (id=587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x4000002, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r5, 0x40585883, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r4, 0x4068aea3, &(0x7f0000000000)={0xed, 0x0, 0x7}) r7 = socket(0x8000000010, 0x2, 0x0) write(r7, &(0x7f0000000000)="fc0000001c000720ab5b2509b86803000aab087a0400000001e2bb93210001c0f003058405006010000000810000b9d95662537a00bc000c00f0ff7f0000b400916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c8755cdc8362defe04f000000006239ec2a0f0d1bcae5fa8f5f9dcdd51af51af8502943283f4bb102ddf9b2b8f5566791cf1902a38204ea45e609ded815b2ccd2430de4cc71e0ad73bd6433802e0784f20137d1890058a10000c880ac801fe4af00004900d400"/252, 0xfc) 3.465777447s ago: executing program 3 (id=588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4044) syz_usb_connect(0x3, 0x5e, &(0x7f0000001600)={{0x12, 0x1, 0x310, 0xcf, 0xf3, 0xa0, 0x40, 0x586, 0x3418, 0x5ff6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x3, 0x1c, 0x10, 0x0, "", [{{0x9, 0x4, 0xcf, 0x1, 0x0, 0x2, 0x6, 0x0, 0xf, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xe, 0x8000, 0x14}, {0x6, 0x24, 0x1a, 0x800, 0x4}}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x6eb, 0x8}, {0x6, 0x24, 0x1a, 0x2, 0x6}}]}}]}}]}}, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0}) 2.505302042s ago: executing program 0 (id=590): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) (async) sendmsg$tipc(r2, &(0x7f00000001c0)={&(0x7f00000002c0)=@name={0x1e, 0x2, 0xffffffffffffffff, {{0x41, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc8d1}, 0x20008000) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10003, 0x0, &(0x7f0000ffc000/0x2000)=nil}) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) (async) r3 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0xfffffc}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f0000000080)='4', 0x1) (async) fcntl$addseals(r3, 0x409, 0xb) (async) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000009c0)=@svm={0x1, 0x1, 0x1080, {0xc000}, {"3a9aa1002097972861224c3af86299e6a3b68e8de891a24c8f230e702aae98f243f35488a23605c5a8b218c87000f5d5188f1591f0cf433ff1fe5f64188066a33ba67ebaeeda0b957b3aed9782313a6a2d07fc4a9b05549c26063a42c9445dfa73bbb4be7073a3ba8829daa464c5ff80180e200c5f15d393734679752604dcc60e934fc8c75674a7e285bdbfb25f6e856c5d33a8c18081bb5a3681d8491e6a3218dfe5c2eae67027b0f462e31c7fa12d6ff2d4f4488339da0bbd71f87b8b860994d674ea6e5a8cfc765097dc88364a4896f4a1b43e3728a5fb8e1f553f4ea5d17f49a873ce11730bb7947344a73fb05d1367d0fab7be3479e94c3578d6aec7f791e2dd25cdb4a3c78831a2936a861ea0a756bb336c3b68d6ad59a3b047061bffddaad79091170aec56636b1a2c1109080d2438674c85929421254edb9a79c27e36e9dfedc9ef9e084703c42f35b953a62323e859ccf84ea6139c85ec5c3929dbe94bc16b13203cee8fe286a3c6a742bdc4dcb1df3ec524c3d0dcd488a149b364757604749c8befcfced7e040070af53983eb3d7291cb0e154924c5f35285f822e99109de5ed372dfa972d7e0dde5133475b1faaea64b6e89f15c12031f9b22c42609195fd74546658121dd3bc65855a0ad8fc4de1356a75487e8999ecf512563b30c5edb5d3f6c9aef16b61ce79e2cec4e154e2bc123f9439478c9656c72cfc1e6a16d25d198388ad5d3585d1c460d923917df02da61dc1fd4cc5d14c7f8c1181cf8184f85430854cc13e5e2f2ddc7178ac1e15411a160a6db6610d567a0e2255f42187b2801f2c7ef598cf31be052163f409f36b18374f42f85e01da703478d41c42308f16420afc860d77d4ef620cd9178d8aafdb66ccc129e53b1515f9a85b119655315448acd76e8a44488961eccf48a08f543dfcbe0cd2d3cf9c06dad31e002a62b4c9d60894f36bc48258cef2629e6dba5e4b37099e5e4b4a0253adf87f02a6f6a224a06f6b2cb0076c81e1b3bd347157875abd8baabfa970340a21e6334fd578c3487fe89d944a74cfe3ed791c1e6b4205bdefac7d070efff3a52d145cb33d73811314aa937f65be5e50d9f3fb3bb96b6a90a73444747ccd4e9a34fa268ae024e5d665d536f6ca8e64a1140580dbdac5786aee903e2ec69243198af46603234b06685ac173a4faab81417fdf68c303dd0395c7adb1425d262a1e3d8e4f91d666cea554bfc26d2194aa3c6a3efe4fcf78f44593ace096c111e8369f5fd7769096ac108a2c32f7db880c35b67a7aae980b1d8a8d8acf2c4c33fbd4a1555b5d378d1e4e2e812e3925d71b21313d054c85b72239b437426d52219814e68d972ea52efc520a1ff7b6b887b4767f8a464a10aae30470dd6d38753a1bf7c8391b1d8bbb204657aa7918c3a9e0e35dca24f716fe957429c47ae9f38fad1f760c123cac513f4cdbda43aa751cce54e8647f6c5e27d847fbb3b054af97a8108d2c648cd1b6dfcf06ff4652482922c3e44fd312d8c15a504bbe53b090b78377074f4646c980a96f348d81a990851c35e84fd5baf5df6d45fc8419003b5162be3d9e498f9560e6972e750af6d82efa9af7512fbd82040cdc77420c883e6e04364dfc0e7fc4c7dd34cad07e2ef4f03fc4a8180be58bd1a0b22ae7e2940522021a580c6e9c265a9b2cb6fc8057fb7de1f0f615495540a295559d71797c3af0474faa1549478d14cd6444b0cd4fd52700fa11bfa524b954fa532ecb39ecf1ddadae2eda9bdc9f520f2bb1483bf78cbdc38de48781cb9cdff91cf4548d4cd85fa0bbb66bca4f59dbc86b7ccec7e6be75d87c11d8aa8fe6fa9c66466a388ef477707c5d67672663004c78a766e0706c0c2999d43a50e5e459018d5ab1beefc28c3354aa278fb89b9c09da48e9529e35509b70f0235da198cf4e991bb1849099943a395a3503032e76f281e090038ece99a24cb228da02eb0ff18dcb62e977b416c92f952dec0fe277da72b1ae48c716931f183bcec7d9454d32bbc4f90f34b14819cab91e1b3f309239fb83ae9cdd4f967381f9c0df726939e062ca784edd8e259c1f8f45a72fcc0f57fa055fdeab00e52ca18e985518c0815a611125479e51cd6da059e92635bb5575848f51c31564fe035428997933e7acec9ca67074882b788264d34fd4c948bb2e27ae129da313f380e1f8cbb85ff67c058ca2cf2c1a08469abef9b8f75faed35ca6764e20e106b8fdfff693a187d14604bd56049f55ba8803e1d2ef57eca1049f5937c3ca7299b36f811edf1ea6a73110339eb3d3461dd270118d025009f2c80c2a735f6c09bd67f912add9a1613b06beee35a0e4a32676ba2f7916b5abb9cacef88d11c531a0e6daad6f7840b4d13cc81621056ed98e9a0a166782158169eeac67395692afc9cd7df21a8ed9010e9dd8368f9caec82eb244a110334074d35fc11ed7c57f170c78b09370af033923c8ebdf3c01e81d19151b7aad8d1819d09db625418f444c9e918215b855ceb2176c17906c61f5d83777086b508735af8e72c9938926c870061d79887a2ca5257bde00bba9279ed8a36b432af742133564c3e04a3d700ef1411930ac7eaeddb0a4a9367b61b02b12bea4571cca927030e9d071c605920c1c037e05f86964aaf4bcaa2193bdb500a2d23a7f25fcd91e68727f9c9cf266aa81cbf64e91ea278247049f2e5294abde50812de4467a14f00461778f6645162150bf40108e69da0c99f4cb4819ba3c0187bdd43b84c4ff20dc50eb07010f73a3943a1a1afa49b533ae50a887c828cdf73c340406d8371d91f788012fc8c6832b7d61c10ef6d9ea362b74c4dd8c71c14d332dc59855b15cbee5a0fe3bad8d84d8fea0282d574965665d5713498b2e50c40584a86c4b33d384ff5451679b4ef94f356eaaf8f22c3ff9aed97ed5941bd8045695923cf8de114c6134c3c8160b87c2afbdc01cc1c34c5ad3c6cf24f17f850e60ceaec98a95a4e499061a2db5dd34c59010c2088fb643c657ddc66d28368a1a379495d2e9484e2de3afdac1dfb65b5824a6632c67f1b52914e4880c4f5c2e70a2c856b5484ae177311a5135a490b59ce5197f1ddada2b9cc15a7634d57ae47bdbd8c321e36dc1b6adae94248fdd74be9b4b2d654a53e3a5d80d611ea5c4e2c9b166ba3b980c99bf36765cd2fb1784c7a4a42d26a4a1d88ecd0e46ef5579bb2641e41bf0781d8f85ffe633cd6a9e36f2ee19f87307cdf211802279146cb2ec6e5798ba4e84d96ef6c04c038a72d1c0f09dd302aa76da0ce4939d3c97e737fdc16de7b35c09356ca4dcfe9a8dad698aef10cf5625bd97d15a702a10a30427f394dbb4d94aba5edb663b717ce46680b3c1acf250c481e06456fc052daa8a27c30d0d07192d6906ebe354caa769f65f0efa10450e2e5d05ed63a9c1b0867af74533fb8fe99e13ba04fa9dd8c4d239bf5b2fb1cc090323f728921bda50dca754bbd85b89709be87d4a5c86a1cc3c3a6777007f59eebb9b5808b66347c027e234ee2780d5ba536223725c1857aa0e110c6f6485b7b54c15bf8ed0b3c594af6796e5e548c28863a0b991dce0448dad347b9b0bd591f49a6a422a198acb3e5d7796afceb0b2458d4806eece726b297a23d056709871a3a4884a0d1d4778c3cba330c8fd3491d9dad1946c047c94bcf55e6a536b233ee6ba25f37b881991dc270f6ea6be0ce667abd70a46b6fb6e65ce2088f0f23503e220941fb538cd4ecb0812b754c956555e9bf8657563ab5d6cc8f98367087bb7f01b4999009accd3a03b75ce53558fb281f6fc6e524e986d99c691f2c9e4e1cb9cbb516004e8b16d0db641cecdcbee60859398c8dbc1a835f806a9ec2a4be91d91f0422c43a23a4d0ef472b481ae95152cc7f3e975fc564e199fee3d9d02ddf3f22245174c8730a053e95a3f8d123cec6d0d970736bffb14fb39402d23db0ec7e0634dcc5663376689631828e776d498c3e7f82c08c7c82eefbe3afc453b09de279fd12bacb6dbe389df4f06aa17d752ad4bb122093383a44bbee338087da161b87e8caa133902b384127f0990a54f4f3f6ed7b5897b7e5d6f36c5366184d805596f69c92bd6d96482c2710cf7589aef5276f9f3167584d0d94dd9d3b7e29c58ffd566055a18f0e7e553f0e744c4e03f140950b63ded8957615d9500bd7414d5d84f9ecdc8c278b9109dee9587a5a9cb16470a3cc6406a3e41744705906abe3f351783fd2fd7c6d5e0822e7cf93753023afb073e1f987ce1a7054371ae91f3a33389dde14d2fbe16c4949723619892b78215dc5a01ea6005729da8b56f3eee45ef80f4cfa9529a4be1a29e0bf57f647f53c8d09828dd04f3a2b3ca8f2966c0c3545f3000d27c1f8856c1e32923d600c43189b34377c51e75e19aebbe7b2fcf9caec2fb4ff2cd091853a355d92d413039d559381e87038d9060c88e0a15763733d999b0f1df1436acbae6dd650512471d92916658979e3202eea6a2d77d9fda4e93dab107006dee589c7c7ea2d0ec846623c179d209c6adbddd33be54427803d6f939fccc4e578f658e60cc3bceca5a7c81bf49e584b430ee873126ef87bca98bebaa66bf65939f2536543b9bcee6c01ccb2d7cf950db25339eda15857564ef432d848417d8dc7c1d1d2cd396d73e4475aa3ff8302fe59d47dd6687511853642f72d375e132c3476dbbb45c66714daf73d98859d081518882529b8ec847ee8cf66fa5f5143a632a13e815784c2dce7bfd9b5838b5fd38ba3928350f802bf1da02f67690ffdab865626f3bda68c0b80c2c9a35da31ffedd20451a3c079a42c09209d23258e81be6a06f378e17570fa0efb2bd1c5b9b99733165ae5e312901ef07ead63cd131f6371bbe22dbd4cff54e2878a44fcba3a94123a178fb48710725e4ce4a07b8d0b1c8a31c04c4d5ef991b73335c0ff8637bcb4ee9c43a72dc096cfb3ebeb8875bc5e28b3a1083e1e4812abfbf2e5ad8d34fa6468630037e38e5b3fbff23122c70251b31a878fb16a5a65a3f35c7e3ac1f55233dd7ab23d811afc142cc538fdb102a8aeade5cbfc0ef6b21e7a767d104c31acf198e202c9ecd13f8cd48b5d7579a858276914711877ffaaf0c7e166e404bca744d1292b9726ee1161bf77693985d5ab4f8ecdbf687118ceb95c18c2d0a2ea3abdd7f007e139a7aefdfbbd9ef573848a39c3a6ffafc5e9089b6cf97dbb4e6b96b21ccacdf80adc41bd635a5be29825d92f99e84e0f06f8a0d321f850b734d82de95356cdec287cbef1814a8584ff8743bc65dd6d58d1c850ac23961ccef29098aceafa5e5652c520d590dcf6b2ce9a7e596fd569a8ac4017b4524552441003fe61176a53dfbbae12513fd6b3ecbdeb234300e4e1b308d002c163816c033c9db00f805e45d403e25e4c9d3d594a792974c7b24e36fdfc4b656895dc0f1e7265338725df0cbb83cb904e0a24ed3c75dfc0c227fd1d9e88d3914c58020856d644dd8bb6433a069deceefe1e4c757ebcd128c461fdfcc27e6532971bef6fa9697b62f32ce5450070d47cee2c3f9eb4136621a8799c5c7e52875712d774076f86c51d1c8c6f35b7e7a475ff0b02ee81e5a185aa9a22430a25d9583f48bb8301dfd0e01247cef7ce3b08c2a3d9a8995091fd3d90589f2136ace088eb9bc724b784ed59480e09ade6fcfdd1714946cbab50b10a9f9063ebc3d75cd41bf17292a07c65dd84b455b88c48bb309661c61265538385ba434517a0cf109099eb84d37e2741fd5d6a809968c37b3e4fa6040cf90e4927e1dfdc9b94cda59991825e3cdf8235d"}}) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(chacha20,sha224-ni)\x00'}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="2acbf34c9c32588d805c0bb65d23b7fb75ad6d1427983eca94ff43533631e44bd0069bf4df5e757ffdfa71808b8e0edb3ef66e218643e78ffe26b8622175967ce58d2a9491660dcca0696c2ca7821933b4d44fa1f672f16f17368c8a9204f7bc898ed532495859ec7538df16a9f0985bcc23c55a886a9bcedb2a5822c1a5566fffa74c43f3b243d7a7e1920eb83fe41f14a0cdcedb97b141e8640b1aadcd6ff435122f3ab824b0fb6097af503d11c304b65b8dc828883e9852e48630b83cde22c98df5581518d63d7e262e22737ede181aef8cece964b7d7fc20ffba880c", 0xde}], 0x1, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}], 0x30}, 0x94) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) (async, rerun: 32) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0) 2.489395503s ago: executing program 0 (id=591): syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024400010100200009040000ff02020000052402000005240004000d240f01090000000000000000090581032000037fff0905820200000001000905030275a3df17f2d6925875fa7b53"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fd9000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="f30f093e360fc777fe66baf80cb8b6fa2d85ef66bafc0c66b8900066efc7442400b6000000c7442402a21eb728c7442406000000000f0114240f01c3b9640001c00f3266b83a000f09b8b1ae00000f23d80f21f835000000800f23f88fe83885ef0e", 0x62}], 0x1, 0x41, 0x0, 0x0) preadv2(r3, &(0x7f0000000400)=[{&(0x7f0000000240)=""/162, 0xa2}, {&(0x7f0000000300)=""/198, 0xc6}], 0x2, 0x2, 0xf7da, 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.035328105s ago: executing program 2 (id=594): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="60000000f526acdd63c9e8691a41c065303632963fbc3bcd420a22d775648db5279ec208eb7a79071a2a1d", @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf254b000000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e300000000008000300030000000c00a6000000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8080) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) (async) syz_open_procfs(0x0, 0x0) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) (async) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c3af200", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fbdbdf25510000000c009900c90a0000690000000a0006000802110000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000004) mount$overlay(0x0, 0x0, 0x0, 0x1010, &(0x7f00000001c0)={[], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}], 0x2f}) memfd_create(&(0x7f0000000740)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x1aX\x87\xf5\x1aP\x06\x9a\xa9\xa0\x98 )\xe3\xa1\xa2\xb1D\xe0\x15S\x89/m\xb71%\x80\x04Q\x1dN\xb0\x19\x81\x16@\xc0\xc4\"g\xd7Z\xb3\x17\xd1\xe7\x1b\xbd\xdck\x95\x16\x17\x95\xce\xa6\x92_\xe4\x9a\xaeA-\x02\x161\x8c\xe7\xa6.)\xadpM\x19\x1c\xcd\xf6S\x9a(:\x90\xb1\x8ft\xeb#\x82\x17\x8d\x00\xcaY\xe9\xf7\xee\x91\bx\x80\xa4\xa0\x16\b\x8b,\xdb\x88\x1e\xc1m\x91\xf0S\xc4\xc9\xefEBT\x8e\xff6\xff\xbb\xd4\xbe&\xf5St\v\xe1\x98;q\\\x1c\xe9\xcc\xfeV\xc3M5\xa9\xec\xc9\x8a\xee7\xbb\xa4\x1f\xc8\xfb\xaar15\xdf\\\xf4d\xc0\xc7\xf3\x88\x13\x94^01\xfc_\x91B\xacp\x8f\xfdx\xa5\xa9_t\x86\xe3%\xf1q\x00\x89c\x05H\x92\xa6\x93je\xfa\xd148\xd0N7', 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') (async) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r2, &(0x7f0000001180)={0x2020}, 0x2020) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) ioctl$USBDEVFS_GETDRIVER(r3, 0xc010bb01, 0x0) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0x5, 0x12, 0x10, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x5}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x9, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x25000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x5, 0xef, 0x27, 0xd5, 0x2}, {0x25000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x83, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0x3, 0x3, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0x9000, 0xf, 0x0, 0x6, 0xff, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0xeeee8000, 0xc, 0x1, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x9, 0x88}, {0xdddd1000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x16, 0xb, 0x3, 0x80, 0x87}, {0x6000, 0x8000}, {0x41000, 0x9}, 0x872fcdcf8176a647, 0x0, 0xdddd1000, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x7, 0x5, 0x5, 0xe]}) getpid() (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000140)=0x6, &(0x7f0000000180)=0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, '\x00', "6ca0ef44bcdaf33d9060001a65aae2621600f79c1f901d896f9157b1a7166ac1", "abfdff7d", "708958f96700"}, 0x38) (async, rerun: 32) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110ec130600000000000902240001000070005a04001607030002000921060000012228000905810300040108fb00000000000000"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) (async) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000001040)) (async) syz_usb_control_io(r7, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.977734847s ago: executing program 2 (id=595): r0 = socket$inet6(0xa, 0x80000, 0x8) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x4c0c0) (async) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) (async) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x80000b, @empty}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/icmp6\x00') openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r3, 0x0, 0x0) pread64(r2, &(0x7f0000000600)=""/92, 0x5c, 0xf7) 1.977446377s ago: executing program 2 (id=596): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) r7 = dup(r6) syz_open_dev$mouse(&(0x7f0000000580), 0x7fff, 0x0) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x25b, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xea77, 0x100, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x4, 0x0, 0x144, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x40, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x232}}], 0x1, &(0x7f00000005c0)={0x2e, 0x21, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, r4, '\x00', {0xfff9, 0x98d, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) r8 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fstat(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r9, r9) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x2, 0x0) write(r11, &(0x7f0000000100)='d', 0x1) r12 = socket$packet(0x11, 0x2, 0x300) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r13, &(0x7f0000000440)=ANY=[], 0xfdef) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f0000000040)={r15, 0x1, 0x6, @multicast}, 0x10) syz_ublk_setup_io_uring(0x2e2d, &(0x7f00000003c0)={0x0, 0x874e, 0x40000, 0x0, 0xad, 0x0, r7}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) setsockopt$packet_drop_memb(r12, 0x107, 0x2, &(0x7f0000000080)={r15, 0x1, 0x6, @multicast}, 0x10) 1.968558657s ago: executing program 0 (id=597): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xfbc3f000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x4, 0x0, 0x4, {}, {0x0, 0xea60}, {0x3, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "cc4b84da1546b48b"}}, 0x48}, 0x1, 0x0, 0x0, 0xc010}, 0x800) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @remote, 0x3}, 0x1c) (async) setsockopt(r2, 0x0, 0x4, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) r3 = creat(&(0x7f0000000140)='./sys\x00', 0xa6) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, 0x0, 0x0) (async) r5 = openat(r3, &(0x7f0000000080)='./sys/bus/pnp/devices/00:00/driver/unbind\x00', 0x1, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00030500ba3fbe613fe33a7b0000800c0000000d007f0000015cd4"], 0x28}], 0x1}, 0x14008010) r8 = socket(0x10, 0x80002, 0x0) sendmsg(r8, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000500fff3c00e1400", 0x26}], 0x1}, 0x0) ptrace(0x10, r6) ptrace$cont(0x19, r6, 0x1000000080000001, 0x6) (async) write(r5, &(0x7f0000000100)='00:00', 0x5) 1.946539187s ago: executing program 0 (id=598): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xa4, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xc33a, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x61, 0x3, 0x28}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)='//\x00', 0x40, &(0x7f0000000080)={@_ha_fsid={[0x8000, 0x16100000]}, {0x6, 0x3, 0x5, 0x8}}, 0x7, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0x80000001}) read$hiddev(r1, &(0x7f00000001c0)=""/181, 0xb5) r2 = socket(0x1e, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000100)={0x20, 0x21, 0x29, {0x29, 0x21, "7d611870cced50a6dc9b9baae6e4fb07347310bcb53837f15d7c0201458010d302afc5dfce714d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.881952979s ago: executing program 2 (id=599): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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"], 0x21c}}, 0x0) socket(0x10, 0x3, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = inotify_init() r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) close_range(r1, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x48, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 1.739293523s