last executing test programs: 3.980241351s ago: executing program 1 (id=153): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xdde047e70ec440a7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x2000}, 0xffffffffffffff18) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) socket$inet6(0xa, 0x5, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000000000003600000008007300000000000e000100"], 0x3c}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xffffffffffffffe9, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="08002dbd700000dcdf2510"], 0x14}}, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x2010, r2, 0x778a2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) unlink(&(0x7f0000000000)='./file0\x00') mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r4, @ANYRESDEC=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c67726ff570345f69643d", @ANYRESDEC=r7, @ANYBLOB=',\x00']) read$FUSE(r7, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x1673) write$FUSE_INIT(r7, &(0x7f0000001200)={0x50, 0x0, r8, {0x7, 0x27, 0x0, 0x500000}}, 0x50) 3.745670477s ago: executing program 1 (id=157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) setresuid(0x0, 0xee01, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000240)={0xcc, 0x0, 0x1}) unshare(0x22020600) r4 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x8) r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000004000)={0x2020}, 0x2020) personality(0x8001a0ffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.745451147s ago: executing program 1 (id=158): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="adf5dfbec9261c1a0200475400f6a13b", 0x10, 0x0, &(0x7f0000000140)={0x11, 0x86dd}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x0, 0x9, 0xc, 0x6, 0x44, @mcast1, @remote, 0x1, 0x8000, 0xf, 0x200}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 3.744823297s ago: executing program 1 (id=160): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x20}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x1000, 0x200000000000000}, 0x800, 0x6e6bb0, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@private1, @empty, @private0={0xfc, 0x0, '\x00', 0x20}, 0x0, 0xffff, 0x0, 0x0, 0x6, 0x4180107}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x22000000}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 3.726676307s ago: executing program 1 (id=161): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000000104010200000000000900000a0000050a000200000000ff050000000500010001000000080003"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4044844) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/wakeup_count', 0xc102, 0x192) lseek(r0, 0xca3, 0x4) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000180)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000300)={0x5, 0x7bff, 0xfffffffffffffffb, 0x401, 0x80, 0x3dd3}) sendfile(r0, r0, 0x0, 0x1200000000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xa4, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xc33a, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x61, 0x3, 0x28}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000100)={0x20, 0x21, 0x29, {0x29, 0x21, "7d611870cced50a6dc9b9baae6e4fb07347310bcb53837f15d7c0201458010d302afc5dfce714d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000afeb4f"], 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002b80), r5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/rpc\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}}, 0x40000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r10, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @adapter={0x40000008391, 0x7, 0x8, 0x3, 0x400}}]}) write$cgroup_subtree(r8, &(0x7f0000000000)={[{0x0, 'net_prio'}, {0x2b, 'cpu'}, {0x0, 'cpuacct'}, {0x2b, 'memory'}, {0x2d, 'net'}]}, 0x25) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2710, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000110001"], 0x30}], 0x1, 0x0, 0x0, 0x20002}, 0x0) 3.152932712s ago: executing program 0 (id=171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)={@val={0x70, 0x883e}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x10, 0x4e, 0x1004, 0x4000, 0xb2, 0x2f, 0x0, @empty, @empty}, {0xd00, 0x88be, 0x3a, 0x0, @wg=@data={0x4, 0x1, 0xffffdd86, "2ab15802509cbf129de7a1633a020e8434525f58cb9d5a2252d9acc56995728ad77d"}}}}}}}, 0x60) 3.033783705s ago: executing program 0 (id=173): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, &(0x7f0000000280)={[{@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './file7'}}, {@metacopy_on}]}) 3.013129525s ago: executing program 0 (id=174): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'lo\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x4, 0xffffff7f, 0xffff7fff, 0x0, 0x1ff, 0xfff, 0x1273, 0x9}}) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x51}, 0x40000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x78900, 0x12) fcntl$setlease(r2, 0x400, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0xd8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3fc}, @CTA_NAT_DST={0x44, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}]}, 0xd8}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000440)={0x3, {{0x2, 0x4e1d, @empty=0xe0009eff}}, {{0x2, 0x4e24, @loopback}}}, 0x108) close(r4) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84e82, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="af1d22a858c614613b0277ab60c30e808a87e08850f67602b220b731b3c11adc191ff90b28ad1623a6d384a78c79701077163f08e19b2437", 0x38}, {&(0x7f0000000140)="1bb841903b478f5c48c4939bd7138c554a27252bb8d90bac6cd16b2f8a13a08756d9ff7e9c2d7d423f23824f2b5a72d14d", 0x31}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="240000000000000000000000070000000089133bac1e0101ac1e0001ac1e01016401010000000000110000000000000000000000010000001000000000000000140000000000010000000000020000000800000000000000cd1debd7"], 0x58}, 0x20048040) flock(r6, 0x1) flock(r6, 0x1) fcntl$setlease(r5, 0x400, 0x0) 2.979342846s ago: executing program 0 (id=175): socket$netlink(0x10, 0x3, 0xa) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x1000, 0x800000000000000) splice(r2, 0x0, r6, 0x0, 0x80, 0x8) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r4, 0x40086e81, &(0x7f0000000080)=0x235) mmap$binder(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x8) write$tun(r3, &(0x7f00000033c0)=ANY=[], 0x107c) writev(r6, &(0x7f0000000000), 0x0) 2.768225981s ago: executing program 0 (id=176): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_connect$midi(0x2, 0x3e, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x4, 