last executing test programs: 1m1.382469959s ago: executing program 2 (id=3): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x80102) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000180)={0xcf43, 0x4cb, 0x2, 0x9dff, 0xe, "3d52e3ff00"}) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x6) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xaa10, 0x0, 0x0, 0x158, 0x0, r4}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 59.362197254s ago: executing program 2 (id=34): r0 = getpid() capset(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x4e20, @local}}) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x1000000) 59.217470599s ago: executing program 2 (id=35): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x2, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x808c0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x5509, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x4040, &(0x7f0000000200)) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r4 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d01"], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX=r4, @ANYBLOB="afed5ee351a825", @ANYRES16=r4, @ANYRES8=r1, @ANYRES64=r1]) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x10c, &(0x7f00000003c0)={[{0xdf, 0x4e00, "173b11ba211486e58eb53354f1bdd3efd2f9ebcde7d5065a658c283fcc451f240f7a1f535de0a92f5ecc90fc9ee3a2f092fbfbeea95e93f2480b232f7f3f3b00860bc6e4702ee5ee21d98397319a0a8d58b1f0b8ff5964940c01210eef674dd1b27c51883fe30b057d999d312481c1ccf2bbe256d8ebb3d92096c6a65a197ccc55363aafb5a6b6fdb92d0eb7db1cf16e136fe304691a9b6e1f11f799dd59472e43dbc16f7688bd15b9b21ea72cc83bde694c341f1022362eb48fb46bad94df7e6a2d2d3ae9522804fc57d0a272d71c7bc21abc0393b2466072a261b50f2cab"}, {0x24, 0x4e00, "0d51ebbc8e0267798e8db708ec5adbd42855ab5c8bdcc1013b74d513403660fd0818f85d"}]}) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000400000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) 43.408068899s ago: executing program 32 (id=35): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x2, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x808c0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x5509, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x4040, &(0x7f0000000200)) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r4 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d01"], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX=r4, @ANYBLOB="afed5ee351a825", @ANYRES16=r4, @ANYRES8=r1, @ANYRES64=r1]) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x10c, &(0x7f00000003c0)={[{0xdf, 0x4e00, "173b11ba211486e58eb53354f1bdd3efd2f9ebcde7d5065a658c283fcc451f240f7a1f535de0a92f5ecc90fc9ee3a2f092fbfbeea95e93f2480b232f7f3f3b00860bc6e4702ee5ee21d98397319a0a8d58b1f0b8ff5964940c01210eef674dd1b27c51883fe30b057d999d312481c1ccf2bbe256d8ebb3d92096c6a65a197ccc55363aafb5a6b6fdb92d0eb7db1cf16e136fe304691a9b6e1f11f799dd59472e43dbc16f7688bd15b9b21ea72cc83bde694c341f1022362eb48fb46bad94df7e6a2d2d3ae9522804fc57d0a272d71c7bc21abc0393b2466072a261b50f2cab"}, {0x24, 0x4e00, "0d51ebbc8e0267798e8db708ec5adbd42855ab5c8bdcc1013b74d513403660fd0818f85d"}]}) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000400000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) 4.233532384s ago: executing program 0 (id=271): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) futex(0x0, 0x0, 0x2, &(0x7f0000000140), 0x0, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 4.233284394s ago: executing program 0 (id=272): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x143a00, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$KVM_TDX_INIT_VCPU(r0, 0xc008aeba, &(0x7f0000000340)={0x2, 0x0, 0x6}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000ac1414aa00000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000004d66c000000ac1414bb00000000000000000000000000000000000000000900000000000000090000000000000000000100000000000600000000000000020000000000000004000000000000000000000000000000060000000000000000000000000000001f00000000000000020100000000000002000000fbffffff000000002abd7000043500000a0000fd2000000000000000480003006c7a7300"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05", @ANYRES32=r4, @ANYBLOB="b706bf5073a9b6a671ca1dca4fd143d87b8b33d72348b0d24bc129e10a45279f74c39f8d29e385250b00eb96582ea58c0bb5761234424e2d3eb5a6f5fa6d723fc8f269b4dd628d46ff2c98c42e6703cab088c73f3fcc754d16ddcae971452160d300f172c22dadd8d6a3", @ANYRESOCT=r1], 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000402000/0x1000)=nil, 0x1000, 0xf) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r4) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042dbd7000fedbdf0000000908000000000000000000000509000000000000000002006261746164765f736c6176655f3100000500040002000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) 3.989453631s ago: executing program 3 (id=275): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000400)={0x0, "d59bc136c963254c661fb620148b6f72ca6a03000000bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdd8d0dfa00b1", 0x14}, 0x48, 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x82002, 0x105) write$cgroup_int(r2, &(0x7f0000000180)=0x4, 0x12) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x6, r1, 0xffffffffffffffff, 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3, 0x2}, 0x10) shutdown(0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000844) socket(0x2b, 0x4, 0xffffffff) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x80}, {0x6}]}) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r9 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000000)={'wg1\x00', {0x2, 0x4e21, @private=0xa010101}}) socket$inet6_icmp(0xa, 0x2, 0x3a) 3.789742248s ago: executing program 3 (id=279): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3.789133958s ago: executing program 3 (id=280): syz_usb_connect$midi(0x2, 0x30, &(0x7f0000000e80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e, 0x1, 0x1, 0x54, 0x40, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xa, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xc, 0x80}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x6d, 0x3}]}}}}}]}}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0}) r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r3, 0x60000000000, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x9, 0x0, 0x3, 0x80, 0x1, 0x9, 0x7f}, 0x1c) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x8e4, 0x163, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0x48, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0xe7, 0xb0, {0x7, 0x25, 0x1, 0x4, 0x5, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe4, 0xea, 0xa, {0x7, 0x25, 0x1, 0x4, 0x7, 0xdae}}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x2001}}]}) syz_usb_connect$midi(0x4, 0x61, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0xc, 0x60, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x3, [@ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x6a}, @midi_out_jack={0xd, 0x24, 0x3, 0x2, 0xa, 0x3, [{0x22, 0xb9}, {0x8, 0xc}, {0x8, 0x1}], 0xbd}], [{{0x9, 0x5, 0x80, 0x10, 0x400, 0x80, 0xb, 0xe0, {0xd, 0x25, 0x1, 0x9, "09a8b63e749932b3e3"}}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x4, 0x1, 0x73, {0x4}}}]}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x1, 0x3, 0x6, 0x8}, 0xbe, &(0x7f0000000180)={0x5, 0xf, 0xbe, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xc, 0x1, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "14ebd231e95315fc9fc7cc1518f7a808"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0xbc, 0x1, 0x7, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "5efc2df1fc38e99e5dd087b5b8e3dce4"}, @generic={0x7c, 0x10, 0xd, "f7fb811bba3000a205682c5708e11c46cceb1835f590d4cb54f82050421ae860ed356312f629edbc8c57b2e8602377be94f7bf21711a0e39a7ba19eb9881e8ebb269ac21f9de36154fb171c6014d0939d13482179f9d28899d6a746d05b9037b3d5965922876c1efbb612febee21f0a2333741028723254899"}]}, 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42}}, {0xa, &(0x7f0000000300)=@string={0xa, 0x3, "cab3cb136a6f276b"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x810}}, {0x7e, &(0x7f0000000380)=@string={0x7e, 0x3, "a72042b19d0bfed885a9f5753d6174a18f535b71e0e806636beb2bcff84a6e0cd53c7a7a1295af1210edea7eb6b5fd7326518cfb385dab447a5b2627b0aef3744f369851e07f75add630345f24fb8b9a655c32cd7c246af5415fbcdb2accbed716d61661c76a0a73962794c7cec29a3b907de7f375dfd6065bb6b242"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x20a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x100c}}]}) 2.81325426s ago: executing program 0 (id=284): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, 0x0, 0x0) 2.749547631s ago: executing program 0 (id=285): syz_usb_connect(0x0, 0x34, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070519b4"], 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x30, 0x4, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x2, 0xfd, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xe, 0x4}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xa2, 0x6, 0x0, 0x40, 0xaa}, 0x4a, &(0x7f0000000080)={0x5, 0xf, 0x4a, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x4a, "204ed5fd21f9b4d55a08c278f6858084"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x8, 0x9}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x646, 0xf000, 0xd, [0xff50, 0xff0000, 0x0, 0x3f0f, 0xfe7f00, 0xf]}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x457}}, {0xad, &(0x7f0000000140)=@string={0xad, 0x3, "8776861a29f735c2901af75095d523857565e92d527ac36da00b0a4958db5868f590dc121a638e0ae3e848543474a080ae1deabb50345e71f31f584109316625a3a79f72d9326340d79372fd92bc314471930ccc00ac56b3f37296838b5d40766fe6c83de5a3a1ba91539d8a0ff154729772eff95cccc4f2f846eca4d39a137779f60b54eee3b56bdaefbb980a003d0b7ad4145dae8f7e8bfd532cb44df20f113bc7b5b95015e95da026a9"}}, {0xbb, &(0x7f0000000200)=@string={0xbb, 0x3, "f146c6a69810f1dd378648dba2439edbe14d40f6d0f332d9129c7cfc10afb7755be7d2c5b3eb46b97ee41d293868d7c70ac19e9385d7dbdb731831b67e29555ffdbef988390d4468eeb38d16c1756a984332f720908c13cd07890abe26044590e15188aa8ea877caf568bdbdaff8547f8da9834d31bbfcd0804955826596230bc0ea8e406d7a84aa3948ab03ac6409d50ad3c3377d182ad1f73060907f9e98c8364c08d5acc44d80628c2de8c9f055ce29a90eddc01c598d0b"}}]}) 2.520636589s ago: executing program 3 (id=286): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x28, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2b, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200c280000002823f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251fc25922a6a6a11ee67145745f6639d9927cb514b63272c7d5a4cd62c0825cdb1aaaf0e8211c8afd58e82066ff07702ff3"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.202584839s ago: executing program 1 (id=287): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001700)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x4040) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x4000000, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0xc0000) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x12) r3 = socket(0xa, 0x2, 0x3a) readlink(0x0, &(0x7f0000000300)=""/194, 0xc2) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) poll(&(0x7f0000000100)=[{r0, 0x440}], 0x1, 0x6) 1.440549994s ago: executing program 0 (id=288): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1.438744214s ago: executing program 0 (id=289): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x134, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8000, 0x15}}}}, [@NL80211_ATTR_IE={0x10c, 0x2a, [@mic={0x8c, 0x10, {0xf16, "2ce7fef19c61", @short="b62239100e9f1502"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x50, 0x40}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x7f, 0x6, @broadcast, 0xd160, 0x4, 0x2}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x81, 0xad, 0x6}}, @preq={0x82, 0x4c, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x9, 0x9, @device_a, 0x10001, @value=@broadcast, 0xffff, 0x1, 0x4, [{{}, @device_a, 0xa}, {{0x1}, @broadcast, 0x4446dd96}, {{0x1}, @device_a, 0xfffffffd}, {{0x0, 0x0, 0x1}, @device_a, 0x4}]}}, @preq={0x82, 0x7d, {{0x0, 0x1, 0x1}, 0x1, 0x9, 0xffff5b6a, @device_a, 0x17, @void, 0x100, 0x6, 0x9, [{{}, @device_b, 0x9}, {{}, @device_a, 0x3}, {{0x1}, @device_a, 0x3ff}, {{0x0, 0x0, 0x1}, @device_b, 0xae}, {{0x1}, @device_a, 0x8}, {{0x1, 0x0, 0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @device_a, 0xd}, {{0x1, 0x0, 0x1}, @device_a, 0x800}, {{0x1}, @broadcast, 0xffffff00}]}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x44044}, 0x4000) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") syz_usb_connect$uac2(0x4, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x50, 0x0, {0x8, 0xb, 0x0, 0x0, 0x1, 0xa, 0x20, 0xd7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1066, 0x4, 0x9, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xc, 0x1, 0x41, {0x8, 0x25, 0x1, 0x1, 0x30, 0x40, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x8, 0xa, {0x8, 0x25, 0x1, 0x82, 0x0, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xac, 0x5, 0x7, 0x40, 0x1}, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "0f8b6c2dd718adafbcb94519227175a1"}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x9b, &(0x7f0000000240)=@string={0x9b, 0x3, "149adba3ea2702a03bde59af550eba97938a1a5bcb2f6c1c0843158421c43f2cc01ccc1264cac9e3663560a3f133ad52de0a29d021af1e58f69af18b314a5bc7225892e90b181d6b157763e0228b8922a492ca9e9e9a09b6bd706cca98ce9fa1fab85aefee199aecc16ff7e61dedc61a9c827d2a158c1741d8c6f9c317bd413bc1d21f7a0893ca148ffd96a467942780e15bbd72ea5ec77042"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x240a}}, {0x100, &(0x7f0000000340)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1c01}}]}) 1.24950596s ago: executing program 1 (id=290): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) rmdir(&(0x7f0000000140)='./file1\x00') (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) (async, rerun: 32) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x3b, 0x4, 0x4e8, 0x318, 0x318, 0x400, 0x400, 0x318, 0x400, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0xfff0, 0x6, 0x1, 0x0, "35b4ad40bdfbf638f87c15884914d96ba36668c2bcf83371f0be12d484b725153201d48d5a757b6499999923740c3cee63801e9781a47666e585017e15a44496"}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x538) (async, rerun: 32) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)={0x28, 0x12, 0x1, 0x70bd26, 0x0, "", [@nested={0x18, 0x1e, 0x0, 0x1, [@nested={0xc, 0xb6, 0x0, 0x1, [@typed={0x8, 0x11d, 0x0, 0x0, @pid}]}, @typed={0x8, 0x1c, 0x0, 0x0, @fd}]}]}, 0x28}], 0x1}, 0x0) 1.24933707s ago: executing program 1 (id=291): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r4 = inotify_init1(0x80800) inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x610003d5) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x40000000) inotify_add_watch(r5, &(0x7f0000001080)='./file0\x00', 0xc30002c5) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000000000000000000000200000000000000fffffffffffffffffc0fb3770b6e07620000e50fd2c3e4726d00000000000000000000000000000000000000000000ffffffffffffffff0700"/119], 0xb8}}, 0x10) 1.23367965s ago: executing program 1 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x6a) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000400), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0x2, 0x9, 0xf, 0x15, "6cbce1498887360d6cdfdc3cd7d277b0be3af407504a85bdbc54c1dd29832b565afdaeee9b0e019db28eb71822cdb2e2f690f92ac443b73f13a46f82ae743f96", "7ca9d122f7dfdecd37816b5b5ef2093a761b15b39e199f018bbade16367253ba", [0x401, 0x2]}) r0 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="a0010000100001002dbd700000000000e0000001000000000000000000a8143443d6000000ff01000000000000000000000000000100000000000000640000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r0], 0x1a0}}, 0x0) r2 = socket(0x25, 0x4, 0x3a) setsockopt$MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e22, 0x4, @mcast2, 0xe0}, {0xa, 0x4e23, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x0, {[0x3, 0x40000, 0x7fff, 0x7, 0x9, 0x2, 0x10001, 0x4]}}, 0x5c) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) fcntl$dupfd(r2, 0x406, r4) getdents(r4, &(0x7f00000005c0)=""/147, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) write$tun(r5, &(0x7f0000000100)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@val={0x88a8, 0x1, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x30, 0x67, 0x4000, 0x7, 0x1, 0x0, @rand_addr=0x64010100, @local}, @redirect={0x5, 0x3, 0x0, @broadcast, {0x5, 0x4, 0x0, 0x4, 0x6, 0x65, 0x1, 0x8, 0x29, 0xf, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}}, 0x46) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)={0x1, 0x1, [@multicast]}) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3}, 0xe) 1.173274022s ago: executing program 4 (id=294): r0 = getpid() capset(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008841) sendto$inet6(r2, &(0x7f0000000200)="2fc5d447cd0b5403a5b8fdf613bb9b96", 0x10, 0xc0c0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @private1, 0x8}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)='\x00', 0x1}, {&(0x7f0000000040)="84e1ad39ccf35205", 0x8}, {&(0x7f00000000c0)="cc7c086afa3d436b6371df686d30fdc0b88692f638445bf1c367414a177d8f1ef7eb71b60ea0a67c4405d3240edd2f74e2acb746", 0x34}], 0x3}}], 0x1, 0x2008000) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x4e20, @local}}) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) 1.142265553s ago: executing program 4 (id=295): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r3, &(0x7f00000000c0)=' ', 0x1, 0x0, 0x0, 0x2}]) r4 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) (async) r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) (async) r6 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000040)={0x0, &(0x7f0000000140)=[@cpuid={0x64, 0x18, {0x3, 0x7}}, @enable_nested={0x12c, 0x18}, @set_irq_handler={0xc8, 0x20, {0xe2, 0x3}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host16=0xc0c, 0x1000, 0x2, 0x1}}, @in_dx={0x69, 0x20, {0xee20, 0x2}}, @nested_amd_vmload={0x182, 0x18, 0x1}], 0xf0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.115143134s ago: executing program 1 (id=296): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001e00210000000000000000000700000005000000000004000a0007"], 0x28}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) getsockname$packet(r4, &(0x7f0000000300), &(0x7f0000000340)=0x14) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b}) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x45, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x44, "", [{{0x9, 