ago: executing program 2 (id=600): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') ioctl$NS_GET_USERNS(r1, 0x8004b709, 0x0) (async) r2 = dup(r0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000240)={'syz1\x00', {0x7f, 0x387d, 0x95d, 0x5}, 0x55, [0xa83, 0x4, 0x6, 0xb66165d5, 0x6, 0xa5, 0x7, 0xe5cb, 0x81, 0x80000001, 0xfff, 0x2, 0x6, 0x3, 0x8, 0x9b75, 0x9, 0x5, 0x7, 0x46d0, 0x4, 0x7f, 0x82, 0x0, 0x1, 0x5, 0x0, 0x4986, 0x1, 0x800, 0x8, 0x5, 0x8000, 0xf, 0x6cbf, 0x5, 0xc4b, 0x5, 0x7, 0xd, 0x4, 0x1, 0x6, 0x7, 0x3, 0x1b, 0x8, 0xfffffff8, 0xfee, 0xe, 0x8, 0x2, 0x101, 0x7, 0x1ea6e4d, 0x3062, 0x40, 0xffffff7f, 0x7, 0x824, 0x4, 0x70cc, 0xa8, 0x2], [0x10000, 0x5, 0x5, 0x10001, 0xc580, 0x200, 0x40, 0x10, 0x735, 0x80000000, 0x5, 0xfffffffd, 0x9, 0xffff, 0x7, 0x6, 0x5, 0x1ff, 0x7e, 0x4, 0x6, 0x9, 0x48000000, 0xfffffff9, 0xffff62fb, 0x80, 0x2548acc6, 0x400, 0x8, 0x8, 0x30, 0x51cf, 0x2, 0x8, 0x8, 0xf, 0x9, 0x3, 0x40, 0x0, 0x1b3, 0x5d622418, 0x1, 0x36, 0x200, 0xfffffffe, 0x4, 0x8, 0x40008, 0x76dfd8cf, 0xd0c, 0x2a87, 0x2, 0x8000, 0x80000001, 0x0, 0x1, 0x9, 0x1, 0x5, 0x3, 0x6, 0x80000000, 0x8], [0x4, 0x6, 0x8001, 0x0, 0xb2f6, 0x1, 0x2, 0x6, 0x89be, 0x7fff, 0xa0000, 0x9, 0x4, 0x0, 0xfffffffc, 0xce9, 0x1, 0x6, 0x7, 0xff, 0x0, 0x4, 0x0, 0x5000000, 0x4, 0x1, 0x2, 0xc, 0x2, 0xff, 0x0, 0xd, 0x9, 0x9, 0x0, 0xdce7, 0x401, 0x0, 0x2, 0x5, 0x8, 0x10000, 0x40, 0x0, 0xffff, 0xd, 0x7, 0xcf, 0xfffffff9, 0x80000000, 0xfffffffc, 0xcec, 0x4, 0x4, 0xffff6455, 0xfffffffb, 0xd6471202, 0x0, 0xfffffffe, 0xd5, 0x9, 0xc9, 0x2121, 0x5], [0x200, 0x0, 0x7933, 0x8, 0x8, 0x8, 0x9, 0x42aa3068, 0x8, 0xffff3300, 0x9, 0x1, 0xa8, 0x8, 0x3, 0xce, 0x8, 0xfffffff9, 0x4, 0x10000, 0x587806ba, 0x73, 0x3ff, 0xad64, 0x81, 0xffffffff, 0x9, 0x7, 0x9, 0x9, 0x0, 0x6, 0x9, 0xffffffff, 0xa, 0x3, 0xeccd, 0xe, 0x4, 0x1ff, 0xb9e, 0xfffffffa, 0x1ff, 0x41f4, 0x46, 0x800, 0x4ab4, 0x3, 0x9, 0x7e55, 0x8, 0x0, 0x7, 0x9, 0xc2, 0xf, 0x8, 0x6, 0x1, 0x7, 0x4, 0x6, 0x4, 0x2]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) (async) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x4c, 0x14, 0x1, 0x1070bd2c, 0x25dfdbfe, {0x28, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x38, 0x1, "ab000000000000000c880470de4006f3464ce07015482631ced6b73d0500000077fe5bc0e5ddacf50e581a6b208fd1c681a6a926"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20040010) (async) write$P9_RREAD(r2, 0x0, 0x0) 1.732710213s ago: executing program 1 (id=601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x40001) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) epoll_pwait(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x7fffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, &(0x7f0000000100)) syz_usb_disconnect(r4) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_connect$uac2(0x5, 0xad, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003000000201e04684040000102030109029b000301a38002080b0000010220020904000000010120000924010100050e00860524040380090401000001e11f000904010101010220000924020280000900fa0a24020205000201060110240101ae000210000001030000000c0a33fd0100048100285b09050109ff030e0000082501010f0f09040200000102200009fb010101010220000905820908000cff01082501810c010700"], &(0x7f0000000780)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0x2, 0x60, 0x58, 0x20}, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r7 = syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r7, &(0x7f0000000280)={0x14, &(0x7f0000000180)={0x0, 0x3, 0x8a, {0x8a, 0x22, "d676405dca64df2872a72170d63f74c0b55d1ec9d1b140007f2792a22def5be54fbd851d41929f43b6e5dd7114eb3d92306221a48f7e5acdebc1c51a3e7abc3c7e1649a2e3185fb051aeb4668679498e1fbcc31ae60a758fd7f4ce49a78c0caf8834b484535c72d76582b1646d94ba0447064dfd738049b7d7b4a6a3a68cb7f3b465aab82d488856"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x20, 0x16, 0x1a, "2775486a6480efa8a445a456ebed3b7543854a348efd9e3cc16a"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x68}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7c}, &(0x7f00000004c0)={0xc0, 0x5, 0x1, ')'}, &(0x7f0000000500)={0x40, 0x5, 0x5, "bf6fead6a4"}}) syz_usb_ep_write(r4, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") dup(0xffffffffffffffff) 1.653674255s ago: executing program 2 (id=602): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = fsopen(&(0x7f00000001c0)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x8000, 0x8000, 0x15e}, 0x0, 0x0, 0x0) (async) r3 = fsmount(r1, 0x1, 0x1) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x20) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r5, 0x11, 0x67, 0x0, &(0x7f0000017200)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x80, 0x7800, 0x6, 0x10001, {{0x1c, 0x4, 0x2, 0x8, 0x70, 0x68, 0x0, 0x6, 0x2f, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0xc, 0x97, 0x3, 0x4, [{@rand_addr=0x64010102, 0x5}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x18, [@remote, @empty, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x14, 0x4e, 0x1, 0x8, [{@loopback, 0xfff}, {@rand_addr=0x64010100, 0x1000}]}, @timestamp={0x44, 0x14, 0x42, 0x0, 0x8, [0x7fffffff, 0x9, 0x1ff, 0x6]}, @generic={0x89, 0xa, "339f38abbe26c05e"}, @ssrr={0x89, 0xb, 0x2b, [@remote, @local]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8000}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a8f4775a6980d84}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x8811}, 0x40) (async) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006011a0000000c241b4800f3ff0005008005090581030002000000090401"], 0x0) 1.391055772s ago: executing program 0 (id=603): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040)) io_setup(0x7, &(0x7f0000000080)) io_setup(0xffff, &(0x7f0000001a80)) 1.11610575s ago: executing program 0 (id=604): mount$cgroup2(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000007c0), 0x4810, &(0x7f0000000700)={[{@favordynmods}], [{@seclabel}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '%'}}, {@subj_role}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fsmagic}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '!+-\x8a'}}]}) syz_usb_connect$uac2(0x5, 0x9d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500200000840fa04014240000102030109028b00030107000b080b010101ff20050904000000010120000924010180041500070c24030503045d02ec8b0003090401000001022000090401010101022000062402010277102401050121030000000309000000cd09050109ff0324020e082501810c02feff090402000001022000090000000001022000090582090410fc082501820c040700"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x441}}, {0x2e, &(0x7f0000000100)=@string={0x2e, 0x3, "d6c315da3c3b791f0694e480cc928e86a69430ae9901693a54b6d56799a93a9df90ec8228cfe4edd88218054"}}, {0x95, &(0x7f0000000380)=@string={0x95, 0x3, "a6ae0c05db9ed2deaa35b776276401f3075b5bc42695f4734a49c295d46fc02f316b9af31957c91c5f5333be77d1653b32d39fba0941aa17bf15121d887802b003190c0b07c6cab125e632fd3b8fee41cfab6f04304e0dd98511564afd818d0e313b0170eecf33e1634213cfd1a06bfb1c20841cb3b020cf1282d5a106ce785becd18549d692fd4592b2a3bc7f50199d03ad08"}}, {0x3e, &(0x7f0000000200)=@string={0x3e, 0x3, "d467d304d19ddc4caab7c097417ce70cdc4ab9254fa8b6a0eb56e70e944d8698bfb80986e87cff8ad7927dc7a9c7c4f00c7ad6d25fa56fde73b5b578"}}, {0x7c, &(0x7f0000000240)=@string={0x7c, 0x3, "021f97b6355418e532272b5cb0edfa9654c3723ada8b840de5f63227689cb9af66b61f5fcf99b316615395ff65b7fb9bfdb1c252eb09487fab88c49e6b35f6715841136aa82f0b58805b61eda25e2925b22266329738ccec456948e98cf5496c1dd4900ae54c389c2e2e6558f9274f02c1d272c3a5da3ef9df94"}}]}) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000005100), 0x600, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') socket$inet6_udplite(0xa, 0x2, 0x88) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x2080) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x800007, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = syz_io_uring_setup(0x5b17, &(0x7f0000000000)={0x0, 0xc995, 0x4000, 0x0, 0x2de, 0x0, r4}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f00000001c0)) syz_ublk_setup_queues(r4, r2, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x23c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x80, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x10, 0x0, 0x8000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff, 0x0, r5}}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de90f6007009021200010000000009040000000202", @ANYRES16], 0x0) syz_usb_connect$midi(0x4, 0xaf, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x1, 0x1, 0x4, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x40, [@ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x2, 0x4}, @ms_header={0x7, 0x24, 0x1, 0xb135, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x2, 0x3}, @ms_header={0x7, 0x24, 0x1, 0x17f, 0x7}], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x48, 0xbd, 0x22, {0xe, 0x25, 0x1, 0xa, "97b6b90452b7e6cd918f"}}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x8, 0x6, 0x3, {0x6, 0x25, 0x1, 0x2, "43d1"}}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0xe, 0x4a, 0x2, {0x9, 0x25, 0x1, 0x5, "f051da729c"}}}, {{0x9, 0x5, 0x1, 0x10, 0x0, 0x6, 0x4, 0xfe, {0xa, 0x25, 0x1, 0x6, "50905d12a60f"}}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x7e, 0x89, 0x9, {0x10, 0x25, 0x1, 0xc, "3ea9492bf102ad66c65c208f"}}}]}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x10, 0x9, 0x35, 0x88, 0xff}, 0x80, &(0x7f0000000480)={0x5, 0xf, 0x80, 0x3, [@generic={0x54, 0x10, 0x1, "4ca2a6a65756d97a60bfadaa8e0464c91e058e0da4d605764445e4a6ec613c60bab06b5b74c98ced5acd7ddcb35533e7a6e53734f27bdf99462a311653246cae872c3ccf3ba21b0202cf20938ff88b44d9"}, @ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x0, 0x4bcb104ffce5bf7d, 0x43a4, [0x140cf, 0xff00cf, 0xff0000, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x7, 0x20, 0x100, 0x9}]}, 0x4, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2423}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1c08}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x405}}]}) 401.637138ms ago: executing program 3 (id=605): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x202f) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0x4, 0x60080800, 0x0, 0x4b29, 0x7, 0xa14, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000008fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x6, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r6 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) fcntl$addseals(r6, 0x409, 0x29) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x13, r6, 0x4e650000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r7, r8}}}], 0x20, 0x40044}}], 0x1, 0x4) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006200)="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", 0x2000, &(0x7f0000008d80)={&(0x7f0000008200)={0x50, 0x0, 0x5, {0x7, 0x2d, 0x5, 0x0, 0x5, 0x0, 0x1, 0x100, 0x0, 0x0, 0x1, 0x80}}, &(0x7f0000008280)={0x18, 0x0, 0xffff, {0x5}}, &(0x7f00000082c0)={0x18, 0x0, 0x6, {0x1}}, &(0x7f0000008300)={0x18, 0x0, 0x8, {0x9}}, &(0x7f0000008340)={0x18, 0x0, 0x6, {0x4}}, &(0x7f0000008380)={0x28, 0x0, 0x7, {{0x30, 0x100000001, 0x0, r4}}}, &(0x7f00000083c0)={0x60, 0x0, 0x3, {{0x100000001, 0x6, 0xfccd, 0x4, 0x1, 0x1943, 0x76, 0x1}}}, &(0x7f0000008440)={0x18, 0x0, 0x7fffffffffffffff, {0x9}}, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000084c0)={0x20, 0x0, 0x20fc61f8, {0x0, 0x4}}, &(0x7f0000008500)={0x78, 0xfffffffffffffffe, 0x6000000000000000, {0x6, 0xf, 0x0, {0x1, 0x785, 0x66, 0x4, 0x513c674e, 0x947, 0x5, 0xa, 0x5, 0x6000, 0x9, r2, r3, 0x3, 0x3}}}, &(0x7f0000008580)={0x90, 0x0, 0x6, {0x1, 0x2, 0x0, 0x3, 0x7f, 0x9, {0x2, 0x10000, 0x3, 0x5, 0x4, 0xee, 0x5, 0x9, 0x1bdabdde, 0xa000, 0x2c, r2, r3, 0x1000, 0x80000000}}}, &(0x7f0000000800)=ANY=[@ANYBLOB="f0000000f5ffffff080000000000000001000000000000000200000000000000020000000800000026280000000000000300000000000000c9010000000000000600000009000000ffffffffffff00000500000000000000010000000000000001000000080000002b000000000000000300000000000000070000000000000001000000e82100007b0000000000000006000000000000000900000000000000000000000000fc070400000000000000050000000000000000000000000001000100000000000000010000800000000013000000070000002e2f62696e64657266632f62696e646572300000000000009cd9a1570b973d051d88fdafc5ed11800e26886c6d0147f0dee6c768ab52ab5b95726267af80ebd4ddc168f64eb09a91a3d9b8d1f43900830a69eb993428db44784294667bdfda8f3037c3bfdbd42d0448a0be3e4873b069ac3064ef3b5a7a66a09cfd6c045d1d6175aa3c4bd02303f5ac9143d9cdce90a6950721"], &(0x7f0000008740)={0x10, 0x0, 0x100000001}, &(0x7f0000008b40)={0xa0, 0x0, 0x1000, {{0x3, 0x1, 0xe4, 0x3, 0x42, 0xffffffff, {0x5, 0x4, 0xe2e, 0x2, 0x7, 0x9ae, 0x0, 0x3, 0x599d, 0x4000, 0x4, r8, r3, 0x6, 0x7}}, {0x0, 0x4}}}, &(0x7f0000008c00)={0x20, 0x0, 0x80, {0xffff, 0x0, 0x9, 0x3}}, &(0x7f0000008c40)={0x130, 0x0, 0x4, {0x5, 0x3, 0x0, '\x00', {0x1080, 0x1, 0xf2, 0x2, r2, r3, 0x2000, '\x00', 0x3, 0x80000000, 0x0, 0x6, {0x9, 0x1}, {0x3, 0x9}, {0x74f, 0x10}, {0x2, 0xfffffff7}, 0x6, 0x9, 0xb7f, 0x8}}}}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r10 = dup3(r9, r5, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$UDMABUF_CREATE(r10, 0x40187542, &(0x7f0000000080)={r6, 0x1, 0x10000}) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) r14 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r14, 0x6, 0x0, 0x0, 0x0) r15 = fsmount(r14, 0x0, 0x0) r16 = openat$cgroup_int(r15, &(0x7f0000000580)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r16, &(0x7f0000000000)=ANY=[], 0x27) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r11, &(0x7f0000000300)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x6, 0x1c, 0x64, 0x0, 0x1, 0x2, 0x0, @empty, @broadcast}, {0x11, 0x1, 0x0, @empty}}}}}}, 0x2e) ioctl$BINDER_GET_FROZEN_INFO(r10, 0xc00c620f, 0x0) 122.995726ms ago: executing program 3 (id=606): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000004780)={'erspan0\x00', &(0x7f0000000400)=@ethtool_link_settings={0xf, 0x0, 0x0, 0x0, 0x8b}}) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x20128e0, &(0x7f0000000200)=ANY=[@ANYBLOB='context=']) 0s ago: executing program 3 (id=607): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfffffffffffffffe) ptrace$setregs(0xd, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) write(r0, &(0x7f0000000080)='4', 0x1) kernel console output (not intermixed with test programs): d/64, error -71 [ 40.139209][ T66] usb 2-1: USB disconnect, device number 6 [ 40.151929][ T338] usb 1-1: device descriptor read/64, error -71 [ 40.158930][ T36] audit: type=1400 audit(1785991775.240:211): avc: denied { create } for pid=671 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 40.203209][ T677] syzkaller1: entered allmulticast mode [ 40.209958][ T36] audit: type=1400 audit(1785991775.290:212): avc: denied { mounton } for pid=676 comm="syz.1.83" path="/17/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 40.211779][ T677] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 40.315128][ T36] audit: type=1400 audit(1785991775.390:213): avc: denied { ioctl } for pid=680 comm="syz.3.84" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5506 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.346095][ T9] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 40.376099][ T375] tipc: Node number set to 4269801492 [ 40.416046][ T338] usb 1-1: device descriptor read/64, error -71 [ 40.426184][ T36] audit: type=1400 audit(1785991775.510:214): avc: denied { write } for pid=682 comm="syz.3.85" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 40.476074][ T9] usb 3-1: device descriptor read/64, error -71 [ 40.509395][ T685] tipc: Can't bind to reserved service type 2 [ 40.509395][ T36] audit: type=1400 audit(1785991775.590:215): avc: denied { bind } for pid=684 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.538934][ T36] audit: type=1400 audit(1785991775.620:216): avc: denied { write } for pid=684 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.626075][ T66] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 40.656337][ T338] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 40.716063][ T9] usb 3-1: device descriptor read/64, error -71 [ 40.778613][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.789630][ T338] usb 1-1: device descriptor read/64, error -71 [ 40.795965][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.805751][ T66] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 40.815408][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.824476][ T66] usb 2-1: config 0 descriptor?? [ 40.836295][ T9] usb usb3-port1: attempt power cycle [ 41.026095][ T338] usb 1-1: device descriptor read/64, error -71 [ 41.036662][ T66] usbhid 2-1:0.0: can't add hid device: -71 [ 41.042711][ T66] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 41.051569][ T66] usb 2-1: USB disconnect, device number 7 [ 41.106081][ T375] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 41.136359][ T338] usb usb1-port1: attempt power cycle [ 41.176071][ T9] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 41.197240][ T9] usb 3-1: device descriptor read/8, error -71 [ 41.256497][ T375] usb 4-1: too many configurations: 71, using maximum allowed: 8 [ 41.265441][ T375] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 41.273078][ T375] usb 4-1: can't read configurations, error -61 [ 41.337311][ T9] usb 3-1: device descriptor read/8, error -71 [ 41.406246][ T375] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 41.476166][ T338] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 41.497394][ T338] usb 1-1: device descriptor read/8, error -71 [ 41.556529][ T375] usb 4-1: too many configurations: 71, using maximum allowed: 8 [ 41.565579][ T375] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 41.573229][ T375] usb 4-1: can't read configurations, error -61 [ 41.579676][ T9] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 41.587297][ T375] usb usb4-port1: attempt power cycle [ 41.607167][ T9] usb 3-1: device descriptor read/8, error -71 [ 41.627226][ T338] usb 1-1: device descriptor read/8, error -71 [ 41.747162][ T9] usb 3-1: device descriptor read/8, error -71 [ 41.763896][ T704] syzkaller1: entered promiscuous mode [ 41.769554][ T704] syzkaller1: entered allmulticast mode [ 41.848012][ T707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 41.856845][ T707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 41.865432][ T9] usb usb3-port1: unable to enumerate USB device [ 41.876074][ T338] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 41.897208][ T338] usb 1-1: device descriptor read/8, error -71 [ 41.926088][ T375] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 41.946846][ T375] usb 4-1: too many configurations: 71, using maximum allowed: 8 [ 41.955711][ T375] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 41.963391][ T375] usb 4-1: can't read configurations, error -61 [ 42.027248][ T338] usb 1-1: device descriptor read/8, error -71 [ 42.106097][ T375] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 42.126801][ T375] usb 4-1: too many configurations: 71, using maximum allowed: 8 [ 42.135617][ T375] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 42.143263][ T375] usb 4-1: can't read configurations, error -61 [ 42.146371][ T338] usb usb1-port1: unable to enumerate USB device [ 42.150121][ T375] usb usb4-port1: unable to enumerate USB device [ 42.761182][ T727] overlayfs: conflicting