last executing test programs: 4.400107841s ago: executing program 3 (id=283): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4603000702810000000000000003003e"], 0xb20) close(r0) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000100)={0x2, 0x3, 0x47f, 0x401, 0x6, 0x9}) r1 = socket$netlink(0x10, 0x3, 0x0) (async) userfaultfd(0x80001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x20, 0x590f, 0x3, 0x6, '\x00', 0x4, [0x2, 0xffffffff, 0x402, 0x7, 0x7fff, 0x0, 0x3]}}) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080026bd7000ffdbdf250200000008002b000400000005002f000100000008000340", @ANYRES32=r4, @ANYBLOB="05002d00010000000a000900aaaaaaaaaaaa0000080031000700000008002b0001000080"], 0x50}, 0x1, 0x0, 0x0, 0x4864}, 0x4008009) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={@private0={0xfc, 0x0, '\x00', 0x1}, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x8, 0x1, 0x480, 0x7, 0x100, r4}) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$tipc(0x1e, 0x2, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, r6, r7, r8, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) (async, rerun: 32) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 64) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) (async, rerun: 64) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='syscall\x00') pread64(r12, 0x0, 0x0, 0x8) syz_ublk_setup_queues(r5, r10, &(0x7f0000000200)={0x0, 0x1463, 0x100, 0x2, 0xc3}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10, 0x2, 0x318, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2, 0x1, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4aaa, 0x10, 0x0, 0x902c4, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa5fb, 0x2000, 0x2, 0x40021a, 0x0, r5}}], 0x17, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r9, '\x00', {0x7, 0x48b, 0x0, 0x0}}, 0x0) 4.309580293s ago: executing program 3 (id=285): syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x20, 0x11, {0x8, 0xb, 0x0, 0x3, 0x1, 0x1, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa, 0x77e}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x1, 0x29, {0xa, 0x25, 0x25, 0x40004, 0x5, 0x15}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0x80, 0x3, {0xa, 0x25, 0x25, 0x1, 0xb}}}}}}}}]}}, 0x0) 3.63319752s ago: executing program 3 (id=287): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x400455c8, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x460340, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'lo\x00', {}, 0x2}) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) close_range(0xffffffffffffffff, r1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0xe850) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x7, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[], 0x80}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f00000000c0), 0x2c8, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESDEC], 0x0) 3.291916258s ago: executing program 2 (id=288): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000a00)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9d}, 0x1c) sendto(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000280)=@in6={0xa, 0x4e23, 0x401, @private1, 0x2}, 0x80) 3.255151589s ago: executing program 2 (id=289): syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1a011001000000107f0410c040000102030109026e000301ffc00c080b0002010130070904000000010130000a2401060a00ff03000009040100fb00023000090401010101023000090b010920"], 0x0) 2.842315259s ago: executing program 0 (id=294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be121806fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 2.842082239s ago: executing program 0 (id=295): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) socket$inet6_udplite(0xa, 0x2, 0x88) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x4e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000}, 0x20) madvise(&(0x7f0000234000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r1, &(0x7f0000001980)=[{&(0x7f0000000580)=""/221, 0xdd}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) 2.83171166s ago: executing program 0 (id=296): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x5, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c) 2.790239311s ago: executing program 0 (id=297): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'wg0\x00', &(0x7f0000000240)=@ethtool_eee={0x45, 0xcaf5, 0x7, 0x6, 0xc, 0x7, 0x10000, 0xcc51, [0x8, 0xff]}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000000c0)=0x4) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="400844848bf2b341b16d5aaa70b40719b3147db0cc45e277b0730a"], 0x0, 0x0, 0x0}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) sync_file_range(r6, 0x6, 0xdd2a, 0x7) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000100)={[{0x3, 0x2, 0xf, 0xd, 0x0, 0xd9, 0x8, 0x4, 0x5, 0xfa, 0xa, 0x9, 0x1}, {0xd, 0xb450, 0x4, 0xa1, 0x0, 0x81, 0x3, 0xd, 0xff, 0x0, 0xc, 0x5, 0x8000}, {0x101, 0x3, 0x6, 0x8, 0x2, 0x1c, 0xf2, 0x4, 0xff, 0x5, 0x6, 0x5, 0x4}], 0x3}) 2.186568896s ago: executing program 0 (id=298): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000001c0)={0x6, &(0x7f0000000500)=[{0x2e91, 0x8, &(0x7f0000000100)="830d3401ba08de6a", 0x1}, {0xc21, 0x1b, &(0x7f0000000140)="5ce228e581601051ddf917957d34896d12cfb409bd4b2e1aa6f452", 0x1, 0x1}, {0x81, 0x9c, &(0x7f0000000240)="8aa90188a002ead1b3aa4d2e5bf1669b6fd83f14aff9cce8a90eb472ab10a9acbd7a9223d64bfe00197ad460fab4108ab6c622a883c5b1709a56a3409d3a1a02b614b30e4beda5e381900e25a11cad1492252ba578196bb2b2ec5e7e4102e031b30f688bea8fee02d7f7a3838b556e154539cd921304bff0bbd808bb1a27d1103e8fbfbd3fe6b5c9b2949fa6bfa650898869137a9ac4f0b5e383940d", 0x1, 0x58e6e14ce5bcd09f}, {0x800, 0xe9, &(0x7f0000000300)="b2e85c43a55c350e3761a12024643094de0e59a4779390f543b198e92c8692d800137cdba3b28d53aa039993587cfd74373b06e49e48a9ab8c3bb13ab4ad24de5f416cad4f8c0b5176218a18e568a4680a3e2bc177f4541a4abe094d4da12581b9ddf7a38f9771d8d9e82c381e22838368b632b691a5eb050a6d8fdb38f89b5458de5aea0599ff866676bcdedb4541658a27d6d1d98d52a4f349924bfe12a3346dc45f2628a0763c324adde0ad8947b2ac71e0ea956c53cf1f47be9690675342b4089364f109f867a960a6e3a5ac34f718080ba6c1d2a117c72bb5eb24d6012c5a38e9ffc134575dd4"}, {0x0, 0xaf, &(0x7f0000000400)="7a2e8ab536ed1d4b3f3c66e887cb677507fffd615a42c975ee528b606b0c10daeb082fa83c0e94f8821379505a47e6b1abd7fb34b8ba92ee4aaa50e3f5c6500939edc04a3186a2b33bd9450b3c27df9e54d09ea1bf6b29a5a54f81135e3b276abb15bf09a6241b98718d4b60c231fc33859be15e73f7399d03a53f7f004773218b1a03891b460705e3790810b0a93b683a93dba2abed02589f87f801de58e61b97f09adec75d5476c1f191640dd7da", 0x1, 0x1}, {0xfffffffa, 0x3e, &(0x7f00000004c0)="1d1b908bfbb7a3a3120c4fc2d48103c9eb3067a545dafe535eb551df842dceb2a761bf5d7a0c2fab2893c16ce37a24dd789b5041c7179f66743aa0137443"}]}) 2.186242546s ago: executing program 0 (id=299): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000040)='omfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/kvm\x00', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000080)='./debug/kvm\x00', 0x100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = inotify_add_watch(r0, &(0x7f0000000300)='./debug\x00', 0xa00008a5) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) read(r1, &(0x7f0000001000)=""/4096, 0x1000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat(r0, &(0x7f0000001010), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='attr/fscreate\x00') r7 = openat(r6, &(0x7f0000000100)='vcpu0/guest_mode\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r7, @ANYBLOB=',gr', @ANYRESDEC]) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRESOCT=r3, @ANYRES32=0x0], 0x2c}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000001c0)={0x5, 0x4, 0x0, 0x1000, &(0x7f0000fd8000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x131000, 0x0) ioctl$FIBMAP(r11, 0x5385, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1.933699292s ago: executing program 2 (id=300): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xa1c3, 0x94) socket$inet(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000003480), &(0x7f00000034c0)=0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) r3 = getpgrp(0xffffffffffffffff) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000240)=0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2400000064001f03000000000000000008000000ffffffff"], 0x24}], 0x1}, 0x0) capset(&(0x7f0000000080)={0x20080522, r3}, &(0x7f00000000c0)={0x7, 0x80000001, 0x3, 0x101, 0x74e, 0x50000000}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001280)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xfb}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000014) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x804) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000280)) syz_usb_connect$uac1(0x5, 0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ff00030100000009040000000101000002240100000002"], 0x0) 1.434178464s ago: executing program 1 (id=303): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x3d, 0x0, @thr={0x0, 0x0}}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x9, 0xfffffffffffffffa}}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x20000000) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x64010101, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000001500)=[{}]) 682.688873ms ago: executing program 2 (id=304): syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75}}]}}, 0x0) 582.974025ms ago: executing program 3 (id=305): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be601806fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 582.550925ms ago: executing program 1 (id=306): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000005c0)=0x9) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f00000000c0)) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x380000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9b8}, 0x1c) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x8800}, 0x1) 566.221296ms ago: executing program 3 (id=307): unshare(0x22020600) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='map_files\x00') getdents64(r1, &(0x7f0000000040)=""/27, 0x1b) getdents(r1, &(0x7f0000001f80)=""/4093, 0xffd) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9100, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x15) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x89Z7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\x06\x00\x00\x00\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r5, 0xfffd) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000140)={r5, 0x0, 0x0, 0x4000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x34}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r7, &(0x7f0000001200)=ANY=[@ANYBLOB="08000800020104001100ca09811414bbffffffff4e244e2300"/38, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfcf) epoll_create1(0x80000) epoll_pwait2(r9, &(0x7f0000000100), 0x155555555555558c, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={[0x9]}, 0x8) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newae={0x48, 0x1e, 0x2, 0x70bd2a, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x20004d4, 0x2, 0x3c}, @in6=@remote, 0x7ff, 0x3507}, [@proto={0x5, 0x19, 0x2b}]}, 0x48}}, 0x4040000) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setpipe(r10, 0x407, 0x5) 467.691118ms ago: executing program 1 (id=308): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x8001af84, &(0x7f0000000040)) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000006c0)={0x7, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast1}}}, 0x108) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast2}, 0xc) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f00000002c0)={0xfffffd62}) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000100, 0x0, 0x7fff}]}) bind$tipc(r3, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r11, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 390.6287ms ago: executing program 3 (id=309): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x3}, 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f0000004b11200000"], 0x0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000100)={0x3, 0x2, 0x7}) 377.45827ms ago: executing program 1 (id=310): inotify_init1(0x800) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) (async, rerun: 32) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) inotify_init1(0x800) socket$packet(0x11, 0x3, 0x300) (async) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async, rerun: 32) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (rerun: 32) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbfe1, 0x4, 0x1000002, 0x8f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x4, 0x2, 0x2b6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x197}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x8000000004) (async, rerun: 32) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000100)="68071fdea1a2020cdbc3765fb23e41", 0xf}, {&(0x7f0000000340)="68c0f7cd17e180985047938feaf369f6d31be5085c245410891ae94293b4794c809a212534e713fb7799f4b2855088599017128a3db48c4065dc4937c1682fa9bd11464c27da3070b297eb3ef811d8682fb966bed8a2238ce106bacc76a1d5ded1e30c2bc0b62d86a4267aeaebe445d7aa7b699d9c4cec18d4a9ddaed5f99c409ff954aab753d0aa8a6bf96b16", 0x8d}, {&(0x7f0000000480)="ffb37357b4ee5d4b3e99a1e43c57722f145308d802f70b31a2091aae7d2be5c793c1ef253b6371", 0x27}, {&(0x7f00000004c0)="88ddb09bedc80ba041fa58e31d66044e32a25b680b19802fb4bd2cad2b03aeb0266f5f4ba9a03a1eb32c76130d6051392cc7a90bc04ad8b71244497f8da706605e45c56df459325b6020", 0x4a}, {&(0x7f0000000540)="12c64ca3ad2b0cb5f469e185aa397062dba1e841ab2486b916dbfb8f8831d326d5626f5d5dc123c68b48db6c4354aa424cdac46da570cca42bfab3a8f569d65e89ff7b658c106e609ae141a4612c3b76222e7276c11c62728abf3a8858d0b4793f3ef60fb924c4530a6e94d1c248d5303e", 0x71}], 0x5) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xd0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0xb}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) (async) unshare(0x0) 