0x4, 0x0, 0x6, 0xc, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0xe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0xb, 0xf7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000040)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="c008280000006a0ef70ba381030000000000000000cb4fdca0560f920d54ff65c5b1d43ee44fbf6fc93f0808251ffea4ae6489067912f820232c8ec090624276140995abf6fc01f37bc1287e94f537a15057399260f1a9964f2e98744f472c77baf3b5ad9826ba72a4d33c92637a7d5265723070b4bc438524b7cbc52e9247965874a569e240a88713ac93ce4f781ff673bb1602eb19b2ae8ce1c27127978c01f5f2eec5615d9f4d118fe531d721fe60c9b8e003693bf83a6ba3eb65ffc4e255efa99722a51cfbeffb1983214285751d1f7d3db9a89eb7b218b2668d94044a85f3b459f68e71"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f00000003c0)=[@acquire, @enter_looper], 0x0, 0x0, 0x0}) r7 = syz_usb_connect$uac2(0x6, 0xb3, &(0x7f00000005c0)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x40, 0x499, 0x500c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x48, 0xa0, 0x5, {0x8, 0xb, 0x1, 0x2, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7e94, 0xa, 0x21, 0xb4}, [@extension_unit={0xc, 0x24, 0x9, 0x4, 0x0, 0x7, "3cc96410f6"}, @output_terminal={0xc, 0x24, 0x3, 0x4, 0x404, 0x3, 0x5, 0x8a, 0xffff, 0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x0, 0xd, 0x1, 0x5, 0x81, 0x0, 0x18}]}, {{0x9, 0x5, 0x1, 0x9, 0x79f, 0xa, 0x8, 0x4, {0x8, 0x25, 0x1, 0x2, 0x39, 0x8, 0xef3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x1, 0x33, 0x7, "4de27db51c09e8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xfe, 0xa, 0x9, {0x8, 0x25, 0x1, 0x2, 0xc, 0x7, 0x7}}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x0, 0x8, 0x9d, 0x6, 0xbf, 0xac}, 0x26, &(0x7f0000000740)={0x5, 0xf, 0x26, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "49d7c715741dbe1fcf05473d06f63eef"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x7, 0x8}, @ptm_cap={0x3}]}, 0x2, [{0x2e, &(0x7f0000000780)=@string={0x2e, 0x3, "9970991525e61825389460fa7be88ec665a933e2a7312c299e09dc7de47b36067912cbdb31ffdb698d496a1a"}}, {0x4, &(0x7f0000000800)=@lang_id={0x2, 0x3, 0x100c}}]}) syz_usb_control_io$uac2(r7, &(0x7f0000000940)={0x14, &(0x7f0000000880)={0x40, 0x24, 0x78, {0x78, 0x11, "1d9daac89666aff32e8d18338d95f978493443e8809e25b524a644ae44bc3cecd39221061ba6f4dff7fd38c517627a89facb0b0936a628d5314718ef6cda7fc0d6a2865c9a639d6d605cd3c648a2588b388b49facbfbd704ff03412ce524a326af9d6f59f06fa6edac3731b2368d2667aaa4df9e2933"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}}, &(0x7f0000000c40)={0x44, &(0x7f0000000980)={0x40, 0x7, 0xcb, "5101c1e30444f0fa002d40af1650ae811787626d52f78799851ccb92594b34182df426af1770b0fec717234f9e487b1edf1f3f9fa7aa52dee74858079b0e19653c02e25829723cb8ef3dff21ae8071551bc4a8317aeb9769e5149121e687375f72b9b043bcebb435ba30c25fb82c513520ced17b234962b981e350865cf5acb9670a1d15ad86eb1b14c382933f7f2773815b43711d8c3caab17b8c01b385e88b3eb1cec6f6144caa2986912f0983ebbcd823584a64e1a78d1e7014e2d7cd8717779665d2e98f9bc9be6ffc"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000b00)={0x20, 0x81, 0x3, "083db0"}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "7bef"}, &(0x7f0000000b80)={0x20, 0x83, 0x3, "22929a"}, &(0x7f0000000bc0)={0x20, 0x84, 0x4, "ba788dd0"}, &(0x7f0000000c00)={0x20, 0x85, 0x3, "2bfac0"}}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@flat=@handle={0x73682a85, 0x100a}, @ptr={0x70742a85, 0x80002, 0x0, 0x0, 0x1, 0x34}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000080)={0x4c, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x1) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000040e68ae7133c40455667bb4b839217075f2fda943eda5db28fefba82a64f5add80ffd980e84dc965a45d8fc4ac07359b235821e0ecaf8ebebdecb626de7e8da636eadf2a53147c0f23082909c94ccd2743032f3b53b3ac4a24e459be5753a2e1ba0f1ecb4af334fa87e4b87c54e3"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r9, 0x6, 0x10, 0x0, &(0x7f00000007c0)) syz_usb_disconnect(r8) 813.254884ms ago: executing program 4 (id=297): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x42) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000080)) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x4, 0x1100) ioctl$FICLONE(r0, 0x40049409, r2) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000200)={0xffffffffffffffff, 0x1, 0x80, r3, 0x401}, 0xc) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x4, 0x0, 0x9}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = signalfd(r2, &(0x7f0000000340)={[0x9]}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000841) recvmsg$inet_nvme(r4, &(0x7f00000006c0)={&(0x7f00000004c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)=""/8, 0x8}], 0x1, &(0x7f00000005c0)=""/227, 0xe3}, 0x40) pwritev2(r2, &(0x7f0000001b40)=[{&(0x7f0000000700)="d920102397b462f32ec9f0eb1ebed72c716fc34b6c433587efc0345af33d42093f08ab0e87cc72e4fed4f475944123f8eef74295e653b061ada93c4e7fc8288eacdb2160265573a8e9a1046895a858aee83d75c108ec372327ed9bf4d74e0be108de08ebe13e3a240c08b2d4b6f7da8a24ef49fa11e74f34cbe50926a7270964eb59f10116f731e78409f6162be4a84b06227c39847ba31a2aeba0dbe5db3a82687e17b3027060e42bac7a5b93ab82d0ae607871897c2b89a37f5e55ce7a00e549f9762bed71ac37d6e9400ac53746f1b6", 0xd1}, {&(0x7f0000000800)="73ac95e409c595009b80879999ab4626027820887589e0061407cde4c9f41a40d69d7bf85afbc2fa1c0f0572aca754e67a75dd3e2d20c9755ea63ba26ee01d2518bd9258e317a63509f405774e89978ad48c31b7c11867cfb86e2c018dde4d8aec1930513267905953bd44d278c4da88e4fbc1d9670ca728b25d497e1ba6a71f64c2cbf1a00bb5ee2fb9265bf2952748f2ac4a3543e26b85bd81d00171f70cec978ef765ab1d310697b360acb9c8034651342e031f4f6d93a603b493e88afca650a65a80b7f54c9ef0dc7af3cbe245f5b9fbb0d7250fcd8f8b029c6b21d71e55835ee581f0e7880608fc312774e1ffc6f7b73c9dcdb9dc7d37887de6bac9a7e5632001fd9c2cf8e0da2454152c85e53dcaf64b371f2ccc39ab4817c7b52808a5372f0ea7d443e3f0dac2d3f49d89b25ebd79e41fc08ccaff7d9715e0bf48a861668f053454bfd1485e9daa74ce08265dd99cd92c0679191ea53805ffb88f4ba78e2b9bb3f4c9262c809ba7cd2155088a83c71ff63da9cfb400a00170c5018a67ede719b4d72ea74d0e922f239f2cca3ed3c7b6f9ba91f7d4ac06e697cbb6e0948c283439f6783c5ec3008b10091c0693b90a73f5399f93c548baac4fa4fc5ee99a0196dbac5b9eec5ccf91606f09ea22fbc34e4322bc5de147498b623041a34de2f01fd8c4c103a5dd96e4a44929c20093bd83f28aa3bb3efee3875516bedc11ae47ec0882d6df83a440ed6940accabedc94088506924323c582705b37a8be6ab96e107522c007b115e5ca8046ccdb0a15981439544e9f769c5c92815415fa3cdae903879e1fe199797e7c5ed9357395d313c7db1e94ca977fa58f614e21d29a096f81e2f29b79b59f2dd19fabfeb64e1faeb3103dd4d03a344e8070c13b96df28febf7af2ffa3ecc40613ae171ae705ddca2547d5a0a406f34a349d03bd52e2fc651f9a1160c600c9b27e34216241b421bde0f5525e48f5ccef0118ee57a7f2ace95ca65ccaf9e7838c8c24147f8442e55cdafde85383514aa54dad0716284fe5c7b4ef4ed8ab8d9b6da47ef7588996f92c2662ba3047c027ae97559c55165a8e8b232e10bba952f25e8f411e1a042d46dc4a0b57ef6a858659d3d6f43c521b643615c07b533134003f753b3d7c9e77656a453685f04f93b4b150ec5764225f68fb1a0420dc55a772cd83076354dcf2f41686d0417b9c1921f7643628811bd6b6d41063081675a4bbd4babbe6335e9c9055a6a00fbfd524fdb6f487c7b3a4ed7e2d56875420c5aafd07421df9749953580c1d8007bcfe2083d9e6d3f6bf7b4e95e2ff7906a6e903a39dbe02a6291a2c7fd69225132b7f6c39ceb137c46d0acfdfbd71d4bf788ac89074bd226ef6e12abacce0994f2c7efa8884fc52269ee6712aff10b12c8fa192e379c8eddad155fc169bc16f8146ac589481056f35d7ed15be2d661cdbf78e0ac0b2bea172a2e9d06402805ccea380f10d9eae343d7d049f2edcb8f667f6dcc65418b942dfdf5e4edeb37a387dd935787d8ca1a57ce0c9806885420af788952d2a995699161964b51ceceea4a7dc1b538bf9239ac53f668b39e01f09a720fe41590f61a4e2f33ff76bbf5a17f54c3a3b262b2ff164a49e180aa0cbc9611771eb0ac8363a53a3bdb9869267aad6f39661078f899733f4b1743c5b94bc9fe955779eff38bf0969554f615cbe1d0ed13e68a832fe0c2378c3249c00b885c08ce01e9a0a6e5c367abb297d93ceaea98fb3bf1610e47f5d04d60a297946d298f21843009b32136d0ea4c43c5046e552d09594dc1716ccaa2cb451623635d2d04746760a12b627d2768c0ed39f23b97b23ec5bf9c2cbadf81a9595bac1a8dd27c78a037d9ac3c2b3c2c0e9fb09d9a04aeb47266ca2c6c158082f431593a3c8102866d0e6220b99fe0677c3ad8fe7fd3b3f49bddcc2eff2ef2d73f340401afe5f512f0db21b3b42b5ca6cac6783ec77f911a6859a2ce555e0350ea42e817fd56a27803b7b9c676d6e021c048250d650b9b0aa269c5ab58e9f760226b5a09687872b9b082f8b96ecec0fe7a68bc32cd6373c02776f0336604024400b2372bfc7348475f93d62eee5408215547942a1c74496b1ddd58e913510da683957d41b22cf6e3ab0c7592edef4f7582e1746fa4e8f97139b1ce76f29d3e95c39a73bca4c8c3bd439329b1abcf6c5593427f55b49fe50b47f44bc497a94dc456ccc4573e23106eb7dcfb7e43aa4da454f629a5af70aa5c112887aedea619a33eae80bbb062feb7d2b9f3590a092ad0546dfd603240fbd80fa52ec914070eb1b36f114acc2f4ca490a6f9b636295d8fdd8f6c19ce8a1e0423cac604f78bfb9699a88207a536dd5d7fb9e546fc5353f83ed57a8b9fcaf9fa0fec71d42e34d38838489c55bced84fded4bff2f4cba7042b1f12a3443e64a37e260252265c2b529a2187aaccd3f7357d5b87d0a71854801baccb7d89b5146ebf9c246c545289df9b1ff4450c02dfb581bba60cc9e5d8cd94eeccbf7ff11565cf424050f061d3a56b958aac029937e50fb29b54a678922838be966559d81dcaa47c6c31a73e35bae9f534e07a1cd5de6e4e8ab3197ff45006c3ff9af41d72e5c5028eb436423e7ae46ec9a96df3ea22e9c2aebb8e5af8065f703a2ef10dd7c5805a42b6013bcd47ff677c15a9d36c55338b0d081364b6fdfaefd514cd27e6e02543cc3b485b7c2a6eb7999e9fc3b02ce4c0d76f23033a80a264a362c0c53eb5fb449e6415c7ce64839881fa71c92416708620d2b640eac5fb311471c2960d210cba96afe5e3f91bf76c5f2da1a48f94b031413d94db2698fe02a57321c6e59dbb18886c25884d63244a2d4a53f4dd95aa3a388bd9c255a6e31d70ca95c5b389db1e155b9a695bdbf3498e6246061cb16effcdd63ddd71bb4cf658b6823ad5395d7eb5d1b5e79dd3345b31552d8d5c93c3e1df5a16e8c14a0e6338d5a8beb287bc44dd1ce8295a5c8a5e971abdc38bac958d5bbc932a3997a9fbb4c3f7fc8afebe05a91de56144553f06ac047b7d49abfeb2f55d73f800267b265dd75ea72320d478475683a841fb69c63449f7ff2dd15ef5fab075ed35c17ad052f496a969723f6d3bc45a849e6e6a8b705f68f0b0bce09b792e04a875d3aa626f851f8087a510c273b212272c06fbed45c034b660572c7c55fa117abcf7f4ee2efc164385d2d05d9191b654948f32872220c78f9bbd99596df7325ac8d1517cf2e64702937d9372577a6f27fad82b6de2cc986e15915e9a100a26426d87fb06edd3a1aba99bd77152f433692f0cdcd3a1258a79705395e44e5dea0967b97fffd9ba0b41fc1c2fe84e34ada0c75c6a02a844d8877333436251a701c1f6ee4b561d160cd3295beed5de4c1e66d0a52c33a7b75d2ee299b0595a5096778a7c14d56b05dd9948ed286ae39c9ba9b2e91cb007d7f43485926e5f2b60d677f947bf6961296669e4f3d4ecaa31f3b4671a2f4379bfe781cc5234ed29c91e528afddfa5ba626c3fb5301623527a69d1f0743b277718588bd5ba301dcb8616c82426f5d10213e71a97869af8b89e558da42aae8e8ccebfc6706a93a8ccb594f1d437f4d6eae3e50644970137bd82be01bf4b69d27763b06c180404b3440dbb59edf60a3fdea562a590224cf54af6ee205e65f45a338e78313f5acc19afe7cf59012e0f8247c2eb70172b6c1d5174e6376d8c03ac4a2cafe8d6a656687427f60246ab7adacd3e0a8b114f5259bdec105d9dea38d9b9641d2884975abcac1b298f211d9c85e92af132683f17662b0f37334bbfd8452b99933a2c0bcf08c4f9855df3c14d5486af96a6bb42d74c7b148930d483a656841eecf2167a8030a83d5b2d4b1116e40771bb727f8b58de0b0e2b62a7ca038baa35dfb6ebb3e30b81c67369f86c9b99fed6bf7cabaa3377744e2e57c48eed2a1bf91315ecf57c95a92d8b8b4e1efb018223772938afd7cf6c273932603fc2653552d496c225337b65c12b34d469add95896e3371129c777655735e75fe8e44fff125bc3fcbc9ea1ef5b70aa175353235649d2fd0410b75eaa653b64e934b632a20f51872db084d91484ceae09be08f593912e42666918aee2e34ff1db71185da765ad201c6fea6263e42e7ee598f025ad5b10c7c35c09acb1df84599cfef03dab74a36186fd2466c415199fedcabeb10037da90565cf41d3c72994cb95dc3f6995e3709dafea528f37dd57f1e1fdac46d90f1154d05505e7cc6a42cd37744be9b64a09e0b30e5b22ea286b6dfbca06f9088ce27a4141ec6a81d6f2553141ca370f20a450f1a095ed84ac6279f83f84f538162f808c0e127c69ce2f3a67e6275c06aa4447c6d9d01988b79c42f3fe57cc7a2928ac6d94985f6cf931ba9109025f1b021b9f1414793fd7c20590e55bae663e72cf34a97b5564045e815d5c6e1e0f1160f426898b884133f57109bde0aa0158715961e2fe7425cd3858df97291805943fd47476a1d5dbc9d3d3ce8e5b1f6020a0b3e426865345951058de3daf223b4268c4f218f75b89380398688ab80380097e4ba8cf21a76daaa4d872cf07709ddaf1fb036adc468453374e0f834389034a4e948582c57631404da726a56f994288ab976ada7c2fc79a656c6496ffd2ee88c9609de239710c265d6d175b701cc0824c2fb33731ce3c02d7a62e6a069a2530699c687e6678572617a9bab45da7c6d4073797289f08a6422ca2d04bc6269e67cdc24cfd44ba90fc4ee218f33ca8fb2a7597e3eaae4ca4c69388b8744a98ffbb12dcd6424b9bce22cd3e5e8fb80d5df76fd18e8c72c5e84cbd03733d0c76403694048f23f6724ab4d71b74f5e4440f2ea1dd8bb52aa4d0488075af7a74ce9163d7a0f710ee183b5f1849d25cc35b1095dcd08fbe10a548fc9fb1ce036fd496d8624905fd9ee201ecfe422ba3ede2247511e126a11cb2ffaa958564534e60a9a0cf2851a4f5ca64c952450521091dff6e2c506b8428fbb484382c00b5a7ba7ef38527cd2b65373dcfe00f3c43aada8a38bee1c0603895b26dc05c39c33690103e2b4195727915855597a34c0aa9603008a1074c52d0f5a0248e199bb8509470d5f55c17ec2e76d50094f9da5497bfecd871ae755b586794b967acddd2fa25b1881cffd925c708de7bb8e8ca0a4e71a8205f63ce86e839106a8547368e04ad357426e05d9caeef3fb66bf77b6964687cea8aebcb69040ffaf2511a1f634db0ce38574e4b105d8a01c97a3b06b88cc3d9a38f76c51b8a1dfffd54b92f3dfb29898365118a0b0384a9a78ded1e2c216ee607cc98c28185d015f75df8001c4def3a95de83d4252542802803752c9d6b43f4d985339f037ad18448ad10d35030793e90220076e1d77e80c4dd0659afd7e30cd7b88730c486ee7f31584889f4572ad3f87467a0f21796405736331b3143c46b12393ebc61c90d78bc93a7268f93bcba8ead369a11c90235eddba4befb51932d2c6d5036840bf6114a7cf980ca277638a6490f90becc549df2168ef85defbab7fda7c0371ae3f30bb621e752c0a463b211ccc7e234ff3f5f38144ffb9435cb813cbbbe18eca545316c594c43419ff2d04aacc7d91013950c49d46a1d5c1c48db33c03b28e96cf240a54232bf51517c8efc7065b910a74830bd3bb338e73b5920f964f3adfcd0fbc166aaf12a1aa261a58a1c5bccb903c094ed02c2ede4505d1ddc735a48fed9f58b00ada2ef915c0cb7dc8a7c548d1ba620ac928f7d96bb411f1b70a1be9797206b20869b19c9847ebb7f10ce74dfa688cb6d8383ec67d67ba", 0x1000}, {&(0x7f0000001800)="b18cdb51740d5ecaa866991ed753a3a9ae3a22c2dd6cb01a8c83f9d832ad6df08bac30d8d867e19dc5a66b5c096b2442a7b9bcb39b60149a94d3ba4a1aef788197fc9547eb25e5e50423eee0ff8e33f3d42a0307948a3596df20c30d47c5319091ab32aaf53ed41aff85c38a6917698c3aa37637a55c6562390daf17cdb41e922233177b85e63e6b24d0771cdd0f833a960eff24b7e099e0c4d0", 0x9a}, {&(0x7f00000018c0)="cee504eec9149c7b2c60462313d9460cd57e9b2804cec00a23d5e266a8e831f4c2065d7b4c0c8fec2e60722363ba52e85752abe7a9688ebbf054bb45b6c6535a037434f97eeab1ba38555c1bd78c034d4742d0abcc21c40c7e90d94c73b387a868807d3500aafcc70195593903a5701117e79bdc03e00353f444b0937f1bd96c70a7dd99e5e83b07673ebd4f8f8a8dc234ce755fa92319e42537", 0x9a}, {&(0x7f0000001980)="249b2984f3984ff028a3a7b1e49c39d946678aa236f390b875f94d5f8916981860359222221ebaf0bbda925ec5a8ffd85b8eb531989b31ae3b5509d2f92009b49ff55c2fed6cf47a62d74c4d2cfe6fdc8513a13244179d0ef8615ba64e2df003cc239bb78b86ab444e2fdf19fe0e0dce161851b69a64273ebc0a90fc7060ff676f915ad8915f2af25921d6d0b799167fa815369e8f84ee7d865d548a750147e4284805255b043a7e788c98101480b05bce8e42210acfc503f26ebd8df489ea8e8d1f13", 0xc3}, {&(0x7f0000001a80)="b078dbdeda772ea37bf699cddf4a2d3d49c53db44b982ec4387f08764ed94d8c2bc9a239b35ecf73a9a940e65634186c266ba04b46d08f3597ba439b7e7a3fea5ed81b29cbed8fe8e3d00b10521b91dbe54a58b55980e92363b6410167e83ce7806b0aea07ab29327d3237378835cbd059ddb398464378512bf9b18d", 0x7c}, {&(0x7f0000001b00)="2447628614bcea70bfc67510a86081729526b12efe3760e7c0d129279f031ab3db", 0x21}], 0x7, 0x74, 0x800, 0x1) r6 = creat(&(0x7f0000001bc0)='./file0\x00', 0x1fa) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x14, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x4000804) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000001d00)={0x0, 0x5, 0x800, 0x1}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000002100)={r8, 0x9, 0xfa5c, 0x1}) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000002540)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20004841) ioctl$BTRFS_IOC_FS_INFO(r6, 0x8400941f, &(0x7f0000002640)) openat$cgroup_ro(r1, &(0x7f0000002a40)='cpuacct.usage_percpu\x00', 0x0, 0x0) r11 = syz_open_dev$loop(&(0x7f0000002a80), 0x7, 0xc100) ioctl$LOOP_SET_DIRECT_IO(r11, 0x4c08, 0x1) ioctl$KVM_SET_SREGS2(r6, 0x4140aecd, &(0x7f0000002ac0)={{0x9000, 0xfee54000, 0xc, 0x4, 0xf9, 0x7f, 0xa, 0x40, 0x7, 0x6, 0x4, 0x5}, {0xfec00000, 0x0, 0xb, 0x9, 0x5, 0x8, 0xb, 0x3, 0x4, 0x40, 0xa2, 0xfd}, {0x1000, 0xa000, 0xa, 0x6, 0x42, 0x2, 0x9, 0x4, 0x40, 0x0, 0x6, 0x10}, {0x70000, 0x5a004, 0xd, 0x10, 0x3, 0x6, 0x2, 0x81, 0x10, 0x3, 0x96, 0x44}, {0x60000, 0xb000, 0x4, 0x2b, 0x5, 0x1, 0x9, 0xc5, 0xf8, 0xf9, 0x4}, {0xffffffff, 0x54000, 0x8, 0x7f, 0x1, 0x6, 0xf, 0x5, 0x3, 0x3, 0xff, 0xa3}, {0x2, 0x9000, 0xe, 0x2, 0x2b, 0x80, 0x1, 0xc, 0x9b, 0x9e, 0x3, 0x9}, {0xdddd1000, 0xd000, 0xc, 0xfb, 0x5, 0x2, 0xa0, 0x8, 0x0, 0x8, 0xa, 0x81}, {0xeeef0000, 0x3}, {0x60000, 0x8}, 0x20050018, 0x0, 0x8000000, 0x540415, 0x7, 0x2000, 0x100000, 0x1, [0x8, 0x9, 0xe000000000000000, 0x7]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000002c00), r1) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000002c40)={r8, "b90240b091e5ecc51f5168f9f0b118bc"}) ioctl$BTRFS_IOC_BALANCE_V2(r12, 0xc4009420, &(0x7f0000003c40)={0x0, 0x5, {0x800, @struct={0x81, 0x9}, r13, 0x3, 0x55, 0xe3, 0x2, 0x4, 0x40, @usage=0x7, 0x1, 0x3ff, [0x7, 0x200, 0x8, 0x4de, 0x4, 0x1]}, {0x2, @struct={0x4, 0x9}, r8, 0x5, 0x30dc, 0x3, 0x101, 0x4, 0x1, @usage=0xffffffffffff1b8f, 0x3, 0x5, [0x27, 0x0, 0x7fffffff, 0x4, 0x35, 0x6]}, {0x9, @usage=0x7fff, r9, 0x1, 0xc, 0x6, 0x4, 0x4, 0x42, @usage, 0xffff, 0x800, [0x0, 0xbf, 0x3, 0x0, 0xa, 0x4]}, {0x80000000, 0x3, 0x6}}) 786.856755ms ago: executing program 4 (id=298): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 786.561645ms ago: executing program 4 (id=299): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) r2 = epoll_create1(0x80000) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000003c0)={0x20000008}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x60000008}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x65) mount$incfs(&(0x7f0000001140)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000001100), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r5 = openat$incfs(r4, &(0x7f0000000100)='.pending_reads\x00', 0x1, 0x139) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x40306727, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x4) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0x140000002) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x32874000) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001040)='fdinfo/3\x00') read$FUSE(r10, &(0x7f0000001080)={0x2020}, 0x2020) r11 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) readv(r11, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4080, 0xff0}], 0x1) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 765.046435ms ago: executing program 3 (id=300): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2142) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x40045402) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x100, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x20000080) recvmmsg(r0, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x12141, 0x0) 725.748297ms ago: executing program 3 (id=301): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x0, 0xa, 0xf1, {0xf1, 0x2287d068da6e23c, "ed535ce0d4beb601c718b0db85ff02416830c77d622d4804b9aa15430732a9a75e008c487e4cc6b42cafac441629c4217e634c34fb82cddb42be85fb407ce4ac9123c121d3aaa366c73206e1aea487a0bc1287d0cf0a86ae0c2b281eea483c686df06ce3949545d6de1751969fbd86eb18893b1fc014197fcd0285504f91351925e573d6b4d00b224c264af855e75fa4058c4332115f9d314a83bd71c8816f916aafeb54c4569aac82903799f7b2c96cac89dd6edc8c1973290d90ffdd8efbefc11a4905f70d3b1205a80e07fc502f03a29fb68bf89e7cc9f4a8e88c03f5f326dd3ee2fe3ee830be502bc6f51b0600"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}, &(0x7f0000000940)=ANY=[@ANYBLOB="000f3335f87644e21f1c240f000000050f0f00010a10030005d7de610edfb0a2ddc7137a5d37f17e67951a295f2eece976370e1453d7fcc2303fe31d29dd16c98bf541963c6319a2d670d2a4b1ae108ce96fd5b59174e3f48c7b4cbacaa7f24e1a7cb7ccfe9c32fb64a1283d276f026b106791fca40b065bd595ef269fb335e6c3531a6022202672f457f1fdfb0791722f2a387045359d5563d0050000000000000041088709518fff4009d8b0da8a46ba450b02d4d58c8f013bca115373e6d276915b4c01d00b2cf5103f7482d5dbd16fc5edb84a4f"], &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf8, 0x1, 0x9, 0x4, "82944e94", "76be156e"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6a, 0x10, 0xb, 0x2, 0x7, 0xe, 0x1}}}, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0x40, 0xf, 0x79, "acedb3ffe26036c367cba96794d0535463d335dd9318f78f5caec0e299daac7b825bc5b5153b69af7134902a5d3578a23d59b60325728cb5b40c76ae51e75b7545a29b7c8c411f4c9d04dc3ae5adfd43bcdac4de5df7b8e51c64f8de51d9abf256dd859d91dc2b98e9b9358b9d9a3e400e30597f20080084ee"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000500)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x40, 0x20}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0xcc}, &(0x7f0000000640)={0x40, 0xb, 0x2, "c124"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0xffff}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000700)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000740)={0x40, 0x19, 0x2, "938c"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0xd}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0xf}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x8}}) 653.442529ms ago: executing program 4 (id=302): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200)={0x5e, 0x225, '\x00', [@generic={0x1, 0xd8, "9037198b583b8e75ed052028665a1256b6afbae956b3b7e023eb9b8e060d692a4dc62111ba646aafe162d2c7c8346f8341e9ec20367cdfb0d98123439b1031c5bcdcd34d831cdc3c5a73d2980b90e97416210a304959fe9992abc4ff6d1de3269c446fa8c1429d13f8379878eb3203a200dd97235d7d0534221cdd1155c064c9c3a72350001b66762d9e5cee01e038c97f9f22b968fc25848d3ccaed6c352730af86e3e30e4b9d526e9bd0757f1d09376391aab62231f2418d0663df42e9387914e32de4f57ccb5a8a4944cb79b3f106562f64f4bcf6aeb9"}, @enc_lim={0x4, 0x1, 0x40}, @calipso={0x7, 0x18, {0x1, 0x4, 0x4, 0xc9, [0x9, 0x0]}}, @ra={0x5, 0x2, 0x4}, @generic={0x9, 0x1000, "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"}, @calipso={0x7, 0x20, {0x2, 0x6, 0x9, 0xabaa, [0xff, 0x1, 0x89c]}}, @jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0x7}]}, 0x1130) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000b40)=0xc, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0xe23, 0x80006, @empty}, 0x1c) (async) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES64=r0, @ANYRESOCT, @ANYRES64=r0, @ANYRES16=r0], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 0s ago: executing program 1 (id=303): r0 = getpid() mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x541}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000504000/0x2000)=nil, 0x400000, 0x0, 0x18100}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r2, 0x0) capset(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x4e20, @local}}) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. [ 22.161763][ T36] audit: type=1400 audit(1781305301.290:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.165317][ T287] cgroup: Unknown subsys name 'net' [ 22.184456][ T36] audit: type=1400 audit(1781305301.290:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.211841][ T36] audit: type=1400 audit(1781305301.320:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.212376][ T287] cgroup: Unknown subsys name 'devices' [ 22.338766][ T287] cgroup: Unknown subsys name 'hugetlb' [ 22.344460][ T287] cgroup: Unknown subsys name 'rlimit' [ 22.440297][ T36] audit: type=1400 audit(1781305301.570:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.463702][ T36] audit: type=1400 audit(1781305301.570:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.488694][ T36] audit: type=1400 audit(1781305301.570:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.500596][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.520824][ T36] audit: type=1400 audit(1781305301.650:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.546304][ T36] audit: type=1400 audit(1781305301.650:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.607031][ T36] audit: type=1400 audit(1781305301.740:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.608289][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.632567][ T36] audit: type=1400 audit(1781305301.740:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.905031][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.912210][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.919433][ T294] bridge_slave_0: entered allmulticast mode [ 23.925990][ T294] bridge_slave_0: entered promiscuous mode [ 23.933110][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.940333][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.947493][ T294] bridge_slave_1: entered allmulticast mode [ 23.953768][ T294] bridge_slave_1: entered promiscuous mode [ 24.090855][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.097966][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.105054][ T298] bridge_slave_0: entered allmulticast mode [ 24.111660][ T298] bridge_slave_0: entered promiscuous mode [ 24.122066][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.129297][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.136456][ T299] bridge_slave_0: entered allmulticast mode [ 24.142724][ T299] bridge_slave_0: entered promiscuous mode [ 24.151098][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.158227][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.165321][ T299] bridge_slave_1: entered allmulticast mode [ 24.171750][ T299] bridge_slave_1: entered promiscuous mode [ 24.177864][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.184932][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.192072][ T298] bridge_slave_1: entered allmulticast mode [ 24.198426][ T298] bridge_slave_1: entered promiscuous mode [ 24.257425][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.264514][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.271856][ T300] bridge_slave_0: entered allmulticast mode [ 24.278356][ T300] bridge_slave_0: entered promiscuous mode [ 24.295415][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.302522][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.309740][ T300] bridge_slave_1: entered allmulticast mode [ 24.316009][ T300] bridge_slave_1: entered promiscuous mode [ 24.339424][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.346521][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.353866][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.360950][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.433561][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.440671][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.448017][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.455080][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.494080][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.501191][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.508546][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.515594][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.525660][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.533053][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.540914][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.548197][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.555360][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.562829][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.577031][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.584100][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.597292][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.604377][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.655970][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.663087][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.672038][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.679157][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.701882][ T294] veth0_vlan: entered promiscuous mode [ 24.710945][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.718044][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.738459][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.745517][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.755546][ T294] veth1_macvtap: entered promiscuous mode [ 24.765849][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.772945][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.790960][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.798078][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.833974][ T298] veth0_vlan: entered promiscuous mode [ 24.841535][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.870301][ T300] veth0_vlan: entered promiscuous mode [ 24.882678][ T298] veth1_macvtap: entered promiscuous mode [ 24.899269][ T299] veth0_vlan: entered promiscuous mode [ 24.923044][ T299] veth1_macvtap: entered promiscuous mode [ 24.932142][ T300] veth1_macvtap: entered promiscuous mode [ 25.038292][ T324] tipc: Started in network mode [ 25.053578][ T324] tipc: Node identity c257abf704c7, cluster identity 4711 [ 25.061822][ T324] tipc: Enabled bearer , priority 0 [ 25.070889][ T324] syzkaller0: MTU too low for tipc bearer [ 25.078935][ T324] tipc: Disabling bearer [ 25.086317][ T326] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.277217][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.436289][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 25.447425][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.473438][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.485973][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 25.507330][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 25.526680][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.536170][ T9] usb 3-1: config 0 descriptor?? [ 25.877215][ T377] __vm_enough_memory: pid: 377, comm: syz.1.21, bytes: 70373039144960 not enough memory for the allocation [ 25.938662][ T379] netlink: 104 bytes leftover after parsing attributes in process `syz.3.22'. [ 25.999277][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0001/input/input4 [ 26.052891][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0001/input/input5 [ 26.105414][ T9] kye 0003:0458:5011.0001: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 26.351453][ T396] capability: warning: `syz.3.25' uses 32-bit capabilities (legacy support in use) [ 26.446327][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.492328][ T31] usb 3-1: USB disconnect, device number 2 [ 26.616462][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 26.647491][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 26.669490][ T416] syzkaller1: entered promiscuous mode [ 26.685232][ T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 26.706491][ T416] syzkaller1: entered allmulticast mode [ 26.725338][ T45] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 26.746497][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.754550][ T45] usb 1-1: Product: syz [ 26.759351][ T45] usb 1-1: Manufacturer: syz [ 26.763996][ T45] usb 1-1: SerialNumber: syz [ 26.926315][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 26.986658][ T390] netlink: 144 bytes leftover after parsing attributes in process `syz.0.26'. [ 27.049691][ T45] usb 1-1: USB disconnect, device number 2 [ 27.067917][ T9] usb 4-1: device descriptor read/64, error -71 [ 27.080393][ T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.337691][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 27.337711][ T36] audit: type=1400 audit(1781305306.470:150): avc: denied { create } for pid=425 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.364583][ T9] usb 4-1: device descriptor read/64, error -71 [ 27.376167][ T36] audit: type=1400 audit(1781305306.490:151): avc: denied { write } for pid=425 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.406405][ T36] audit: type=1400 audit(1781305306.500:152): avc: denied { read } for pid=425 comm="syz.1.36" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.428822][ T67] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.466235][ T36] audit: type=1400 audit(1781305306.500:153): avc: denied { open } for pid=425 comm="syz.1.36" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.509420][ T36] audit: type=1400 audit(1781305306.500:154): avc: denied { ioctl } for pid=425 comm="syz.1.36" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.566236][ T36] audit: type=1400 audit(1781305306.620:155): avc: denied { getopt } for pid=427 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.596254][ T67] usb 3-1: Using ep0 maxpacket: 8 [ 27.606265][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 27.611220][ T36] audit: type=1400 audit(1781305306.620:156): avc: denied { getopt } for pid=427 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.617892][ T67] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 27.677381][ T67] usb 3-1: config 179 has no interface number 0 [ 27.683840][ T67] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 27.695135][ T67] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 27.706578][ T67] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 27.717918][ T67] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 27.729499][ T67] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 27.743157][ T67] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 27.752607][ T67] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.771628][ T424] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 27.796274][ T9] usb 4-1: device descriptor read/64, error -71 [ 27.806326][ T368] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.906262][ T45] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 27.956311][ T368] usb 2-1: Using ep0 maxpacket: 8 [ 27.962567][ T368] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 27.971226][ T368] usb 2-1: config 0 has no interface number 1 [ 27.977595][ T368] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 27.988738][ T368] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 28.000667][ T368] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 28.012063][ T368] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 28.022380][ T368] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 28.035513][ T368] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 28.047212][ T368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 28.057167][ T9] usb 4-1: device descriptor read/64, error -71 [ 28.063733][ T368] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 28.075450][ T368] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 28.084605][ T368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.087998][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 40: 232, using maximum allowed: 30 [ 28.093698][ T368] usb 2-1: Product: syz [ 28.104029][ T45] usb 1-1: config 0 interface 0 altsetting 40 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 28.108417][ T368] usb 2-1: Manufacturer: syz [ 28.119763][ T45] usb 1-1: config 0 interface 0 altsetting 40 endpoint 0x8C has an invalid bInterval 200, changing to 4 [ 28.124690][ T368] usb 2-1: SerialNumber: syz [ 28.136453][ T45] usb 1-1: config 0 interface 0 altsetting 40 endpoint 0x8C has invalid maxpacket 50158, setting to 1023 [ 28.151252][ T45] usb 1-1: config 0 interface 0 altsetting 40 has 1 endpoint descriptor, different from the interface descriptor's value: 232 [ 28.157359][ T368] usb 2-1: config 0 descriptor?? [ 28.164965][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 28.170531][ T9] usb usb4-port1: attempt power cycle [ 28.178924][ T45] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 28.185879][ T430] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 28.190860][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.210659][ T424] ======================================================= [ 28.210659][ T424] WARNING: The mand mount option has been deprecated and [ 28.210659][ T424] and is ignored by this kernel. Remove the mand [ 28.210659][ T424] option from the mount to silence this warning. [ 28.210659][ T424] ======================================================= [ 28.212769][ T368] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 28.245760][ T45] usb 1-1: Product: syz [ 28.259427][ T45] usb 1-1: Manufacturer: syz [ 28.264114][ T45] usb 1-1: SerialNumber: syz [ 28.269078][ T36] audit: type=1400 audit(1781305307.340:157): avc: denied { mounton } for pid=423 comm="syz.2.35" path=2F322FE91F7189591E9233614B dev="tmpfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 28.302045][ T368] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6 [ 28.316486][ T36] audit: type=1400 audit(1781305307.440:158): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=466 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.335200][ T45] usb 1-1: config 0 descriptor?? [ 28.339143][ T36] audit: type=1400 audit(1781305307.440:159): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=466 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.402590][ T45] usb 2-1: USB disconnect, device number 2 [ 28.501964][ T434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.510686][ T434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.519622][ T434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.528364][ T434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.558587][ T406] usb 1-1: USB disconnect, device number 3 [ 28.567451][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 28.597236][ T9] usb 4-1: device descriptor read/8, error -71 [ 28.727437][ T9] usb 4-1: device descriptor read/8, error -71 [ 28.966360][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 28.987316][ T9] usb 4-1: device descriptor read/8, error -71 [ 29.080651][ T438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 29.117394][ T9] usb 4-1: device descriptor read/8, error -71 [ 29.186283][ T67] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.226374][ T9] usb usb4-port1: unable to enumerate USB device [ 29.337431][ T67] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.347812][ T67] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 29.357036][ T67] usb 2-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 29.370256][ T67] usb 2-1: config 1 interface 1 has no altsetting 0 [ 29.378722][ T67] usb 2-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 29.387947][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.396105][ T67] usb 2-1: Product: syz [ 29.400641][ T67] usb 2-1: Manufacturer: syz [ 29.405348][ T67] usb 2-1: SerialNumber: syz [ 29.526257][ T45] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 29.612445][ T436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.621065][ T436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.629618][ T436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.638203][ T456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.638523][ T436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.648905][ T456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.665427][ T67] usb 2-1: 0:2 : does not exist [ 29.666344][ T45] usb 1-1: device descriptor read/64, error -71 [ 29.670701][ T67] usb 2-1: 0:3 : does not exist [ 29.681622][ T67] usb 2-1: 0:4 : does not exist [ 29.686590][ T67] usb 2-1: 0:5 : does not exist [ 29.691609][ T67] usb 2-1: 0:6 : does not exist [ 29.747799][ T67] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 29.762167][ T67] usb 2-1: USB disconnect, device number 3 [ 29.778221][ T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.936292][ T45] usb 1-1: device descriptor read/64, error -71 [ 30.126454][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 30.178709][ T45] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 30.288067][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 30.297229][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 30.304844][ T9] usb 4-1: can't read configurations, error -71 [ 30.316276][ T45] usb 1-1: device descriptor read/64, error -71 [ 30.426255][ T406] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.556362][ T45] usb 1-1: device descriptor read/64, error -71 [ 30.577566][ T406] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 30.587430][ T406] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 30.597146][ T406] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.612574][ T406] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 30.621726][ T406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.629958][ T406] usb 2-1: Product: syz [ 30.634219][ T406] usb 2-1: Manufacturer: syz [ 30.638874][ T406] usb 2-1: SerialNumber: syz [ 30.646406][ T406] hub 2-1:1.0: bad descriptor, ignoring hub [ 30.652367][ T406] hub 2-1:1.0: probe with driver hub failed with error -5 [ 30.666409][ T45] usb usb1-port1: attempt power cycle [ 30.849722][ T406] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 31.006272][ T45] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 31.027413][ T45] usb 1-1: device descriptor read/8, error -71 [ 31.157319][ T45] usb 1-1: device descriptor read/8, error -71 [ 31.396265][ T45] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 31.417427][ T45] usb 1-1: device descriptor read/8, error -71 [ 31.426384][ T465] usb 2-1: USB disconnect, device number 4 [ 31.433307][ T465] usblp0: removed [ 31.547381][ T45] usb 1-1: device descriptor read/8, error -71 [ 31.656323][ T45] usb usb1-port1: unable to enumerate USB device [ 31.986248][ T45] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 32.147746][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 32.155845][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 32.164611][ T45] usb 4-1: config 1 has an invalid interface number: 168 but max is 0 [ 32.172836][ T45] usb 4-1: config 1 has no interface number 0 [ 32.178994][ T45] usb 4-1: config 1 interface 168 has no altsetting 0 [ 32.187423][ T45] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.00 [ 32.196382][ T368] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.203992][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.212987][ T45] usb 4-1: Product: syz [ 32.217213][ T45] usb 4-1: Manufacturer: syz [ 32.221836][ T45] usb 4-1: SerialNumber: syz [ 32.231869][ T45] ums-jumpshot 4-1:1.168: USB Mass Storage device detected [ 32.243119][ T45] ums-jumpshot 4-1:1.168: Quirks match for vid 05dc pid 0001: 2 [ 32.366341][ T368] usb 2-1: Using ep0 maxpacket: 32 [ 32.375765][ T368] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 32.384321][ T368] usb 2-1: config 0 has no interface number 0 [ 32.394135][ T368] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 32.403023][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 32.403079][ T36] audit: type=1400 audit(1781305311.530:178): avc: denied { watch } for pid=486 comm="syz.0.57" path="/18" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.406339][ T368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.438984][ T368] usb 2-1: Product: syz [ 32.443233][ T368] usb 2-1: Manufacturer: syz [ 32.447922][ T368] usb 2-1: SerialNumber: syz [ 32.453425][ T368] usb 2-1: config 0 descriptor?? [ 32.459660][ T368] smsc95xx v2.0.0 [ 32.464163][ T36] audit: type=1400 audit(1781305311.590:179): avc: denied { connect } for pid=486 comm="syz.0.57" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.484638][ T36] audit: type=1400 audit(1781305311.590:180): avc: denied { read write } for pid=486 comm="syz.0.57" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 32.509006][ T36] audit: type=1400 audit(1781305311.590:181): avc: denied { open } for pid=486 comm="syz.0.57" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 32.533483][ T36] audit: type=1400 audit(1781305311.660:182): avc: denied { setopt } for pid=486 comm="syz.0.57" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.799327][ T45] usb 4-1: USB disconnect, device number 8 [ 33.169239][ T480] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.181472][ T36] audit: type=1400 audit(1781305312.310:183): avc: denied { getopt } for pid=479 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.276267][ T45] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 33.309596][ T368] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 33.320482][ T368] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 33.330208][ T368] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 33.341179][ T368] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 33.350802][ T368] usb 2-1: USB disconnect, device number 5 [ 33.447406][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.458432][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.468937][ T45] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 33.478094][ T45] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 33.486163][ T45] usb 4-1: Manufacturer: syz [ 33.491811][ T45] usb 4-1: config 0 descriptor?? [ 33.506238][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 33.636246][ T9] usb 1-1: device descriptor read/64, error -71 [ 33.876339][ T9] usb 1-1: device descriptor read/64, error -71 [ 33.900007][ T36] audit: type=1400 audit(1781305313.030:184): avc: denied { setopt } for pid=501 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.919439][ T36] audit: type=1400 audit(1781305313.050:185): avc: denied { read } for pid=501 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.939103][ T36] audit: type=1400 audit(1781305313.050:186): avc: denied { write } for pid=501 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.100374][ T495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.109011][ T495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.116368][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 34.124374][ T45] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 34.133728][ T45] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 34.141321][ T45] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 34.151574][ T45] usb 4-1: USB disconnect, device number 9 [ 34.266338][ T9] usb 1-1: device descriptor read/64, error -71 [ 34.506278][ T9] usb 1-1: device descriptor read/64, error -71 [ 34.616397][ T9] usb usb1-port1: attempt power cycle [ 34.644720][ T36] audit: type=1400 audit(1781305313.770:187): avc: denied { create } for pid=507 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.650408][ T508] netlink: 68 bytes leftover after parsing attributes in process `syz.3.64'. [ 34.709768][ T511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 34.718938][ T511] netlink: 100 bytes leftover after parsing attributes in process `syz.3.65'. [ 34.728784][ T512] netlink: 100 bytes leftover after parsing attributes in process `syz.3.65'. [ 34.766274][ T432] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 34.896259][ T432] usb 2-1: device descriptor read/64, error -71 [ 34.956281][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 34.977738][ T9] usb 1-1: device descriptor read/8, error -71 [ 35.107394][ T9] usb 1-1: device descriptor read/8, error -71 [ 35.136269][ T432] usb 2-1: device descriptor read/64, error -71 [ 35.346302][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 35.367347][ T9] usb 1-1: device descriptor read/8, error -71 [ 35.376387][ T432] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 35.497351][ T9] usb 1-1: device descriptor read/8, error -71 [ 35.506342][ T432] usb 2-1: device descriptor read/64, error -71 [ 35.606407][ T9] usb usb1-port1: unable to enumerate USB device [ 35.746294][ T432] usb 2-1: device descriptor read/64, error -71 [ 35.846265][ T465] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 35.856373][ T432] usb usb2-port1: attempt power cycle [ 35.996245][ T465] usb 4-1: Using ep0 maxpacket: 16 [ 36.002714][ T465] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.012925][ T465] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 36.023557][ T465] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 36.032713][ T465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.040797][ T465] usb 4-1: Product: syz [ 36.044991][ T465] usb 4-1: Manufacturer: syz [ 36.049658][ T465] usb 4-1: SerialNumber: syz [ 36.055167][ T465] usb 4-1: config 0 descriptor?? [ 36.206291][ T432] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 36.227499][ T432] usb 2-1: device descriptor read/8, error -71 [ 36.357355][ T432] usb 2-1: device descriptor read/8, error -71 [ 36.606318][ T432] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 36.618430][ T522] Zero length message leads to an empty skb [ 36.627560][ T432] usb 2-1: device descriptor read/8, error -71 [ 36.666259][ T465] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 36.682894][ T531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.691619][ T531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.757230][ T432] usb 2-1: device descriptor read/8, error -71 [ 36.773446][ T406] usb 4-1: USB disconnect, device number 10 [ 36.836246][ T465] usb 1-1: Using ep0 maxpacket: 16 [ 36.842654][ T465] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.852805][ T465] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.863366][ T465] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.866662][ T432] usb usb2-port1: unable to enumerate USB device [ 36.872477][ T465] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.872502][ T465] usb 1-1: Product: syz [ 36.891141][ T465] usb 1-1: Manufacturer: syz [ 36.895778][ T465] usb 1-1: SerialNumber: syz [ 37.104754][ T465] usb 1-1: 0:2 : does not exist [ 37.115863][ T465] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 37.129458][ T465] usb 1-1: USB disconnect, device number 12 [ 37.141739][ T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.456272][ T406] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 37.606266][ T406] usb 4-1: Using ep0 maxpacket: 16 [ 37.612991][ T406] usb 4-1: unable to get BOS descriptor or descriptor too short [ 37.621493][ T406] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.631711][ T406] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 37.647804][ T406] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 37.657023][ T406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.665317][ T406] usb 4-1: Product: syz [ 37.669620][ T406] usb 4-1: Manufacturer: syz [ 37.674295][ T406] usb 4-1: SerialNumber: syz [ 37.883098][ T406] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 37.891683][ T406] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 37.916266][ T45] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 37.946245][ T465] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 38.068360][ T45] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 38.079481][ T465] usb 2-1: device descriptor read/64, error -71 [ 38.085856][ T45] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.088973][ T533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.096727][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 38.110907][ T45] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 38.112096][ T533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.120957][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.137171][ T45] usb 1-1: config 0 descriptor?? [ 38.316240][ T465] usb 2-1: device descriptor read/64, error -71 [ 38.336900][ T406] usb 4-1: 2:1 : invalid Cluster Descriptor size [ 38.539594][ T406] usb 4-1: USB disconnect, device number 11 [ 38.556258][ T465] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 38.688151][ T465] usb 2-1: device descriptor read/64, error -71 [ 38.747394][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 38.753434][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 38.763235][ T45] usb 1-1: USB disconnect, device number 13 [ 38.926350][ T465] usb 2-1: device descriptor read/64, error -71 [ 39.036379][ T465] usb usb2-port1: attempt power cycle [ 39.296264][ T406] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 39.297764][ T543] syzkaller0: entered promiscuous mode [ 39.311083][ T543] syzkaller0 (unregistering): left promiscuous mode [ 39.391205][ T465] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 39.417409][ T465] usb 2-1: device descriptor read/8, error -71 [ 39.426314][ T406] usb 4-1: device descriptor read/64, error -71 [ 39.547359][ T465] usb 2-1: device descriptor read/8, error -71 [ 39.666297][ T406] usb 4-1: device descriptor read/64, error -71 [ 39.786246][ T465] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 39.807385][ T465] usb 2-1: device descriptor read/8, error -71 [ 39.906250][ T406] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 39.937315][ T465] usb 2-1: device descriptor read/8, error -71 [ 40.046284][ T406] usb 4-1: device descriptor read/64, error -71 [ 40.052758][ T465] usb usb2-port1: unable to enumerate USB device [ 40.296232][ T406] usb 4-1: device descriptor read/64, error -71 [ 40.416315][ T406] usb usb4-port1: attempt power cycle [ 40.582414][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 40.582433][ T36] audit: type=1400 audit(1781305319.710:192): avc: denied { append } for pid=552 comm="syz.0.80" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.585077][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.756266][ T406] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 40.787215][ T406] usb 4-1: device descriptor read/8, error -71 [ 40.917285][ T406] usb 4-1: device descriptor read/8, error -71 [ 40.946275][ T465] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 41.096264][ T465] usb 2-1: Using ep0 maxpacket: 16 [ 41.103275][ T465] usb 2-1: unable to get BOS descriptor or descriptor too short [ 41.112003][ T465] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.122204][ T465] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 41.131447][ T465] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 67, changing to 7 [ 41.145937][ T465] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 41.155087][ T465] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.163275][ T406] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 41.170951][ T465] usb 2-1: Product: syz [ 41.175157][ T465] usb 2-1: Manufacturer: syz [ 41.179900][ T465] usb 2-1: SerialNumber: syz [ 41.197349][ T406] usb 4-1: device descriptor read/8, error -71 [ 41.327367][ T406] usb 4-1: device descriptor read/8, error -71 [ 41.389491][ T465] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 41.397476][ T465] usb 2-1: found format II with max.bitrate = 128, frame size=3249 [ 41.405428][ T465] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 41.412330][ T465] usb 2-1: 0:2 : does not exist [ 41.417302][ T465] usb 2-1: unit 6 not found! [ 41.424558][ T465] usb 2-1: USB disconnect, device number 14 [ 41.436573][ T406] usb usb4-port1: unable to enumerate USB device [ 41.445973][ T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.146248][ T432] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 42.316298][ T432] usb 2-1: Using ep0 maxpacket: 8 [ 42.322861][ T432] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.334448][ T432] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 42.348719][ T432] usb 2-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 42.358307][ T432] usb 2-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 42.366982][ T432] usb 2-1: Product: syz [ 42.376579][ T432] usb 2-1: config 0 descriptor?? [ 42.589679][ T558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.599651][ T558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.607401][ T556] Bluetooth: hci0: command 0x1003 tx timeout [ 42.607823][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.624893][ T432] usbhid 2-1:0.0: can't add hid device: -71 [ 42.633071][ T432] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 42.645579][ T432] usb 2-1: USB disconnect, device number 15 [ 42.990066][ T564] fuse: Bad value for 'fd' [ 