options: metacopy=off,verity=on [ 42.816056][ T375] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 42.967209][ T375] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.992756][ T375] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 43.003200][ T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.011650][ T375] usb 3-1: Product: syz [ 43.015941][ T375] usb 3-1: Manufacturer: syz [ 43.021082][ T375] usb 3-1: SerialNumber: syz [ 43.027185][ T375] usb 3-1: config 0 descriptor?? [ 43.033438][ T375] plusb 3-1:0.0: probe with driver plusb failed with error -22 [ 43.116058][ T338] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 43.233182][ T702] usb 3-1: USB disconnect, device number 11 [ 43.266068][ T338] usb 2-1: Using ep0 maxpacket: 8 [ 43.272229][ T338] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 43.281318][ T338] usb 2-1: config 1 has no interface number 0 [ 43.287501][ T338] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 43.296576][ T338] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7 [ 43.308963][ T338] usb 2-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 43.318075][ T338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.326229][ T338] usb 2-1: Product: syz [ 43.330409][ T338] usb 2-1: Manufacturer: syz [ 43.335020][ T338] usb 2-1: SerialNumber: syz [ 43.544387][ T338] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 43.554478][ T338] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 43.564997][ T338] usb 2-1: USB disconnect, device number 8 [ 43.575938][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.715330][ T751] batadv_slave_1: entered promiscuous mode [ 43.721436][ T751] batadv_slave_1: left promiscuous mode [ 43.927367][ T760] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 44.276112][ T702] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 44.336078][ T338] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 44.416056][ T702] usb 4-1: device descriptor read/64, error -71 [ 44.486092][ T338] usb 2-1: Using ep0 maxpacket: 8 [ 44.494801][ T338] usb 2-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 44.503967][ T338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.512027][ T338] usb 2-1: Product: syz [ 44.516246][ T338] usb 2-1: Manufacturer: syz [ 44.520860][ T338] usb 2-1: SerialNumber: syz [ 44.610472][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 44.610508][ T36] audit: type=1400 audit(1785991779.690:237): avc: denied { create } for pid=783 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 44.656091][ T702] usb 4-1: device descriptor read/64, error -71 [ 44.731282][ T36] audit: type=1400 audit(1785991779.810:238): avc: denied { cmd } for pid=770 comm="iou-wrk-771" path="socket:[7260]" dev="sockfs" ino=7260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 44.824039][ T338] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 44.833683][ T338] usb 2-1: unit 1 not found! [ 44.838564][ T338] usb 2-1: unit 9 not found! [ 44.846628][ T338] usb 2-1: USB disconnect, device number 9 [ 44.856060][ T375] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 44.869789][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.896098][ T702] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 45.007166][ T375] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 45.015315][ T375] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 45.025277][ T375] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.026281][ T702] usb 4-1: device descriptor read/64, error -71 [ 45.034159][ T375] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 45.047435][ T375] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 45.055629][ T375] usb 1-1: Product: syz [ 45.059832][ T375] usb 1-1: Manufacturer: syz [ 45.064449][ T375] usb 1-1: SerialNumber: syz [ 45.069817][ T375] usb 1-1: config 0 descriptor?? [ 45.075583][ T375] hub 1-1:0.0: bad descriptor, ignoring hub [ 45.081710][ T375] hub 1-1:0.0: probe with driver hub failed with error -5 [ 45.091581][ T375] usb 1-1: selecting invalid altsetting 0 [ 45.279375][ T796] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 45.284216][ T797] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 45.287852][ T702] usb 4-1: device descriptor read/64, error -71 [ 45.386125][ T375] usb 1-1: USB disconnect, device number 9 [ 45.406134][ T702] usb usb4-port1: attempt power cycle [ 45.576089][ T338] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 45.726728][ T338] usb 2-1: Using ep0 maxpacket: 32 [ 45.733144][ T338] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 45.741688][ T338] usb 2-1: can't read configurations, error -22 [ 45.748124][ T702] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 45.777163][ T702] usb 4-1: device descriptor read/8, error -71 [ 45.809088][ T36] audit: type=1400 audit(1785991780.890:239): avc: denied { set_context_mgr } for pid=800 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 45.810130][ T801] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.886084][ T338] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 45.917142][ T702] usb 4-1: device descriptor read/8, error -71 [ 46.022323][ T36] audit: type=1400 audit(1785991781.100:240): avc: denied { accept } for pid=805 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.041790][ T36] audit: type=1400 audit(1785991781.120:241): avc: denied { ioctl } for pid=805 comm="syz.2.123" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 46.056158][ T338] usb 2-1: Using ep0 maxpacket: 32 [ 46.076859][ T338] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 46.085371][ T338] usb 2-1: can't read configurations, error -22 [ 46.096128][ T338] usb usb2-port1: attempt power cycle [ 46.126167][ T710] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 46.166323][ T702] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 46.187195][ T702] usb 4-1: device descriptor read/8, error -71 [ 46.276170][ T710] usb 1-1: Using ep0 maxpacket: 8 [ 46.282454][ T710] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 46.290774][ T710] usb 1-1: config 179 has no interface number 0 [ 46.297163][ T710] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 46.308432][ T710] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 46.319927][ T710] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 46.331220][ T710] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 46.341388][ T710] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 46.354789][ T710] usb 1-1: config 179 interface 65 has no altsetting 0 [ 46.361737][ T710] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 46.371277][ T710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.379430][ T702] usb 4-1: device descriptor read/8, error -71 [ 46.389601][ T710] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input4 [ 46.402115][ T36] audit: type=1400 audit(1785991781.480:242): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=491 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.425084][ T375] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 46.429546][ T36] audit: type=1400 audit(1785991781.480:243): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=491 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.455965][ T338] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 46.476458][ T338] usb 2-1: Using ep0 maxpacket: 32 [ 46.482821][ T338] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 46.491517][ T702] usb usb4-port1: unable to enumerate USB device [ 46.497963][ T338] usb 2-1: can't read configurations, error -22 [ 46.586045][ T375] usb 3-1: Using ep0 maxpacket: 8 [ 46.592299][ T375] usb 3-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 46.605520][ T375] usb 3-1: config 1 interface 0 has no altsetting 0 [ 46.612315][ T375] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 46.615630][ T702] usb 1-1: USB disconnect, device number 10 [ 46.622627][ T375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.628597][ T338] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 46.652361][ T702] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 46.666921][ T338] usb 2-1: Using ep0 maxpacket: 32 [ 46.675869][ T338] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 46.685335][ T338] usb 2-1: can't read configurations, error -22 [ 46.696048][ T36] audit: type=1400 audit(1785991781.770:244): avc: denied { append } for pid=820 comm="syz.0.128" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 46.703610][ T338] usb usb2-port1: unable to enumerate USB device [ 46.729509][ T36] audit: type=1400 audit(1785991781.810:245): avc: denied { write } for pid=820 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 46.812979][ T36] audit: type=1400 audit(1785991781.890:246): avc: denied { read write } for pid=823 comm="syz.0.129" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 47.058544][ T814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.068810][ T814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.079385][ T375] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 47.089129][ T375] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 47.096260][ T375] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 47.103424][ T375] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 47.110630][ T375] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 47.117881][ T375] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 47.124931][ T375] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x6 [ 47.132289][ T375] lenovo 0003:17EF:60B5.0002: collection stack underflow [ 47.145191][ T375] lenovo 0003:17EF:60B5.0002: item 0 4 0 12 parsing failed [ 47.152963][ T375] lenovo 0003:17EF:60B5.0002: hid_parse failed [ 47.161528][ T375] lenovo 0003:17EF:60B5.0002: probe with driver lenovo failed with error -22 [ 47.307143][ T852] x_tables: duplicate underflow at hook 2 [ 47.503195][ T860] device-mapper: ioctl: Invalid ioctl structure: name t, dev fc00 [ 47.511515][ T860] netlink: 316 bytes leftover after parsing attributes in process `syz.3.139'. [ 47.520761][ T860] netlink: 316 bytes leftover after parsing attributes in process `syz.3.139'. [ 47.771622][ T883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 47.826057][ T375] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 47.976062][ T375] usb 4-1: Using ep0 maxpacket: 32 [ 47.982665][ T375] usb 4-1: unable to get BOS descriptor or descriptor too short [ 47.991139][ T375] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 47.996154][ T338] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 47.999890][ T375] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.017520][ T375] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.028622][ T375] usb 4-1: string descriptor 0 read error: -22 [ 48.034832][ T375] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 48.043922][ T375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.057073][ T375] usb 4-1: 0:2 : does not exist [ 48.326259][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.334257][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.342243][ T890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.350723][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.358362][ T890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.366717][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.382887][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.390411][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.397984][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.405467][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.412938][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.420426][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.427906][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.435395][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.442872][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.450357][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.458119][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.465934][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.473627][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.481128][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.488586][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.496087][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.503547][ T375] hid-generic 0003:0008:0001.0003: unknown main item tag 0x0 [ 48.513250][ T375] hid-generic 0003:0008:0001.0003: hidraw0: USB HID v0.04 Device [syz1] on syz0 [ 48.543817][ T895] fido_id[895]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 49.064544][ T897] tmpfs: Bad value for 'size' [ 49.159568][ T906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.169459][ T906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.188746][ T375] usb 3-1: USB disconnect, device number 12 [ 49.596057][ T375] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 49.812699][ T375] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 49.844702][ T375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 49.866024][ T375] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 49.886017][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 49.886036][ T36] audit: type=1400 audit(1785991784.960:262): avc: denied { map } for pid=918 comm="syz.1.158" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.926035][ T375] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 49.940815][ T375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.953274][ T375] usb 3-1: config 0 descriptor?? [ 49.960938][ T916] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 50.004147][ T36] audit: type=1400 audit(1785991785.080:263): avc: denied { setopt } for pid=927 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.010068][ T930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.032979][ T930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.370633][ T375] usbhid 3-1:0.0: can't add hid device: -71 [ 50.376804][ T375] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 50.386102][ T375] usb 3-1: USB disconnect, device number 13 [ 50.598460][ T375] usb 4-1: USB disconnect, device number 17 [ 50.644130][ T36] audit: type=1400 audit(1785991785.720:264): avc: denied { ioctl } for pid=938 comm="syz.0.163" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 50.717433][ T942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.726141][ T942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.746053][ T507] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 50.758889][ T942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.767509][ T942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.815896][ T953] fuse: Bad value for 'user_id' [ 50.821083][ T953] fuse: Bad value for 'user_id' [ 50.876393][ T36] audit: type=1400 audit(1785991785.950:265): avc: denied { block_suspend } for pid=952 comm="syz.0.166" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 50.913130][ T507] usb 2-1: config index 0 descriptor too short (expected 164, got 36) [ 50.931523][ T507] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 50.944230][ T36] audit: type=1400 audit(1785991786.020:266): avc: denied { read write } for pid=957 comm="syz.3.167" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 50.953055][ T507] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.991573][ T507] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 50.994739][ T962] netlink: 60 bytes leftover after parsing attributes in process `syz.2.168'. [ 51.001494][ T507] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.023365][ T36] audit: type=1400 audit(1785991786.020:267): avc: denied { open } for pid=957 comm="syz.3.167" path="/47/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 51.060820][ T36] audit: type=1400 audit(1785991786.060:268): avc: denied { mounton } for pid=957 comm="syz.3.167" path="/47/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 51.083036][ T36] audit: type=1400 audit(1785991786.070:269): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 51.087879][ T507] usb 2-1: config 0 descriptor?? [ 51.103004][ T36] audit: type=1400 audit(1785991786.140:270): avc: denied { mount } for pid=970 comm="syz.0.170" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 51.130617][ T36] audit: type=1400 audit(1785991786.190:271): avc: denied { search } for pid=970 comm="syz.0.170" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 51.141781][ T971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.162098][ T971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.224104][ T980] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.173'. [ 51.281827][ T987] overlay: Unknown parameter 'permit_directio' [ 51.368538][ T993] netlink: 'syz.3.176': attribute type 1 has an invalid length. [ 51.377383][ T993] netlink: 1 bytes leftover after parsing attributes in process `syz.3.176'. [ 51.471622][ T997] rust_binder: 996:997 got transaction to invalid handle 32 [ 51.479178][ T997] rust_binder: 996:997 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 51.488797][ T375] rust_binder: 996: undelivered TRANSACTION_ERROR: 29201 [ 51.524724][ T507] logitech 0003:046D:C29C.0004: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 51.722801][ T507] logitech 0003:046D:C29C.0004: no inputs found [ 51.731480][ T507] usb 2-1: USB disconnect, device number 14 [ 51.746064][ T375] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 51.784142][ T1009] rust_binder: Write failure EFAULT in pid:204 [ 51.883754][ T1020] [ 51.900458][ T1018] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 51.902782][ T1021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 51.920833][ T375] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 51.930725][ T375] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 51.944279][ T375] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 51.962173][ T375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.973145][ T375] usb 4-1: Product: syz [ 51.977640][ T375] usb 4-1: Manufacturer: syz [ 51.982759][ T375] usb 4-1: SerialNumber: syz [ 51.991051][ T375] usb 4-1: config 0 descriptor?? [ 52.000406][ T999] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 52.016084][ T999] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 52.179875][ T1028] capability: warning: `syz.2.188' uses deprecated v2 capabilities in a way that may be insecure [ 52.226771][ T999] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 52.234053][ T999] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 52.643641][ T375] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 52.761880][ T1071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.770868][ T1071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.780756][ T1071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.789326][ T1071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.851465][ T1073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.860109][ T1073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.946051][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 53.045671][ T375] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 53.055708][ T375] usb 4-1: USB disconnect, device number 18 [ 53.097358][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 53.108125][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 