312.048292ms ago: executing program 1 (id=311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x89Z7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\x06\x00\x00\x00\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r3, 0xfffd) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={r3, 0x0, 0x0, 0x4000}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x10000}]}]}, 0xfc}}, 0x4040000) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setpipe(r6, 0x407, 0x5) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17110000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 206.874134ms ago: executing program 1 (id=312): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x80111500, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x9800, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$getregset(0x4205, 0x0, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfffff000) signalfd4(r1, &(0x7f0000000100)={[0xd]}, 0x8, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0x1000) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) socket$netlink(0x10, 0x3, 0x4) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 160.478756ms ago: executing program 2 (id=313): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=314): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x8401, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='0x5678\n\x00', 0x7) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='dummy_udc.0\n\x00', 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="a1f2275e27a49da6741fb2cb9c253fa681f3d8cb906dcbe1bf2a21ba8bda53d45b1015bb97b41ce87f92bb225cd1ffa58b07136097944db1bdc6643b92802e5efcdabfe7746e94542bf4627cb93ab984032a1ac5f7ac49d0f5bed16d5fd0804f259254608e5ab2be0605877b6103e07f5062bcd737d7035a1c6ebfaa6646a38e067724a64c506585589c2410356735a5ee9fd0897956a2feec1682f9dab1140f1ca135b33f1749411b01a2d844b1552d", @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf250c0000001800058008000100657468000c0002800800040000080000"], 0x2c}, 0x1, 0x0, 0x0, 0x40d8}, 0x50) write(r1, 0x0, 0x0) fchown(r0, 0xee00, 0xee01) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000440)={{r5, &(0x7f0000000180)='#(-{+:+,\x00', 0x80000, &(0x7f00000001c0)={@_ha_fsid={[0x9, 0xb]}, {0x6, 0xf2c, 0x7, 0x8000000000000001}}, 0xf2ad, &(0x7f0000000200), &(0x7f0000000240)=0x8}, 0x1, &(0x7f0000000400)=[{0x1, 0x0, &(0x7f0000000280)='\xff\xff', &(0x7f0000000380)="75459a4e461447f7873e5df2cdfe9b5ffc329d84c1c904b435507c879402bfe86a40fbe3d4d2e72507aa552a7e45e29f6e8120afb12581147736dadd0aa616db1f38a434a003909a07323bd537f3c2a94d73459622948dca9516cbf9f565f97814ca46f2857266981648ab1bc3ad", 0x6e, 0x2a}]}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYRES8], 0x1e4}, 0x1, 0x0, 0x0, 0x4011}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) getpgrp(0xffffffffffffffff) kernel console output (not intermixed with test programs): [ 19.203189][ T36] audit: type=1400 audit(1785406361.180:62): avc: denied { rlimitinh } for pid=247 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.206311][ T36] audit: type=1400 audit(1785406361.180:63): avc: denied { siginh } for pid=247 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. [ 27.564499][ T36] audit: type=1400 audit(1785406369.540:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.568464][ T287] cgroup: Unknown subsys name 'net' [ 27.587201][ T36] audit: type=1400 audit(1785406369.540:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.614565][ T36] audit: type=1400 audit(1785406369.580:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.615112][ T287] cgroup: Unknown subsys name 'devices' [ 27.740519][ T287] cgroup: Unknown subsys name 'hugetlb' [ 27.746158][ T287] cgroup: Unknown subsys name 'rlimit' [ 27.842303][ T36] audit: type=1400 audit(1785406369.820:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.865521][ T36] audit: type=1400 audit(1785406369.820:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.890325][ T36] audit: type=1400 audit(1785406369.820:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.914438][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.923294][ T36] audit: type=1400 audit(1785406369.900:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.947544][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.949079][ T36] audit: type=1400 audit(1785406369.900:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.983058][ T36] audit: type=1400 audit(1785406369.900:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.008667][ T36] audit: type=1400 audit(1785406369.900:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.850234][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.857357][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.864707][ T297] bridge_slave_0: entered allmulticast mode [ 28.871293][ T297] bridge_slave_0: entered promiscuous mode [ 28.890700][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.897781][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.905076][ T297] bridge_slave_1: entered allmulticast mode [ 28.911890][ T297] bridge_slave_1: entered promiscuous mode [ 28.941297][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.948437][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.955542][ T296] bridge_slave_0: entered allmulticast mode [ 28.962046][ T296] bridge_slave_0: entered promiscuous mode [ 28.975158][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.982263][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.989429][ T294] bridge_slave_0: entered allmulticast mode [ 28.995761][ T294] bridge_slave_0: entered promiscuous mode [ 29.002234][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.009368][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.016482][ T296] bridge_slave_1: entered allmulticast mode [ 29.023011][ T296] bridge_slave_1: entered promiscuous mode [ 29.040670][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.047723][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.055052][ T294] bridge_slave_1: entered allmulticast mode [ 29.061465][ T294] bridge_slave_1: entered promiscuous mode [ 29.117409][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.124557][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.131858][ T295] bridge_slave_0: entered allmulticast mode [ 29.138345][ T295] bridge_slave_0: entered promiscuous mode [ 29.169460][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.176552][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.183908][ T295] bridge_slave_1: entered allmulticast mode [ 29.190446][ T295] bridge_slave_1: entered promiscuous mode [ 29.271879][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.278996][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.286360][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.293446][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.326236][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.333351][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.340686][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.347856][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.361683][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.368774][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.376076][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.383225][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.407730][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.414839][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.422156][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.429230][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.478288][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.485790][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.494907][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.502190][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.511562][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.519170][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.540338][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.547435][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.580896][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.588006][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.596022][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.603137][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.612329][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.619461][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.628580][ T294] veth0_vlan: entered promiscuous mode [ 29.640562][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.647686][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.655752][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.662833][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.693815][ T296] veth0_vlan: entered promiscuous mode [ 29.700874][ T294] veth1_macvtap: entered promiscuous mode [ 29.724708][ T296] veth1_macvtap: entered promiscuous mode [ 29.759678][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.780099][ T295] veth0_vlan: entered promiscuous mode [ 29.803861][ T297] veth0_vlan: entered promiscuous mode [ 29.819345][ T295] veth1_macvtap: entered promiscuous mode [ 29.845895][ T297] veth1_macvtap: entered promiscuous mode [ 29.895532][ T321] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.948638][ T326] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49684 sclass=netlink_tcpdiag_socket pid=326 comm=syz.0.1 [ 30.056091][ T333] netlink: 'syz.1.6': attribute type 15 has an invalid length. [ 30.063391][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.178134][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.228113][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 30.234381][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.245598][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.255739][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 30.265153][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.274552][ T31] usb 4-1: config 0 descriptor?? [ 30.281044][ T31] hub 4-1:0.0: USB hub found [ 30.328127][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 30.330331][ T314] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.342009][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.353419][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.363518][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 30.376411][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 30.385560][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.394546][ T9] usb 3-1: config 0 descriptor?? [ 30.481362][ T31] hub 4-1:0.0: 11 ports detected [ 30.486646][ T31] hub 4-1:0.0: insufficient power available to use all downstream ports [ 30.496949][ T314] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 30.505288][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.516490][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.526397][ T314] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 30.539604][ T314] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 30.548753][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.557910][ T314] usb 2-1: config 0 descriptor?? [ 30.687528][ T31] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 30.694064][ T31] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 30.705402][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 30.711477][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 30.738627][ T31] usb 4-1: USB disconnect, device number 2 [ 30.832539][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0001/input/input4 [ 30.854981][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0001/input/input5 [ 30.878392][ T9] kye 0003:0458:5011.0001: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 30.967589][ T314] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 30.977666][ T314] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 30.988277][ T314] plantronics 0003:047F:FFFF.0002: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 31.013771][ T31] usb 3-1: USB disconnect, device number 2 [ 31.177623][ T9] usb 2-1: USB disconnect, device number 2 [ 31.268369][ T314] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.408140][ T314] usb 1-1: device descriptor read/64, error -71 [ 31.478279][ T318] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 31.548126][ T361] process 'syz.2.14' launched './file0' with NULL argv: empty string added [ 31.634965][ T318] usb 4-1: unable to get BOS descriptor or descriptor too short [ 31.643144][ T318] usb 4-1: not running at top speed; connect to a high speed hub [ 31.648263][ T314] usb 1-1: device descriptor read/64, error -71 [ 31.659751][ T318] usb 4-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 31.669023][ T318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.677291][ T318] usb 4-1: Product: syz [ 31.681790][ T318] usb 4-1: Manufacturer: syz [ 31.686428][ T318] usb 4-1: SerialNumber: syz [ 31.743794][ T376] batadv_slave_1: entered allmulticast mode [ 31.750165][ T376] veth1_to_bond: entered promiscuous mode [ 31.895988][ T383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.898218][ T314] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.907108][ T383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.927197][ T318] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 31.938824][ T318] usb 4-1: USB disconnect, device number 3 [ 31.951093][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.988311][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.048139][ T314] usb 1-1: device descriptor read/64, error -71 [ 32.054496][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 32.148144][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 32.153785][ T31] usb 2-1: too many configurations: 195, using maximum allowed: 8 [ 32.162981][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 