0xc0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x8, [], [{{0x9, 0x5, 0x1, 0x0, 0x8, 0x0, 0xac, 0x2, {0x4}}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0xa1, 0x7, 0x7, {0x4}}}]}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f000000b01b030000"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000200)={0x10000003, 0xffffffff, 0x3b7c, 0x4, 0x40000c, 0xc}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 1.684556908s ago: executing program 3 (id=183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)={@val={0x70, 0x883e}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x10, 0x4e, 0x1004, 0x4000, 0xb2, 0x2f, 0x0, @empty, @empty}, {0xd00, 0x88be, 0x3a, 0x0, @wg=@data={0x4, 0x1, 0xffffdd86, "2ab15802509cbf129de7a16304025c8434525f58cb9d5a2252d9acc56995728ad77d"}}}}}}}, 0x60) 1.589675741s ago: executing program 3 (id=184): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530482d) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r1) unlink(&(0x7f0000000000)='./file0\x00') syz_usb_connect$uac1(0x2, 0xa4, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010102000000208205160040000102030109029200030109403f0904000000010100000a2401d2000a1c020102090401000001020000090401010101020000072401080705000f2402020002ff0f00f441a4440fb209050109ff037808ba0725010804030009040200000102000009040201"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 847.631719ms ago: executing program 2 (id=186): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000b9a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000064c0)=0x40) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, 0x0, 0x10008005) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="01005c4bdf09354e466000f09e86cd34abe7da805b0f1100000004000980"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)='n', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r6, 0x40104d05, &(0x7f0000000900)="0000010000000000000001") sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf250000000008000800000000001400420cdeb90000000000000000000000000001080005000a01010208000700", @ANYRES32=r4, @ANYBLOB="0600060000000000080005006401010208000700", @ANYRES32=r5, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r6, @ANYBLOB="14000b000000000000000000000000000000000114000b0000000000000000000000ffffac1414bb"], 0x88}, 0x1, 0x0, 0x0, 0x20000880}, 0x40000) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 701.602223ms ago: executing program 2 (id=187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r1, 0x6, 0x8, 0x0, &(0x7f0000001040)) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'wlan1\x00', @broadcast}) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x1, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x3, 0xffff2d34, 0xffffff01, 0x6, 0x4, 0x10003, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x7, 0x7, 0x6, 0x0, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0xc, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0xb, 0x6c7, 0x9, 0xfffffffc, 0x1000, 0x0, 0x0, 0x205, 0x442f, 0x200000e, 0x6, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4402, 0x401, 0x6, 0x1, 0xfc, 0x6, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x7, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0x9, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x80000000, 0x5, 0xf, 0x4, 0x6, 0x805, 0x5, 0x8, 0x5, 0xffffffff, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x1ff, 0x2, 0x2, 0x2, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800006, 0x200, 0x1006a, 0x40000001, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x20000005, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x9db, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x7ff, 0x7fff, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x0, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0x9, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) (async) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x2500, 0x0) ioctl$SNAPSHOT_S2RAM(r4, 0x330b) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r8}}]}}) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 64) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xc0000000, @rand_addr=' \x01\x00', 0x9}, 0x1c, 0x0}}], 0x1, 0x20000000) (async, rerun: 64) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000040)) (async) io_setup(0x76, &(0x7f0000002500)=0x0) io_submit(r10, 0x2, &(0x7f0000000100)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x1000, r9, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2, r9, &(0x7f0000000000)='\v', 0x1, 0x7fffffffffffffff}]) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a009000ed7f"], 0x6a) 662.731874ms ago: executing program 1 (id=188): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) timer_create(0x3, 0x0, &(0x7f0000000000)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000005c0)={{r2, r3+60000000}, {0x77359400}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x1, 0x1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x3f8, r6, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7c}}}}, [@NL80211_ATTR_TESTDATA={0xfd, 0x45, "345131f7cd8529d2fc80aff240aa81af2df247ae4dd0ea8a7d51408d357ae2e2d9458972359ebd6b09ea0de22efba99c3c1562a4085ec032c800de29d7fd7ef1afd742beac8cd417f40d1aceb6ac23bbcb231ec9fd6ab2552ecfeafde1aa3f0b97849931976e90fc268df47b9c399a904945314dfffca356bea08417c5f69ce46555d256401b509f0044d55cb79bb5e42ae3390c1e8c1dee32e91e66bd8f994e80f22839c2c509255a0cdf8b236bdaf2804810b1f7da1085b7d8f456c228680adc890ab80654bed66b54c215168c9ae05ca3bc1a520034a200f131fb08a0a45bb7764a0926d368ef3878ce93cfedb858e0ce15d86b59fa54d0"}, @NL80211_ATTR_TESTDATA={0x31, 0x45, "6cc8d9801bbd50445057b40cf5cedfb3a74fa08a56e674d26ca6d82eab94a5af635bde58f9337de0f3af2c71bc"}, @NL80211_ATTR_TESTDATA={0xc4, 0x45, "8856e65f90bdca038a2c61f06b74a7cc912d065f4d923f54fb656dce1ba703f418c2b20d18cff5dfe1c7927dbb7cbf92a2e8e2a1e363665ea2990cccd2bcdd1247e487af7c05de548e601a8ea9fc340572b155810c53dcc2a7744abfc09c3d63117534de9e754a76633eb15ffba622149865dcea8d59ab96596acc527f716c953749a1d5d1aa8d2840c215e94dc12d6fc8b819f697d8057c336ea89ed44ced800523181da26ca675cfdea8fd7fd8452ca07e15d618d4c16f6ddd6a4dad037381"}, @NL80211_ATTR_TESTDATA={0xf5, 0x45, "2abd5669810b36129fd2a49cf8e2f5432433dbd5b6b0ccd9d4af1661c6896cded784b5de408398d0a52ffa35f8a1a63c092c620791705d40fcea962eb62b5969719e96e68770460b4b40549b8b271e3db74e5430c9fea8055a3d77d1f8052640aee461644e89c84ff835ece547dbdf154fa5d12171142ce96f0641f0b9cc2b60b4a6ecd814efafac0166847d83451a86f0ec36bd5bc42ae51196a97b1015b4d554bbeb7e71c8b170748021bd0108f69283654419ead51bc6c941de96cf8e40bb2995933a150b5e17f505c6ceb832d2f73881a4ddfcb07a96065fbdc8b5bc4c56798a94f964458239a1bfd6463e69bca2b1"}, @NL80211_ATTR_TESTDATA={0xe5, 