53.117277][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.125302][ T9] usb 3-1: Product: syz [ 53.129579][ T9] usb 3-1: Manufacturer: syz [ 53.134252][ T9] usb 3-1: SerialNumber: syz [ 53.196971][ T1075] syzkaller0: create flow: hash 3383973311 index 1 [ 53.204860][ T1074] syzkaller0: delete flow: hash 3383973311 index 1 [ 53.217263][ T338] usb 1-1: device descriptor read/64, error -110 [ 53.287769][ T1077] syzkaller1: entered promiscuous mode [ 53.293395][ T1077] syzkaller1: entered allmulticast mode [ 53.342392][ T1066] overlayfs: workdir and upperdir must be separate subtrees [ 53.368619][ T9] usb 3-1: USB disconnect, device number 15 [ 53.383877][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.466062][ T338] usb 1-1: device descriptor read/64, error -32 [ 53.706071][ T338] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 53.836068][ T338] usb 1-1: device descriptor read/64, error -32 [ 53.856056][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 53.972928][ T1103] syzkaller1: entered promiscuous mode [ 53.978493][ T1103] syzkaller1: entered allmulticast mode [ 54.007146][ T9] usb 4-1: config index 0 descriptor too short (expected 64575, got 68) [ 54.015654][ T9] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.026037][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.040813][ T9] usb 4-1: config index 1 descriptor too short (expected 64575, got 68) [ 54.050258][ T9] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.066655][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.082262][ T9] usb 4-1: string descriptor 0 read error: -71 [ 54.086246][ T338] usb 1-1: device descriptor read/64, error -32 [ 54.093121][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 54.104220][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.113537][ T9] usb 4-1: can't set config #1, error -71 [ 54.120200][ T9] usb 4-1: USB disconnect, device number 19 [ 54.206134][ T338] usb usb1-port1: attempt power cycle [ 54.211910][ T338] raw-gadget.4 gadget.0: failed to queue reset event [ 54.286095][ T338] raw-gadget.4 gadget.0: failed to queue resume event [ 54.293192][ T338] raw-gadget.4 gadget.0: failed to queue reset event [ 54.515663][ T338] raw-gadget.4 gadget.0: failed to queue resume event [ 54.576113][ T338] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 54.606361][ C1] raw-gadget.4 gadget.0: ignoring, device is not running [ 54.613680][ C1] raw-gadget.4 gadget.0: ignoring, device is not running [ 54.620998][ C1] raw-gadget.4 gadget.0: ignoring, device is not running [ 54.628180][ T338] usb 1-1: device descriptor read/8, error -32 [ 54.710420][ T1122] netlink: 388 bytes leftover after parsing attributes in process `syz.3.218'. [ 54.756215][ C1] raw-gadget.4 gadget.0: ignoring, device is not running [ 54.763528][ C1] raw-gadget.4 gadget.0: ignoring, device is not running [ 54.770874][ C1] raw-gadget.4 gadget.0: ignoring, device is not running [ 54.778084][ T338] usb 1-1: device descriptor read/8, error -32 [ 54.896072][ T338] raw-gadget.4 gadget.0: failed to queue suspend event [ 54.903738][ T338] raw-gadget.4 gadget.0: failed to queue reset event [ 54.956070][ T375] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 54.986074][ T338] raw-gadget.4 gadget.0: failed to queue resume event [ 55.015100][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 55.015118][ T36] audit: type=1400 audit(1785991790.090:303): avc: denied { execute } for pid=1123 comm="syz.1.219" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 55.046471][ T338] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 55.069934][ T36] audit: type=1400 audit(1785991790.150:304): avc: denied { ioctl } for pid=1125 comm="syz.2.220" path="socket:[8687]" dev="sockfs" ino=8687 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.096185][ C1] raw-gadget.4 gadget.0: ignoring, device is not running [ 55.103549][ C1] raw-gadget.4 gadget.0: ignoring, device is not running [ 55.110920][ C1] raw-gadget.4 gadget.0: ignoring, device is not running [ 55.110941][ T375] usb 4-1: device descriptor read/64, error -71 [ 55.118178][ T338] usb 1-1: device descriptor read/8, error -32 [ 55.134776][ T36] audit: type=1400 audit(1785991790.180:305): avc: denied { write } for pid=1125 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.246214][ T36] audit: type=1400 audit(1785991790.330:306): avc: denied { bind } for pid=1137 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.266220][ C1] raw-gadget.4 gadget.0: ignoring, device is not running [ 55.273519][ C1] raw-gadget.4 gadget.0: ignoring, device is not running [ 55.281092][ C1] raw-gadget.4 gadget.0: ignoring, device is not running [ 55.288241][ T338] usb 1-1: device descriptor read/8, error -32 [ 55.366066][ T375] usb 4-1: device descriptor read/64, error -71 [ 55.396077][ T338] raw-gadget.4 gadget.0: failed to queue suspend event [ 55.403113][ T338] usb usb1-port1: unable to enumerate USB device [ 55.409562][ T31] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 55.486057][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 55.567057][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.577246][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.587020][ T31] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 55.596165][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 55.604189][ T31] usb 3-1: SerialNumber: syz [ 55.616051][ T375] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 55.636043][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 55.642250][ T9] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 55.655303][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 55.662138][ T9] usb 2-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 55.671337][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.680188][ T9] usb 2-1: config 0 descriptor?? [ 55.746061][ T375] usb 4-1: device descriptor read/64, error -71 [ 55.785974][ T36] audit: type=1326 audit(1785991790.860:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1141 comm="syz.0.224" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cdc99e0d9 code=0x0 [ 55.859109][ T31] usb 3-1: 0:2 : does not exist [ 55.864149][ T31] usb 3-1: unit 5 not found! [ 55.870647][ T31] usb 3-1: USB disconnect, device number 16 [ 55.883619][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.918308][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 55.924342][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 55.924558][ T1145] netlink: 'syz.1.225': attribute type 29 has an invalid length. [ 55.935532][ T9] usb 2-1: USB disconnect, device number 15 [ 55.986124][ T375] usb 4-1: device descriptor read/64, error -71 [ 56.096320][ T375] usb usb4-port1: attempt power cycle [ 56.159720][ T36] audit: type=1400 audit(1785991791.240:308): avc: denied { map } for pid=1157 comm="syz.1.229" path="socket:[10069]" dev="sockfs" ino=10069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.183352][ T36] audit: type=1400 audit(1785991791.250:309): avc: denied { accept } for pid=1157 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.418900][ T1164] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 56.446058][ T375] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 56.456073][ T31] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 56.477167][ T375] usb 4-1: device descriptor read/8, error -71 [ 56.483613][ T36] audit: type=1400 audit(1785991791.560:310): avc: denied { getopt } for pid=1168 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.512298][ T1174] loop9: detected capacity change from 0 to 8645 [ 56.521000][ T339] buffer_io_error: 4 callbacks suppressed [ 56.521018][ T339] Buffer I/O error on dev loop9, logical block 1080, async page read [ 56.607146][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 56.615630][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1616, setting to 1023 [ 56.626816][ T31] usb 2-1: config 1 interface 1 has no altsetting 1 [ 56.637530][ T375] usb 4-1: device descriptor read/8, error -71 [ 56.638095][ T31] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 56.653408][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.661457][ T31] usb 2-1: Product: syz [ 56.665648][ T31] usb 2-1: Manufacturer: syz [ 56.670325][ T31] usb 2-1: SerialNumber: syz [ 56.876058][ T375] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 56.897217][ T375] usb 4-1: device descriptor read/8, error -71 [ 56.900571][ T31] usb 2-1: 1:65 : UAC_AS_GENERAL descriptor not found [ 56.910465][ T31] usb 2-1: unit 14 not found! [ 56.919555][ T31] usb 2-1: USB disconnect, device number 16 [ 56.934186][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.949942][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 57.027286][ T375] usb 4-1: device descriptor read/8, error -71 [ 57.106049][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 57.112789][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 57.121427][ T10] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 57.129837][ T10] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 57.140235][ T10] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 57.149385][ T375] usb usb4-port1: unable to enumerate USB device [ 57.156212][ T10] usb 3-1: config 128 has no interface number 0 [ 57.162481][ T10] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 111, changing to 10 [ 57.174410][ T10] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 26148, setting to 1024 [ 57.185949][ T10] usb 3-1: config 128 interface 127 has no altsetting 0 [ 57.194477][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 57.203582][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.211611][ T10] usb 3-1: Product: syz [ 57.215790][ T10] usb 3-1: Manufacturer: syz [ 57.220458][ T10] usb 3-1: SerialNumber: syz [ 57.225969][ T1182] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 57.422229][ T1187] 9pnet_fd: Insufficient options for proto=fd [ 57.434496][ T1182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.447056][ T1182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.465894][ T36] audit: type=1400 audit(1785991792.540:311): avc: denied { associate } for pid=1190 comm="syz.1.240" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 57.488606][ T36] audit: type=1400 audit(1785991792.540:312): avc: denied { mounton } for pid=1188 comm="syz.1.240" path="/proc/169/task" dev="proc" ino=10330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 57.563406][ T10] usb 3-1: USB disconnect, device number 17 [ 57.574195][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.776058][ T375] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 57.927584][ T375] usb 2-1: unable to get BOS descriptor or descriptor too short [ 57.936314][ T375] usb 2-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 57.946603][ T375] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 57.957738][ T375] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 57.968646][ T375] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 57.981951][ T375] usb 2-1: string descriptor 0 read error: -22 [ 57.988348][ T375] usb 2-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 57.997673][ T375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.012474][ T375] usb 2-1: low speed audio streaming not supported [ 58.022783][ T375] usb 2-1: low speed audio streaming not supported [ 58.029667][ T375] usb 2-1: unit 3 not found! [ 58.222252][ T338] usb 2-1: USB disconnect, device number 17 [ 58.228315][ T31] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 58.366118][ T31] usb 4-1: device descriptor read/64, error -71 [ 58.506069][ T66] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 58.606103][ T31] usb 4-1: device descriptor read/64, error -71 [ 58.657271][ T66] usb 3-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 58.667625][ T66] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 58.676641][ T66] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 58.685707][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.694878][ T66] usb 3-1: config 0 descriptor?? [ 58.846062][ T31] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 58.905154][ T1237] netlink: 'syz.0.254': attribute type 16 has an invalid length. [ 58.912966][ T1237] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.254'. [ 58.976114][ T31] usb 4-1: device descriptor read/64, error -71 [ 58.996063][ T66] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 59.074279][ T1256] Invalid ELF header type: 2 != 1 [ 59.126066][ T66] usb 2-1: device descriptor read/64, error -71 [ 59.226067][ T31] usb 4-1: device descriptor read/64, error -71 [ 59.257033][ T1258] 9pnet_fd: Insufficient options for proto=fd [ 59.336134][ T31] usb usb4-port1: attempt power cycle [ 59.366054][ T66] usb 2-1: device descriptor read/64, error -71 [ 59.606065][ T66] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 59.676064][ T31] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 59.697170][ T31] usb 4-1: device descriptor read/8, error -71 [ 59.736059][ T66] usb 2-1: device descriptor read/64, error -71 [ 59.827248][ T31] usb 4-1: device descriptor read/8, error -71 [ 59.976053][ T66] usb 2-1: device descriptor read/64, error -71 [ 60.024916][ T1269] netlink: 'syz.0.263': attribute type 16 has an invalid length. [ 60.032763][ T1269] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.263'. [ 60.066129][ T31] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 60.086235][ T66] usb usb2-port1: attempt power cycle [ 60.092574][ T31] usb 4-1: device descriptor read/8, error -71 [ 60.108561][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 60.108579][ T36] audit: type=1326 audit(1785991795.190:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1271 comm="syz.0.264" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cdc99e0d9 code=0x0 [ 60.227139][ T31] usb 4-1: device descriptor read/8, error -71 [ 60.274453][ T36] audit: type=1400 audit(1785991795.350:321): avc: denied { search } for pid=1275 comm="syz.0.265" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 60.296241][ T36] audit: type=1400 audit(1785991795.350:322): avc: denied { read } for pid=1275 comm="syz.0.265" name="set_event" dev="tracefs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 60.335014][ T1278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.343661][ T1278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.346686][ T31] usb usb4-port1: unable to enumerate USB device [ 60.426059][ T66] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 60.447847][ T66] usb 2-1: device descriptor read/8, error -71 [ 60.577167][ T66] usb 2-1: device descriptor read/8, error -71 [ 60.816067][ T66] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 60.837180][ T66] usb 2-1: device descriptor read/8, error -71 [ 60.896665][ T1280] loop8: detected capacity change from 0 to 7 [ 60.903917][ T339] Buffer I/O error on dev loop8, logical block 0, async page read [ 60.912388][ T339] Buffer I/O error on dev loop8, logical block 0, async page read [ 60.920868][ T339] Buffer I/O error on dev loop8, logical block 0, async page read [ 60.929487][ T339] Buffer I/O error on dev loop8, logical block 0, async page read [ 60.937638][ T339] Buffer I/O error on dev loop8, logical block 0, async page read [ 60.945678][ T339] Buffer I/O error on dev loop8, logical block 0, async page read [ 60.953629][ T36] audit: type=1400 audit(1785991796.030:323): avc: denied { bind } for pid=1281 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.973160][ T339] Buffer I/O error on dev loop8, logical block 0, async page read [ 60.981247][ T339] Buffer I/O error on dev loop8, logical block 0, async page read [ 60.989406][ T339] Buffer I/O error on dev loop8, logical block 0, async page read [ 60.997953][ T66] usb 2-1: device descriptor read/8, error -71 [ 61.047237][ T1290] veth1: entered allmulticast mode [ 61.106176][ T66] usb usb2-port1: unable to enumerate USB device [ 61.131149][ T66] usb 3-1: USB disconnect, device number 18 [ 61.198444][ T36] audit: type=1400 audit(1785991796.280:324): avc: denied { create } for pid=1292 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 61.219175][ T36] audit: type=1400 audit(1785991796.280:325): avc: denied { ioctl } for pid=1292 comm="syz.2.271" path="socket:[10792]" dev="sockfs" ino=10792 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 61.284313][ T1300] kvm: kvm [1299]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 61.293221][ T1300] kvm: kvm [1299]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 61.311428][ T1300] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 61.756069][ T66] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 61.787757][ T1310] netlink: 'syz.0.276': attribute type 4 has an invalid length. [ 61.795484][ T1310] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.276'. [ 61.875644][ T1289] veth1: left allmulticast mode [ 61.907172][ T66] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.917635][ T1316] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.931137][ T66] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 61.940604][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.948793][ T66] usb 3-1: Product: syz [ 61.953066][ T66] usb 3-1: Manufacturer: syz [ 61.958221][ T66] usb 3-1: SerialNumber: syz [ 62.027746][ T36] audit: type=1400 audit(1785991797.110:326): avc: denied { append } for pid=1318 comm="syz.3.279" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 62.156053][ T9] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 62.306042][ T9] usb 2-1: Invalid ep0 maxpacket: 16 [ 62.436058][ T9] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 62.586040][ T9] usb 2-1: Invalid ep0 maxpacket: 16 [ 62.591544][ T9] usb usb2-port1: attempt power cycle [ 62.670758][ T36] audit: type=1400 audit(1785991797.750:327): avc: denied { mount } for pid=1322 comm="syz.0.280" name="/" dev="configfs" ino=2495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 62.671672][ T1323] netlink: 36 bytes leftover after parsing attributes in process `syz.0.280'. [ 62.711181][ T36] audit: type=1400 audit(1785991797.790:328): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 62.734019][ T36] audit: type=1400 audit(1785991797.810:329): avc: denied { sqpoll } for pid=1327 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 62.776213][ T1334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.784969][ T1334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.822721][ T1336] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 62.966058][ T9] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 62.986456][ T9] usb 2-1: Invalid ep0 maxpacket: 16 [ 63.066087][ T375] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 63.116109][ T9] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 63.136446][ T9] usb 2-1: Invalid ep0 maxpacket: 16 [ 63.141909][ T9] usb usb2-port1: unable to enumerate USB device [ 63.216042][ T375] usb 4-1: Using ep0 maxpacket: 32 [ 63.222757][ T375] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 63.231008][ T375] usb 4-1: config 0 has no interface number 0 [ 63.237146][ T375] usb 4-1: config 0 interface 184 has no altsetting 0 [ 63.245482][ T375] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 63.254591][ T375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.262632][ T375] usb 4-1: Product: syz [ 