32.170848][ T31] usb 2-1: can't read configurations, error -61 [ 32.188176][ T45] usb 3-1: device descriptor read/64, error -71 [ 32.298154][ T314] usb 1-1: device descriptor read/64, error -71 [ 32.304552][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.408517][ T314] usb usb1-port1: attempt power cycle [ 32.438536][ T45] usb 3-1: device descriptor read/64, error -71 [ 32.458126][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 32.463965][ T31] usb 2-1: too many configurations: 195, using maximum allowed: 8 [ 32.473084][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 32.480836][ T31] usb 2-1: can't read configurations, error -61 [ 32.487478][ T31] usb usb2-port1: attempt power cycle [ 32.678200][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.698130][ T318] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.748289][ T314] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.769415][ T314] usb 1-1: device descriptor read/8, error -71 [ 32.808171][ T45] usb 3-1: device descriptor read/64, error -71 [ 32.828157][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.848508][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 32.854040][ T31] usb 2-1: too many configurations: 195, using maximum allowed: 8 [ 32.859736][ T318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.863678][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 32.873540][ T318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.880962][ T31] usb 2-1: can't read configurations, error -61 [ 32.890942][ T318] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 32.906100][ T318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.906957][ T314] usb 1-1: device descriptor read/8, error -71 [ 32.917161][ T318] usb 4-1: config 0 descriptor?? [ 33.028115][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 33.048401][ T45] usb 3-1: device descriptor read/64, error -71 [ 33.054975][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 33.060564][ T31] usb 2-1: too many configurations: 195, using maximum allowed: 8 [ 33.069647][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 33.077307][ T31] usb 2-1: can't read configurations, error -61 [ 33.083797][ T31] usb usb2-port1: unable to enumerate USB device [ 33.135075][ T318] usbhid 4-1:0.0: can't add hid device: -71 [ 33.141453][ T318] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 33.156001][ T318] usb 4-1: USB disconnect, device number 4 [ 33.168131][ T314] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.175973][ T45] usb usb3-port1: attempt power cycle [ 33.199256][ T314] usb 1-1: device descriptor read/8, error -71 [ 33.329147][ T314] usb 1-1: device descriptor read/8, error -71 [ 33.438252][ T314] usb usb1-port1: unable to enumerate USB device [ 33.448352][ T318] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.518146][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.539814][ T45] usb 3-1: device descriptor read/8, error -71 [ 33.598191][ T318] usb 4-1: Using ep0 maxpacket: 32 [ 33.604745][ T318] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.615086][ T318] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 33.624383][ T318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.633237][ T318] usb 4-1: config 0 descriptor?? [ 33.641422][ T318] hub 4-1:0.0: bad descriptor, ignoring hub [ 33.647371][ T318] hub 4-1:0.0: probe with driver hub failed with error -5 [ 33.689623][ T45] usb 3-1: device descriptor read/8, error -71 [ 33.928671][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 33.949450][ T45] usb 3-1: device descriptor read/8, error -71 [ 34.044871][ T394] netlink: 'syz.0.25': attribute type 64 has an invalid length. [ 34.052733][ T394] netlink: 5 bytes leftover after parsing attributes in process `syz.0.25'. [ 34.062986][ T36] kauditd_printk_skb: 57 callbacks suppressed [ 34.063006][ T36] audit: type=1400 audit(1785406376.040:131): avc: denied { read } for pid=393 comm="syz.0.25" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.076039][ T394] rust_binder: Failure in copy_transaction_data: EFAULT [ 34.092245][ T394] rust_binder: 393:394 transaction to 393 failed: EFAULT [ 34.092432][ T36] audit: type=1400 audit(1785406376.040:132): avc: denied { open } for pid=393 comm="syz.0.25" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.092472][ T36] audit: type=1400 audit(1785406376.040:133): avc: denied { ioctl } for pid=393 comm="syz.0.25" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.157128][ T45] usb 3-1: device descriptor read/8, error -71 [ 34.163486][ T36] audit: type=1400 audit(1785406376.050:134): avc: denied { set_context_mgr } for pid=393 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 34.175102][ T396] netlink: 128 bytes leftover after parsing attributes in process `syz.0.26'. [ 34.184672][ T36] audit: type=1400 audit(1785406376.050:135): avc: denied { map } for pid=393 comm="syz.0.25" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.215894][ T36] audit: type=1400 audit(1785406376.050:136): avc: denied { write } for pid=393 comm="syz.0.25" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.238455][ T36] audit: type=1400 audit(1785406376.050:137): avc: denied { call } for pid=393 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 34.257885][ T36] audit: type=1400 audit(1785406376.180:138): avc: denied { create } for pid=395 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.278401][ T45] usb usb3-port1: unable to enumerate USB device [ 34.285151][ T36] audit: type=1400 audit(1785406376.180:139): avc: denied { write } for pid=395 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.402855][ T36] audit: type=1400 audit(1785406376.380:140): avc: denied { create } for pid=398 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.438221][ T65] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.603958][ T65] usb 1-1: Using ep0 maxpacket: 8 [ 34.610664][ T65] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 160, changing to 7 [ 34.623764][ T65] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 34.633263][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.641667][ T65] usb 1-1: Product: syz [ 34.645994][ T65] usb 1-1: Manufacturer: syz [ 34.651000][ T65] usb 1-1: SerialNumber: syz [ 34.758554][ T375] veth1_to_bond: left promiscuous mode [ 34.765190][ T375] batadv_slave_1: left allmulticast mode [ 34.874967][ T65] usb 1-1: unit 4 not found! [ 34.890032][ T65] usb 1-1: USB disconnect, device number 6 [ 34.922176][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.020765][ T436] netlink: 32 bytes leftover after parsing attributes in process `syz.3.29'. [ 35.168150][ T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 35.187629][ T449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.196425][ T449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.210031][ T449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.219324][ T449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.319846][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.331015][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.341369][ T45] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 35.350506][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.370795][ T45] usb 2-1: config 0 descriptor?? [ 35.604384][ T464] tipc: Enabling of bearer rejected, failed to enable media [ 35.618267][ T314] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 35.694049][ T464] kvm: kvm [462]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 35.703000][ T464] kvm: kvm [462]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 35.768300][ T314] usb 3-1: Using ep0 maxpacket: 16 [ 35.774923][ T314] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 35.783556][ T314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.794389][ T314] usb 3-1: config 0 has no interface number 0 [ 35.804769][ T314] usb 3-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 35.816567][ T314] usb 3-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.836816][ T314] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 35.846709][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.855461][ T314] usb 3-1: Product: syz [ 35.862931][ T314] usb 3-1: Manufacturer: syz [ 35.867619][ T314] usb 3-1: SerialNumber: syz [ 35.873318][ T471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.882705][ T314] usb 3-1: config 0 descriptor?? [ 35.887874][ T471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.896736][ T314] asix 3-1:0.34: probe with driver asix failed with error -22 [ 35.905022][ T471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.914202][ T471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.002842][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 36.009604][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 36.018852][ T45] usb 2-1: USB disconnect, device number 7 [ 36.535619][ T478] netlink: 68 bytes leftover after parsing attributes in process `syz.1.43'. [ 36.668108][ T65] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 36.697440][ T490] Zero length message leads to an empty skb [ 36.849235][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.868138][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.878374][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.891770][ T65] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.908283][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.921049][ T65] usb 1-1: config 0 descriptor?? [ 37.038125][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 37.049734][ T500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.058405][ T500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.189748][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 37.200161][ T45] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 37.209410][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.217514][ T45] usb 2-1: Product: syz [ 37.222015][ T45] usb 2-1: Manufacturer: syz [ 37.226661][ T45] usb 2-1: SerialNumber: syz [ 37.331491][ T65] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 37.338992][ T65] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 37.347954][ T65] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 37.355589][ T65] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 37.363085][ T65] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 37.370632][ T65] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 37.378239][ T65] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 37.385767][ T65] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 37.393517][ T65] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 37.401152][ T65] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 37.408850][ T65] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 37.418834][ T65] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 37.464629][ T45] usb 2-1: USB disconnect, device number 8 [ 37.484364][ T443] udevd[443]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.591415][ T475] capability: warning: `syz.0.42' uses 32-bit capabilities (legacy support in use) [ 37.629583][ T314] usb 1-1: USB disconnect, device number 7 [ 38.077519][ T510] netlink: 112 bytes leftover after parsing attributes in process `syz.1.52'. [ 38.315764][ T524] netlink: 96 bytes leftover after parsing attributes in process `syz.1.56'. [ 38.325539][ T524] overlayfs: workdir and upperdir must be separate subtrees [ 38.398235][ T314] usb 3-1: USB disconnect, device number 7 [ 38.405790][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 38.562556][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 38.573841][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.585584][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.597723][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 38.611798][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 38.621067][ T45] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 38.629564][ T45] usb 1-1: Manufacturer: syz [ 38.636120][ T45] usb 1-1: config 0 descriptor?? [ 38.768107][ T381] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 38.843614][ T45] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 38.850929][ T45] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 38.859905][ T45] appleir 0003:05AC:8243.0004: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 38.919627][ T381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.930682][ T381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.940530][ T381] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.953611][ T381] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.967380][ T381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.981570][ T381] usb 2-1: config 0 descriptor?? [ 39.013335][ T554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.66'. [ 39.099402][ T516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.108854][ T516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.319007][ T45] usb 1-1: USB disconnect, device number 8 [ 39.390586][ T381] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 39.398160][ T381] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 39.405603][ T381] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 39.413134][ T381] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 39.420902][ T381] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 39.428363][ T381] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 39.435832][ T381] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 39.443293][ T381] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 39.450840][ T381] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 39.458594][ T381] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 39.466194][ T381] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 39.477724][ T381] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 