0x45, "a9bb7f38be0a32c44bbde0d52a6c049c2df59bba5f09dc4b3bfd094879d55cfdb65aaf849c760967ad1b188a9dfd1fbaa963df681cb68560d7339999cc6bdb63f474624a4d352c43a72d3a286aa735cc15b646f4bd021e1b91e23f3165d440c827da6119c0f4867beefcf20b1273f66b71dfdb5935213d567df5bbda2f43013117ef838bd25a1a4886ee7e5066c6217787c8c7ff746d99c0db8d2563b2a3f9a3136d8abd6bdc1302e5897a1898aec739d2b2a3c4b0da5da8f3294f20594c8c6fb4648c42d3cb1ad7ec71642dd696a652da596c2ac038b3f1a61acc2fa007e8c83c"}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x4008014}, 0xc082) syz_usb_connect$uac3(0x5, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400c200b1040000102030109027a0003017f0006080b0002012030230904000000010130000a2401101600090000000c240b0001ff010000057bc5090401000001023000090401010101023000090501"], 0x0) 630.108814ms ago: executing program 2 (id=189): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000000000000000000000000000feff00"/88, 0x58) 572.693816ms ago: executing program 2 (id=190): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3, 0xfffffffd}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x7) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0xc8, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0xb4, 0x1, [@m_ipt={0xb0, 0x1, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x101}, @TCA_IPT_TARG={0x48, 0x6, {0xba15, 'security\x00', 0xdb, 0x4, "7235abc3ea74ebfe13207f3546e4fab4397e89d456e50ff5de907536ebdc"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x6400c041}, 0x9080) 572.574546ms ago: executing program 2 (id=191): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, 0x0) 568.423666ms ago: executing program 2 (id=192): r0 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0xd353, 0x3000, 0x2, 0x19a}, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0x2) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000340), 0x0) socket(0x1e, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x41, 0x0) write$FUSE_INTERRUPT(r1, 0x0, 0x0) r2 = epoll_create(0x5) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 394.00586ms ago: executing program 3 (id=193): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="adf5dfbec9261c1a0200475400f6a13b", 0x10, 0x0, &(0x7f0000000140)={0x11, 0x86dd}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x0, 0x9, 0xc, 0x6, 0x44, @mcast1, @remote, 0x1, 0x8000, 0xf, 0x200}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 393.83977ms ago: executing program 3 (id=194): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000005c0)={0x0, 0x5f, 0x40, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000bc0)={r3, "cb8eaccdc28bcb7ddb468d8bb51cdb3b"}) (async) r4 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x8) r6 = openat$cgroup(r5, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) read$FUSE(r7, &(0x7f0000003000)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000000c0)={'bond_slave_0\x00', 0x400}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000001c0)={'lo\x00', 0x400}) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x1804008, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (rerun: 32) 104.580218ms ago: executing program 3 (id=195): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}], 0x18}}], 0x2, 0x0) 69.724829ms ago: executing program 0 (id=196): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000b, 0x12, r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1f, 0x5, 0x5e490420, 0x4, 0xffff, 0x40000000, 0x0, 0x0, 0x0, 0x1, 0x88}}, 0x50) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 0s ago: executing program 3 (id=197): r0 = fsopen(&(0x7f00000000c0)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000880)=""/4096, 0x1000) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) kernel console output (not intermixed with test programs): cess permissive=1 [ 14.507162][ T36] audit: type=1400 audit(1785816788.720:63): avc: denied { siginh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. [ 22.687879][ T36] audit: type=1400 audit(1785816796.910:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.691525][ T286] cgroup: Unknown subsys name 'net' [ 22.710561][ T36] audit: type=1400 audit(1785816796.910:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.737971][ T36] audit: type=1400 audit(1785816796.940:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.738465][ T286] cgroup: Unknown subsys name 'devices' [ 22.857575][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.863290][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.978718][ T36] audit: type=1400 audit(1785816797.200:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.001921][ T36] audit: type=1400 audit(1785816797.200:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.026687][ T36] audit: type=1400 audit(1785816797.200:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.055851][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.064690][ T36] audit: type=1400 audit(1785816797.280:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.090152][ T36] audit: type=1400 audit(1785816797.280:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.140321][ T36] audit: type=1400 audit(1785816797.360:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.165988][ T36] audit: type=1400 audit(1785816797.360:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.166618][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.123277][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.130500][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.137650][ T295] bridge_slave_0: entered allmulticast mode [ 24.143954][ T295] bridge_slave_0: entered promiscuous mode [ 24.155445][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.162533][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.169850][ T295] bridge_slave_1: entered allmulticast mode [ 24.176708][ T295] bridge_slave_1: entered promiscuous mode [ 24.255407][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.262591][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.269743][ T294] bridge_slave_0: entered allmulticast mode [ 24.276491][ T294] bridge_slave_0: entered promiscuous mode [ 24.285685][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.292746][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.299925][ T294] bridge_slave_1: entered allmulticast mode [ 24.306270][ T294] bridge_slave_1: entered promiscuous mode [ 24.318471][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.325639][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.332716][ T293] bridge_slave_0: entered allmulticast mode [ 