63.266861][ T375] usb 4-1: Manufacturer: syz [ 63.271495][ T375] usb 4-1: SerialNumber: syz [ 63.276979][ T375] usb 4-1: config 0 descriptor?? [ 63.282810][ T375] smsc75xx v1.0.0 [ 64.085711][ T375] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 64.096632][ T375] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 64.106201][ T375] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 64.117044][ T375] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 64.127054][ T375] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 64.137480][ T375] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 64.146984][ T375] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 64.158383][ T375] usb 4-1: USB disconnect, device number 28 [ 64.251772][ T1354] deleting an unspecified loop device is not supported. [ 64.307257][ T1356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.315891][ T1356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.427996][ T66] usb 3-1: 1:1 : unsupported format bits 0x20000 [ 64.434697][ T66] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 64.442579][ T66] usb 3-1: 2:1 : unsupported format bits 0x20000 [ 64.454254][ T66] usb 3-1: USB disconnect, device number 19 [ 64.472700][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.501372][ T375] logitech-hidpp-device 0005:046D:B012.0005: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 64.528465][ T1366] fido_id[1366]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 64.543547][ T1368] netlink: 40 bytes leftover after parsing attributes in process `syz.2.293'. [ 64.552949][ T1368] netlink: 'syz.2.293': attribute type 27 has an invalid length. [ 64.561538][ T1368] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 64.639146][ T1377] netlink: 32 bytes leftover after parsing attributes in process `syz.3.295'. [ 64.794176][ T1385] SELinux: Context is not valid (left unmapped). [ 64.916086][ T66] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 65.046063][ T66] usb 4-1: device descriptor read/64, error -71 [ 65.104018][ T1403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.112672][ T1403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.196187][ T31] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 65.286097][ T66] usb 4-1: device descriptor read/64, error -71 [ 65.346052][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 65.356060][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 65.374314][ T31] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 65.383459][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.392264][ T31] usb 2-1: config 0 descriptor?? [ 65.536056][ T66] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 65.601720][ T31] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 65.609350][ T31] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 65.616957][ T31] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 65.624387][ T31] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 65.631974][ T31] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 65.640168][ T31] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 65.647627][ T31] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 65.655950][ T31] playstation 0003:054C:0BA0.0006: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 65.671902][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 65.671919][ T36] audit: type=1400 audit(1785991800.750:342): avc: denied { bind } for pid=1411 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.676182][ T66] usb 4-1: device descriptor read/64, error -71 [ 65.679071][ T375] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 65.800855][ T31] playstation 0003:054C:0BA0.0006: Failed to retrieve feature with reportID 18: -71 [ 65.810351][ T31] playstation 0003:054C:0BA0.0006: Failed to retrieve DualShock4 pairing info: -71 [ 65.819806][ T31] playstation 0003:054C:0BA0.0006: Failed to get MAC address from DualShock4 [ 65.828665][ T31] playstation 0003:054C:0BA0.0006: Failed to create dualshock4. [ 65.837262][ T31] playstation 0003:054C:0BA0.0006: probe with driver playstation failed with error -71 [ 65.848462][ T31] usb 2-1: USB disconnect, device number 26 [ 65.856331][ T375] usb 3-1: Using ep0 maxpacket: 16 [ 65.863686][ T375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.874796][ T375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.884619][ T375] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 65.897534][ T375] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 65.906667][ T375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.915512][ T375] usb 3-1: config 0 descriptor?? [ 65.987387][ T66] usb 4-1: device descriptor read/64, error -71 [ 66.096210][ T66] usb usb4-port1: attempt power cycle [ 66.335448][ T375] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 66.349146][ T375] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 66.356764][ T1421] netlink: 'syz.1.305': attribute type 4 has an invalid length. [ 66.356795][ T375] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 66.372037][ T375] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 66.376077][ T1421] netlink: 17 bytes leftover after parsing attributes in process `syz.1.305'. [ 66.379794][ T375] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 66.395530][ T375] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 66.404181][ T1421] kvm: user requested TSC rate below hardware speed [ 66.412623][ T375] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 66.423113][ T375] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 66.430561][ T375] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 66.440041][ T375] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 66.447425][ T375] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 66.456068][ T66] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 66.489471][ T66] usb 4-1: device descriptor read/8, error -71 [ 66.497138][ T375] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0007/input/input9 [ 66.524620][ T375] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 66.534999][ T1405] overlay: ./bus is not a directory [ 66.559217][ T1429] kvm: kvm [1428]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 66.561952][ T31] usb 3-1: USB disconnect, device number 20 [ 66.574534][ T36] audit: type=1400 audit(1785991801.650:343): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=558 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.601608][ T1429] kvm: kvm [1428]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 66.614561][ T1431] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.623711][ T1432] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.637092][ T66] usb 4-1: device descriptor read/8, error -71 [ 66.750745][ T36] audit: type=1400 audit(1785991801.830:344): avc: denied { ioctl } for pid=1436 comm="syz.1.309" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x5840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.886063][ T36] audit: type=1400 audit(1785991801.960:345): avc: denied { write } for pid=1446 comm="syz.0.312" name="kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 66.887615][ T66] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 66.918002][ T36] audit: type=1400 audit(1785991801.960:346): avc: denied { open } for pid=1446 comm="syz.0.312" path="/109/dev/kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 66.941565][ T36] audit: type=1400 audit(1785991801.960:347): avc: denied { mounton } for pid=1446 comm="syz.0.312" path="/109/dev" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 66.967026][ T66] usb 4-1: device descriptor read/8, error -71 [ 67.006323][ T1460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.014849][ T1461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.017487][ T1460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.025355][ T1461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.086721][ T36] audit: type=1400 audit(1785991802.170:348): avc: denied { read } for pid=1465 comm="syz.1.319" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.097610][ T66] usb 4-1: device descriptor read/8, error -71 [ 67.234486][ T66] usb usb4-port1: unable to enumerate USB device [ 67.356113][ T338] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 67.507085][ T338] usb 2-1: config 1 has an invalid interface number: 121 but max is 2 [ 67.515283][ T338] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.525461][ T338] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 67.526318][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 67.534455][ T338] usb 2-1: config 1 has no interface number 0 [ 67.549708][ T338] usb 2-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 67.558815][ T338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.566923][ T338] usb 2-1: Product: syz [ 67.571204][ T338] usb 2-1: Manufacturer: syz [ 67.575797][ T338] usb 2-1: SerialNumber: syz [ 67.619107][ T36] audit: type=1400 audit(1785991802.700:349): avc: denied { unmount } for pid=1482 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.640342][ T1483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 67.666060][ T9] usb 3-1: device descriptor read/64, error -71 [ 67.758086][ T36] audit: type=1400 audit(1785991802.840:350): avc: denied { write } for pid=1492 comm="syz.0.328" path="socket:[11987]" dev="sockfs" ino=11987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.786430][ T36] audit: type=1400 audit(1785991802.870:351): avc: denied { map } for pid=1465 comm="syz.1.319" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.812857][ T338] usb 2-1: unknown sample rate [ 67.823521][ T338] usb 2-1: unknown sample rate [ 67.847661][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.863528][ T338] usb 2-1: USB disconnect, device number 27 [ 67.883478][ T1498] ======================================================= [ 67.883478][ T1498] WARNING: The mand mount option has been deprecated and [ 67.883478][ T1498] and is ignored by this kernel. Remove the mand [ 67.883478][ T1498] option from the mount to silence this warning. [ 67.883478][ T1498] ======================================================= [ 67.886882][ T1499] cgroup: noprefix used incorrectly [ 67.931545][ T1498] tmpfs: Unknown parameter 'permit_directio' [ 67.937695][ T9] usb 3-1: device descriptor read/64, error -71 [ 68.136066][ T375] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 68.186080][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 68.246055][ T338] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 68.286048][ T375] usb 4-1: Using ep0 maxpacket: 32 [ 68.292330][ T375] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 68.304893][ T375] usb 4-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 68.314002][ T375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.322099][ T375] usb 4-1: Product: syz [ 68.326338][ T9] usb 3-1: device descriptor read/64, error -71 [ 68.332636][ T375] usb 4-1: Manufacturer: syz [ 68.337276][ T375] usb 4-1: SerialNumber: syz [ 68.407289][ T338] usb 2-1: config 0 interface 0 altsetting 65 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 68.420430][ T338] usb 2-1: config 0 interface 0 has no altsetting 0 [ 68.427128][ T338] usb 2-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 68.436296][ T338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.445127][ T338] usb 2-1: config 0 descriptor?? [ 68.552253][ T375] usb 4-1: USB disconnect, device number 33 [ 68.564272][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.586239][ T9] usb 3-1: device descriptor read/64, error -71 [ 68.657584][ T338] usbhid 2-1:0.0: can't add hid device: -71 [ 68.663887][ T338] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 68.672759][ T338] usb 2-1: USB disconnect, device number 28 [ 68.697401][ T9] usb usb3-port1: attempt power cycle [ 68.810380][ T1515] syz.1.336 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 69.036068][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 69.060762][ T9] usb 3-1: device descriptor read/8, error -71 [ 69.089030][ T1522] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3722248192 (7444496384 ns) > initial count (200000 ns). Using initial count to start timer. [ 69.118079][ T1522] netlink: 20 bytes leftover after parsing attributes in process `syz.3.338'. [ 69.128006][ T1522] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.137562][ T1522] bridge_slave_0 (unregistering): left allmulticast mode [ 69.144649][ T1522] bridge_slave_0 (unregistering): left promiscuous mode [ 69.151661][ T1522] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.195790][ T1526] netlink: 'syz.0.339': attribute type 27 has an invalid length. [ 69.213253][ T1526] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 69.286037][ T338] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 69.448758][ T338] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 69.458261][ T338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.466721][ T338] usb 2-1: Product: syz [ 69.471088][ T338] usb 2-1: Manufacturer: syz [ 69.475737][ T338] usb 2-1: SerialNumber: syz [ 69.547161][ T9] usb 3-1: device descriptor read/8, error -71 [ 69.737669][ T338] rtl8150 2-1:1.0: couldn't reset the device [ 69.743867][ T338] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 69.753212][ T338] usb 2-1: USB disconnect, device number 29 [ 69.826069][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 69.833723][ T507] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 69.850640][ T1542] overlayfs: failed to resolve './cgroup': -2 [ 69.862824][ T9] usb 3-1: device descriptor read/8, error -71 [ 69.987218][ T507] usb 4-1: config 1 has an invalid interface number: 161 but max is 0 [ 69.995473][ T507] usb 4-1: config 1 has no interface number 0 [ 70.001635][ T507] usb 4-1: config 1 interface 161 has no altsetting 0 [ 70.009561][ T9] usb 3-1: device descriptor read/8, error -71 [ 70.016150][ T507] usb 4-1: New USB device found, idVendor=0411, idProduct=003d, bcdDevice=bb.be [ 70.025385][ T507] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.033609][ T507] usb 4-1: Product: syz [ 70.037805][ T507] usb 4-1: Manufacturer: syz [ 70.042488][ T507] usb 4-1: SerialNumber: syz [ 70.116140][ T9] usb usb3-port1: unable to enumerate USB device [ 70.253121][ T507] asix 4-1:1.161: probe with driver asix failed with error -22 [ 70.263280][ T507] usb 4-1: Found UVC 15.ff device syz (0411:003d) [ 70.269807][ T507] usb 4-1: No valid video chain found. [ 70.284943][ T1555] syzkaller1: entered promiscuous mode [ 70.288041][ T507] usb 4-1: USB disconnect, device number 34 [ 70.296179][ T1555] syzkaller1: entered allmulticast mode [ 70.546073][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 70.697185][ T9] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 70.704569][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 70.718765][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.727975][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 70.736062][ T9] usb 2-1: SerialNumber: syz [ 70.743326][ T9] usb 2-1: bad CDC descriptors [ 70.782547][ T1571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.791360][ T1571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.799829][ T1571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.808571][ T1571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.944853][ T338] usb 2-1: USB disconnect, device number 30 [ 70.985817][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 70.985836][ T36] audit: type=1400 audit(1785991806.060:360): avc: denied { create } for pid=1577 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 71.016038][ T702] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 71.068185][ T1588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.360'. [ 71.187078][ T702] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 71.195752][ T702] usb 4-1: can't read configurations, error -22 [ 71.287398][ T36] audit: type=1400 audit(1785991806.370:361): avc: denied { create } for pid=1603 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 71.326077][ T702] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 71.487546][ T702] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 71.495667][ T702] usb 4-1: can't read configurations, error -22 [ 71.502248][ T702] usb usb4-port1: attempt power cycle [ 71.554111][ T36] audit: type=1400 audit(1785991806.630:362): avc: denied { create } for pid=1608 comm="syz.1.