39.534867][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 39.534888][ T36] audit: type=1400 audit(1785406381.510:177): avc: denied { read } for pid=559 comm="syz.2.68" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.564105][ T36] audit: type=1400 audit(1785406381.510:178): avc: denied { open } for pid=559 comm="syz.2.68" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.597903][ T562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.609274][ T562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.719675][ T45] usb 2-1: USB disconnect, device number 9 [ 39.839103][ T36] audit: type=1400 audit(1785406381.820:179): avc: denied { name_bind } for pid=563 comm="syz.0.70" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 39.998110][ T65] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 40.098140][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 40.151909][ T36] audit: type=1400 audit(1785406382.130:180): avc: denied { write } for pid=567 comm="syz.3.72" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.176261][ T65] usb 3-1: config index 0 descriptor too short (expected 45, got 28) [ 40.184498][ T65] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 40.192019][ T65] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 40.206623][ T65] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 40.216022][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.232397][ T65] usb 3-1: Product: syz [ 40.242524][ T65] usb 3-1: Manufacturer: syz [ 40.247436][ T65] usb 3-1: SerialNumber: syz [ 40.254684][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.266480][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.281137][ T65] rtl8150 3-1:1.0: couldn't find required endpoints [ 40.290016][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 40.299268][ T65] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 40.308978][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.323110][ T9] usb 1-1: config 0 descriptor?? [ 40.485661][ T36] audit: type=1326 audit(1785406382.460:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=559 comm="syz.2.68" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb4f59df99 code=0x0 [ 40.542547][ T584] netlink: 'syz.3.77': attribute type 27 has an invalid length. [ 40.551375][ T584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.560347][ T584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.708095][ T381] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 40.858091][ T381] usb 2-1: Using ep0 maxpacket: 16 [ 40.864677][ T381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 40.876211][ T381] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.889563][ T381] usb 2-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 40.899275][ T381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.912489][ T381] usb 2-1: config 0 descriptor?? [ 41.121540][ T381] holtek_mouse 0003:04D9:A0C2.0006: unknown main item tag 0x4 [ 41.129145][ T381] holtek_mouse 0003:04D9:A0C2.0006: unknown main item tag 0xd [ 41.139127][ T564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.149078][ T381] holtek_mouse 0003:04D9:A0C2.0006: unknown global tag 0xe [ 41.149371][ T564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.156359][ T381] holtek_mouse 0003:04D9:A0C2.0006: item 0 2 1 14 parsing failed [ 41.172957][ T381] holtek_mouse 0003:04D9:A0C2.0006: hid parse failed: -22 [ 41.182421][ T381] holtek_mouse 0003:04D9:A0C2.0006: probe with driver holtek_mouse failed with error -22 [ 41.196434][ T564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.218306][ T564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.237452][ T590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.238508][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 41.246943][ T590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.268148][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 41.277048][ T9] usb 1-1: USB disconnect, device number 9 [ 41.748990][ T36] audit: type=1400 audit(1785406383.730:182): avc: denied { ioctl } for pid=591 comm="syz.0.80" path="socket:[5107]" dev="sockfs" ino=5107 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.796027][ T596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.808705][ T596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.925583][ T36] audit: type=1400 audit(1785406383.900:183): avc: denied { watch watch_reads } for pid=600 comm="syz.0.83" path="/16/file0" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 41.941998][ T601] rtc_cmos 00:00: Alarms can be up to one day in the future [ 41.949796][ T36] audit: type=1400 audit(1785406383.920:184): avc: denied { read } for pid=600 comm="syz.0.83" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.978985][ T36] audit: type=1400 audit(1785406383.920:185): avc: denied { ioctl } for pid=600 comm="syz.0.83" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.077681][ T605] netlink: 'syz.0.85': attribute type 4 has an invalid length. [ 42.107174][ T607] af_packet: tpacket_rcv: packet too big, clamped from 292 to 4294967272. macoff=96 [ 42.301040][ T36] audit: type=1400 audit(1785406384.280:186): avc: denied { create } for pid=611 comm="syz.0.88" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.544197][ T318] usb 3-1: USB disconnect, device number 8 [ 42.578081][ T314] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 42.748093][ T314] usb 1-1: Using ep0 maxpacket: 16 [ 42.754665][ T314] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 42.767442][ T314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.787620][ T314] usb 1-1: config 0 has no interface number 0 [ 42.794214][ T314] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 42.807232][ T644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.816505][ T314] usb 1-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.830815][ T644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.840211][ T314] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 42.854752][ T314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.863082][ T314] usb 1-1: Product: syz [ 42.867321][ T314] usb 1-1: Manufacturer: syz [ 42.872039][ T314] usb 1-1: SerialNumber: syz [ 42.877723][ T314] usb 1-1: config 0 descriptor?? [ 42.884190][ T614] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 42.892729][ T314] asix 1-1:0.34: probe with driver asix failed with error -22 [ 42.925403][ T646] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.925422][ T646] rust_binder: Read failure Err(EFAULT) in pid:57 [ 42.939528][ T646] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.946169][ T646] rust_binder: Read failure Err(EFAULT) in pid:57 [ 42.955001][ T646] rust_binder: Error while translating object. [ 42.961722][ T646] rust_binder: Failure in copy_transaction_data: EINVAL [ 42.967918][ T646] rust_binder: 645:646 transaction to 645 failed: EINVAL [ 43.258143][ T314] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 43.419329][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.430371][ T314] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 43.439498][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.456230][ T314] usb 3-1: config 0 descriptor?? [ 43.468195][ T651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.476804][ T651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.504177][ T45] usb 2-1: USB disconnect, device number 10 [ 43.523452][ T651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.534598][ T651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.668411][ T314] usbhid 3-1:0.0: can't add hid device: -71 [ 43.674513][ T314] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 43.683479][ T314] usb 3-1: USB disconnect, device number 9 [ 43.918115][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 44.048125][ T45] usb 2-1: device descriptor read/64, error -71 [ 44.108875][ T318] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 44.142186][ T663] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.269312][ T318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.280399][ T318] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 44.288282][ T45] usb 2-1: device descriptor read/64, error -71 [ 44.290202][ T318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.305083][ T318] usb 3-1: config 0 descriptor?? [ 44.528170][ T45] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 44.658092][ T45] usb 2-1: device descriptor read/64, error -71 [ 44.882185][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 44.882204][ T36] audit: type=1400 audit(1785406386.860:210): avc: denied { lock } for pid=667 comm="syz.3.105" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=6639 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.898627][ T45] usb 2-1: device descriptor read/64, error -71 [ 44.978638][ T36] audit: type=1400 audit(1785406386.960:211): avc: denied { load_policy } for pid=669 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 44.978718][ T670] SELinux: policydb version -380864202 does not match my version range 15-33 [ 45.008311][ T670] SELinux: failed to load policy [ 45.028393][ T45] usb usb2-port1: attempt power cycle [ 45.092634][ T674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.101518][ T674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.111871][ T674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.120802][ T674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.129248][ T318] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 45.137397][ T318] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 45.147235][ T36] audit: type=1400 audit(1785406387.120:212): avc: denied { create } for pid=673 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 45.168123][ T674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.176663][ T674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.185722][ T36] audit: type=1400 audit(1785406387.160:213): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=513 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.209227][ T36] audit: type=1400 audit(1785406387.160:214): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=513 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.232468][ T36] audit: type=1400 audit(1785406387.160:215): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=513 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.362891][ T318] usb 1-1: USB disconnect, device number 10 [ 45.368355][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 45.399222][ T45] usb 2-1: device descriptor read/8, error -71 [ 45.479342][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 45.487560][ T314] usb 3-1: USB disconnect, device number 10 [ 45.539451][ T45] usb 2-1: device descriptor read/8, error -71 [ 45.718151][ T318] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 45.759255][ T682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.767860][ T682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.778113][ T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 45.799637][ T45] usb 2-1: device descriptor read/8, error -71 [ 45.869227][ T318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.880383][ T318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.890191][ T318] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.903261][ T318] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.912364][ T318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.921227][ T318] usb 1-1: config 0 descriptor?? [ 45.931020][ T45] usb 2-1: device descriptor read/8, error -71 [ 46.050417][ T45] usb usb2-port1: unable to enumerate USB device [ 46.081268][ T686] FAULT_INJECTION: forcing a failure. [ 46.081268][ T686] name failslab, interval 1, probability 0, space 0, times 1 [ 46.094170][ T686] CPU: 0 UID: 0 PID: 686 Comm: syz.2.113 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 46.094207][ T686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.094235][ T686] Call Trace: [ 46.094244][ T686] [ 46.094257][ T686] __dump_stack+0x21/0x30 [ 46.094297][ T686] dump_stack_lvl+0x140/0x1c0 [ 46.094322][ T686] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.094354][ T686] dump_stack+0x19/0x20 [ 46.094378][ T686] should_fail_ex+0x3c2/0x510 [ 46.094399][ T686] should_failslab+0xac/0x100 [ 46.094421][ T686] kmem_cache_alloc_node_noprof+0x45/0x420 [ 46.094446][ T686] ? __alloc_skb+0x10c/0x360 [ 46.094469][ T686] ? avc_has_perm_noaudit+0x289/0x360 [ 46.094491][ T686] __alloc_skb+0x10c/0x360 [ 46.094520][ T686] alloc_skb_with_frags+0xd0/0x8b0 [ 46.094547][ T686] sock_alloc_send_pskb+0x883/0x9a0 [ 46.094567][ T686] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 46.094587][ T686] ? iov_iter_advance+0x9b/0x1e0 [ 46.094611][ T686] tun_get_user+0xaef/0x3720 [ 46.094630][ T686] ? ptr_ring_consume+0x430/0x430 [ 46.094646][ T686] ? _parse_integer+0x2e/0x40 [ 46.094675][ T686] ? kstrtoull+0x13b/0x1e0 [ 46.094693][ T686] ? __kasan_check_write+0x18/0x20 [ 46.094710][ T686] ? ref_tracker_alloc+0x32b/0x5b0 [ 46.094737][ T686] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 46.094758][ T686] ? selinux_file_permission+0x318/0xb60 [ 46.094777][ T686] ? __kasan_check_write+0x18/0x20 [ 46.094794][ T686] ? proc_fail_nth_write+0x184/0x220 [ 46.094820][ T686] tun_chr_write_iter+0x1fa/0x310 [ 46.094853][ T686] vfs_write+0x762/0xfd0 [ 46.094872][ T686] ? __cfi_vfs_write+0x10/0x10 [ 46.094899][ T686] ksys_write+0x145/0x260 [ 46.094919][ T686] ? __cfi_ksys_write+0x10/0x10 [ 46.094937][ T686] ? __kasan_check_read+0x15/0x20 [ 46.094954][ T686] __x64_sys_write+0x7f/0x90 [ 46.094972][ T686] x64_sys_call+0x271c/0x2ee0 [ 46.094988][ T686] do_syscall_64+0x57/0xf0 [ 46.095007][ T686] ? clear_bhb_loop+0x50/0xa0 [ 46.095031][ T686] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.095054][ T686] RIP: 0033:0x7fbb4f59df99 [ 46.095069][ T686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.095083][ T686] RSP: 