24.339114][ T293] bridge_slave_0: entered promiscuous mode [ 24.348550][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.355615][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.362672][ T293] bridge_slave_1: entered allmulticast mode [ 24.369038][ T293] bridge_slave_1: entered promiscuous mode [ 24.401414][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.408601][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.415701][ T296] bridge_slave_0: entered allmulticast mode [ 24.422033][ T296] bridge_slave_0: entered promiscuous mode [ 24.431409][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.438502][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.445653][ T296] bridge_slave_1: entered allmulticast mode [ 24.451956][ T296] bridge_slave_1: entered promiscuous mode [ 24.571212][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.578415][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.585741][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.592807][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.619380][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.626566][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.633824][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.640898][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.668945][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.676055][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.683365][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.690447][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.715717][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.723278][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.732109][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.739527][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.770125][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.777225][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.800430][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.807534][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.819989][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.827079][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.838686][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.845776][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.863793][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.870902][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.897767][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.904844][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.916027][ T296] veth0_vlan: entered promiscuous mode [ 24.939899][ T293] veth0_vlan: entered promiscuous mode [ 24.950819][ T295] veth0_vlan: entered promiscuous mode [ 24.972648][ T295] veth1_macvtap: entered promiscuous mode [ 24.979862][ T296] veth1_macvtap: entered promiscuous mode [ 24.989597][ T293] veth1_macvtap: entered promiscuous mode [ 25.011353][ T294] veth0_vlan: entered promiscuous mode [ 25.044276][ T294] veth1_macvtap: entered promiscuous mode [ 25.061654][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.293748][ T335] ======================================================= [ 25.293748][ T335] WARNING: The mand mount option has been deprecated and [ 25.293748][ T335] and is ignored by this kernel. Remove the mand [ 25.293748][ T335] option from the mount to silence this warning. [ 25.293748][ T335] ======================================================= [ 25.390052][ T341] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.420482][ T341] tipc: Started in network mode [ 25.426633][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.433746][ T341] tipc: Node identity 329595bbce32, cluster identity 4711 [ 25.441505][ T341] tipc: Enabled bearer , priority 10 [ 25.465322][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.526131][ T340] tipc: Resetting bearer [ 25.532864][ T340] tipc: Disabling bearer [ 25.575324][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 25.581709][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.591912][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.595207][ T31] usb 4-1: device descriptor read/64, error -71 [ 25.603079][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 25.617083][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.625212][ T10] usb 1-1: Product: syz [ 25.629413][ T10] usb 1-1: Manufacturer: syz [ 25.634042][ T10] usb 1-1: SerialNumber: syz [ 25.842246][ T10] usb 1-1: 0:2 : does not exist [ 25.846476][ T31] usb 4-1: device descriptor read/64, error -71 [ 25.862017][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 25.875201][ T10] usb 1-1: USB disconnect, device number 2 [ 25.890967][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.044418][ T378] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 26.085161][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.215109][ T31] usb 4-1: device descriptor read/64, error -71 [ 26.245159][ T48] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.355079][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.397810][ T48] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 26.407098][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.415399][ T48] usb 2-1: Product: syz [ 26.419706][ T48] usb 2-1: Manufacturer: syz [ 26.424333][ T48] usb 2-1: SerialNumber: syz [ 26.455103][ T31] usb 4-1: device descriptor read/64, error -71 [ 26.525089][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 26.531374][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 26.539735][ T10] usb 3-1: config 179 has no interface number 0 [ 26.546219][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 26.557423][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 26.565811][ T31] usb usb4-port1: attempt power cycle [ 26.568819][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 26.587233][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 26.599003][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 26.620610][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 26.630018][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.641749][ T382] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 26.687740][ T48] rtl8150 2-1:1.0: couldn't reset the device [ 26.693994][ T48] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 26.703611][ T48] usb 2-1: USB disconnect, device number 2 [ 26.925151][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 26.946304][ T31] usb 4-1: device descriptor read/8, error -71 [ 27.076355][ T31] usb 4-1: device descriptor read/8, error -71 [ 27.259886][ T10] usb 3-1: USB disconnect, device number 2 [ 