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 71.615185][ T36] audit: type=1400 audit(1785991806.690:363): avc: denied { search } for pid=1612 comm="syz.1.368" name="/" dev="configfs" ino=2495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.637367][ T36] audit: type=1400 audit(1785991806.690:364): avc: denied { write } for pid=1612 comm="syz.1.368" name="usb_gadget" dev="configfs" ino=2496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.662539][ T36] audit: type=1400 audit(1785991806.690:365): avc: denied { add_name } for pid=1612 comm="syz.1.368" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.666140][ T66] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 71.685863][ T36] audit: type=1400 audit(1785991806.690:366): avc: denied { create } for pid=1612 comm="syz.1.368" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 71.714866][ T36] audit: type=1400 audit(1785991806.690:367): avc: denied { write } for pid=1612 comm="syz.1.368" name="max_speed" dev="configfs" ino=12794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 71.737789][ T36] audit: type=1400 audit(1785991806.690:368): avc: denied { open } for pid=1612 comm="syz.1.368" path="/80/config/usb_gadget/g1/max_speed" dev="configfs" ino=12794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 71.846104][ T702] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 71.857261][ T66] usb 3-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 71.870244][ T66] usb 3-1: config 1 interface 0 has no altsetting 0 [ 71.878559][ T66] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.887702][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.895722][ T66] usb 3-1: Product: syz [ 71.899940][ T702] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 71.907920][ T702] usb 4-1: can't read configurations, error -22 [ 71.914196][ T66] usb 3-1: Manufacturer: syz [ 71.919057][ T66] usb 3-1: SerialNumber: syz [ 71.946061][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 72.056130][ T702] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 72.078047][ T702] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 72.086137][ T702] usb 4-1: can't read configurations, error -22 [ 72.092625][ T702] usb usb4-port1: unable to enumerate USB device [ 72.106036][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 72.112367][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.123450][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.133370][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 72.142590][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.151654][ T9] usb 2-1: config 0 descriptor?? [ 72.159191][ T9] hub 2-1:0.0: USB hub found [ 72.319888][ T36] audit: type=1400 audit(1785991807.400:369): avc: denied { setopt } for pid=1618 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.321384][ T1619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 72.358316][ T9] hub 2-1:0.0: 1 port detected [ 72.761714][ T9] usb 2-1: USB disconnect, device number 31 [ 73.278183][ T1625] 9pnet_fd: Insufficient options for proto=fd [ 73.536058][ T375] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 73.666056][ T375] usb 2-1: device descriptor read/64, error -71 [ 73.906039][ T375] usb 2-1: device descriptor read/64, error -71 [ 74.146051][ T375] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 74.186067][ T702] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 74.276047][ T375] usb 2-1: device descriptor read/64, error -71 [ 74.294796][ T66] usb 3-1: bad CDC descriptors [ 74.311311][ T66] usb 3-1: USB disconnect, device number 25 [ 74.317395][ T1648] <ñ [ 74.336040][ T702] usb 4-1: Invalid ep0 maxpacket: 64 [ 74.476100][ T702] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 74.516047][ T375] usb 2-1: device descriptor read/64, error -71 [ 74.530438][ T1668] netlink: 104 bytes leftover after parsing attributes in process `syz.0.390'. [ 74.632714][ T702] usb 4-1: Invalid ep0 maxpacket: 64 [ 74.639673][ T702] usb usb4-port1: attempt power cycle [ 74.651542][ T375] usb usb2-port1: attempt power cycle [ 74.988928][ T702] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 75.006269][ T375] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 75.015215][ T1683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.024008][ T702] usb 4-1: Invalid ep0 maxpacket: 64 [ 75.030686][ T1683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.047035][ T375] usb 2-1: device descriptor read/8, error -71 [ 75.072253][ T1686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 75.156043][ T702] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 75.176453][ T702] usb 4-1: Invalid ep0 maxpacket: 64 [ 75.181989][ T702] usb usb4-port1: unable to enumerate USB device [ 75.188660][ T375] usb 2-1: device descriptor read/8, error -71 [ 75.256050][ T9] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 75.386058][ T9] usb 3-1: device descriptor read/64, error -71 [ 75.426059][ T375] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 75.447218][ T375] usb 2-1: device descriptor read/8, error -71 [ 75.577262][ T375] usb 2-1: device descriptor read/8, error -71 [ 75.626047][ T9] usb 3-1: device descriptor read/64, error -71 [ 75.676912][ T1697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'. [ 75.686326][ T375] usb usb2-port1: unable to enumerate USB device [ 75.866064][ T9] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 75.996052][ T9] usb 3-1: device descriptor read/64, error -71 [ 76.236059][ T9] usb 3-1: device descriptor read/64, error -71 [ 76.346143][ T9] usb usb3-port1: attempt power cycle [ 76.372608][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 76.372625][ T36] audit: type=1326 audit(1785991811.450:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1705 comm="syz.1.402" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa9479e0d9 code=0x0 [ 76.686106][ T9] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 76.707218][ T9] usb 3-1: device descriptor read/8, error -71 [ 76.736045][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 76.788182][ T1719] netlink: 'syz.0.408': attribute type 4 has an invalid length. [ 76.808343][ T1724] netlink: 393 bytes leftover after parsing attributes in process `syz.0.409'. [ 76.837071][ T9] usb 3-1: device descriptor read/8, error -71 [ 76.839434][ T36] audit: type=1400 audit(1785991811.920:374): avc: denied { mount } for pid=1728 comm="syz.3.411" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 76.886033][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 76.892847][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 76.895669][ T1735] netlink: 'syz.0.413': attribute type 4 has an invalid length. [ 76.902107][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 76.920666][ T1735] netlink: 'syz.0.413': attribute type 4 has an invalid length. [ 76.936155][ T10] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 76.947830][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.958792][ T10] usb 2-1: Product: syz [ 76.962998][ T10] usb 2-1: Manufacturer: syz [ 76.968706][ T36] audit: type=1400 audit(1785991812.050:375): avc: denied { create } for pid=1738 comm="syz.0.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 76.988193][ T10] usb 2-1: SerialNumber: syz [ 77.015041][ T36] audit: type=1400 audit(1785991812.090:376): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 77.086043][ T9] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 77.106955][ T9] usb 3-1: device descriptor read/8, error -71 [ 77.197546][ T10] usb 2-1: cannot find UAC_HEADER [ 77.204386][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 77.215881][ T10] usb 2-1: USB disconnect, device number 36 [ 77.225003][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.247184][ T9] usb 3-1: device descriptor read/8, error -71 [ 77.276055][ T702] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 77.356144][ T9] usb usb3-port1: unable to enumerate USB device [ 77.427224][ T702] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.437466][ T702] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 77.446573][ T702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.456566][ T702] usb 4-1: config 0 descriptor?? [ 77.580183][ T1743] netlink: 'syz.0.416': attribute type 4 has an invalid length. [ 77.775391][ T36] audit: type=1400 audit(1785991812.850:377): avc: denied { read } for pid=1767 comm="syz.1.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.909720][ T36] audit: type=1400 audit(1785991812.990:378): avc: denied { read } for pid=1777 comm="syz.1.424" name="file0" dev="tmpfs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.933719][ T36] audit: type=1400 audit(1785991813.010:379): avc: denied { ioctl } for pid=1777 comm="syz.1.424" path="/89/file0" dev="tmpfs" ino=515 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.103112][ T36] audit: type=1400 audit(1785991813.180:380): avc: denied { read } for pid=1784 comm="syz.2.426" name="file2" dev="tmpfs" ino=500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.158660][ T36] audit: type=1400 audit(1785991813.240:381): avc: denied { mount } for pid=1786 comm="syz.2.427" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 78.206774][ T36] audit: type=1400 audit(1785991813.240:382): avc: denied { remount } for pid=1786 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 78.372319][ T702] usb 4-1: USB disconnect, device number 43 [ 78.388650][ T1794] netlink: 44 bytes leftover after parsing attributes in process `syz.3.430'. [ 78.400877][ T1794] netlink: 35 bytes leftover after parsing attributes in process `syz.3.430'. [ 78.410017][ T1794] netlink: 'syz.3.430': attribute type 6 has an invalid length. [ 78.419950][ T1794] netlink: 'syz.3.430': attribute type 4 has an invalid length. [ 78.766050][ T702] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 78.796046][ T31] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 78.916880][ T702] usb 4-1: too many configurations: 115, using maximum allowed: 8 [ 78.925953][ T702] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 78.933605][ T702] usb 4-1: can't read configurations, error -61 [ 78.956120][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 78.962593][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 78.971031][ T31] usb 2-1: config 2 has an invalid interface number: 99 but max is 0 [ 78.979214][ T31] usb 2-1: config 2 has no interface number 0 [ 78.985309][ T31] usb 2-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 78.996943][ T31] usb 2-1: config 2 interface 99 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 79.008218][ T31] usb 2-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 79.018065][ T31] usb 2-1: config 2 interface 99 has no altsetting 0 [ 79.026283][ T31] usb 2-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 79.035339][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.043376][ T31] usb 2-1: Product: syz [ 79.047607][ T31] usb 2-1: Manufacturer: syz [ 79.052202][ T31] usb 2-1: SerialNumber: syz [ 79.076102][ T702] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 79.176043][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 79.226430][ T702] usb 4-1: too many configurations: 115, using maximum allowed: 8 [ 79.235371][ T702] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 79.243131][ T702] usb 4-1: can't read configurations, error -61 [ 79.249839][ T702] usb usb4-port1: attempt power cycle [ 79.261824][ T31] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.99/input/input12 [ 79.274876][ T31] usb 2-1: USB disconnect, device number 37 [ 79.274917][ C0] xpad 2-1:2.99: xpad_irq_in - usb_submit_urb failed with result -19 [ 79.336043][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 79.343012][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 79.353038][ T10] usb 3-1: config index 0 descriptor too short (expected 110, got 95) [ 79.361436][ T10] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 79.371808][ T10] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.386227][ T10] usb 3-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 79.395311][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.403341][ T10] usb 3-1: Product: syz [ 79.407588][ T10] usb 3-1: Manufacturer: syz [ 79.412300][ T10] usb 3-1: SerialNumber: syz [ 79.586054][ T702] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 79.606859][ T702] usb 4-1: too many configurations: 115, using maximum allowed: 8 [ 79.615756][ T702] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 79.623460][ T702] usb 4-1: can't read configurations, error -61 [ 79.631199][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 79.641090][ T10] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 79.651066][ T10] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 79.660997][ T10] usb 3-1: USB disconnect, device number 30 [ 79.756100][ T702] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 79.776842][ T702] usb 4-1: too many configurations: 115, using maximum allowed: 8 [ 79.785714][ T702] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 79.793372][ T702] usb 4-1: can't read configurations, error -61 [ 79.799805][ T702] usb usb4-port1: unable to enumerate USB device [ 80.086072][ T702] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 80.236056][ T702] usb 2-1: Using ep0 maxpacket: 32 [ 80.242419][ T702] usb 2-1: config index 0 descriptor too short (expected 12324, got 36) [ 80.250861][ T702] usb 2-1: config 57 has too many interfaces: 54, using maximum allowed: 32 [ 80.259660][ T702] usb 2-1: config 57 has an invalid descriptor of length 0, skipping remainder of the config [ 80.269892][ T702] usb 2-1: config 57 has 0 interfaces, different from the descriptor's value: 54 [ 80.280696][ T702] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 80.290152][ T702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.298218][ T702] usb 2-1: Product: syz [ 80.302429][ T702] usb 2-1: Manufacturer: syz [ 80.307070][ T702] usb 2-1: SerialNumber: syz [ 80.386075][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 80.514561][ T702] usb 2-1: USB disconnect, device number 38 [ 80.537109][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 80.550139][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 80.559248][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.567972][ T10] usb 3-1: config 0 descriptor?? [ 80.976979][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 80.983936][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 80.990981][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 80.997968][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 81.004854][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 81.011849][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 81.018808][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 81.025803][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 81.032776][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 81.039981][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 81.047216][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 81.054193][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 81.061225][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 81.070019][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 81.077041][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 81.084013][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 81.090990][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 81.097952][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 81.104871][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 81.111839][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 81.118818][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 81.125747][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 81.132698][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 81.140030][ T10] wacom 0003:056A:00B8.0008: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 81.150234][ T10] wacom 0003:056A:00B8.0008: hidraw0: USB HID v0.05 Device [HID 056a:00b8] on usb-dummy_hcd.2-1/input0 [ 81.162274][ T10] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B8.0008/input/input13 [ 81.191960][ T10] usb 3-1: USB disconnect, device number 31 [ 81.516058][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 81.667117][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.678085][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 81.687180][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.856047][ T702] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 81.904710][ T1879] overlay: ./file0 is not a directory [ 81.912276][ T1899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.921075][ T1899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.940865][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 81.951220][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 81.960096][ T9] usb 2-1: USB disconnect, device number 39 [ 81.968425][ T1903] netlink: 'syz.1.468': attribute type 19 has an invalid length. [ 82.006029][ T702] usb 4-1: Using ep0 maxpacket: 32 [ 82.012350][ T702] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 82.025199][ T702] usb 4-1: New USB device found, idVendor=0499, idProduct=100f, bcdDevice= 0.40 [ 82.034520][ T702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.042912][ T702] usb 4-1: Product: syz [ 82.047275][ T702] usb 4-1: Manufacturer: syz [ 82.051939][ T702] usb 4-1: SerialNumber: syz [ 82.166037][ T66] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 82.231064][ T1920] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 82.238645][ T1920] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 82.266714][ T702] usb 4-1: invalid MIDI out EP 0 [ 82.277919][ T702] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 82.290584][ T702] usb 4-1: USB disconnect, device number 48 [ 82.308509][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.327169][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 82.336134][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 82.344558][ T66] usb 3-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 82.355113][ T66] usb 3-1: config 1 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.368471][ T66] usb 3-1: config 1 interface 0 has no altsetting 0 [ 82.376885][ T66] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 82.386113][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.394185][ T66] usb 3-1: Product: syz [ 82.398584][ T66] usb 3-1: Manufacturer: syz [ 82.403250][ T66] usb 3-1: SerialNumber: syz [ 82.623267][ T66] usb 3-1: USB disconnect, device number 32 [ 82.654174][ T1940] mmap: syz.0.475 (1940) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.788885][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 82.788906][ T36] audit: type=1400 audit(1785991817.870:388): avc: denied { map } for pid=1942 comm="syz.3.476" path="socket:[15440]" dev="sockfs" ino=15440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.154995][ T36] audit: type=1400 audit(1785991818.230:389): avc: denied { write } for pid=1953 comm="syz.2.481" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.186069][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 83.336065][ T66] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 83.347136][ T10] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 83.359484][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.369655][ T10] usb 4-1: config 0 has no interfaces? [ 83.375163][ T10] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 83.384284][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.396412][ T10] usb 4-1: config 0 descriptor?? [ 83.497593][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 83.506653][ T66] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 83.519525][ T66] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 83.531637][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.539939][ T66] usb 2-1: Product: syz [ 83.544248][ T66] usb 2-1: Manufacturer: syz [ 83.549177][ T66] usb 2-1: SerialNumber: syz [ 83.667543][ T702] usb 4-1: USB disconnect, device number 49 [ 83.759421][ T66] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 83.967024][ T66] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 83.975635][ T66] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 84.103114][ T36] audit: type=1400 audit(1785991819.180:390): avc: denied { execute } for pid=1968 comm="syz.2.486" path="/file1" dev="ramfs" ino=15543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 84.367645][ T66] usb 2-1: invalid uac2 rates [ 84.372582][ T66] usb 2-1: invalid uac2 rates [ 84.377824][ T66] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 84.386304][ T66] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 84.396073][ T702] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 84.549517][ T702] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.560652][ T702] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 84.566123][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 84.569855][ T702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.649652][ T36] audit: type=1326 audit(1785991819.730:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1985 comm="syz.0.493" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9cdc99e0d9 code=0x0 [ 84.756024][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 84.764258][ T10] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 84.773492][ T10] usb 4-1: config 0 has no interface number 0 [ 84.779688][ T10] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 84.791449][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 84.800725][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.808854][ T10] usb 4-1: Product: syz [ 84.813166][ T10] usb 4-1: Manufacturer: syz [ 84.817815][ T10] usb 4-1: SerialNumber: syz [ 84.823536][ T10] usb 4-1: config 0 descriptor?? [ 84.828823][ T1974] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 84.990690][ T66] usb 2-1: failed to enable PITCH for EP 0x82 [ 84.999084][ T702] wacom 0003:056A:033B.0009: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 85.008781][ T66] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 85.017456][ T66] usb 2-1: clock source 0 is not valid, cannot use [ 85.024880][ T702] wacom 0003:056A:033B.0009: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 85.036043][ T66] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 85.042701][ T66] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 85.056794][ T702] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0009/input/input16 [ 85.076143][ T1974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.488'. [ 85.089996][ T1974] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 85.097172][ T66] usb 2-1: USB disconnect, device number 40 [ 85.119883][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.305707][ T10] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 85.316011][ T10] asix 4-1:0.188: probe with driver asix failed with error -32 [ 85.327193][ T10] usb 4-1: USB disconnect, device number 50 [ 85.590055][ T36] audit: type=1400 audit(1785991820.670:392): avc: denied { getopt } for pid=1996 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.671729][ T36] audit: type=1400 audit(1785991820.750:393): avc: denied { connect } for pid=1999 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.712871][ T2003] incfs: Error accessing: ./file0. [ 85.718832][ T2003] incfs: mount failed -2 [ 85.748344][ T375] usb 3-1: USB disconnect, device number 33 [ 85.835194][ T2013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.499'. [ 85.844372][ T2013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.499'. [ 85.855612][ T36] audit: type=1400 audit(1785991820.930:394): avc: denied { write } for pid=2012 comm="syz.1.499" name="events" dev="tracefs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 85.881311][ T36] audit: type=1400 audit(1785991820.930:395): avc: denied { add_name } for pid=2012 comm="syz.1.499" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 85.902222][ T36] audit: type=1400 audit(1785991820.930:396): avc: denied { create } for pid=2012 comm="syz.1.499" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 85.945554][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 86.046117][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 86.086085][ T66] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 86.216098][ T66] usb 4-1: device descriptor read/64, error -71 [ 86.456223][ T66] usb 4-1: device descriptor read/64, error -71 [ 86.606119][ T10] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 86.696576][ T702] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 86.704306][ T66] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 86.757432][ T10] usb 3-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 86.768681][ T10] usb 3-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 86.779540][ T10] usb 3-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.792502][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 86.799211][ T10] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 86.808327][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.817312][ T10] usb 3-1: config 0 descriptor?? [ 86.822958][ T2019] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.836287][ T66] usb 4-1: device descriptor read/64, error -71 [ 86.856124][ T702] usb 2-1: Using ep0 maxpacket: 16 [ 86.862882][ T702] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 86.874097][ T702] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 86.887380][ T702] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 86.896521][ T702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.906139][ T702] usb 2-1: config 0 descriptor?? [ 87.034107][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.041547][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.049004][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.056463][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.063631][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.070852][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.076414][ T66] usb 4-1: device descriptor read/64, error -71 [ 87.078067][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.091643][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.098862][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.106052][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.113253][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.120474][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.127678][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.134861][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.142084][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.145241][ T702] holtek_mouse 0003:04D9:A072.000B: unknown main item tag 0x3 [ 87.149744][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.163170][ T702] holtek_mouse 0003:04D9:A072.000B: ignoring exceeding usage max [ 87.164128][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.179388][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.186644][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.193805][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.194907][ T66] usb usb4-port1: attempt power cycle [ 87.201020][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.209557][ T702] holtek_mouse 0003:04D9:A072.000B: hidraw0: USB HID v0.01 Device [HID 04d9:a072] on usb-dummy_hcd.1-1/input0 [ 87.213611][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.232540][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.246524][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.253737][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.261346][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.268849][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.276320][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.283486][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.291167][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.298653][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.305831][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.313442][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.320916][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.329356][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.336960][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.344145][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.357664][ T10] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 87.366390][ T10] petalynx 0003:18B1:0037.000A: hidraw1: USB HID v0.01 Device [HID 18b1:0037] on usb-dummy_hcd.2-1/input0 [ 87.381205][ T10] usb 3-1: USB disconnect, device number 34 [ 87.403612][ T2026] fido_id[2026]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 87.576115][ T66] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 87.597477][ T66] usb 4-1: device descriptor read/8, error -71 [ 87.706958][ T36] audit: type=1326 audit(1785991822.790:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2032 comm="syz.0.505" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9cdc99e0d9 code=0x0 [ 87.737642][ T66] usb 4-1: device descriptor read/8, error -71 [ 87.976168][ T66] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 87.997954][ T66] usb 4-1: device descriptor read/8, error -71 [ 88.056559][ T2052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.065417][ T2052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.127636][ T66] usb 4-1: device descriptor read/8, error -71 [ 88.236281][ T66] usb usb4-port1: unable to enumerate USB device [ 88.286108][ T702] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 88.437584][ T702] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 88.445760][ T702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.456762][ T702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.466607][ T702] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.479629][ T702] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.488739][ T702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.498049][ T702] usb 3-1: config 0 descriptor?? [ 88.907406][ T702] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 88.915037][ T702] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 88.922699][ T702] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 88.930446][ T702] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 88.937932][ T702] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 88.945557][ T702] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 88.952982][ T702] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 88.960582][ T702] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 88.968063][ T702] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 88.975685][ T702] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 88.983125][ T702] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 88.990726][ T702] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 88.998187][ T702] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 89.005735][ T702] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 89.013184][ T702] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 89.021125][ T702] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 89.040655][ T702] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 89.170132][ T702] usb 3-1: USB disconnect, device number 35 [ 89.449779][ T66] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 89.484835][ T10] usb 2-1: USB disconnect, device number 41 [ 89.534449][ T2096] FAT-fs (rnullb0): bogus number of reserved sectors [ 89.541494][ T2096] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 89.575891][ T66] usb 4-1: device descriptor read/64, error -71 [ 89.582322][ T2100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.524'. [ 89.593217][ T2100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.524'. [ 89.603312][ T36] audit: type=1400 audit(1785991824.699:398): avc: denied { getopt } for pid=2099 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.630398][ T36] audit: type=1400 audit(1785991824.730:399): avc: denied { map } for pid=2101 comm="syz.0.525" path="socket:[14958]" dev="sockfs" ino=14958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 89.818288][ T66] usb 4-1: device descriptor read/64, error -71 [ 89.915268][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 90.051496][ T66] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 90.081916][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.093008][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.102924][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.115903][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.125080][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.143377][ T10] usb 2-1: config 0 descriptor?? [ 90.177715][ T66] usb 4-1: device descriptor read/64, error -71 [ 90.420736][ T66] usb 4-1: device descriptor read/64, error -71 [ 90.527861][ T66] usb usb4-port1: attempt power cycle [ 90.541911][ T10] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 90.551588][ T10] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 90.790828][ T10] usb 2-1: USB disconnect, device number 42 [ 90.857681][ T66] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 90.878752][ T66] usb 4-1: device descriptor read/8, error -71 [ 91.005425][ T66] usb 4-1: device descriptor read/8, error -71 [ 91.198196][ T2130] overlayfs: failed to clone upperpath [ 91.247065][ T66] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 91.267800][ T66] usb 4-1: device descriptor read/8, error -71 [ 91.404261][ T66] usb 4-1: device descriptor read/8, error -71 [ 91.509880][ T66] usb usb4-port1: unable to enumerate USB device [ 91.621704][ T36] audit: type=1400 audit(1785991826.777:400): avc: denied { create } for pid=2140 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 91.947947][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 92.094158][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 92.101997][ T9] usb 3-1: config 1 has an invalid descriptor of length 227, skipping remainder of the config [ 92.113018][ T9] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 92.134227][ T9] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 92.152748][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.163735][ T9] usb 3-1: Product: syz [ 92.170498][ T9] usb 3-1: Manufacturer: syz [ 92.177482][ T9] usb 3-1: SerialNumber: syz [ 92.278312][ T2165] can0: slcan on ttyS3. [ 92.284675][ T2165] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 92.288701][ T36] audit: type=1400 audit(1785991827.454:401): avc: denied { call } for pid=2164 comm="syz.3.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 92.316575][ T36] audit: type=1400 audit(1785991827.454:402): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 92.359496][ T2164] can0 (unregistered): slcan off ttyS3. [ 92.369668][ T66] rust_binder: 2164: undelivered TRANSACTION_ERROR: 29189 [ 92.391822][ T36] audit: type=1400 audit(1785991827.567:403): avc: denied { execute } for pid=2151 comm="syz.2.544" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.421105][ T9] usb 3-1: USB disconnect, device number 36 [ 92.562166][ T36] audit: type=1400 audit(1785991827.731:404): avc: denied { setattr } for pid=2171 comm="syz.1.552" name="" dev="pipefs" ino=16158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 92.776482][ T36] audit: type=1400 audit(1785992083.959:405): avc: denied { accept } for pid=2184 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.911444][ T36] audit: type=1326 audit(1785992084.099:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2190 comm="syz.2.558" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf4ef9e0d9 code=0x0 [ 93.069966][ T36] audit: type=1326 audit(1785992084.259:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2190 comm="syz.2.558" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf4ef9e0d9 code=0x0 [ 93.405813][ T2219] overlayfs: failed to clone upperpath [ 93.807657][ T2242] netlink: 44 bytes leftover after parsing attributes in process `syz.2.569'. [ 93.821627][ T2242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 94.337544][ T66] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 94.507577][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 94.525099][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 94.537827][ T66] usb 2-1: config 254 has an invalid interface number: 103 but max is 0 [ 94.554091][ T66] usb 2-1: config 254 has no interface number 0 [ 94.571375][ T66] usb 2-1: config 254 interface 103 altsetting 2 bulk endpoint 0xB has invalid maxpacket 1023 [ 94.606060][ T66] usb 2-1: config 254 interface 103 altsetting 2 bulk endpoint 0xA has invalid maxpacket 1023 [ 94.608783][ T2277] netlink: 'syz.3.580': attribute type 12 has an invalid length. [ 94.638282][ T66] usb 2-1: config 254 interface 103 has no altsetting 0 [ 94.647123][ T66] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=64.5b [ 94.656592][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.664736][ T66] usb 2-1: Product: syz [ 94.669203][ T66] usb 2-1: Manufacturer: syz [ 94.673833][ T66] usb 2-1: SerialNumber: syz [ 94.685241][ T2259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 94.693071][ T2259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 94.867696][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 94.898669][ T702] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 94.970093][ T66] usbserial_generic 2-1:254.103: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 95.002353][ T66] usbserial_generic 2-1:254.103: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 95.013886][ T66] usbserial_generic 2-1:254.103: generic converter detected [ 95.017812][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 95.026763][ T66] usb 2-1: generic converter now attached to ttyUSB0 [ 95.037521][ T66] usb 2-1: generic converter now attached to ttyUSB1 [ 95.045330][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.056506][ T66] usb 2-1: USB disconnect, device number 43 [ 95.067302][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 95.077544][ T702] usb 3-1: Using ep0 maxpacket: 16 [ 95.078929][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.091518][ T66] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 95.105539][ T9] usb 4-1: Product: syz [ 95.110785][ T702] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 95.123373][ T702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.126987][ T9] usb 4-1: Manufacturer: syz [ 95.133900][ T66] generic ttyUSB1: generic converter now disconnected from ttyUSB1 [ 95.147608][ T702] usb 3-1: Product: syz [ 95.150756][ T9] usb 4-1: SerialNumber: syz [ 95.151814][ T702] usb 3-1: Manufacturer: syz [ 95.161990][ T702] usb 3-1: SerialNumber: syz [ 95.167175][ T66] usbserial_generic 2-1:254.103: device disconnected [ 95.175763][ T9] usb 4-1: config 0 descriptor?? [ 95.189135][ T9] sr9700 4-1:0.0: probe with driver sr9700 failed with error -22 [ 95.394200][ T702] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 95.401637][ T2277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.580'. [ 95.411072][ T2277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2277 comm=syz.3.580 [ 95.425877][ T9] usb 4-1: USB disconnect, device number 59 [ 95.436643][ T702] usb 3-1: USB disconnect, device number 37 [ 95.462260][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.497570][ T66] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 95.627631][ T66] usb 2-1: device descriptor read/64, error -71 [ 95.877835][ T66] usb 2-1: device descriptor read/64, error -71 [ 96.129299][ T66] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 96.267822][ T66] usb 2-1: device descriptor read/64, error -71 [ 96.268635][ T2298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.588'. [ 96.517639][ T66] usb 2-1: device descriptor read/64, error -71 [ 96.547575][ T10] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 96.555251][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 96.638013][ T66] usb usb2-port1: attempt power cycle [ 96.687982][ T9] usb 4-1: device descriptor read/64, error -71 [ 96.718970][ T10] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 96.729158][ T10] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 96.738448][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.937631][ T9] usb 4-1: device descriptor read/64, error -71 [ 96.953781][ T10] usb 3-1: string descriptor 0 read error: -71 [ 96.965102][ T10] hub 3-1:32.0: bad descriptor, ignoring hub [ 96.973337][ T10] hub 3-1:32.0: probe with driver hub failed with error -5 [ 96.978657][ T66] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 97.019178][ T66] usb 2-1: device descriptor read/8, error -71 [ 97.019522][ T10] usb 3-1: USB disconnect, device number 38 [ 97.148869][ T66] usb 2-1: device descriptor read/8, error -71 [ 97.197588][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 97.337571][ T9] usb 4-1: device descriptor read/64, error -71 [ 97.387636][ T66] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 97.408961][ T66] usb 2-1: device descriptor read/8, error -71 [ 97.481190][ T2309] netlink: 'syz.2.592': attribute type 25 has an invalid length. [ 97.549054][ T66] usb 2-1: device descriptor read/8, error -71 [ 97.577610][ T9] usb 4-1: device descriptor read/64, error -71 [ 97.585817][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 97.585836][ T36] audit: type=1400 audit(1785992088.769:413): avc: denied { append } for pid=2312 comm="syz.2.593" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 97.657776][ T66] usb usb2-port1: unable to enumerate USB device [ 97.687996][ T9] usb usb4-port1: attempt power cycle [ 98.038446][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 98.069675][ T9] usb 4-1: device descriptor read/8, error -71 [ 98.209932][ T9] usb 4-1: device descriptor read/8, error -71 [ 98.297602][ T66] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 98.397611][ T507] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 98.437733][ T66] usb 3-1: device descriptor read/64, error -71 [ 98.477577][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 98.505513][ T9] usb 4-1: device descriptor read/8, error -71 [ 98.590064][ T507] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.601900][ T507] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 98.611496][ T507] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.627680][ T507] usb 2-1: config 0 descriptor?? [ 98.644262][ T9] usb 4-1: device descriptor read/8, error -71 [ 98.697605][ T66] usb 3-1: device descriptor read/64, error -71 [ 98.758815][ T9] usb usb4-port1: unable to enumerate USB device [ 98.847641][ T507] usbhid 2-1:0.0: can't add hid device: -71 [ 98.859578][ T507] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 98.875015][ T507] usb 2-1: USB disconnect, device number 48 [ 98.947657][ T66] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 99.097568][ T66] usb 3-1: device descriptor read/64, error -71 [ 99.337758][ T507] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 99.365486][ T66] usb 3-1: device descriptor read/64, error -71 [ 99.498302][ T66] usb usb3-port1: attempt power cycle [ 99.511720][ T507] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.523346][ T507] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 99.532915][ T507] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.549260][ T507] usb 2-1: config 0 descriptor?? [ 99.683547][ T36] audit: type=1400 audit(1785992090.869:414): avc: denied { remount } for pid=2356 comm="syz.3.606" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 99.703875][ T2358] SELinux: security_context_str_to_sid () failed with errno=-22 [ 99.767488][ T2348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.776212][ T2348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.857562][ T66] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 99.901513][ T66] usb 3-1: device descriptor read/8, error -71 [ 100.042629][ T66] usb 3-1: device descriptor read/8, error -71 [ 100.317558][ T66] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 100.370717][ T66] usb 3-1: device descriptor read/8, error -71 [ 100.389721][ T507] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 100.415203][ T507] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 100.473019][ C1] ------------[ cut here ]------------ [ 100.478603][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 100.487251][ C1] index 12799 is out of range for type 'const int[34]' [ 100.494156][ C1] CPU: 1 UID: 0 PID: 298 Comm: syz-executor Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 100.494208][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.494239][ C1] Call Trace: [ 100.494253][ C1] [ 100.494266][ C1] __dump_stack+0x21/0x30 [ 100.494325][ C1] dump_stack_lvl+0x140/0x1c0 [ 100.494368][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.494411][ C1] ? common_nsleep+0x93/0xb0 [ 100.494445][ C1] ? do_syscall_64+0x57/0xf0 [ 100.494479][ C1] dump_stack+0x19/0x20 [ 100.494516][ C1] ubsan_epilogue+0xe/0x40 [ 100.494541][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 100.494594][ C1] aiptek_irq+0x208d/0x2a00 [ 100.494632][ C1] ? _raw_spin_unlock+0x45/0x60 [ 100.494662][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 100.494692][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 100.494734][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 100.494773][ C1] dummy_timer+0xa3f/0x4900 [ 100.494811][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 100.494839][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 100.494865][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 100.494908][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 100.494945][ C1] ? read_tsc+0xd/0x20 [ 100.494980][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 100.495015][ C1] hrtimer_run_softirq+0x159/0x560 [ 100.495041][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 100.495079][ C1] handle_softirqs+0x1aa/0x620 [ 100.495109][ C1] __irq_exit_rcu+0x47/0xb0 [ 100.495136][ C1] irq_exit_rcu+0xd/0x30 [ 100.495170][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 100.495211][ C1] [ 100.495223][ C1] [ 100.495234][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 100.495272][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x44/0xf0 [ 100.495306][ C1] Code: 00 f3 48 0f bc c8 48 83 c1 fd 48 83 f9 03 0f 87 b4 00 00 00 48 8b 06 48 85 c0 0f 84 a8 00 00 00 55 48 89 e5 41 57 41 56 41 54 <53> 48 8d 4c 09 01 48 8b 55 08 65 4c 8b 05 2a 74 7d 7e 45 31 c9 eb [ 100.495331][ C1] RSP: 0018:ffffc9000b6f7948 EFLAGS: 00000202 [ 100.495369][ C1] RAX: 0000000000000002 RBX: ffffc9000b6f79f8 RCX: 0000000000000003 [ 100.495390][ C1] RDX: 000000000000007f RSI: ffffffff8760ba70 RDI: ffff88811a20c4b4 [ 100.495411][ C1] RBP: ffffc9000b6f7960 R08: ffff8881000788af R09: 1ffff1102000f115 [ 100.495434][ C1] R10: dffffc0000000000 R11: ffffed102000f116 R12: 0000000000000000 [ 100.495455][ C1] R13: dffffc0000000000 R14: 00000000000003e7 R15: ffff88811a20c4b4 [ 100.495481][ C1] ring_buffer_lock_reserve+0xc42/0x1060 [ 100.495521][ C1] trace_event_buffer_lock_reserve+0xfc/0x730 [ 100.495552][ C1] trace_event_buffer_reserve+0x262/0x380 [ 100.495593][ C1] ? __cfi_trace_event_buffer_reserve+0x10/0x10 [ 100.495632][ C1] ? __cfi_trace_clock_local+0x10/0x10 [ 100.495658][ C1] trace_event_raw_event_hrtimer_init+0x107/0x260 [ 100.495687][ C1] ? __rb_reserve_next+0x7d4/0xdf0 [ 100.495724][ C1] ? __cfi_trace_event_raw_event_hrtimer_init+0x10/0x10 [ 100.495757][ C1] hrtimer_init_sleeper+0x134/0x180 [ 100.495797][ C1] hrtimer_nanosleep+0xc7/0x340 [ 100.495836][ C1] ? __cfi_hrtimer_nanosleep+0x10/0x10 [ 100.495895][ C1] ? _copy_from_user+0x87/0xa0 [ 100.495932][ C1] ? get_timespec64+0x11a/0x1b0 [ 100.495970][ C1] ? __cfi_get_timespec64+0x10/0x10 [ 100.496008][ C1] common_nsleep+0x93/0xb0 [ 100.496042][ C1] __se_sys_clock_nanosleep+0x321/0x3b0 [ 100.496077][ C1] ? __x64_sys_clock_nanosleep+0xc0/0xc0 [ 100.496111][ C1] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 100.496154][ C1] __x64_sys_clock_nanosleep+0x9f/0xc0 [ 100.496198][ C1] x64_sys_call+0x2554/0x2ee0 [ 100.496226][ C1] do_syscall_64+0x57/0xf0 [ 100.496257][ C1] ? clear_bhb_loop+0x50/0xa0 [ 100.496296][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.496333][ C1] RIP: 0033:0x7fcf4ef59257 [ 100.496358][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 100.496382][ C1] RSP: 002b:00007ffe7d1930e0 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 100.496415][ C1] RAX: ffffffffffffffda RBX: 00005555661d5500 RCX: 00007fcf4ef59257 [ 100.496438][ C1] RDX: 00007ffe7d193120 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.496457][ C1] RBP: 00007ffe7d19318c R08: 0000000000000000 R09: 0000000000000000 [ 100.496476][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 100.496495][ C1] R13: 00000000000927c0 R14: 0000000000017f66 R15: 00007ffe7d1931e0 [ 100.496519][ C1] [ 100.496531][ C1] ---[ end trace ]--- [ 100.940712][ C1] ================================================================== [ 100.948802][ C1] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x20ab/0x2a00 [ 100.956404][ C1] Read of size 4 at addr ffffffff86710f3c by task syz-executor/298 [ 100.964318][ C1] [ 100.966667][ C1] CPU: 1 UID: 0 PID: 298 Comm: syz-executor Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 100.966694][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.966707][ C1] Call Trace: [ 100.966716][ C1] [ 100.966730][ C1] __dump_stack+0x21/0x30 [ 100.966762][ C1] dump_stack_lvl+0x140/0x1c0 [ 100.966806][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.966835][ C1] ? __cfi__printk+0x10/0x10 [ 100.966861][ C1] print_address_description+0x71/0x210 [ 100.966890][ C1] print_report+0x4a/0x70 [ 100.966917][ C1] kasan_report+0x162/0x1a0 [ 100.966943][ C1] ? aiptek_irq+0x20ab/0x2a00 [ 100.966970][ C1] ? aiptek_irq+0x20ab/0x2a00 [ 100.966997][ C1] __asan_report_load4_noabort+0x18/0x20 [ 100.967017][ C1] aiptek_irq+0x20ab/0x2a00 [ 100.967043][ C1] ? _raw_spin_unlock+0x45/0x60 [ 100.967067][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 100.967090][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 100.967123][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 100.967153][ C1] dummy_timer+0xa3f/0x4900 [ 100.967182][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 100.967202][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 100.967220][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 100.967253][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 100.967281][ C1] ? read_tsc+0xd/0x20 [ 100.967308][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 100.967335][ C1] hrtimer_run_softirq+0x159/0x560 [ 100.967354][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 100.967384][ C1] handle_softirqs+0x1aa/0x620 [ 100.967406][ C1] __irq_exit_rcu+0x47/0xb0 [ 100.967429][ C1] irq_exit_rcu+0xd/0x30 [ 100.967457][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 100.967493][ C1] [ 100.967501][ C1] [ 100.967510][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 100.967541][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x44/0xf0 [ 100.967566][ C1] Code: 00 f3 48 0f bc c8 48 83 c1 fd 48 83 f9 03 0f 87 b4 00 00 00 48 8b 06 48 85 c0 0f 84 a8 00 00 00 55 48 89 e5 41 57 41 56 41 54 <53> 48 8d 4c 09 01 48 8b 55 08 65 4c 8b 05 2a 74 7d 7e 45 31 c9 eb [ 100.967585][ C1] RSP: 0018:ffffc9000b6f7948 EFLAGS: 00000202 [ 100.967606][ C1] RAX: 0000000000000002 RBX: ffffc9000b6f79f8 RCX: 0000000000000003 [ 100.967628][ C1] RDX: 000000000000007f RSI: ffffffff8760ba70 RDI: ffff88811a20c4b4 [ 100.967644][ C1] RBP: ffffc9000b6f7960 R08: ffff8881000788af R09: 1ffff1102000f115 [ 100.967661][ C1] R10: dffffc0000000000 R11: ffffed102000f116 R12: 0000000000000000 [ 100.967676][ C1] R13: dffffc0000000000 R14: 00000000000003e7 R15: ffff88811a20c4b4 [ 100.967696][ C1] ring_buffer_lock_reserve+0xc42/0x1060 [ 100.967723][ C1] trace_event_buffer_lock_reserve+0xfc/0x730 [ 100.967747][ C1] trace_event_buffer_reserve+0x262/0x380 [ 100.967777][ C1] ? __cfi_trace_event_buffer_reserve+0x10/0x10 [ 100.967807][ C1] ? __cfi_trace_clock_local+0x10/0x10 [ 100.967827][ C1] trace_event_raw_event_hrtimer_init+0x107/0x260 [ 100.967848][ C1] ? __rb_reserve_next+0x7d4/0xdf0 [ 100.967876][ C1] ? __cfi_trace_event_raw_event_hrtimer_init+0x10/0x10 [ 100.967900][ C1] hrtimer_init_sleeper+0x134/0x180 [ 100.967930][ C1] hrtimer_nanosleep+0xc7/0x340 [ 100.967959][ C1] ? __cfi_hrtimer_nanosleep+0x10/0x10 [ 100.967990][ C1] ? _copy_from_user+0x87/0xa0 [ 100.968018][ C1] ? get_timespec64+0x11a/0x1b0 [ 100.968045][ C1] ? __cfi_get_timespec64+0x10/0x10 [ 100.968074][ C1] common_nsleep+0x93/0xb0 [ 100.968099][ C1] __se_sys_clock_nanosleep+0x321/0x3b0 [ 100.968126][ C1] ? __x64_sys_clock_nanosleep+0xc0/0xc0 [ 100.968151][ C1] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 100.968183][ C1] __x64_sys_clock_nanosleep+0x9f/0xc0 [ 100.968207][ C1] x64_sys_call+0x2554/0x2ee0 [ 100.968226][ C1] do_syscall_64+0x57/0xf0 [ 100.968248][ C1] ? clear_bhb_loop+0x50/0xa0 [ 100.968276][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.968301][ C1] RIP: 0033:0x7fcf4ef59257 [ 100.968319][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 100.968336][ C1] RSP: 002b:00007ffe7d1930e0 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 100.968359][ C1] RAX: ffffffffffffffda RBX: 00005555661d5500 RCX: 00007fcf4ef59257 [ 100.968391][ C1] RDX: 00007ffe7d193120 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.968405][ C1] RBP: 00007ffe7d19318c R08: 0000000000000000 R09: 0000000000000000 [ 100.968419][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 100.968433][ C1] R13: 00000000000927c0 R14: 0000000000017f66 R15: 00007ffe7d1931e0 [ 100.968451][ C1] [ 100.968459][ C1] [ 101.420809][ C1] The buggy address belongs to the variable: [ 101.426883][ C1] .str.8+0x1c/0x40 [ 101.430739][ C1] [ 101.433084][ C1] The buggy address belongs to the physical page: [ 101.439514][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6710 [ 101.448201][ C1] flags: 0x4000(reserved|zone=0) [ 101.453164][ C1] raw: 0000000000004000 ffffea000019c408 ffffea000019c408 0000000000000000 [ 101.461782][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 101.470483][ C1] page dumped because: kasan: bad access detected [ 101.476946][ C1] page_owner info is not present (never set?) [ 101.483022][ C1] [ 101.485364][ C1] Memory state around the buggy address: [ 101.491012][ C1] ffffffff86710e00: f9 f9 f9 f9 00 00 00 04 f9 f9 f9 f9 00 01 f9 f9 [ 101.499087][ C1] ffffffff86710e80: 01 f9 f9 f9 00 00 00 03 f9 f9 f9 f9 00 00 06 f9 [ 101.507164][ C1] >ffffffff86710f00: f9 f9 f9 f9 00 00 03 f9 f9 f9 f9 f9 00 00 00 00 [ 101.515232][ C1] ^ [ 101.521134][ C1] ffffffff86710f80: 00 00 00 01 f9 f9 f9 f9 00 00 06 f9 f9 f9 f9 f9 [ 101.529212][ C1] ffffffff86711000: 00 00 00 04 f9 f9 f9 f9 00 00 00 f9 f9 f9 f9 f9 [ 101.537302][ C1] ================================================================== [ 101.545371][ C1] Disabling lock debugging due to kernel taint [ 101.551535][ C1] ------------[ cut here ]------------ [ 101.556999][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 101.565600][ C1] index 12800 is out of range for type 'const int[34]' [ 101.572548][ C1] CPU: 1 UID: 0 PID: 298 Comm: syz-executor Tainted: G B syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 101.572582][ C1] Tainted: [B]=BAD_PAGE [ 101.572590][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.572604][ C1] Call Trace: [ 101.572611][ C1] [ 101.572620][ C1] __dump_stack+0x21/0x30 [ 101.572653][ C1] dump_stack_lvl+0x140/0x1c0 [ 101.572687][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.572715][ C1] ? input_event_dispose+0x2f5/0x6d0 [ 101.572748][ C1] dump_stack+0x19/0x20 [ 101.572774][ C1] ubsan_epilogue+0xe/0x40 [ 101.572792][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 101.572821][ C1] aiptek_irq+0x1f3c/0x2a00 [ 101.572849][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 101.572871][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 101.572903][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 101.572933][ C1] dummy_timer+0xa3f/0x4900 [ 101.572961][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 101.572980][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 101.572999][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 101.573031][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 101.573059][ C1] ? read_tsc+0xd/0x20 [ 101.573086][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 101.573113][ C1] hrtimer_run_softirq+0x159/0x560 [ 101.573131][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 101.573161][ C1] handle_softirqs+0x1aa/0x620 [ 101.573184][ C1] __irq_exit_rcu+0x47/0xb0 [ 101.573204][ C1] irq_exit_rcu+0xd/0x30 [ 101.573222][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 101.573253][ C1] [ 101.573261][ C1] [ 101.573268][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 101.573297][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x44/0xf0 [ 101.573321][ C1] Code: 00 f3 48 0f bc c8 48 83 c1 fd 48 83 f9 03 0f 87 b4 00 00 00 48 8b 06 48 85 c0 0f 84 a8 00 00 00 55 48 89 e5 41 57 41 56 41 54 <53> 48 8d 4c 09 01 48 8b 55 08 65 4c 8b 05 2a 74 7d 7e 45 31 c9 eb [ 101.573339][ C1] RSP: 0018:ffffc9000b6f7948 EFLAGS: 00000202 [ 101.573360][ C1] RAX: 0000000000000002 RBX: ffffc9000b6f79f8 RCX: 0000000000000003 [ 101.573375][ C1] RDX: 000000000000007f RSI: ffffffff8760ba70 RDI: ffff88811a20c4b4 [ 101.573391][ C1] RBP: ffffc9000b6f7960 R08: ffff8881000788af R09: 1ffff1102000f115 [ 101.573407][ C1] R10: dffffc0000000000 R11: ffffed102000f116 R12: 0000000000000000 [ 101.573421][ C1] R13: dffffc0000000000 R14: 00000000000003e7 R15: ffff88811a20c4b4 [ 101.573440][ C1] ring_buffer_lock_reserve+0xc42/0x1060 [ 101.573467][ C1] trace_event_buffer_lock_reserve+0xfc/0x730 [ 101.573491][ C1] trace_event_buffer_reserve+0x262/0x380 [ 101.573521][ C1] ? __cfi_trace_event_buffer_reserve+0x10/0x10 [ 101.573561][ C1] ? __cfi_trace_clock_local+0x10/0x10 [ 101.573580][ C1] trace_event_raw_event_hrtimer_init+0x107/0x260 [ 101.573600][ C1] ? __rb_reserve_next+0x7d4/0xdf0 [ 101.573627][ C1] ? __cfi_trace_event_raw_event_hrtimer_init+0x10/0x10 [ 101.573649][ C1] hrtimer_init_sleeper+0x134/0x180 [ 101.573684][ C1] hrtimer_nanosleep+0xc7/0x340 [ 101.573712][ C1] ? __cfi_hrtimer_nanosleep+0x10/0x10 [ 101.573742][ C1] ? _copy_from_user+0x87/0xa0 [ 101.573769][ C1] ? get_timespec64+0x11a/0x1b0 [ 101.573795][ C1] ? __cfi_get_timespec64+0x10/0x10 [ 101.573821][ C1] common_nsleep+0x93/0xb0 [ 101.573845][ C1] __se_sys_clock_nanosleep+0x321/0x3b0 [ 101.573870][ C1] ? __x64_sys_clock_nanosleep+0xc0/0xc0 [ 101.573893][ C1] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 101.573923][ C1] __x64_sys_clock_nanosleep+0x9f/0xc0 [ 101.573946][ C1] x64_sys_call+0x2554/0x2ee0 [ 101.573964][ C1] do_syscall_64+0x57/0xf0 [ 101.573985][ C1] ? clear_bhb_loop+0x50/0xa0 [ 101.574010][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.574037][ C1] RIP: 0033:0x7fcf4ef59257 [ 101.574053][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 101.574069][ C1] RSP: 002b:00007ffe7d1930e0 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 101.574089][ C1] RAX: ffffffffffffffda RBX: 00005555661d5500 RCX: 00007fcf4ef59257 [ 101.574104][ C1] RDX: 00007ffe7d193120 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.574117][ C1] RBP: 00007ffe7d19318c R08: 0000000000000000 R09: 0000000000000000 [ 101.574130][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 101.574143][ C1] R13: 00000000000927c0 R14: 0000000000017f66 R15: 00007ffe7d1931e0 [ 101.574159][ C1] [ 101.574166][ C1] ---[ end trace ]--- [ 102.208522][ T36] audit: type=1400 audit(1785992093.249:415): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 102.230714][ T36] audit: type=1400 audit(1785992093.249:416): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.254723][ T36] audit: type=1400 audit(1785992093.249:417): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.276537][ T36] audit: type=1400 audit(1785992093.249:418): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.297714][ T36] audit: type=1400 audit(1785992093.249:419): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.318916][ T36] audit: type=1400 audit(1785992093.249:420): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.342443][ T36] audit: type=1400 audit(1785992093.249:421): avc: denied { getattr } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.602384][ T702] usb 2-1: USB disconnect, device number 49 [ 102.608437][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 102.628379][ T66] usb 3-1: device descriptor read/8, error -71 [ 102.737849][ T66] usb usb3-port1: unable to enumerate USB device