002b:00007fbb503e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 46.095106][ T686] RAX: ffffffffffffffda RBX: 00007fbb4f825fa0 RCX: 00007fbb4f59df99 [ 46.095119][ T686] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000005 [ 46.095131][ T686] RBP: 00007fbb503e1090 R08: 0000000000000000 R09: 0000000000000000 [ 46.095142][ T686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.095152][ T686] R13: 00007fbb4f826038 R14: 00007fbb4f825fa0 R15: 00007ffcf9c13d88 [ 46.095170][ T686] [ 46.443045][ T36] audit: type=1400 audit(1785406388.420:216): avc: denied { nlmsg_read } for pid=687 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.463557][ T36] audit: type=1400 audit(1785406388.420:217): avc: denied { create } for pid=687 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.482997][ T36] audit: type=1400 audit(1785406388.420:218): avc: denied { bind } for pid=687 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.488473][ T691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 46.504848][ T36] audit: type=1400 audit(1785406388.420:219): avc: denied { listen } for pid=687 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.579154][ T318] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.586636][ T318] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.594218][ T318] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.601681][ T318] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.609185][ T318] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.616705][ T318] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.624232][ T318] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.631719][ T318] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.639197][ T318] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.646627][ T318] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.654346][ T318] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 46.670939][ T318] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 46.752534][ T700] syz.1.118 uses obsolete (PF_INET,SOCK_PACKET) [ 46.768086][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 46.783366][ T702] netlink: 124 bytes leftover after parsing attributes in process `syz.1.119'. [ 46.883694][ T318] usb 1-1: USB disconnect, device number 11 [ 46.918126][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 46.923710][ T45] usb 3-1: too many configurations: 15, using maximum allowed: 8 [ 46.932421][ T45] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 46.940787][ T45] usb 3-1: config 0 has no interface number 0 [ 46.946884][ T45] usb 3-1: too many endpoints for config 0 interface 184 altsetting 183: 53, using maximum allowed: 30 [ 46.958393][ T45] usb 3-1: config 0 interface 184 altsetting 183 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 46.971763][ T45] usb 3-1: config 0 interface 184 has no altsetting 0 [ 46.979440][ T45] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 46.987750][ T45] usb 3-1: config 0 has no interface number 0 [ 46.994014][ T45] usb 3-1: too many endpoints for config 0 interface 184 altsetting 183: 53, using maximum allowed: 30 [ 47.005297][ T45] usb 3-1: config 0 interface 184 altsetting 183 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 47.018837][ T45] usb 3-1: config 0 interface 184 has no altsetting 0 [ 47.026399][ T45] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 47.035212][ T45] usb 3-1: config 0 has no interface number 0 [ 47.041434][ T45] usb 3-1: too many endpoints for config 0 interface 184 altsetting 183: 53, using maximum allowed: 30 [ 47.052557][ T45] usb 3-1: config 0 interface 184 altsetting 183 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 47.065960][ T45] usb 3-1: config 0 interface 184 has no altsetting 0 [ 47.073522][ T45] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 47.081744][ T45] usb 3-1: config 0 has no interface number 0 [ 47.087967][ T45] usb 3-1: too many endpoints for config 0 interface 184 altsetting 183: 53, using maximum allowed: 30 [ 47.099241][ T314] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 47.106879][ T45] usb 3-1: config 0 interface 184 altsetting 183 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 47.120280][ T45] usb 3-1: config 0 interface 184 has no altsetting 0 [ 47.128419][ T45] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 47.136717][ T45] usb 3-1: config 0 has no interface number 0 [ 47.142936][ T45] usb 3-1: too many endpoints for config 0 interface 184 altsetting 183: 53, using maximum allowed: 30 [ 47.154061][ T45] usb 3-1: config 0 interface 184 altsetting 183 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 47.167424][ T45] usb 3-1: config 0 interface 184 has no altsetting 0 [ 47.174914][ T45] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 47.183166][ T45] usb 3-1: config 0 has no interface number 0 [ 47.189552][ T45] usb 3-1: too many endpoints for config 0 interface 184 altsetting 183: 53, using maximum allowed: 30 [ 47.200696][ T45] usb 3-1: config 0 interface 184 altsetting 183 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 47.214205][ T45] usb 3-1: config 0 interface 184 has no altsetting 0 [ 47.222272][ T45] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 47.230556][ T45] usb 3-1: config 0 has no interface number 0 [ 47.236871][ T45] usb 3-1: too many endpoints for config 0 interface 184 altsetting 183: 53, using maximum allowed: 30 [ 47.248360][ T45] usb 3-1: config 0 interface 184 altsetting 183 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 47.261920][ T45] usb 3-1: config 0 interface 184 has no altsetting 0 [ 47.269795][ T45] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 47.277982][ T45] usb 3-1: config 0 has no interface number 0 [ 47.284390][ T314] usb 2-1: Using ep0 maxpacket: 16 [ 47.289667][ T45] usb 3-1: too many endpoints for config 0 interface 184 altsetting 183: 53, using maximum allowed: 30 [ 47.300870][ T45] usb 3-1: config 0 interface 184 altsetting 183 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 47.314659][ T45] usb 3-1: config 0 interface 184 has no altsetting 0 [ 47.321768][ T45] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 47.331290][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.339525][ T314] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 47.348053][ T314] usb 2-1: config 0 has no interface number 0 [ 47.354208][ T314] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 47.364771][ T314] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 47.375076][ T45] usb 3-1: config 0 descriptor?? [ 47.389221][ T314] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 47.409463][ T314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.417737][ T314] usb 2-1: Product: syz [ 47.432086][ T314] usb 2-1: Manufacturer: syz [ 47.442011][ T314] usb 2-1: SerialNumber: syz [ 47.448589][ T314] usb 2-1: config 0 descriptor?? [ 47.453949][ T708] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 47.466911][ T708] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 47.588665][ T690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.603675][ T690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.627151][ T45] usb 3-1: string descriptor 0 read error: -71 [ 47.637201][ T45] hub 3-1:0.184: Invalid hub with more than one config or interface [ 47.646029][ T45] hub 3-1:0.184: probe with driver hub failed with error -22 [ 47.657972][ T45] usb 3-1: USB disconnect, device number 11 [ 47.701927][ T708] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 47.709410][ T708] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 47.862288][ T733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.871049][ T733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.918641][ T314] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 48.028101][ T65] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 48.128819][ T314] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 48.138974][ T314] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 48.149403][ T314] asix 2-1:0.34: probe with driver asix failed with error -32 [ 48.188127][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 48.194659][ T65] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 48.208151][ T65] usb 1-1: config 2 has no interface number 0 [ 48.216860][ T65] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 48.227249][ T65] usb 1-1: config 2 interface 88 has no altsetting 0 [ 48.240201][ T65] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 48.249562][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 48.257726][ T65] usb 1-1: Product: syz [ 48.261986][ T65] usb 1-1: Manufacturer: syz [ 48.266711][ T65] usb 1-1: SerialNumber: syz [ 48.272527][ T729] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 48.311174][ T737] input: syz0 as /devices/virtual/input/input10 [ 48.317515][ T737] input: failed to attach handler leds to device input10, error: -6 [ 48.464997][ T743] syzkaller1: entered allmulticast mode [ 48.489729][ T729] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 48.533295][ T748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 48.699631][ T729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.712938][ T729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.925330][ T65] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 48.935697][ T65] asix 1-1:2.88: probe with driver asix failed with error -71 [ 48.945822][ T65] usb 1-1: USB disconnect, device number 12 [ 49.238105][ T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 49.389460][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.400459][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.410275][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.423225][ T45] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.432395][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.441345][ T45] usb 3-1: config 0 descriptor?? [ 49.538670][ T777] loop9: detected capacity change from 0 to 7 [ 49.545616][ T777] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.558171][ T777] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.566054][ T777] loop9: unable to read partition table [ 49.572069][ T777] loop_reread_partitions: partition scan of loop9 (Sj̳P=?}X 5`㫅) failed (rc=-5) [ 49.576154][ T312] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.592969][ T312] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.601017][ T312] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.610303][ T312] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.618430][ T312] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.626607][ T312] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.634689][ T312] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.649818][ T312] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.700377][ T779] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 49.852429][ T45] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 49.867647][ T45] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 49.880439][ T314] usb 2-1: USB disconnect, device number 15 [ 49.891697][ T45] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 49.900204][ T45] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 49.907704][ T45] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 49.916612][ T45] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 49.925219][ T45] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 49.933071][ T45] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 49.948106][ T45] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 49.965838][ T45] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 49.973584][ T45] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 49.991887][ T45] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 50.158081][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 50.190333][ T318] usb 3-1: USB disconnect, device number 12 [ 50.309151][ T31] usb 1-1: config index 0 descriptor too short (expected 45, got 28) [ 50.317376][ T31] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 50.324719][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 50.339671][ T31] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 50.348829][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.356843][ T31] usb 1-1: Product: syz [ 50.361074][ T31] usb 1-1: Manufacturer: syz [ 50.365703][ T31] usb 1-1: SerialNumber: syz [ 50.371891][ T31] rtl8150 1-1:1.0: couldn't find required endpoints [ 50.378303][ T65] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 50.378767][ T31] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 50.528140][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 50.534511][ T65] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 50.542758][ T65] usb 2-1: config 0 has an invalid descriptor of length 147, skipping remainder of the config [ 50.553083][ T65] usb 2-1: config 0 has no interface number 0 [ 50.560519][ T65] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 50.569976][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.577986][ T65] usb 2-1: Product: syz [ 50.582957][ T65] usb 2-1: Manufacturer: syz [ 50.587621][ T65] usb 2-1: SerialNumber: syz [ 50.593200][ T65] usb 2-1: config 0 descriptor?? [ 50.620124][ T65] usb 1-1: USB disconnect, device number 13 [ 50.713624][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 50.713644][ T36] audit: type=1400 audit(1785406392.690:241): avc: denied { connect } for pid=790 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.745606][ T36] audit: type=1400 audit(1785406392.690:242): avc: denied { ioctl } for pid=790 comm="syz.2.154" path="socket:[7507]" dev="sockfs" ino=7507 ioctlcmd=0xae78 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.775843][ T36] audit: type=1326 audit(1785406392.750:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.155" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb4f59df99 code=0x0 [ 50.811479][ T36] audit: type=1400 audit(1785406392.790:244): avc: denied { associate } for pid=787 comm="syz.1.153" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 50.836611][ T789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.846131][ T789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.108108][ T65] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 51.259894][ T65] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 51.268084][ T65] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 51.277046][ T65] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 51.286223][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.295230][ T65] usb 3-1: config 0 descriptor?? [ 51.304008][ T65] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 51.311019][ T65] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 51.321980][ T65] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 51.496582][ T36] audit: type=1400 audit(1785406393.470:245): avc: denied { wake_alarm } for pid=810 comm="syz.0.161" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.783826][ T36] audit: type=1400 audit(1785406393.760:246): avc: denied { sqpoll } for pid=821 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 51.785711][ T823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 51.838176][ T65] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 51.983213][ T829] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 51.989764][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.995038][ T36] audit: type=1400 audit(1785406393.970:247): avc: denied { relabelto } for pid=828 comm="syz.3.167" name="file0" dev="tmpfs" ino=329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 52.005083][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.034034][ T36] audit: type=1400 audit(1785406393.970:248): avc: denied { associate } for pid=828 comm="syz.3.167" name="file0" dev="tmpfs" ino=329 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 52.064174][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 52.082952][ T36] audit: type=1400 audit(1785406394.050:249): avc: denied { unlink } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 52.122874][ T65] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.132935][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.142893][ T65] usb 1-1: config 0 descriptor?? [ 52.191061][ T9] usb 3-1: USB disconnect, device number 13 [ 52.336048][ T36] audit: type=1400 audit(1785406394.310:250): avc: denied { mounton } for pid=844 comm="syz.3.172" path="/proc/176/task" dev="proc" ino=7733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 52.382782][ T845] random: crng reseeded on system resumption [ 52.413346][ T845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.421973][ T845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.557167][ T65] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 52.564659][ T65] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 52.572264][ T65] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 52.579840][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 52.587499][ T65] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 52.595013][ T65] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 52.602660][ T65] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 52.610138][ T65] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 52.617555][ T65] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 52.624995][ T65] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 52.632457][ T65] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 52.640117][ T65] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 52.649361][ T65] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 52.748122][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 52.754573][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.765611][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.775435][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 52.788300][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 52.797362][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.806506][ T9] usb 3-1: config 0 descriptor?? [ 52.869797][ T318] usb 1-1: USB disconnect, device number 14 [ 53.169876][ T31] usb 2-1: USB disconnect, device number 16 [ 53.289182][ T862] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 53.299537][ T862] SELinux: failed to load policy [ 53.402401][ T869] dummy_hcd dummy_hcd.0: remove, state 4 [ 53.408158][ T869] usb usb1: USB disconnect, device number 1 [ 53.416444][ T869] dummy_hcd dummy_hcd.0: stopped [ 53.421503][ T869] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 53.469480][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 53.475754][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 53.485291][ T9] usb 3-1: USB disconnect, device number 14 [ 54.201372][ T894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.210250][ T894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.237597][ T894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.246697][ T894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.260083][ T896] FAULT_INJECTION: forcing a failure. [ 54.260083][ T896] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.273352][ T896] CPU: 1 UID: 0 PID: 896 Comm: syz.1.191 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 54.273377][ T896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.273387][ T896] Call Trace: [ 54.273392][ T896] [ 54.273398][ T896] __dump_stack+0x21/0x30 [ 54.273425][ T896] dump_stack_lvl+0x140/0x1c0 [ 54.273448][ T896] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.273470][ T896] ? exc_page_fault+0x65/0xc0 [ 54.273496][ T896] dump_stack+0x19/0x20 [ 54.273517][ T896] should_fail_ex+0x3c2/0x510 [ 54.273536][ T896] should_fail+0xf/0x20 [ 54.273551][ T896] should_fail_usercopy+0x1e/0x30 [ 54.273570][ T896] _copy_from_iter+0x1a6/0x1520 [ 54.273590][ T896] ? __kasan_check_write+0x18/0x20 [ 54.273607][ T896] ? _copy_from_iter+0x215/0x1520 [ 54.273628][ T896] ? __cfi__copy_from_iter+0x10/0x10 [ 54.273648][ T896] ? __virt_addr_valid+0x2a1/0x370 [ 54.273685][ T896] ? __cfi__copy_from_iter+0x10/0x10 [ 54.273714][ T896] ? __check_object_size+0x54c/0x870 [ 54.273739][ T896] ? __cfi___check_object_size+0x10/0x10 [ 54.273765][ T896] copy_page_from_iter+0x1e5/0x2a0 [ 54.273787][ T896] skb_copy_datagram_from_iter+0x300/0x6f0 [ 54.273815][ T896] tun_get_user+0xd99/0x3720 [ 54.273832][ T896] ? ptr_ring_consume+0x430/0x430 [ 54.273847][ T896] ? _parse_integer+0x2e/0x40 [ 54.273868][ T896] ? kstrtoull+0x13b/0x1e0 [ 54.273884][ T896] ? __kasan_check_write+0x18/0x20 [ 54.273905][ T896] ? ref_tracker_alloc+0x32b/0x5b0 [ 54.273924][ T896] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 54.273943][ T896] ? selinux_file_permission+0x318/0xb60 [ 54.273967][ T896] ? __kasan_check_write+0x18/0x20 [ 54.274024][ T896] ? proc_fail_nth_write+0x184/0x220 [ 54.274048][ T896] tun_chr_write_iter+0x1fa/0x310 [ 54.274073][ T896] vfs_write+0x762/0xfd0 [ 54.274089][ T896] ? __cfi_vfs_write+0x10/0x10 [ 54.274108][ T896] ksys_write+0x145/0x260 [ 54.274124][ T896] ? __cfi_ksys_write+0x10/0x10 [ 54.274141][ T896] ? __kasan_check_read+0x15/0x20 [ 54.274156][ T896] __x64_sys_write+0x7f/0x90 [ 54.274172][ T896] x64_sys_call+0x271c/0x2ee0 [ 54.274186][ T896] do_syscall_64+0x57/0xf0 [ 54.274204][ T896] ? clear_bhb_loop+0x50/0xa0 [ 54.274230][ T896] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.274256][ T896] RIP: 0033:0x7fcd2299df99 [ 54.274270][ T896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.274284][ T896] RSP: 002b:00007fcd238ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.274301][ T896] RAX: ffffffffffffffda RBX: 00007fcd22c25fa0 RCX: 00007fcd2299df99 [ 54.274313][ T896] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000005 [ 54.274324][ T896] RBP: 00007fcd238ae090 R08: 0000000000000000 R09: 0000000000000000 [ 54.274334][ T896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.274344][ T896] R13: 00007fcd22c26038 R14: 00007fcd22c25fa0 R15: 00007ffe978fe018 [ 54.274358][ T896] [ 54.418206][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 54.741042][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.761184][ T904] 9pnet_fd: Insufficient options for proto=fd [ 54.761596][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.769999][ T904] netlink: 'syz.0.194': attribute type 27 has an invalid length. [ 54.786769][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 54.816262][ T904] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.818163][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 54.823969][ T904] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.847014][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.863275][ T9] usb 3-1: config 0 descriptor?? [ 54.983451][ T912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.008315][ T912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.048114][ T912] loop8: detected capacity change from 0 to 7 [ 55.055388][ T312] buffer_io_error: 2 callbacks suppressed [ 55.055409][ T312] Buffer I/O error on dev loop8, logical block 0, async page read [ 55.069561][ T312] Buffer I/O error on dev loop8, logical block 0, async page read [ 55.077606][ T312] Buffer I/O error on dev loop8, logical block 0, async page read [ 55.087087][ T312] Buffer I/O error on dev loop8, logical block 0, async page read [ 55.095264][ T312] Buffer I/O error on dev loop8, logical block 0, async page read [ 55.104811][ T312] Buffer I/O error on dev loop8, logical block 0, async page read [ 55.112903][ T312] Buffer I/O error on dev loop8, logical block 0, async page read [ 55.121001][ T312] Buffer I/O error on dev loop8, logical block 0, async page read [ 55.129171][ T312] Buffer I/O error on dev loop8, logical block 0, async page read [ 55.137265][ T312] Buffer I/O error on dev loop8, logical block 0, async page read [ 55.288340][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 55.295841][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 55.304073][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 55.311676][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 55.319266][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 55.326694][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 55.334184][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 55.341948][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 55.349423][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 55.357009][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 55.364706][ T9] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 55.375991][ T9] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 55.549127][ T318] usb 3-1: USB disconnect, device number 15 [ 55.604269][ T922] FAULT_INJECTION: forcing a failure. [ 55.604269][ T922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.618166][ T922] CPU: 0 UID: 0 PID: 922 Comm: syz.3.201 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 55.618205][ T922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.618218][ T922] Call Trace: [ 55.618225][ T922] [ 55.618233][ T922] __dump_stack+0x21/0x30 [ 55.618267][ T922] dump_stack_lvl+0x140/0x1c0 [ 55.618295][ T922] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.618331][ T922] ? exc_page_fault+0x65/0xc0 [ 55.618362][ T922] dump_stack+0x19/0x20 [ 55.618389][ T922] should_fail_ex+0x3c2/0x510 [ 55.618413][ T922] should_fail+0xf/0x20 [ 55.618434][ T922] should_fail_usercopy+0x1e/0x30 [ 55.618459][ T922] _copy_from_iter+0x1a6/0x1520 [ 55.618485][ T922] ? __kasan_check_write+0x18/0x20 [ 55.618507][ T922] ? _copy_from_iter+0x215/0x1520 [ 55.618534][ T922] ? __cfi__copy_from_iter+0x10/0x10 [ 55.618559][ T922] ? __virt_addr_valid+0x2a1/0x370 [ 55.618584][ T922] ? __cfi__copy_from_iter+0x10/0x10 [ 55.618622][ T922] ? __check_object_size+0x54c/0x870 [ 55.618643][ T922] ? __cfi___check_object_size+0x10/0x10 [ 55.618673][ T922] copy_page_from_iter+0x1e5/0x2a0 [ 55.618699][ T922] skb_copy_datagram_from_iter+0x300/0x6f0 [ 55.618733][ T922] tun_get_user+0xd99/0x3720 [ 55.618755][ T922] ? ptr_ring_consume+0x430/0x430 [ 55.618775][ T922] ? _parse_integer+0x2e/0x40 [ 55.618795][ T922] ? kstrtoull+0x13b/0x1e0 [ 55.618816][ T922] ? __kasan_check_write+0x18/0x20 [ 55.618845][ T922] ? ref_tracker_alloc+0x32b/0x5b0 [ 55.618873][ T922] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 55.618898][ T922] ? selinux_file_permission+0x318/0xb60 [ 55.618919][ T922] ? __kasan_check_write+0x18/0x20 [ 55.618944][ T922] ? proc_fail_nth_write+0x184/0x220 [ 55.618974][ T922] tun_chr_write_iter+0x1fa/0x310 [ 55.619004][ T922] vfs_write+0x762/0xfd0 [ 55.619025][ T922] ? __cfi_vfs_write+0x10/0x10 [ 55.619048][ T922] ksys_write+0x145/0x260 [ 55.619068][ T922] ? __cfi_ksys_write+0x10/0x10 [ 55.619088][ T922] ? __kasan_check_read+0x15/0x20 [ 55.619108][ T922] __x64_sys_write+0x7f/0x90 [ 55.619130][ T922] x64_sys_call+0x271c/0x2ee0 [ 55.619155][ T922] do_syscall_64+0x57/0xf0 [ 55.619180][ T922] ? clear_bhb_loop+0x50/0xa0 [ 55.619210][ T922] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.619239][ T922] RIP: 0033:0x7fce52d9df99 [ 55.619258][ T922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.619276][ T922] RSP: 002b:00007fce53c74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.619298][ T922] RAX: ffffffffffffffda RBX: 00007fce53025fa0 RCX: 00007fce52d9df99 [ 55.619316][ T922] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000005 [ 55.619338][ T922] RBP: 00007fce53c74090 R08: 0000000000000000 R09: 0000000000000000 [ 55.619352][ T922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.619375][ T922] R13: 00007fce53026038 R14: 00007fce53025fa0 R15: 00007fff8a6c0598 [ 55.619394][ T922] [ 56.155190][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 56.155211][ T36] audit: type=1400 audit(1785406398.130:267): avc: denied { write } for pid=934 