27.259938][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 27.259968][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 27.326182][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 27.356177][ T31] usb 4-1: device descriptor read/8, error -71 [ 27.435117][ T384] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 27.486698][ T31] usb 4-1: device descriptor read/8, error -71 [ 27.586114][ T384] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.596437][ T31] usb usb4-port1: unable to enumerate USB device [ 27.604416][ T384] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 27.613612][ T384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.621667][ T384] usb 2-1: Product: syz [ 27.625864][ T384] usb 2-1: Manufacturer: syz [ 27.630478][ T384] usb 2-1: SerialNumber: syz [ 27.635802][ T384] usb 2-1: config 0 descriptor?? [ 27.641691][ T384] asix 2-1:0.0: probe with driver asix failed with error -22 [ 27.675193][ T65] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.787568][ T413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.796232][ T413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.805117][ T65] usb 1-1: device descriptor read/64, error -71 [ 27.842343][ T393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.850955][ T393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.859109][ T383] usb 2-1: USB disconnect, device number 3 [ 28.025214][ T10] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 28.045170][ T65] usb 1-1: device descriptor read/64, error -71 [ 28.155063][ T10] usb 3-1: device descriptor read/64, error -71 [ 28.164321][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 28.164338][ T36] audit: type=1400 audit(1785816802.380:141): avc: denied { mounton } for pid=418 comm="syz.3.41" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 28.285107][ T65] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.395068][ T10] usb 3-1: device descriptor read/64, error -71 [ 28.425105][ T65] usb 1-1: device descriptor read/64, error -71 [ 28.433610][ T36] audit: type=1400 audit(1785816802.650:142): avc: denied { read } for pid=424 comm="syz.1.43" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 28.456443][ T36] audit: type=1400 audit(1785816802.650:143): avc: denied { open } for pid=424 comm="syz.1.43" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 28.479640][ T36] audit: type=1400 audit(1785816802.660:144): avc: denied { ioctl } for pid=424 comm="syz.1.43" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 28.504322][ T36] audit: type=1400 audit(1785816802.660:145): avc: denied { read } for pid=424 comm="syz.1.43" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 28.527138][ T36] audit: type=1400 audit(1785816802.660:146): avc: denied { open } for pid=424 comm="syz.1.43" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 28.610938][ T36] audit: type=1400 audit(1785816802.830:147): avc: denied { create } for pid=433 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.630832][ T36] audit: type=1400 audit(1785816802.830:148): avc: denied { connect } for pid=433 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.650395][ T10] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 28.661189][ T36] audit: type=1400 audit(1785816802.830:149): avc: denied { shutdown } for pid=433 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.681147][ T36] audit: type=1400 audit(1785816802.830:150): avc: denied { mounton } for pid=433 comm="syz.1.47" path="/proc/63/task" dev="proc" ino=3834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 28.703517][ T65] usb 1-1: device descriptor read/64, error -71 [ 28.815215][ T65] usb usb1-port1: attempt power cycle [ 28.835120][ T10] usb 3-1: device descriptor read/64, error -71 [ 29.075122][ T10] usb 3-1: device descriptor read/64, error -71 [ 29.155116][ T65] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 29.176278][ T65] usb 1-1: device descriptor read/8, error -71 [ 29.185274][ T10] usb usb3-port1: attempt power cycle [ 29.306323][ T65] usb 1-1: device descriptor read/8, error -71 [ 29.525123][ T10] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 29.545119][ T65] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 29.553681][ T10] usb 3-1: device descriptor read/8, error -71 [ 29.566171][ T65] usb 1-1: device descriptor read/8, error -71 [ 29.686248][ T10] usb 3-1: device descriptor read/8, error -71 [ 29.696203][ T65] usb 1-1: device descriptor read/8, error -71 [ 29.805211][ T65] usb usb1-port1: unable to enumerate USB device [ 29.925169][ T10] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 29.946517][ T10] usb 3-1: device descriptor read/8, error -71 [ 30.076307][ T10] usb 3-1: device descriptor read/8, error -71 [ 30.185759][ T10] usb usb3-port1: unable to enumerate USB device [ 36.784309][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 36.784328][ T36] audit: type=1400 audit(1785816810.990:159): avc: denied { mmap_zero } for pid=462 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 36.842038][ T36] audit: type=1400 audit(1785816811.000:160): avc: denied { create } for pid=462 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.884836][ T36] audit: type=1400 audit(1785816811.100:161): avc: denied { write } for pid=466 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.908561][ T36] audit: type=1400 audit(1785816811.100:162): avc: denied { nlmsg_read } for pid=466 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.928981][ T36] audit: type=1400 audit(1785816811.130:163): avc: denied { watch watch_reads } for pid=479 comm="syz.3.63" path="/5/file0" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 36.952567][ T36] audit: type=1400 audit(1785816811.130:164): avc: denied { watch } for pid=479 comm="syz.3.63" path="/5" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.025091][ T48] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 37.145148][ T65] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 37.152778][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 37.176340][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.187429][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.197231][ T48] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 37.206331][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.215906][ T48] usb 1-1: config 0 descriptor?? [ 37.220989][ T384] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.315104][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 37.320986][ T65] usb 3-1: not running at top speed; connect to a high speed hub [ 37.329792][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.339960][ T65] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.349891][ T10] usb 4-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 37.359079][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.367138][ T10] usb 4-1: Product: syz [ 37.371388][ T65] usb 3-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 37.380487][ T10] usb 4-1: Manufacturer: syz [ 37.385100][ T384] usb 2-1: Using ep0 maxpacket: 16 [ 37.386319][ T384] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 140, changing to 7 [ 37.388452][ T384] usb 2-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 37.394007][ T10] usb 4-1: SerialNumber: syz [ 37.406643][ T384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.412346][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.417941][ T384] usb 2-1: Product: syz [ 37.425129][ T65] usb 3-1: Product: syz [ 37.433902][ T384] usb 2-1: Manufacturer: syz [ 37.440336][ T65] usb 3-1: Manufacturer: syz [ 37.443136][ T384] usb 2-1: SerialNumber: syz [ 37.447232][ T65] usb 3-1: SerialNumber: syz [ 37.646953][ T48] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 37.654503][ T48] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 37.663751][ T36] audit: type=1400 audit(1785816811.890:165): avc: denied { mount } for pid=481 comm="syz.1.64" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 37.670393][ T48] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 37.693212][ T48] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 37.705230][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 37.717737][ T384] usb 2-1: USB disconnect, device number 4 [ 37.721274][ T10] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 37.730331][ T48] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 37.731405][ T36] audit: type=1400 audit(1785816811.890:166): avc: denied { search } for pid=481 comm="syz.1.64" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 37.751178][ T48] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 37.774769][ T36] audit: type=1400 audit(1785816811.890:167): avc: denied { read } for pid=481 comm="syz.1.64" name="trace_pipe" dev="tracefs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 37.800413][ T36] audit: type=1400 audit(1785816811.890:168): avc: denied { open } for pid=481 comm="syz.1.64" path="/33/trace/trace_pipe" dev="tracefs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 37.800671][ T10] usb 4-1: USB disconnect, device number 6 [ 37.846212][ T471] udevd[471]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.862587][ T48] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 9: -71 [ 37.874580][ T48] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -71 [ 37.884572][ T48] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 37.893507][ T48] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 37.901875][ T48] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -71 [ 37.915190][ T48] usb 1-1: USB disconnect, device number 7 [ 38.395166][ T497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.66'. [ 38.460787][ T499] overlayfs: failed to resolve './file7': -2 [ 39.100690][ T525] overlayfs: failed to resolve './file7': -2 [ 39.198325][ T533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6934 sclass=netlink_route_socket pid=533 comm=syz.1.80 [ 39.247473][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 39.331798][ T545] input: syz0 as /devices/virtual/input/input4 [ 39.369718][ T550] overlayfs: failed to resolve './file7': -2 [ 39.405054][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 39.414242][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.427066][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.439613][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.448997][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.457213][ T10] usb 1-1: Product: syz [ 39.461482][ T10] usb 1-1: Manufacturer: syz [ 39.466150][ T10] usb 1-1: SerialNumber: syz [ 39.475900][ T559] fuse: Unknown parameter 'ñ™žmode' [ 39.479452][ T560] fuse: Unknown parameter 'ñ™žmode' [ 39.674164][ T10] usb 1-1: 0:2 : does not exist [ 39.680161][ T577] Zero length message leads to an empty skb [ 39.683353][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 39.708665][ T10] usb 1-1: USB disconnect, device number 8 [ 39.716703][ T579] overlayfs: failed to resolve './file7': -2 [ 39.727602][ T471] udevd[471]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.771896][ T583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.100'. [ 39.836007][ T65] usb 3-1: 0:1 : does not exist [ 39.843835][ T589] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=43284 sclass=netlink_xfrm_socket pid=589 comm=syz.3.103 [ 39.845311][ T65] usb 3-1: unit 4 not found! [ 39.859908][ T589] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 39.863295][ T65] usb 3-1: unit 14 not found! [ 39.879472][ T65] usb 3-1: USB disconnect, device number 7 [ 39.900646][ T471] udevd[471]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.020950][ T597] overlayfs: failed to resolve './file7': -2 [ 40.197383][ T295] cgroup: fork rejected by pids controller in /syz0 [ 40.295111][ T48] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 40.302716][ T384] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 40.375891][ T613] 9pnet_fd: Insufficient options for proto=fd [ 40.435046][ T48] usb 4-1: device descriptor read/64, error -71 [ 40.441372][ T384] usb 3-1: device descriptor read/64, error -71 [ 40.460168][ T617] overlayfs: failed to resolve './file7': -2 [ 40.479784][ T615] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.487178][ T615] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.494452][ T615] bridge_slave_0: entered allmulticast mode [ 40.500986][ T615] bridge_slave_0: entered promiscuous mode [ 40.508882][ T615] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.515969][ T615] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.523066][ T615] bridge_slave_1: entered allmulticast mode [ 40.529433][ T615] bridge_slave_1: entered promiscuous mode [ 40.582575][ T615] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.589688][ T615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.597023][ T615] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.604083][ T615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.640640][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.648180][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.665854][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.673341][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.681117][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.683214][ T629] netlink: 'syz.1.121': attribute type 10 has an invalid length. [ 40.688213][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.688834][ T48] usb 4-1: device descriptor read/64, error -71 [ 40.709853][ T384] usb 3-1: device descriptor read/64, error -71 [ 40.730886][ T615] veth0_vlan: entered promiscuous mode [ 40.742324][ T615] veth1_macvtap: entered promiscuous mode [ 40.935077][ T65] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.955089][ T384] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 40.962735][ T48] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 41.045163][ T417] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 41.085069][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 41.091335][ T65] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.095251][ T48] usb 4-1: device descriptor read/64, error -71 [ 41.101597][ T65] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.107879][ T384] usb 3-1: device descriptor read/64, error -71 [ 41.120908][ T65] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 41.132063][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.140111][ T65] usb 2-1: Product: syz [ 41.144321][ T65] usb 2-1: Manufacturer: syz [ 41.149044][ T65] usb 2-1: SerialNumber: syz [ 41.216681][ T417] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.227054][ T417] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 41.236082][ T417] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 41.251445][ T417] usb 1-1: string descriptor 0 read error: -22 [ 41.257754][ T417] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.266862][ T417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.277252][ T417] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 41.284123][ T417] cdc_ncm 1-1:1.0: bind() failure [ 41.355062][ T48] usb 4-1: device descriptor read/64, error -71 [ 41.357745][ T65] usb 2-1: 0:2 : does not exist [ 41.361487][ T384] usb 3-1: device descriptor read/64, error -71 [ 41.376858][ T65] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 41.390084][ T65] usb 2-1: USB disconnect, device number 5 [ 41.475137][ T384] usb usb3-port1: attempt power cycle [ 41.480907][ T48] usb usb4-port1: attempt power cycle [ 41.483408][ T637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.495350][ T637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.503814][ T417] usb 1-1: USB disconnect, device number 9 [ 41.825134][ T384] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 41.832762][ T48] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 41.856343][ T48] usb 4-1: device descriptor read/8, error -71 [ 41.862585][ T384] usb 3-1: device descriptor read/8, error -71 [ 41.907909][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 41.907928][ T36] audit: type=1400 audit(1785816816.130:210): avc: denied { execute } for pid=640 comm="syz.1.125" name="file0" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.907947][ T641] process 'syz.1.125' launched './file0' with NULL argv: empty string added [ 41.945765][ T36] audit: type=1400 audit(1785816816.130:211): avc: denied { execute_no_trans } for pid=640 comm="syz.1.125" path="/52/file0" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.986178][ T48] usb 4-1: device descriptor read/8, error -71 [ 41.987596][ T36] audit: type=1400 audit(1785816816.210:212): avc: denied { write } for pid=644 comm="syz.1.127" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 42.016080][ T384] usb 3-1: device descriptor read/8, error -71 [ 42.137622][ T36] audit: type=1400 audit(1785816816.360:213): avc: denied { create } for pid=660 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 42.235100][ T48] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 42.255142][ T384] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 42.265554][ T48] usb 4-1: device descriptor read/8, error -71 [ 42.287478][ T36] audit: type=1400 audit(1785816816.510:214): avc: denied { nlmsg_write } for pid=673 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.308010][ T384] usb 3-1: device descriptor read/8, error -71 [ 42.335946][ T417] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 42.388706][ T36] audit: type=1400 audit(1785816816.610:215): avc: denied { create } for pid=682 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 42.411968][ T48] usb 4-1: device descriptor read/8, error -71 [ 42.420933][ T683] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.143'. [ 42.430362][ T36] audit: type=1400 audit(1785816816.650:216): avc: denied { connect } for pid=682 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.436552][ T384] usb 3-1: device descriptor read/8, error -71 [ 42.496094][ T417] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 42.507295][ T417] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.517210][ T417] usb 2-1: config 0 interface 0 has no altsetting 0 [ 42.523842][ T417] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 42.532929][ T417] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.535507][ T48] usb usb4-port1: unable to enumerate USB device [ 42.544068][ T417] usb 2-1: config 0 descriptor?? [ 42.565315][ T384] usb usb3-port1: unable to enumerate USB device [ 42.685157][ T65] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 42.754063][ T36] audit: type=1400 audit(1785816816.970:217): avc: denied { append } for pid=656 comm="syz.1.132" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.856576][ T65] usb 1-1: unable to get BOS descriptor or descriptor too short [ 42.864727][ T65] usb 1-1: not running at top speed; connect to a high speed hub [ 42.873328][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.883585][ T65] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 42.896147][ T65] usb 1-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 42.905247][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.913236][ T65] usb 1-1: Product: syz [ 42.917464][ T65] usb 1-1: Manufacturer: syz [ 42.922084][ T65] usb 1-1: SerialNumber: syz [ 42.978878][ T417] a4tech 0003:09DA:022B.0002: ignoring exceeding usage max [ 42.987856][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 