42.994635][ T36] audit: type=1400 audit(1781305322.120:193): avc: denied { mounton } for pid=563 comm="syz.3.84" path="/26/file0" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.023395][ T36] audit: type=1400 audit(1781305322.150:194): avc: denied { execute } for pid=563 comm="syz.3.84" name="file0" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.087212][ T36] audit: type=1400 audit(1781305322.220:195): avc: denied { read write } for pid=565 comm="syz.3.85" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.111135][ T36] audit: type=1400 audit(1781305322.220:196): avc: denied { open } for pid=565 comm="syz.3.85" path="/27/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.135744][ T36] audit: type=1400 audit(1781305322.220:197): avc: denied { mounton } for pid=565 comm="syz.3.85" path="/27/file0" dev="incremental-fs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.165049][ T36] audit: type=1400 audit(1781305322.260:198): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 43.191895][ T36] audit: type=1400 audit(1781305322.260:199): avc: denied { mounton } for pid=569 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 43.219415][ T36] audit: type=1400 audit(1781305322.320:200): avc: denied { getopt } for pid=570 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.249074][ T36] audit: type=1400 audit(1781305322.380:201): avc: denied { ioctl } for pid=573 comm="syz.0.87" path="socket:[5468]" dev="sockfs" ino=5468 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 43.317031][ T569] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.324169][ T569] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.331587][ T569] bridge_slave_0: entered allmulticast mode [ 43.338735][ T569] bridge_slave_0: entered promiscuous mode [ 43.345769][ T569] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.353068][ T569] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.360414][ T569] bridge_slave_1: entered allmulticast mode [ 43.367206][ T569] bridge_slave_1: entered promiscuous mode [ 43.433045][ T569] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.440180][ T569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.447545][ T569] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.454612][ T569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.485398][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.493161][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.506710][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.513792][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.521346][ T406] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 43.532435][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.539577][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.592325][ T569] veth0_vlan: entered promiscuous mode [ 43.611491][ T569] veth1_macvtap: entered promiscuous mode [ 43.679185][ T406] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.698145][ T406] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.715694][ T406] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 43.725342][ T406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 43.745790][ T406] usb 2-1: SerialNumber: syz [ 43.949374][ T310] bridge_slave_1: left allmulticast mode [ 43.955182][ T310] bridge_slave_1: left promiscuous mode [ 43.968709][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.992203][ T310] bridge_slave_0: left allmulticast mode [ 44.005946][ T310] bridge_slave_0: left promiscuous mode [ 44.018058][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.207322][ T623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.231897][ T623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.247289][ T310] veth1_macvtap: left promiscuous mode [ 44.263581][ T310] veth0_vlan: left promiscuous mode [ 44.269687][ T623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.279723][ T406] usb 2-1: 0:2 : does not exist [ 44.286123][ T623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.304521][ T406] usb 2-1: USB disconnect, device number 16 [ 44.456321][ T432] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 44.535189][ T628] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.542714][ T628] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.549952][ T628] bridge_slave_0: entered allmulticast mode [ 44.556461][ T628] bridge_slave_0: entered promiscuous mode [ 44.563185][ T628] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.570294][ T628] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.577553][ T628] bridge_slave_1: entered allmulticast mode [ 44.583906][ T628] bridge_slave_1: entered promiscuous mode [ 44.616883][ T432] usb 5-1: Using ep0 maxpacket: 16 [ 44.629367][ T432] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 44.638977][ T432] usb 5-1: config 1 has no interface number 1 [ 44.645168][ T432] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 44.656160][ T432] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 44.666413][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 44.670186][ T432] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 44.690306][ T432] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 44.703379][ T628] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.710483][ T628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.717831][ T628] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.724898][ T628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.732351][ T432] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.740530][ T432] usb 5-1: Product: syz [ 44.744800][ T432] usb 5-1: Manufacturer: syz [ 44.749526][ T432] usb 5-1: SerialNumber: syz [ 44.772340][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.779743][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.790818][ T602] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.797937][ T602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.808250][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.815327][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.836559][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 44.842965][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 44.856156][ T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 44.865546][ T628] veth0_vlan: entered promiscuous mode [ 44.881022][ T45] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 44.890923][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.899767][ T45] usb 1-1: Product: syz [ 44.908980][ T45] usb 1-1: Manufacturer: syz [ 44.917676][ T628] veth1_macvtap: entered promiscuous mode [ 44.920333][ T45] usb 1-1: SerialNumber: syz [ 44.960957][ T432] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 44.970601][ T432] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 44.992345][ T635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 45.004984][ T432] usb 5-1: USB disconnect, device number 2 [ 45.049362][ T633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 45.193066][ T45] usb 1-1: USB disconnect, device number 14 [ 45.466314][ T432] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 45.653615][ T432] usb 4-1: unable to get BOS descriptor or descriptor too short [ 45.666450][ T432] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.676700][ T432] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 45.686681][ T432] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.701308][ T432] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice= 0.40 [ 45.710736][ T432] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.716347][ T45] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 45.719821][ T432] usb 4-1: Product: syz [ 45.730834][ T432] usb 4-1: Manufacturer: syz [ 45.735704][ T432] usb 4-1: SerialNumber: syz [ 45.896271][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 45.903237][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 45.912529][ T45] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 45.925426][ T45] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 45.935148][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.944224][ T45] usb 5-1: Product: syz [ 45.949141][ T45] usb 5-1: Manufacturer: syz [ 45.954070][ T45] usb 5-1: SerialNumber: syz [ 46.057535][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 46.057554][ T36] audit: type=1400 audit(1781305325.190:217): avc: denied { bind } for pid=658 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.116294][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 46.223182][ T36] audit: type=1400 audit(1781305325.350:218): avc: denied { write } for pid=647 comm="syz.4.104" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 46.302192][ T666] fuse: blksize only supported for fuseblk [ 46.426248][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 46.434866][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.446345][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.456249][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 46.465794][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.475617][ T9] usb 2-1: config 0 descriptor?? [ 46.486045][ T9] hub 2-1:0.0: USB hub found [ 46.682184][ T9] hub 2-1:0.0: 1 port detected [ 46.892776][ T9] usb 2-1: USB disconnect, device number 17 [ 47.020067][ T36] audit: type=1400 audit(1781305326.150:219): avc: denied { write } for pid=669 comm="syz.0.110" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 47.043291][ T45] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 47.053934][ T45] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 47.064098][ T45] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 47.073303][ T36] audit: type=1400 audit(1781305326.150:220): avc: denied { ioctl } for pid=669 comm="syz.0.110" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x55c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 47.102650][ T45] usb 5-1: USB disconnect, device number 3 [ 47.266368][ T509] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 47.406550][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 47.417420][ T509] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.432054][ T509] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 47.444569][ T509] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.455951][ T36] audit: type=1400 audit(1781305326.580:221): avc: denied { mount } for pid=673 comm="syz.1.112" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 47.457328][ T509] usb 1-1: config 0 descriptor?? [ 47.563070][ T45] usb 5-1: config 1 has an invalid interface descriptor of length 5, skipping [ 47.572181][ T36] audit: type=1400 audit(1781305326.700:222): avc: denied { watch_reads } for pid=677 comm="syz.1.114" path="/33" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 47.584568][ T678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 47.594323][ T45] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 47.608814][ T36] audit: type=1400 audit(1781305326.710:223): avc: denied { nlmsg_read } for pid=677 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.612913][ T45] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 47.645039][ T45] usb 5-1: Dual-Role OTG device on HNP port [ 47.651387][ T45] usb 5-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 47.660531][ T45] usb 5-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 47.668748][ T45] usb 5-1: Product: syz [ 47.673169][ T45] usb 5-1: Manufacturer: syz [ 47.680718][ T45] usb 5-1: SerialNumber: syz [ 47.695369][ T509] usbhid 1-1:0.0: can't add hid device: -71 [ 47.701696][ T509] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 47.711890][ T509] usb 1-1: USB disconnect, device number 15 [ 47.903912][ T45] usb 5-1: USB disconnect, device number 4 [ 47.946247][ T311] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 48.097410][ T311] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 48.110500][ T311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 48.117200][ T311] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 48.126381][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.135760][ T311] usb 2-1: config 0 descriptor?? [ 48.140865][ T406] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 48.194082][ T432] usb 4-1: USB disconnect, device number 16 [ 48.212340][ T624] udevd[624]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.307329][ T406] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.319905][ T406] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 48.329077][ T406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.338685][ T406] usb 1-1: config 0 descriptor?? [ 48.417918][ T36] audit: type=1400 audit(1781305327.550:224): avc: denied { map } for pid=686 comm="syz.3.117" path="pipe:[4869]" dev="pipefs" ino=4869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 48.443265][ T36] audit: type=1400 audit(1781305327.550:225): avc: denied { write } for pid=686 comm="syz.3.117" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.556774][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.563809][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.570743][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.577910][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.584756][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.591622][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.598472][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.605319][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.612728][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.619603][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.626642][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.633491][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.640366][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.647481][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.654362][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.661238][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.668143][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.675000][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.682068][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.689182][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.696010][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.702879][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.709759][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 48.717573][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.724660][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.731574][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.738451][ T465] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 48.746143][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.753436][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.760340][ T311] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 48.768772][ T311] kone 0003:1E7D:2CED.0003: hidraw0: USB HID vff.fe Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 48.782288][ T311] usb 2-1: USB disconnect, device number 18 [ 48.806519][ T692] fido_id[692]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 48.866358][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 48.875544][ T45] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 48.883987][ T45] usb 5-1: config 1 has no interface number 0 [ 48.891483][ T45] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 48.901516][ T45] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 48.911674][ T465] usb 4-1: Using ep0 maxpacket: 16 [ 48.916862][ T45] usb 5-1: config 1 interface 105 has no altsetting 0 [ 48.924993][ T465] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.936863][ T45] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 48.945960][ T45] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 48.955532][ T465] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.965378][ T45] usb 5-1: Product: syz [ 48.969673][ T465] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 48.982584][ T45] usb 5-1: Manufacturer: syz [ 48.987280][ T45] usb 5-1: SerialNumber: syz [ 48.992446][ T465] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 49.001914][ T465] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.010299][ T689] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 49.017812][ T689] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 49.018387][ T465] usb 4-1: config 0 descriptor?? [ 49.156626][ T406] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 49.165475][ T406] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 49.241322][ T36] audit: type=1400 audit(1781305328.370:226): avc: denied { bind } for pid=690 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.306961][ T465] usbhid 4-1:0.0: can't add hid device: -71 [ 49.312994][ T465] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 49.325698][ T465] usb 4-1: USB disconnect, device number 17 [ 49.440799][ T689] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 49.448129][ T689] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 49.508269][ T699] input: syz0 as /devices/virtual/input/input7 [ 49.556229][ T406] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 49.707372][ T406] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.718382][ T406] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.728408][ T406] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.741515][ T406] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.750636][ T406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.759719][ T406] usb 2-1: config 0 descriptor?? [ 49.826296][ T701] netlink: 188 bytes leftover after parsing attributes in process `syz.3.121'. [ 49.857877][ T45] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 49.869487][ T45] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 49.880625][ T45] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 49.895457][ T45] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a6:4a:e9:77:f6:ef [ 49.909777][ T45] usb 5-1: USB disconnect, device number 5 [ 49.916376][ T45] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 49.966860][ T45] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 49.976771][ T45] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 49.986271][ T45] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 50.086228][ T368] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 50.177240][ T406] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 50.186844][ T406] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 50.226940][ T509] usb 2-1: USB