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.338084][ T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 56.363923][ T941] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 56.378204][ T941] SELinux: failed to load policy [ 56.395007][ T941] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.483281][ T946] FAULT_INJECTION: forcing a failure. [ 56.483281][ T946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.496584][ T946] CPU: 1 UID: 0 PID: 946 Comm: syz.2.211 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 56.496610][ T946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.496621][ T946] Call Trace: [ 56.496626][ T946] [ 56.496633][ T946] __dump_stack+0x21/0x30 [ 56.496664][ T946] dump_stack_lvl+0x140/0x1c0 [ 56.496688][ T946] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.496711][ T946] ? exc_page_fault+0x65/0xc0 [ 56.496735][ T946] dump_stack+0x19/0x20 [ 56.496755][ T946] should_fail_ex+0x3c2/0x510 [ 56.496775][ T946] should_fail+0xf/0x20 [ 56.496790][ T946] should_fail_usercopy+0x1e/0x30 [ 56.496809][ T946] _copy_from_iter+0x1a6/0x1520 [ 56.496830][ T946] ? __kasan_check_write+0x18/0x20 [ 56.496846][ T946] ? _copy_from_iter+0x215/0x1520 [ 56.496867][ T946] ? __cfi__copy_from_iter+0x10/0x10 [ 56.496893][ T946] ? __virt_addr_valid+0x2a1/0x370 [ 56.496913][ T946] ? __cfi__copy_from_iter+0x10/0x10 [ 56.496932][ T946] ? __check_object_size+0x54c/0x870 [ 56.496949][ T946] ? __cfi___check_object_size+0x10/0x10 [ 56.496965][ T946] copy_page_from_iter+0x1e5/0x2a0 [ 56.496988][ T946] skb_copy_datagram_from_iter+0x300/0x6f0 [ 56.497014][ T946] tun_get_user+0xd99/0x3720 [ 56.497032][ T946] ? ptr_ring_consume+0x430/0x430 [ 56.497046][ T946] ? _parse_integer+0x2e/0x40 [ 56.497062][ T946] ? kstrtoull+0x13b/0x1e0 [ 56.497077][ T946] ? __kasan_check_write+0x18/0x20 [ 56.497099][ T946] ? ref_tracker_alloc+0x32b/0x5b0 [ 56.497119][ T946] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 56.497138][ T946] ? selinux_file_permission+0x318/0xb60 [ 56.497156][ T946] ? __kasan_check_write+0x18/0x20 [ 56.497172][ T946] ? proc_fail_nth_write+0x184/0x220 [ 56.497203][ T946] tun_chr_write_iter+0x1fa/0x310 [ 56.497229][ T946] vfs_write+0x762/0xfd0 [ 56.497246][ T946] ? __cfi_vfs_write+0x10/0x10 [ 56.497264][ T946] ksys_write+0x145/0x260 [ 56.497281][ T946] ? __cfi_ksys_write+0x10/0x10 [ 56.497297][ T946] ? __kasan_check_read+0x15/0x20 [ 56.497312][ T946] __x64_sys_write+0x7f/0x90 [ 56.497328][ T946] x64_sys_call+0x271c/0x2ee0 [ 56.497343][ T946] do_syscall_64+0x57/0xf0 [ 56.497360][ T946] ? clear_bhb_loop+0x50/0xa0 [ 56.497382][ T946] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.497402][ T946] RIP: 0033:0x7fbb4f59df99 [ 56.497417][ T946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.497430][ T946] RSP: 002b:00007fbb503e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.497447][ T946] RAX: ffffffffffffffda RBX: 00007fbb4f825fa0 RCX: 00007fbb4f59df99 [ 56.497460][ T946] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000005 [ 56.497470][ T946] RBP: 00007fbb503e1090 R08: 0000000000000000 R09: 0000000000000000 [ 56.497481][ T946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 56.497490][ T946] R13: 00007fbb4f826038 R14: 00007fbb4f825fa0 R15: 00007ffcf9c13d88 [ 56.497505][ T946] [ 56.800955][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 56.807795][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 56.816474][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 56.827480][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 56.837224][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 56.848457][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 56.859018][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 56.868767][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 56.878644][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 56.890433][ T31] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 56.899591][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.907920][ T31] usb 2-1: Product: syz [ 56.912182][ T31] usb 2-1: Manufacturer: syz [ 56.916454][ T948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 56.916901][ T31] usb 2-1: SerialNumber: syz [ 56.931186][ T31] usb 2-1: config 0 descriptor?? [ 56.936496][ T931] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 56.948497][ T31] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 56.978661][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.999618][ T952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.014779][ T952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.135189][ T957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.215'. [ 57.289658][ T36] audit: type=1400 audit(1785406399.270:268): avc: denied { setopt } for pid=964 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.393677][ T36] audit: type=1400 audit(1785406399.370:269): avc: denied { setopt } for pid=968 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.413009][ T36] audit: type=1400 audit(1785406399.380:270): avc: denied { read } for pid=968 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.432319][ T36] audit: type=1400 audit(1785406399.380:271): avc: denied { read write } for pid=968 comm="syz.0.220" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.457025][ T36] audit: type=1400 audit(1785406399.380:272): avc: denied { open } for pid=968 comm="syz.0.220" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.481960][ T36] audit: type=1400 audit(1785406399.380:273): avc: denied { ioctl } for pid=968 comm="syz.0.220" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.533346][ T973] cgroup: fork rejected by pids controller in /syz0 [ 57.570794][ T36] audit: type=1400 audit(1785406399.550:274): avc: denied { read } for pid=975 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.598082][ T65] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 57.620030][ T36] audit: type=1400 audit(1785406399.600:275): avc: denied { write } for pid=975 comm="syz.3.223" path="socket:[9360]" dev="sockfs" ino=9360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.643364][ T36] audit: type=1400 audit(1785406399.600:276): avc: denied { create } for pid=975 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 57.680938][ T430] bridge_slave_1: left allmulticast mode [ 57.686772][ T430] bridge_slave_1: left promiscuous mode [ 57.708184][ T430] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.728358][ T430] bridge_slave_0: left allmulticast mode [ 57.734104][ T430] bridge_slave_0: left promiscuous mode [ 57.741577][ T31] usb 2-1: USB disconnect, device number 17 [ 57.758165][ T430] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.780287][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.798107][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.808281][ T65] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 57.817526][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.827870][ T65] usb 3-1: config 0 descriptor?? [ 57.863458][ T990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.873780][ T990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.894067][ T990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.914223][ T990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.054067][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.061259][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.068566][ T994] bridge_slave_0: entered allmulticast mode [ 58.076591][ T994] bridge_slave_0: entered promiscuous mode [ 58.084015][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.091508][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.098722][ T994] bridge_slave_1: entered allmulticast mode [ 58.105264][ T994] bridge_slave_1: entered promiscuous mode [ 58.174043][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.181160][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.188608][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.195762][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.220935][ T428] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.228557][ T428] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.239623][ T427] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.246755][ T427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.256628][ T65] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 58.265601][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.268386][ T65] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 58.272759][ T428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.279940][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 58.298127][ T65] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 58.305151][ T65] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 58.312374][ T65] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 58.319472][ T65] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 58.327070][ T65] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 58.336081][ T65] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 58.361343][ T994] veth0_vlan: entered promiscuous mode [ 58.376723][ T994] veth1_macvtap: entered promiscuous mode [ 58.411142][ T1003] capability: warning: `syz.0.226' uses deprecated v2 capabilities in a way that may be insecure [ 58.456250][ T65] cp2112 0003:10C4:EA90.000B: Part Number: 0x82 Device Version: 0xFE [ 58.468134][ T9] usb 2-1: device descriptor read/64, error -71 [ 58.657095][ T967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.668544][ T967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.677257][ T967] tmpfs: Bad value for 'huge' [ 58.701039][ T1007] MTRR 1 not used [ 58.718203][ T9] usb 2-1: device descriptor read/64, error -71 [ 58.759748][ T65] cp2112 0003:10C4:EA90.000B: error requesting SMBus config [ 58.788305][ T65] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -32 [ 58.812774][ T1021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.824400][ T1021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.833916][ T1021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.843909][ T1021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.852486][ T1021] netlink: 'syz.3.234': attribute type 27 has an invalid length. [ 58.978614][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 59.108155][ T9] usb 2-1: device descriptor read/64, error -71 [ 59.348146][ T9] usb 2-1: device descriptor read/64, error -71 [ 59.404055][ T1026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.412955][ T1026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.458331][ T9] usb usb2-port1: attempt power cycle [ 59.808125][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 59.839172][ T9] usb 2-1: device descriptor read/8, error -71 [ 59.969122][ T9] usb 2-1: device descriptor read/8, error -71 [ 60.005495][ T1049] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 60.021694][ T1049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.030511][ T1049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.218141][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 60.239643][ T9] usb 2-1: device descriptor read/8, error -71 [ 60.357602][ T65] usb 3-1: USB disconnect, device number 16 [ 60.369170][ T9] usb 2-1: device descriptor read/8, error -71 [ 60.424766][ T1054] kvm: apic: phys broadcast and lowest prio [ 60.439886][ T1054] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.478358][ T9] usb usb2-port1: unable to enumerate USB device [ 60.483609][ T1060] mmap: syz.2.248 (1060) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.650125][ T1069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.659484][ T1069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.788162][ T318] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 60.939546][ T318] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 60.952211][ T318] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.962326][ T318] usb 3-1: config 0 interface 0 has no altsetting 0 [ 60.969512][ T318] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 60.979156][ T318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.996654][ T318] usb 3-1: config 0 descriptor?? [ 61.260494][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 61.260516][ T36] audit: type=1400 audit(1785406403.240:298): avc: denied { sqpoll } for pid=1080 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.271714][ T1081] SELinux: ebitmap: map size 2585547753 does not match my size 64 (high bit was 704179291) [ 61.286424][ T36] audit: type=1400 audit(1785406403.240:299): avc: denied { load_policy } for pid=1080 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 61.309502][ T1081] SELinux: failed to load policy [ 61.332539][ T1085] sock: sock_set_timeout: `syz.1.257' (pid 1085) tries to set negative timeout [ 61.426043][ T36] audit: type=1400 audit(1785406403.400:300): avc: denied { setopt } for pid=1089 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.786973][ T318] usbhid 3-1:0.0: can't add hid device: -71 [ 61.794059][ T318] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 61.808346][ T318] usb 3-1: USB disconnect, device number 17 [ 61.919307][ T397] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 62.035090][ T1116] SELinux: avtab: truncated entry [ 62.058794][ T1116] SELinux: failed to load policy [ 62.080265][ T397] usb 2-1: unable to get BOS descriptor or descriptor too short [ 62.089382][ T397] usb 2-1: not running at top speed; connect to a high speed hub [ 62.103173][ T397] usb 2-1: config 9 has an invalid interface number: 142 but max is 0 [ 62.111923][ T397] usb 2-1: config 9 has no interface number 0 [ 62.119594][ T397] usb 2-1: config 9 interface 142 altsetting 17 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 62.130491][ T1121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.135890][ T397] usb 2-1: config 9 interface 142 has no altsetting 0 [ 62.143797][ T1121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.153501][ T397] usb 2-1: New USB device found, idVendor=050d, idProduct=0115, bcdDevice= 1.33 [ 62.166220][ T397] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.175908][ T397] usb 2-1: Product: syz [ 62.182114][ T397] usb 2-1: Manufacturer: syz [ 62.189150][ T397] usb 2-1: SerialNumber: syz [ 62.479264][ T36] audit: type=1400 audit(1785406404.460:301): avc: denied { read write } for pid=1086 comm="syz.1.258" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 62.503444][ T1127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.258'. [ 62.522175][ T36] audit: type=1400 audit(1785406404.460:302): avc: denied { open } for pid=1086 comm="syz.1.258" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 62.798167][ T36] audit: type=1400 audit(1785406404.770:303): avc: denied { map } for pid=1141 comm="syz.3.277" path="socket:[10761]" dev="sockfs" ino=10761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.845642][ T36] audit: type=1400 audit(1785406404.770:304): avc: denied { accept } for pid=1141 comm="syz.3.277" path="socket:[10761]" dev="sockfs" ino=10761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.963587][ T36] audit: type=1400 audit(1785406404.940:305): avc: denied { write } for pid=1155 comm="syz.2.280" name="udp" dev="proc" ino=4026532398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 62.990073][ T1157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.011708][ T1157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.142260][ T1162] fuse: Bad value for 'fd' [ 63.204029][ T1168] .N: renamed from veth0_to_bond (while UP) [ 63.211555][ T314] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 63.263931][ T1171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.299231][ T1171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.388063][ T314] usb 3-1: Using ep0 maxpacket: 32 [ 63.398997][ T314] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 63.409235][ T314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.429225][ T314] usb 3-1: config 0 has no interface number 0 [ 63.442165][ T314] usb 3-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 63.470093][ T314] usb 3-1: config 0 interface 196 has no altsetting 0 [ 63.487066][ T314] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 63.496700][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.505772][ T314] usb 3-1: Product: syz [ 63.510337][ T314] usb 3-1: Manufacturer: syz [ 63.515384][ T314] usb 3-1: SerialNumber: syz [ 63.533657][ T314] usb 3-1: config 0 descriptor?? [ 63.750880][ T314] ipheth 3-1:0.196: Unable to find endpoints [ 63.784061][ T314] usb 3-1: USB disconnect, device number 18 [ 63.903144][ T36] audit: type=1400 audit(1785406405.880:306): avc: denied { read } for pid=1172 comm="syz.0.286" name="file2" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.015815][ T1178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.037198][ T1178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.418479][ T397] usb-storage 2-1:9.142: USB Mass Storage device detected [ 64.443043][ T397] usb-storage 2-1:9.142: Quirks match for vid 050d pid 0115: 4 [ 64.453352][ T397] scsi host1: usb-storage 2-1:9.142 [ 64.462152][ T397] usb 2-1: USB disconnect, device number 22 [ 64.484736][ T36] audit: type=1400 audit(1785406406.460:307): avc: denied { write } for pid=1186 comm="syz.1.290" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.578080][ T318] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 64.741476][ T318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.765505][ T318] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 64.777756][ T318] usb 3-1: too many endpoints for config 1 interface 1 altsetting 0: 251, using maximum allowed: 30 [ 64.795786][ T318] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 251 [ 64.815726][ T318] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 64.835929][ T318] usb 3-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 64.849830][ T318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.860192][ T318] usb 3-1: Product: syz [ 64.866389][ T318] usb 3-1: Manufacturer: syz [ 64.876058][ T318] usb 3-1: SerialNumber: syz [ 64.888828][ T318] usb 3-1: Interface #1 referenced by multiple IADs [ 64.908198][ T397] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 65.068231][ T397] usb 2-1: Using ep0 maxpacket: 8 [ 65.076037][ T397] usb 2-1: unable to get BOS descriptor or descriptor too short [ 65.087275][ T397] usb 2-1: string descriptor 0 read error: -22 [ 65.096157][ T397] usb 2-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 65.107323][ T397] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.119755][ T318] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 65.134069][ T397] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 65.146347][ T397] usb 2-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 65.157872][ T318] usb 3-1: USB disconnect, device number 19 [ 65.336855][ T397] usb 2-1: failed to enable PITCH for EP 0x1 [ 65.344205][ T397] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 65.367929][ T397] usb 2-1: USB disconnect, device number 23 [ 65.888148][ T314] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 66.048110][ T314] usb 3-1: Using ep0 maxpacket: 16 [ 66.054752][ T314] usb 3-1: config index 0 descriptor too short (expected 255, got 152) [ 66.063241][ T314] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 66.074217][ T314] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.085447][ T314] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.094864][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.103082][ T314] usb 3-1: Product: syz [ 66.107345][ T314] usb 3-1: Manufacturer: syz [ 66.112313][ T314] usb 3-1: SerialNumber: syz [ 66.269149][ T36] kauditd_printk_skb: 83 callbacks suppressed [ 66.269180][ T36] audit: type=1326 audit(1785406408.250:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1216 comm="syz.1.303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd2295e7ce code=0x7ffc0000 [ 66.302021][ T36] audit: type=1326 audit(1785406408.250:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1216 comm="syz.1.303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd2295e7ce code=0x7ffc0000 [ 66.329616][ T36] audit: type=1326 audit(1785406408.250:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1216 comm="syz.1.303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd2295e7ce code=0x7ffc0000 [ 66.354904][ T36] audit: type=1326 audit(1785406408.250:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1216 comm="syz.1.303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd2295e7ce code=0x7ffc0000 [ 66.380384][ T314] usb 3-1: cannot find UAC_HEADER [ 66.385942][ T36] audit: type=1326 audit(1785406408.250:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1216 comm="syz.1.303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd2295e7ce code=0x7ffc0000 [ 66.413198][ T314] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 66.424834][ T314] usb 3-1: USB disconnect, device number 20 [ 66.425649][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.435876][ T36] audit: type=1326 audit(1785406408.250:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1216 comm="syz.1.303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd2295e7ce code=0x7ffc0000 [ 66.487818][ T36] audit: type=1326 audit(1785406408.250:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1216 comm="syz.1.303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd2295e7ce code=0x7ffc0000 [ 66.513568][ T36] audit: type=1326 audit(1785406408.260:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1216 comm="syz.1.303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd2295e7ce code=0x7ffc0000 [ 66.544363][ T36] audit: type=1326 audit(1785406408.260:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1216 comm="syz.1.303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd2295e7ce code=0x7ffc0000 [ 66.571313][ T36] audit: type=1326 audit(1785406408.260:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1216 comm="syz.1.303" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd2295e7ce code=0x7ffc0000 [ 67.134121][ T1231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.143210][ T1231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.575562][ T1247] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 67.589559][ T1247] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 67.598591][ T1247] CPU: 1 UID: 0 PID: 1247 Comm: syz.2.314 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 67.610291][ T1247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.620524][ T1247] RIP: 0010:dummy_set_selfpowered+0xc0/0x160 [ 67.626874][ T1247] Code: 94 c0 4d 8d b4 c6 d0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4a ce 26 fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 31 ce 26 fe 41 be 58 11 00 00 4d [ 67.647086][ T1247] RSP: 0018:ffffc9000e617738 EFLAGS: 00010246 [ 67.654095][ T1247] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 67.662122][ T1247] RDX: ffff888119de5f00 RSI: 0000000000000003 RDI: 0000000000000005 [ 67.670162][ T1247] RBP: ffffc9000e617758 R08: ffff888101653867 R09: 1ffff110202ca70c [ 67.678198][ T1247] R10: 0000000000000000 R11: ffffffff83b965b0 R12: dffffc0000000000 [ 67.686219][ T1247] R13: ffff88811d3814f0 R14: ffff888103bd9160 R15: 0000000000000000 [ 67.694369][ T1247] FS: 00007fbb503e16c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 67.703385][ T1247] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.710136][ T1247] CR2: 000000110c34d292 CR3: 000000011889e000 CR4: 00000000003526b0 [ 67.718261][ T1247] Call Trace: [ 67.721618][ T1247] [ 67.724634][ T1247] ? __cfi_dummy_set_selfpowered+0x10/0x10 [ 67.730520][ T1247] usb_gadget_set_selfpowered+0x84/0x1a0 [ 67.736236][ T1247] composite_dev_prepare+0x2f8/0x3e0 [ 67.741590][ T1247] ? up_write+0x66/0x280 [ 67.745870][ T1247] configfs_composite_bind+0xa8/0x15f0 [ 67.751372][ T1247] ? __kasan_check_write+0x18/0x20 [ 67.756554][ T1247] ? mutex_unlock+0x90/0x240 [ 67.761400][ T1247] ? kernfs_put+0x314/0x360 [ 67.766078][ T1247] ? __cfi_configfs_composite_bind+0x10/0x10 [ 67.772135][ T1247] gadget_bind_driver+0x304/0x9c0 [ 67.777255][ T1247] ? sysfs_create_link+0x6c/0x90 [ 67.782438][ T1247] ? __cfi_gadget_bind_driver+0x10/0x10 [ 67.788322][ T1247] really_probe+0x2e1/0x8b0 [ 67.792904][ T1247] __driver_probe_device+0x193/0x280 [ 67.798274][ T1247] driver_probe_device+0x54/0x3f0 [ 67.803672][ T1247] __driver_attach+0x422/0x5e0 [ 67.808548][ T1247] bus_for_each_dev+0x249/0x2d0 [ 67.813388][ T1251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.813487][ T1247] ? __cfi___driver_attach+0x10/0x10 [ 67.827326][ T1247] ? __cfi_bus_for_each_dev+0x10/0x10 [ 67.827889][ T1251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.832809][ T1247] ? _raw_spin_unlock+0x45/0x60 [ 67.845427][ T1247] ? klist_add_tail+0x1dd/0x220 [ 67.850335][ T1247] driver_attach+0x46/0x50 [ 67.854795][ T1247] bus_add_driver+0x393/0x730 [ 67.859929][ T1247] driver_register+0x2b7/0x3c0 [ 67.865032][ T1247] usb_gadget_register_driver_owner+0xfc/0x270 [ 67.871371][ T1247] gadget_dev_desc_UDC_store+0x224/0x350 [ 67.877185][ T1247] configfs_write_iter+0x32f/0x490 [ 67.882482][ T1247] ? __cfi_gadget_dev_desc_UDC_store+0x10/0x10 [ 67.888867][ T1247] vfs_write+0x762/0xfd0 [ 67.893178][ T1247] ? __cfi_vfs_write+0x10/0x10 [ 67.898034][ T1247] ? __cfi_mutex_lock+0x10/0x10 [ 67.902971][ T1247] ksys_write+0x145/0x260 [ 67.908204][ T1247] ? xfd_validate_state+0x68/0x140 [ 67.913531][ T1247] ? __cfi_ksys_write+0x10/0x10 [ 67.918421][ T1247] ? __kasan_check_write+0x18/0x20 [ 67.923574][ T1247] ? fpregs_restore_userregs+0x11c/0x260 [ 67.929322][ T1247] __x64_sys_write+0x7f/0x90 [ 67.935008][ T1247] x64_sys_call+0x271c/0x2ee0 [ 67.939780][ T1247] do_syscall_64+0x57/0xf0 [ 67.944380][ T1247] ? clear_bhb_loop+0x50/0xa0 [ 67.949357][ T1247] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.955431][ T1247] RIP: 0033:0x7fbb4f59df99 [ 67.959927][ T1247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.979976][ T1247] RSP: 002b:00007fbb503e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.988724][ T1247] RAX: ffffffffffffffda RBX: 00007fbb4f825fa0 RCX: 00007fbb4f59df99 [ 67.996812][ T1247] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 0000000000000007 [ 68.004840][ T1247] RBP: 00007fbb4f634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 68.012866][ T1247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.021086][ T1247] R13: 00007fbb4f826038 R14: 00007fbb4f825fa0 R15: 00007ffcf9c13d88 [ 68.029806][ T1247] [ 68.032862][ T1247] Modules linked in: [ 68.037229][ T1247] ---[ end trace 0000000000000000 ]--- [ 68.043960][ T1247] RIP: 0010:dummy_set_selfpowered+0xc0/0x160 [ 68.050271][ T1247] Code: 94 c0 4d 8d b4 c6 d0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4a ce 26 fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 31 ce 26 fe 41 be 58 11 00 00 4d [ 68.077319][ T1247] RSP: 0018:ffffc9000e617738 EFLAGS: 00010246 [ 68.084355][ T1247] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 68.092810][ T1247] RDX: ffff888119de5f00 RSI: 0000000000000003 RDI: 0000000000000005 [ 68.101419][ T1247] RBP: ffffc9000e617758 R08: ffff888101653867 R09: 1ffff110202ca70c [ 68.109892][ T1247] R10: 0000000000000000 R11: ffffffff83b965b0 R12: dffffc0000000000 [ 68.118139][ T1247] R13: ffff88811d3814f0 R14: ffff888103bd9160 R15: 0000000000000000 [ 68.126680][ T1247] FS: 00007fbb503e16c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 68.136051][ T1247] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.142790][ T1247] CR2: 000000110c34d292 CR3: 000000011889e000 CR4: 00000000003526b0 [ 68.153477][ T1247] Kernel panic - not syncing: Fatal exception [ 68.159763][ T1247] Kernel Offset: disabled [ 68.171418][ T1247] Rebooting in 86400 seconds..