disconnect, device number 19 [ 50.267360][ T368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 50.282639][ T368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 127, changing to 7 [ 50.296064][ T368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 9086, setting to 1024 [ 50.308801][ T368] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 50.319196][ T368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.327282][ T710] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 50.328330][ T368] usb 4-1: Product: syz [ 50.338959][ T368] usb 4-1: Manufacturer: syz [ 50.343644][ T368] usb 4-1: SerialNumber: syz [ 50.350779][ T368] usb 4-1: config 0 descriptor?? [ 50.357574][ T368] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 15, bLength 9, bSynchAddress 20 [ 50.542273][ T45] usb 1-1: USB disconnect, device number 16 [ 50.548287][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 50.636252][ T406] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 50.726319][ T509] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 50.786269][ T406] usb 5-1: Using ep0 maxpacket: 32 [ 50.793536][ T406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.805128][ T406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.815003][ T406] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 50.824449][ T406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.835718][ T406] usb 5-1: config 0 descriptor?? [ 50.843418][ T406] hub 5-1:0.0: USB hub found [ 50.886312][ T509] usb 2-1: Using ep0 maxpacket: 32 [ 50.892628][ T509] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 50.896633][ T45] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 50.901440][ T509] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 50.919582][ T509] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 50.930726][ T509] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 50.943964][ T509] usb 2-1: config 0 interface 0 has no altsetting 0 [ 50.952096][ T509] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 50.961272][ T509] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 50.969771][ T509] usb 2-1: Product: syz [ 50.973989][ T509] usb 2-1: Manufacturer: syz [ 50.978672][ T509] usb 2-1: SerialNumber: syz [ 50.984445][ T509] usb 2-1: config 0 descriptor?? [ 51.047073][ T406] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 51.058021][ T45] usb 1-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 51.075069][ T45] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 51.084612][ T45] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 51.094170][ T406] usbhid 5-1:0.0: can't add hid device: -71 [ 51.100928][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.109304][ T406] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 51.118587][ T368] usb 4-1: USB disconnect, device number 18 [ 51.131861][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 51.131877][ T36] audit: type=1400 audit(1781305330.260:232): avc: denied { map } for pid=717 comm="syz.3.126" path="socket:[6363]" dev="sockfs" ino=6363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 51.168094][ T45] usb 1-1: config 0 descriptor?? [ 51.179210][ T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.196923][ T36] audit: type=1400 audit(1781305330.330:233): avc: denied { bind } for pid=709 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.238039][ T726] overlayfs: failed to resolve './bus': -2 [ 51.245229][ T36] audit: type=1400 audit(1781305330.370:234): avc: denied { name_bind } for pid=725 comm="syz.3.127" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 51.269976][ T36] audit: type=1400 audit(1781305330.370:235): avc: denied { node_bind } for pid=725 comm="syz.3.127" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 51.326718][ T406] usb 5-1: USB disconnect, device number 6 [ 51.606234][ T368] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 51.616240][ T406] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 51.757379][ T368] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.767637][ T368] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.777131][ T406] usb 5-1: not running at top speed; connect to a high speed hub [ 51.779309][ T368] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 51.786622][ T406] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 51.795205][ T368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.806483][ T406] usb 5-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice= 0.40 [ 51.812645][ T368] usb 4-1: Product: syz [ 51.821841][ T406] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.825310][ T368] usb 4-1: Manufacturer: syz [ 51.833796][ T406] usb 5-1: Product: syz [ 51.838038][ T368] usb 4-1: SerialNumber: syz [ 51.842401][ T406] usb 5-1: Manufacturer: syz [ 51.851233][ T406] usb 5-1: SerialNumber: syz [ 52.056642][ T368] usb 4-1: 0:2 : does not exist [ 52.061722][ T368] usb 4-1: unit 9 not found! [ 52.068918][ T368] usb 4-1: 4:0: cannot get min/max values for control 1 (id 4) [ 52.079101][ T368] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4) [ 52.089163][ T368] usb 4-1: 4:0: cannot get min/max values for control 3 (id 4) [ 52.098966][ T368] usb 4-1: 4:0: cannot get min/max values for control 5 (id 4) [ 52.108881][ T368] usb 4-1: 4:0: cannot get min/max values for control 10 (id 4) [ 52.122247][ T368] usb 4-1: USB disconnect, device number 19 [ 52.132900][ T714] udevd[714]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.576711][ T406] usb 5-1: MIDIStreaming interface descriptor not found [ 52.594568][ T736] input: syz0 as /devices/virtual/input/input11 [ 52.600444][ T406] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 52.623499][ T406] usb 5-1: USB disconnect, device number 7 [ 52.642694][ T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.677373][ T36] audit: type=1400 audit(1781305331.810:236): avc: denied { read write } for pid=742 comm="syz.4.132" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 52.695243][ T743] netlink: 72 bytes leftover after parsing attributes in process `syz.4.132'. [ 52.701642][ T36] audit: type=1400 audit(1781305331.810:237): avc: denied { open } for pid=742 comm="syz.4.132" path="/dev/usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 52.733839][ T36] audit: type=1400 audit(1781305331.840:238): avc: denied { ioctl } for pid=742 comm="syz.4.132" path="/dev/usbmon9" dev="devtmpfs" ino=118 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 52.826260][ T368] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 52.986249][ T368] usb 4-1: Using ep0 maxpacket: 8 [ 52.992481][ T368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 53.003890][ T368] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 53.016800][ T368] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 53.026220][ T368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.035029][ T368] usb 4-1: config 0 descriptor?? [ 53.086275][ T406] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 53.236257][ T406] usb 5-1: Using ep0 maxpacket: 16 [ 53.242612][ T406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.258444][ T36] audit: type=1400 audit(1781305332.390:239): avc: denied { ioctl } for pid=733 comm="syz.3.129" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.283863][ T406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.293850][ T406] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 53.296587][ T509] usb 2-1: USB disconnect, device number 20 [ 53.307410][ T406] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 53.321924][ T36] audit: type=1400 audit(1781305332.390:240): avc: denied { getattr } for pid=733 comm="syz.3.129" path="mnt:[4026532401]" dev="nsfs" ino=4026532401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.347760][ T406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.362408][ T406] usb 5-1: config 0 descriptor?? [ 53.416318][ T368] usbhid 4-1:0.0: can't add hid device: -71 [ 53.424805][ T368] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 53.447545][ T368] usb 4-1: USB disconnect, device number 20 [ 53.576400][ T681] usb 1-1: USB disconnect, device number 17 [ 53.601111][ T751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'. [ 53.766299][ T509] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 53.774711][ T406] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 53.784710][ T406] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 53.927376][ T509] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 53.935608][ T509] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.946225][ T509] usb 2-1: config 0 has no interface number 0 [ 53.954059][ T509] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 53.963270][ T509] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.966503][ T681] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 53.971414][ T509] usb 2-1: Product: syz [ 53.983265][ T509] usb 2-1: Manufacturer: syz [ 53.987972][ T509] usb 2-1: SerialNumber: syz [ 53.996532][ T36] audit: type=1400 audit(1781305333.120:241): avc: denied { accept } for pid=744 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.996669][ T509] usb 2-1: config 0 descriptor?? [ 54.025512][ T509] hub 2-1:0.31: bad descriptor, ignoring hub [ 54.031689][ T509] hub 2-1:0.31: probe with driver hub failed with error -5 [ 54.039578][ T509] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 54.046144][ T509] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 54.056068][ T509] usb 2-1: Failed to create links for entity 6 [ 54.062357][ T509] usb 2-1: Failed to register entities (-22). [ 54.076330][ T368] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 54.137992][ T681] usb 1-1: unable to get BOS descriptor or descriptor too short [ 54.146091][ T681] usb 1-1: not running at top speed; connect to a high speed hub [ 54.154976][ T681] usb 1-1: config 9 has an invalid interface number: 65 but max is 0 [ 54.163414][ T681] usb 1-1: config 9 has no interface number 0 [ 54.169791][ T681] usb 1-1: config 9 interface 65 has no altsetting 0 [ 54.178288][ T681] usb 1-1: New USB device found, idVendor=12d1, idProduct=ccef, bcdDevice=e5.56 [ 54.187659][ T681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.195755][ T681] usb 1-1: Product: syz [ 54.200306][ T681] usb 1-1: Manufacturer: syz [ 54.205052][ T681] usb 1-1: SerialNumber: syz [ 54.236306][ T368] usb 4-1: Using ep0 maxpacket: 8 [ 54.247722][ T368] usb 4-1: unable to get BOS descriptor or descriptor too short [ 54.266660][ T368] usb 4-1: config index 0 descriptor too short (expected 65455, got 98) [ 54.275176][ T368] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 221, changing to 11 [ 54.286911][ T368] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 54.297320][ T368] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 54.308919][ T368] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.318391][ T368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.326690][ T368] usb 4-1: Product: syz [ 54.330981][ T368] usb 4-1: Manufacturer: syz [ 54.335655][ T368] usb 4-1: SerialNumber: syz [ 54.346389][ T45] usb 2-1: USB disconnect, device number 21 [ 54.414117][ T755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.422930][ T755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.446628][ T681] cdc_mbim 1-1:9.65: More than one union descriptor, skipping ... [ 54.454704][ T681] cdc_mbim 1-1:9.65: CDC Union missing and no IAD found [ 54.462038][ T681] cdc_mbim 1-1:9.65: bind() failure [ 54.471599][ T681] usb 1-1: USB disconnect, device number 18 [ 54.644685][ T773] netlink: 20 bytes leftover after parsing attributes in process `syz.3.139'. [ 54.670448][ T772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.679950][ T772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.692844][ T773] team_slave_1: entered promiscuous mode [ 54.700396][ T773] team_slave_1: entered allmulticast mode [ 54.847029][ T406] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 54.875846][ T406] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 54.932086][ T406] microsoft 0003:045E:07DA.0005: no inputs found [ 54.947369][ T406] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 54.984945][ T406] usb 5-1: USB disconnect, device number 8 [ 55.262826][ T681] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 55.433310][ T681] usb 1-1: Using ep0 maxpacket: 32 [ 55.444800][ T681] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.455834][ T681] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.476764][ T681] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 55.485912][ T681] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 55.494369][ T681] usb 1-1: Product: syz [ 55.498600][ T681] usb 1-1: Manufacturer: syz [ 55.509093][ T681] hub 1-1:4.0: USB hub found [ 55.528047][ T817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.537553][ T817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.625189][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 55.725426][ T681] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 55.777656][ T681] usb 1-1: USB disconnect, device number 19 [ 55.851217][ T827] incfs: Can't find or create .index dir in ./file0 [ 55.858054][ T827] incfs: mount failed -22 [ 55.864944][ T827] incfs: Can't find or create .incomplete dir in ./file0 [ 55.872502][ T827] incfs: mount failed -22 [ 55.880003][ T827] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 56.168689][ T509] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 56.329634][ T509] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 56.342362][ T509] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 56.351857][ T509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.359975][ T509] usb 5-1: Product: syz [ 56.364587][ T509] usb 5-1: Manufacturer: syz [ 56.369292][ T509] usb 5-1: SerialNumber: syz [ 56.541704][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 56.594651][ T509] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 56.602332][ T509] usb 5-1: cannot request logical cluster ID: 3 (err: -71) [ 56.609964][ T509] usb 5-1: unit 80 not found! [ 56.631968][ T509] usb 5-1: USB disconnect, device number 9 [ 56.653554][ T714] udevd[714]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.712227][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 56.718669][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 56.727905][ T10] usb 1-1: config 0 has no interface number 0 [ 56.736244][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 56.745839][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.753998][ T10] usb 1-1: Product: syz [ 56.758480][ T10] usb 1-1: Manufacturer: syz [ 56.763224][ T10] usb 1-1: SerialNumber: syz [ 56.769440][ T10] usb 1-1: config 0 descriptor?? [ 56.779386][ T10] smsc95xx v2.0.0 [ 56.973802][ T368] cdc_ncm 4-1:1.0: bind() failure [ 56.988191][ T368] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 56.997968][ T368] cdc_ncm 4-1:1.1: bind() failure [ 57.007161][ T368] usb 4-1: USB disconnect, device number 21 [ 57.177375][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 57.177398][ T36] audit: type=1400 audit(1781305336.156:267): avc: denied { getopt } for pid=834 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.210332][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 57.235019][ T36] audit: type=1400 audit(1781305336.193:268): avc: denied { bind } for pid=834 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 57.259068][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 57.639397][ T406] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 57.747734][ T879] : renamed from bridge0 (while UP) [ 57.809924][ T406] usb 4-1: Using ep0 maxpacket: 32 [ 57.816823][ T406] usb 4-1: unable to get BOS descriptor or descriptor too short [ 57.825684][ T406] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.836203][ T406] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.851020][ T406] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 57.867585][ T406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.877403][ T406] usb 4-1: Product: syz [ 57.882444][ T406] usb 4-1: Manufacturer: syz [ 57.887462][ T406] usb 4-1: SerialNumber: syz [ 57.918452][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 57.938384][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 57.959359][ T10] usb 1-1: USB disconnect, device number 20 [ 58.116957][ T406] usb 4-1: MIDIStreaming interface descriptor not found [ 58.129017][ T406] usb 4-1: USB disconnect, device number 22 [ 58.428043][ T45] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 58.473375][ T36] audit: type=1400 audit(1781305337.375:269): avc: denied { ioctl } for pid=895 comm="syz.0.166" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 58.589072][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.600106][ T45] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 58.609233][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.618098][ T45] usb 5-1: config 0 descriptor?? [ 58.747799][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 58.838527][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 58.844574][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 58.853330][ T45] usb 5-1: USB disconnect, device number 10 [ 58.908681][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 58.918589][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 58.930112][ T10] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 58.939201][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.947320][ T10] usb 1-1: Product: syz [ 58.951594][ T10] usb 1-1: Manufacturer: syz [ 58.956283][ T10] usb 1-1: SerialNumber: syz [ 58.961934][ T10] usb 1-1: config 0 descriptor?? [ 58.967184][ T896] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 58.974450][ T896] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 59.196669][ T896] input: syz1 as /devices/virtual/input/input14 [ 59.206647][ T896] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 59.213931][ T896] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 59.301944][ T45] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 59.463520][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.474516][ T45] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 59.483657][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.493090][ T45] usb 5-1: config 0 descriptor?? [ 59.648557][ T10] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 59.865303][ T10] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 59.875602][ T10] usb 1-1: USB disconnect, device number 21 [ 60.358460][ T45] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 60.367054][ T45] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 60.379414][ T45] usb 5-1: USB disconnect, device number 11 [ 60.385369][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 72.677763][ T919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.169'. [ 72.727116][ T36] audit: type=1400 audit(71.593:270): avc: denied { block_suspend } for pid=927 comm="syz.0.173" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.797637][ T36] audit: type=1400 audit(71.668:271): avc: denied { setopt } for pid=933 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.828457][ T934] ip6gre0: mtu less than device minimum [ 72.931524][ T36] audit: type=1400 audit(71.781:272): avc: denied { create } for pid=936 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 72.975616][ T509] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 72.977078][ T36] audit: type=1400 audit(71.828:273): avc: denied { accept } for pid=936 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 73.026417][ T36] audit: type=1400 audit(71.856:274): avc: denied { read } for pid=936 comm="syz.0.175" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.049132][ T36] audit: type=1400 audit(71.856:275): avc: denied { open } for pid=936 comm="syz.0.175" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.159441][ T509] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 73.167719][ T509] usb 4-1: config 0 has no interface number 0 [ 73.175593][ T509] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 73.185107][ T509] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.193228][ T509] usb 4-1: Product: syz [ 73.197456][ T509] usb 4-1: Manufacturer: syz [ 73.202142][ T509] usb 4-1: SerialNumber: syz [ 73.212566][ T509] usb 4-1: config 0 descriptor?? [ 73.225769][ T946] SELinux: failed to load policy [ 73.230791][ T36] audit: type=1400 audit(72.062:276): avc: denied { load_policy } for pid=945 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 73.252921][ T946] rtc_cmos 00:00: Alarms can be up to one day in the future [ 73.260474][ T36] audit: type=1400 audit(72.090:277): avc: denied { ioctl } for pid=945 comm="syz.0.179" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.321950][ T36] audit: type=1400 audit(72.156:278): avc: denied { getopt } for pid=947 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.362269][ T36] audit: type=1400 audit(72.184:279): avc: denied { unmount } for pid=569 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.399729][ T953] rust_binder: Failure in copy_transaction_data: EINVAL [ 73.399824][ T953] rust_binder: 952:953 transaction to 952 failed: EINVAL [ 73.432723][ T956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.182'. [ 73.439484][ T509] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 73.456089][ T509] usb 4-1: No valid video chain found. [ 73.463871][ T509] usb 4-1: USB disconnect, device number 23 [ 73.505048][ T959] tmpfs: Unknown parameter 'no' [ 73.511221][ T959] futex_wake_op: syz.4.183 tries to shift op by -1; fix this program [ 73.732334][ T961] fuse: Bad value for 'group_id' [ 73.737508][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 73.744756][ T961] fuse: Bad value for 'group_id' [ 73.751487][ T962] fuse: Bad value for 'group_id' [ 73.757042][ T962] fuse: Bad value for 'group_id' [ 73.905908][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 73.914480][ T9] usb 1-1: config 3 has an invalid interface number: 40 but max is 0 [ 73.922705][ T9] usb 1-1: config 3 has no interface number 0 [ 73.928902][ T9] usb 1-1: config 3 interface 40 has no altsetting 0 [ 73.937143][ T9] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice= 6.be [ 73.946344][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.954729][ T9] usb 1-1: Product: syz [ 73.959049][ T9] usb 1-1: Manufacturer: syz [ 73.963719][ T9] usb 1-1: SerialNumber: syz [ 74.149652][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 74.185079][ T9] usb-storage 1-1:3.40: USB Mass Storage device detected [ 74.194848][ T9] usb-storage 1-1:3.40: device ignored [ 74.239838][ T9] usb 1-1: USB disconnect, device number 22 [ 74.277580][ T368] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 74.321229][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.332340][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.342305][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 74.351413][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.360439][ T10] usb 2-1: config 0 descriptor?? [ 74.437494][ T368] usb 4-1: Using ep0 maxpacket: 8 [ 74.445375][ T368] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 74.454587][ T368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.463374][ T368] usb 4-1: Product: syz [ 74.467683][ T368] usb 4-1: Manufacturer: syz [ 74.472629][ T368] usb 4-1: SerialNumber: syz [ 74.581742][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 74.587841][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 74.596842][ T10] usb 2-1: USB disconnect, device number 23 [ 74.693979][ T977] rust_binder: Write failure EFAULT in pid:64 [ 74.694607][ T977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.709505][ T977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.720480][ T368] usb 4-1: failed waiting for Axe-Fx III to boot: -71 [ 74.727477][ T368] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 74.737695][ T368] usb 4-1: USB disconnect, device number 24 [ 74.768773][ T985] hub 8-0:1.0: USB hub found [ 74.773586][ T985] hub 8-0:1.0: 1 port detected [ 74.780642][ T985] input: syz0 as /devices/virtual/input/input16 [ 74.968234][ T1000] process 'syz.0.196' launched '/dev/fd/3' with NULL argv: empty string added [ 75.055793][ T45] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 75.216785][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.227834][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.237647][ T45] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 75.246737][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.262060][ T45] usb 2-1: config 0 descriptor?? [ 75.279020][ T1009] tipc: Started in network mode [ 75.283992][ T1009] tipc: Node identity 4, cluster identity 4711 [ 75.290487][ T1009] tipc: Node number set to 4 [ 75.383278][ T1024] netlink: 'syz.3.204': attribute type 10 has an invalid length. [ 75.391171][ T1024] netlink: 40 bytes leftover after parsing attributes in process `syz.3.204'. [ 75.391983][ T681] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 75.401553][ T1024] veth1: entered promiscuous mode [ 75.546182][ T681] usb 1-1: device descriptor read/64, error -71 [ 75.801948][ T681] usb 1-1: device descriptor read/64, error -71 [ 76.057822][ T681] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 76.196370][ T681] usb 1-1: device descriptor read/64, error -71 [ 76.243963][ T45] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 76.252250][ T45] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17 [ 76.269524][ T45] usb 2-1: USB disconnect, device number 24 [ 76.295013][ T1040] loop9: detected capacity change from 0 to 7 [ 76.456171][ T1044] netlink: 32 bytes leftover after parsing attributes in process `syz.3.210'. [ 76.467466][ T681] usb 1-1: device descriptor read/64, error -71 [ 76.475712][ T1041] Invalid logical block size (1050184017) [ 76.491331][ T1040] 9pnet_fd: p9_fd_create_tcp (1040): problem connecting socket to 127.0.0.1 [ 76.590908][ T681] usb usb1-port1: attempt power cycle [ 76.737779][ T1062] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.836177][ T45] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 76.899942][ T406] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 76.953245][ T681] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 76.975875][ T681] usb 1-1: device descriptor read/8, error -71 [ 76.995870][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 77.002237][ T45] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 77.010707][ T45] usb 2-1: config 0 has no interface number 0 [ 77.016857][ T45] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 77.028531][ T45] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 77.037640][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.045783][ T45] usb 2-1: Product: syz [ 77.050313][ T45] usb 2-1: Manufacturer: syz [ 77.054963][ T45] usb 2-1: SerialNumber: syz [ 77.060627][ T45] usb 2-1: config 0 descriptor?? [ 77.065983][ T1051] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 77.073246][ T406] usb 4-1: Using ep0 maxpacket: 8 [ 77.080048][ T406] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 77.088234][ T406] usb 4-1: config 0 has no interface number 0 [ 77.096011][ T406] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 77.105163][ T406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.113283][ T311] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 77.120960][ T406] usb 4-1: Product: syz [ 77.125286][ T406] usb 4-1: Manufacturer: syz [ 77.130201][ T406] usb 4-1: SerialNumber: syz [ 77.135618][ T681] usb 1-1: device descriptor read/8, error -71 [ 77.142483][ T406] usb 4-1: config 0 descriptor?? [ 77.283682][ T311] usb 5-1: Using ep0 maxpacket: 32 [ 77.290032][ T311] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.300228][ T311] usb 5-1: config 0 has no interfaces? [ 77.305764][ T311] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 77.314854][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.325021][ T311] usb 5-1: config 0 descriptor?? [ 77.361926][ T406] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 77.372561][ T406] usb 4-1: USB disconnect, device number 25 [ 77.387845][ T1066] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 77.396565][ T681] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 77.434057][ T681] usb 1-1: device descriptor read/8, error -71 [ 77.554146][ T368] usb 5-1: USB disconnect, device number 12 [ 77.583465][ T681] usb 1-1: device descriptor read/8, error -71 [ 77.699531][ T681] usb usb1-port1: unable to enumerate USB device [ 77.846384][ T45] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 77.856696][ T45] asix 2-1:0.188: probe with driver asix failed with error -32 [ 77.931519][ T1070] bond_slave_0: mtu less than device minimum [ 77.937904][ T1070] netlink: 72 bytes leftover after parsing attributes in process `syz.3.218'. [ 78.369507][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 78.369526][ T36] audit: type=1400 audit(76.884:296): avc: denied { listen } for pid=1080 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.395537][ T36] audit: type=1400 audit(76.893:297): avc: denied { accept } for pid=1080 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.426236][ T36] audit: type=1400 audit(76.940:298): avc: denied { read } for pid=1080 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.464084][ T1089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.473701][ T1089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.499709][ T1091] veth1_to_bond: entered allmulticast mode [ 78.505847][ T1091] veth1_to_bond: entered promiscuous mode [ 78.553795][ T1091] veth1_to_bond: left promiscuous mode [ 78.559554][ T1091] veth1_to_bond: left allmulticast mode [ 78.645702][ T36] audit: type=1400 audit(77.146:299): avc: denied { create } for pid=1098 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 78.690419][ T1102] netlink: 76 bytes leftover after parsing attributes in process `syz.3.228'. [ 78.699538][ T1102] netlink: 32 bytes leftover after parsing attributes in process `syz.3.228'. [ 78.712111][ T36] audit: type=1400 audit(77.212:300): avc: denied { bind } for pid=1101 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.734691][ T36] audit: type=1400 audit(77.212:301): avc: denied { node_bind } for pid=1101 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 79.075551][ T1111] incfs: Can't find or create .index dir in ./file0 [ 79.097657][ T1111] incfs: mount failed -22 [ 79.108594][ T1111] incfs: Can't find or create .incomplete dir in ./file0 [ 79.125563][ T1111] incfs: mount failed -22 [ 79.172820][ T36] audit: type=1400 audit(77.644:302): avc: denied { connect } for pid=1116 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.197423][ T36] audit: type=1400 audit(77.662:303): avc: denied { write } for pid=1116 comm="syz.1.233" laddr=fe80::14 lport=2 faddr=fe80::aa fport=19999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.284493][ T45] kernel write not supported for file /ppp (pid: 45 comm: kworker/1:1) [ 79.293722][ T1121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.300410][ T36] audit: type=1400 audit(77.756:304): avc: denied { accept } for pid=1118 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.320875][ T1121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.332462][ T36] audit: type=1400 audit(77.756:305): avc: denied { ioctl } for pid=1118 comm="syz.0.235" path="socket:[9047]" dev="sockfs" ino=9047 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.394421][ T368] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 79.424355][ T1123] usb usb8: usbfs: process 1123 (syz.0.236) did not claim interface 0 before use [ 79.564968][ T368] usb 4-1: Using ep0 maxpacket: 32 [ 79.571623][ T368] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 79.583504][ T368] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 1024, setting to 64 [ 79.598203][ T368] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 79.607641][ T368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.615784][ T368] usb 4-1: Product: syz [ 79.621043][ T368] usb 4-1: Manufacturer: syz [ 79.625803][ T368] usb 4-1: SerialNumber: syz [ 79.692902][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 79.858241][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 79.879168][ T368] usb 4-1: USB disconnect, device number 26 [ 79.896185][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.911089][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.913701][ T1052] udevd[1052]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.938241][ T10] usb 1-1: string descriptor 0 read error: -22 [ 79.944646][ T10] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 79.955323][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.975783][ T10] usb 1-1: selecting invalid altsetting 1 [ 79.985968][ T10] usb 1-1: unit 3 not found! [ 80.065251][ T1131] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 80.189109][ T10] usb 1-1: cannot request logical cluster ID: 0 (err: -71) [ 80.198310][ T10] usb 1-1: invalid MIXER UNIT descriptor 6 [ 80.209828][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 80.230374][ T1052] udevd[1052]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.241079][ T10] usb 1-1: USB disconnect, device number 27 [ 80.314107][ T1137] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 80.429278][ T1143] kvm: user requested TSC rate below hardware speed [ 80.443086][ T1149] incfs: Can't find or create .index dir in ./file0 [ 80.454021][ T1149] incfs: mount failed -22 [ 80.461174][ T1149] incfs: Can't find or create .incomplete dir in ./file0 [ 80.469324][ T1149] incfs: mount failed -22 [ 80.499580][ T1155] syzkaller1: entered promiscuous mode [ 80.505497][ T1155] syzkaller1: entered allmulticast mode [ 80.631165][ T1165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 80.661592][ T1165] rust_binder: Error while translating object. [ 80.664206][ T1165] rust_binder: Failure in copy_transaction_data: EBADF [ 80.684093][ T1165] rust_binder: 1163:1165 transaction to 1163 failed: EBADF [ 80.920629][ T1177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.964107][ T1177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.136901][ T1184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.164235][ T1184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.259906][ T406] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 81.442557][ T406] usb 4-1: unable to get BOS descriptor or descriptor too short [ 81.453335][ T406] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 81.486134][ T406] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 81.496813][ T1190] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 81.501092][ T406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.509086][ T1190] fuse: Bad value for 'group_id' [ 81.517774][ T1190] fuse: Bad value for 'group_id' [ 81.524499][ T406] usb 4-1: Product: syz [ 81.528851][ T406] usb 4-1: Manufacturer: syz [ 81.533653][ T406] usb 4-1: SerialNumber: syz [ 81.762154][ T406] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 81.770082][ T406] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 81.791602][ T406] usb 4-1: USB disconnect, device number 27 [ 81.813597][ T1052] udevd[1052]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.155390][ T311] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 82.316401][ T311] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 82.330537][ T311] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.347392][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.360908][ T311] usb 5-1: config 0 descriptor?? [ 82.369679][ T311] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 82.496504][ T406] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 82.525367][ T1244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.534079][ T1244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.668306][ T406] usb 1-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config [ 82.678808][ T406] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.688573][ T406] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 82.697786][ T406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 82.706004][ T406] usb 1-1: SerialNumber: syz [ 82.858932][ T9] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 82.933093][ T406] usb 1-1: 0:2 : does not exist [ 82.945772][ T406] usb 1-1: USB disconnect, device number 28 [ 82.959034][ T1052] udevd[1052]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.030166][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 83.040422][ T9] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 83.049508][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.057715][ T9] usb 4-1: Product: syz [ 83.061973][ T9] usb 4-1: Manufacturer: syz [ 83.066598][ T9] usb 4-1: SerialNumber: syz [ 83.159445][ T1254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.168138][ T1254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.288681][ T1248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.297419][ T1248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.311127][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 83.323121][ T9] usb 4-1: USB disconnect, device number 28 [ 83.334671][ T921] udevd[921]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.839643][ T406] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 83.999542][ T406] usb 1-1: Using ep0 maxpacket: 8 [ 84.005797][ T406] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 84.016793][ T406] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 84.028597][ T406] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 84.038334][ T406] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.052758][ T406] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 84.061896][ T406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.069973][ T406] usb 1-1: Product: syz [ 84.074201][ T406] usb 1-1: Manufacturer: syz [ 84.078847][ T406] usb 1-1: SerialNumber: syz [ 84.084398][ T406] usb 1-1: config 0 descriptor?? [ 84.120580][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 84.287361][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 84.293928][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.320730][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.321683][ T1268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.339065][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 84.343503][ T1268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.355564][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.366631][ T406] usb 1-1: USB disconnect, device number 29 [ 84.378146][ T9] usb 4-1: config 0 descriptor?? [ 84.815940][ T9] wacom 0003:056A:0028.0006: unknown main item tag 0x2 [ 84.823013][ T9] wacom 0003:056A:0028.0006: unknown main item tag 0x0 [ 84.829950][ T9] wacom 0003:056A:0028.0006: unknown main item tag 0x0 [ 84.836976][ T9] wacom 0003:056A:0028.0006: unknown main item tag 0x0 [ 84.843927][ T9] wacom 0003:056A:0028.0006: unknown main item tag 0x0 [ 84.850874][ T9] wacom 0003:056A:0028.0006: unknown main item tag 0x0 [ 84.858234][ T9] wacom 0003:056A:0028.0006: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 84.868752][ T9] wacom 0003:056A:0028.0006: hidraw0: USB HID v0.04 Device [HID 056a:0028] on usb-dummy_hcd.3-1/input0 [ 84.881167][ T9] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0028.0006/input/input18 [ 85.039611][ T465] usb 4-1: USB disconnect, device number 29 [ 85.126889][ T9] usb 5-1: USB disconnect, device number 13 [ 85.159812][ T1289] netlink: 176 bytes leftover after parsing attributes in process `syz.1.293'. [ 85.169533][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 85.169552][ T36] audit: type=1400 audit(83.272:323): avc: denied { create } for pid=1288 comm="syz.1.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 85.194611][ T1289] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 85.208457][ T406] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 85.272355][ T1297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.283608][ T1297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.293544][ T1297] netlink: 'syz.1.296': attribute type 7 has an invalid length. [ 85.301933][ T36] audit: type=1400 audit(83.394:324): avc: denied { write } for pid=1296 comm="syz.1.296" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.325144][ T1297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.325777][ T1297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.344188][ T1297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.352963][ T1297] rust_binder: 1296:1297 transaction to 0 failed: ENOENT [ 85.353595][ T36] audit: type=1400 audit(83.432:325): avc: denied { setattr } for pid=1296 comm="syz.1.296" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.404097][ T406] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.415153][ T406] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 85.426112][ T406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.444378][ T406] usb 1-1: config 0 descriptor?? [ 85.568822][ T1297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.584134][ T1297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.619892][ T36] audit: type=1400 audit(83.685:326): avc: denied { ioctl } for pid=1304 comm="syz.4.299" path="/58/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.683835][ T406] usbhid 1-1:0.0: can't add hid device: -71 [ 85.689867][ T406] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 85.705804][ T406] usb 1-1: USB disconnect, device number 30 [ 85.907718][ T465] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 85.971708][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 86.082164][ T465] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 86.095294][ T465] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.104421][ T465] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.110400][ T9] usb 5-1: device descriptor read/64, error -71 [ 86.120802][ T465] usb 4-1: config 0 descriptor?? [ 86.127011][ T465] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 86.142286][ T368] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 86.303306][ T368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.314438][ T368] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 86.323568][ T368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.332510][ T368] usb 1-1: config 0 descriptor?? [ 86.366087][ T9] usb 5-1: device descriptor read/64, error -71 [ 86.632643][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 86.771189][ T9] usb 5-1: device descriptor read/64, error -71 [ 87.048333][ T9] usb 5-1: device descriptor read/64, error -71 [ 87.165756][ T9] usb usb5-port1: attempt power cycle [ 87.198010][ T368] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 87.205978][ T368] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input21 [ 87.246576][ C0] ------------[ cut here ]------------ [ 87.252068][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 87.260663][ C0] index 1083 is out of range for type 'const int[34]' [ 87.267450][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 87.267478][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 87.267492][ C0] Call Trace: [ 87.267499][ C0] [ 87.267512][ C0] __dump_stack+0x21/0x30 [ 87.267546][ C0] dump_stack_lvl+0x140/0x1c0 [ 87.267572][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.267597][ C0] ? default_idle_call+0x3e/0x80 [ 87.267621][ C0] ? start_kernel+0x462/0x4bb [ 87.267638][ C0] ? x86_64_start_kernel+0x6a/0x7b [ 87.267658][ C0] dump_stack+0x19/0x20 [ 87.267682][ C0] ubsan_epilogue+0xe/0x40 [ 87.267698][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 87.267725][ C0] ? __kasan_check_write+0x18/0x20 [ 87.267743][ C0] aiptek_irq+0x20cb/0x2a00 [ 87.267760][ C0] ? kcov_remote_start+0x1d3/0x3c0 [ 87.267779][ C0] __usb_hcd_giveback_urb+0x375/0x540 [ 87.267799][ C0] usb_hcd_giveback_urb+0x11b/0x410 [ 87.267817][ C0] dummy_timer+0x816/0x4300 [ 87.267841][ C0] ? ktime_get+0x1df/0x210 [ 87.267867][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 87.267886][ C0] ? timerqueue_del+0xd7/0x130 [ 87.267907][ C0] ? __hrtimer_run_queues+0x2c4/0x8e0 [ 87.267933][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 87.267951][ C0] __hrtimer_run_queues+0x3ab/0x8e0 [ 87.267979][ C0] ? hrtimer_interrupt+0xf00/0xf00 [ 87.268004][ C0] ? read_tsc+0xd/0x20 [ 87.268027][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 87.268049][ C0] hrtimer_run_softirq+0x159/0x560 [ 87.268064][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 87.268089][ C0] handle_softirqs+0x1aa/0x630 [ 87.268107][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 87.268131][ C0] __irq_exit_rcu+0x47/0xb0 [ 87.268148][ C0] irq_exit_rcu+0xd/0x30 [ 87.268164][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 87.268183][ C0] [ 87.268188][ C0] [ 87.268194][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 87.268211][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 87.268234][ C0] Code: cc cc cc cc cc cc cc b8 c0 95 df c6 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 bf 3e 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 87.268248][ C0] RSP: 0018:ffffffff87407da0 EFLAGS: 000002c6 [ 87.268269][ C0] RAX: ffff8881f6e00000 RBX: ffffffff874156c0 RCX: ffffffff85a89bcd [ 87.268283][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000555d0c [ 87.268294][ C0] RBP: ffffffff87407da0 R08: ffff8881f6e395eb R09: 1ffff1103edc72bd [ 87.268307][ C0] R10: dffffc0000000000 R11: ffffed103edc72be R12: 0000000000000000 [ 87.268324][ C0] R13: 1ffffffff0e82ad8 R14: dffffc0000000000 R15: ffffffff87ed4668 [ 87.268338][ C0] ? ct_kernel_exit+0x7d/0xb0 [ 87.268360][ C0] default_idle+0x17/0x30 [ 87.268381][ C0] arch_cpu_idle+0xd/0x20 [ 87.268401][ C0] default_idle_call+0x3e/0x80 [ 87.268422][ C0] do_idle+0x2fc/0x570 [ 87.268441][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 87.268463][ C0] cpu_startup_entry+0x47/0x60 [ 87.268482][ C0] rest_init+0x10b/0x130 [ 87.268504][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 87.268525][ C0] start_kernel+0x462/0x4bb [ 87.268542][ C0] x86_64_start_reservations+0x2e/0x30 [ 87.268561][ C0] x86_64_start_kernel+0x6a/0x7b [ 87.268580][ C0] common_startup_64+0x13b/0x157 [ 87.268606][ C0] [ 87.268612][ C0] ---[ end trace ]--- [ 87.600353][ C0] ================================================================== [ 87.608430][ C0] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x20e9/0x2a00 [ 87.615987][ C0] Read of size 4 at addr ffffffff8670fbac by task swapper/0/0 [ 87.623444][ C0] [ 87.625775][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 87.625799][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 87.625810][ C0] Call Trace: [ 87.625817][ C0] [ 87.625824][ C0] __dump_stack+0x21/0x30 [ 87.625853][ C0] dump_stack_lvl+0x140/0x1c0 [ 87.625878][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.625903][ C0] ? __cfi__printk+0x10/0x10 [ 87.625946][ C0] print_address_description+0x71/0x210 [ 87.625971][ C0] print_report+0x4a/0x70 [ 87.625993][ C0] kasan_report+0x162/0x1a0 [ 87.626015][ C0] ? aiptek_irq+0x20e9/0x2a00 [ 87.626031][ C0] ? aiptek_irq+0x20e9/0x2a00 [ 87.626045][ C0] __asan_report_load4_noabort+0x18/0x20 [ 87.626084][ C0] aiptek_irq+0x20e9/0x2a00 [ 87.626109][ C0] ? kcov_remote_start+0x1d3/0x3c0 [ 87.626138][ C0] __usb_hcd_giveback_urb+0x375/0x540 [ 87.626158][ C0] usb_hcd_giveback_urb+0x11b/0x410 [ 87.626175][ C0] dummy_timer+0x816/0x4300 [ 87.626199][ C0] ? ktime_get+0x1df/0x210 [ 87.626219][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 87.626238][ C0] ? timerqueue_del+0xd7/0x130 [ 87.626260][ C0] ? __hrtimer_run_queues+0x2c4/0x8e0 [ 87.626285][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 87.626303][ C0] __hrtimer_run_queues+0x3ab/0x8e0 [ 87.626331][ C0] ? hrtimer_interrupt+0xf00/0xf00 [ 87.626355][ C0] ? read_tsc+0xd/0x20 [ 87.626378][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 87.626401][ C0] hrtimer_run_softirq+0x159/0x560 [ 87.626420][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 87.626445][ C0] handle_softirqs+0x1aa/0x630 [ 87.626464][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 87.626488][ C0] __irq_exit_rcu+0x47/0xb0 [ 87.626505][ C0] irq_exit_rcu+0xd/0x30 [ 87.626521][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 87.626540][ C0] [ 87.626546][ C0] [ 87.626552][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 87.626569][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 87.626591][ C0] Code: cc cc cc cc cc cc cc b8 c0 95 df c6 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 bf 3e 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 87.626606][ C0] RSP: 0018:ffffffff87407da0 EFLAGS: 000002c6 [ 87.626622][ C0] RAX: ffff8881f6e00000 RBX: ffffffff874156c0 RCX: ffffffff85a89bcd [ 87.626636][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000555d0c [ 87.626647][ C0] RBP: ffffffff87407da0 R08: ffff8881f6e395eb R09: 1ffff1103edc72bd [ 87.626660][ C0] R10: dffffc0000000000 R11: ffffed103edc72be R12: 0000000000000000 [ 87.626672][ C0] R13: 1ffffffff0e82ad8 R14: dffffc0000000000 R15: ffffffff87ed4668 [ 87.626686][ C0] ? ct_kernel_exit+0x7d/0xb0 [ 87.626708][ C0] default_idle+0x17/0x30 [ 87.626729][ C0] arch_cpu_idle+0xd/0x20 [ 87.626772][ C0] default_idle_call+0x3e/0x80 [ 87.626811][ C0] do_idle+0x2fc/0x570 [ 87.626830][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 87.626852][ C0] cpu_startup_entry+0x47/0x60 [ 87.626872][ C0] rest_init+0x10b/0x130 [ 87.626894][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 87.626922][ C0] start_kernel+0x462/0x4bb [ 87.626939][ C0] x86_64_start_reservations+0x2e/0x30 [ 87.626959][ C0] x86_64_start_kernel+0x6a/0x7b [ 87.626978][ C0] common_startup_64+0x13b/0x157 [ 87.627005][ C0] [ 87.627011][ C0] [ 87.957195][ C0] The buggy address belongs to the variable: [ 87.963216][ C0] .str.10+0x2c/0x40 [ 87.967144][ C0] [ 87.969493][ C0] The buggy address belongs to the physical page: [ 87.975953][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x670f [ 87.984664][ C0] flags: 0x4000(reserved|zone=0) [ 87.989610][ C0] raw: 0000000000004000 ffffea000019c3c8 ffffea000019c3c8 0000000000000000 [ 87.998210][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 88.006803][ C0] page dumped because: kasan: bad access detected [ 88.013249][ C0] page_owner info is not present (never set?) [ 88.019328][ C0] [ 88.021669][ C0] Memory state around the buggy address: [ 88.027325][ C0] ffffffff8670fa80: 00 00 00 04 f9 f9 f9 f9 00 00 00 04 f9 f9 f9 f9 [ 88.035413][ C0] ffffffff8670fb00: 00 00 00 04 f9 f9 f9 f9 00 00 00 03 f9 f9 f9 f9 [ 88.043496][ C0] >ffffffff8670fb80: 00 00 06 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 00 [ 88.051612][ C0] ^ [ 88.056987][ C0] ffffffff8670fc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 88.065059][ C0] ffffffff8670fc80: 00 00 00 00 00 00 f9 f9 f9 f9 f9 f9 00 02 f9 f9 [ 88.073140][ C0] ================================================================== [ 88.081229][ C0] Disabling lock debugging due to kernel taint [ 88.087401][ C0] ------------[ cut here ]------------ [ 88.092904][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 88.101524][ C0] index 1084 is out of range for type 'const int[34]' [ 88.108288][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G B syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 88.108322][ C0] Tainted: [B]=BAD_PAGE [ 88.108329][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 88.108339][ C0] Call Trace: [ 88.108346][ C0] [ 88.108353][ C0] __dump_stack+0x21/0x30 [ 88.108382][ C0] dump_stack_lvl+0x140/0x1c0 [ 88.108406][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.108431][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 88.108457][ C0] dump_stack+0x19/0x20 [ 88.108480][ C0] ubsan_epilogue+0xe/0x40 [ 88.108495][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 88.108524][ C0] aiptek_irq+0x1f85/0x2a00 [ 88.108541][ C0] __usb_hcd_giveback_urb+0x375/0x540 [ 88.108561][ C0] usb_hcd_giveback_urb+0x11b/0x410 [ 88.108578][ C0] dummy_timer+0x816/0x4300 [ 88.108602][ C0] ? ktime_get+0x1df/0x210 [ 88.108622][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 88.108642][ C0] ? timerqueue_del+0xd7/0x130 [ 88.108662][ C0] ? __hrtimer_run_queues+0x2c4/0x8e0 [ 88.108716][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 88.108747][ C0] __hrtimer_run_queues+0x3ab/0x8e0 [ 88.108776][ C0] ? hrtimer_interrupt+0xf00/0xf00 [ 88.108803][ C0] ? read_tsc+0xd/0x20 [ 88.108826][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 88.108848][ C0] hrtimer_run_softirq+0x159/0x560 [ 88.108864][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 88.108889][ C0] handle_softirqs+0x1aa/0x630 [ 88.108907][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 88.108932][ C0] __irq_exit_rcu+0x47/0xb0 [ 88.108948][ C0] irq_exit_rcu+0xd/0x30 [ 88.108964][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 88.108983][ C0] [ 88.108988][ C0] [ 88.108994][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 88.109011][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 88.109033][ C0] Code: cc cc cc cc cc cc cc b8 c0 95 df c6 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 bf 3e 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 88.109048][ C0] RSP: 0018:ffffffff87407da0 EFLAGS: 000002c6 [ 88.109063][ C0] RAX: ffff8881f6e00000 RBX: ffffffff874156c0 RCX: ffffffff85a89bcd [ 88.109076][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000555d0c [ 88.109087][ C0] RBP: ffffffff87407da0 R08: ffff8881f6e395eb R09: 1ffff1103edc72bd [ 88.109100][ C0] R10: dffffc0000000000 R11: ffffed103edc72be R12: 0000000000000000 [ 88.109112][ C0] R13: 1ffffffff0e82ad8 R14: dffffc0000000000 R15: ffffffff87ed4668 [ 88.109126][ C0] ? ct_kernel_exit+0x7d/0xb0 [ 88.109167][ C0] default_idle+0x17/0x30 [ 88.109203][ C0] arch_cpu_idle+0xd/0x20 [ 88.109224][ C0] default_idle_call+0x3e/0x80 [ 88.109246][ C0] do_idle+0x2fc/0x570 [ 88.109265][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 88.109287][ C0] cpu_startup_entry+0x47/0x60 [ 88.109312][ C0] rest_init+0x10b/0x130 [ 88.109333][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 88.109355][ C0] start_kernel+0x462/0x4bb [ 88.109372][ C0] x86_64_start_reservations+0x2e/0x30 [ 88.109392][ C0] x86_64_start_kernel+0x6a/0x7b [ 88.109410][ C0] common_startup_64+0x13b/0x157 [ 88.109437][ C0] [ 88.109443][ C0] ---[ end trace ]--- [ 88.437852][ T36] audit: type=1400 audit(86.330:327): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 88.487479][ T36] audit: type=1400 audit(86.330:328): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.498676][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 88.508925][ T36] audit: type=1400 audit(86.330:329): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.536757][ T36] audit: type=1400 audit(86.330:330): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.553540][ T9] usb 5-1: device descriptor read/8, error -71 [ 88.557437][ T36] audit: type=1400 audit(86.330:331): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.582609][ T36] audit: type=1400 audit(86.330:332): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.667981][ T465] usb 1-1: USB disconnect, device number 31 [ 88.668156][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 88.701820][ T9] usb 5-1: device descriptor read/8, error -71 [ 88.865959][ T465] usb 4-1: USB disconnect, device number 30