42.994892][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.001957][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.009138][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.016192][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.023195][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.030250][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.037268][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.044237][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.051242][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.058258][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.070475][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.081183][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.088461][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.112554][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.124426][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.142354][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.149611][ T65] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 43.158383][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.165406][ T65] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 43.173380][ T65] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 43.181882][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.188938][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.195940][ T65] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 43.206243][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.213250][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.220780][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.228232][ T65] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 43.238113][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.245310][ T65] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 43.253773][ T65] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 43.261174][ T36] audit: type=1400 audit(1785816817.480:218): avc: denied { read } for pid=688 comm="syz.2.146" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=6354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.262100][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.293072][ T65] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 43.301803][ T689] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=689 comm=syz.2.146 [ 43.314198][ T65] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 43.322205][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.323616][ T692] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.330013][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.343342][ T36] audit: type=1400 audit(1785816817.560:219): avc: denied { read } for pid=690 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.351287][ T65] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 43.376021][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.383014][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.391201][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.399633][ T65] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 43.413787][ T65] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 43.421872][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.432114][ T65] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 43.441080][ T417] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 43.448201][ T65] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 43.457122][ T417] a4tech 0003:09DA:022B.0002: hidraw0: USB HID v0.08 Device [HID 09da:022b] on usb-dummy_hcd.1-1/input0 [ 43.481087][ T65] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 43.492886][ T417] usb 2-1: USB disconnect, device number 6 [ 43.504779][ T698] fido_id[698]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 43.513382][ T65] usb 1-1: USB disconnect, device number 10 [ 43.533695][ T467] udevd[467]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.735091][ T48] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 43.895082][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 43.903564][ T48] usb 3-1: unable to get BOS descriptor or descriptor too short [ 43.913948][ T48] usb 3-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 43.923639][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.931807][ T48] usb 3-1: Product: syz [ 43.935543][ T715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.153'. [ 43.936619][ T48] usb 3-1: Manufacturer: syz [ 43.961937][ T48] usb 3-1: SerialNumber: syz [ 44.182157][ T48] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 44.189337][ T48] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 44.193674][ T733] option changes via remount are deprecated (pid=732 comm=syz.3.163) [ 44.205821][ T735] option changes via remount are deprecated (pid=732 comm=syz.3.163) [ 44.217068][ T48] usb 3-1: USB disconnect, device number 12 [ 44.268730][ T742] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 44.306297][ T374] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 44.455088][ T374] usb 2-1: Using ep0 maxpacket: 16 [ 44.461280][ T374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 44.472385][ T374] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.485238][ T374] usb 2-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 44.494277][ T374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.503041][ T374] usb 2-1: config 0 descriptor?? [ 44.525071][ T65] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 44.676782][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 44.685070][ T65] usb 4-1: not running at top speed; connect to a high speed hub [ 44.695800][ T65] usb 4-1: config 1 has an invalid descriptor of length 137, skipping remainder of the config [ 44.713882][ T65] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 44.729824][ T757] netlink: 'syz.2.172': attribute type 4 has an invalid length. [ 44.738655][ T65] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=4b.40 [ 44.756132][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.764249][ T65] usb 4-1: Product: syz [ 44.768808][ T65] usb 4-1: Manufacturer: syz [ 44.774160][ T65] usb 4-1: SerialNumber: syz [ 44.783985][ T760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=760 comm=syz.0.174 [ 44.912453][ T374] wacom 0003:056A:005B.0003: unknown main item tag 0x7 [ 44.921415][ T374] wacom 0003:056A:005B.0003: unknown main item tag 0x0 [ 44.929219][ T374] wacom 0003:056A:005B.0003: unknown main item tag 0x1 [ 44.940855][ T374] wacom 0003:056A:005B.0003: unknown main item tag 0xd [ 44.949733][ T374] wacom 0003:056A:005B.0003: hidraw0: USB HID vc3.3a Device [HID 056a:005b] on usb-dummy_hcd.1-1/input0 [ 44.975037][ T48] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 44.994496][ T744] capability: warning: `syz.3.167' uses deprecated v2 capabilities in a way that may be insecure [ 45.005829][ T744] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32 sclass=netlink_tcpdiag_socket pid=744 comm=syz.3.167 [ 45.023127][ T65] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 45.034293][ T65] usb 4-1: USB disconnect, device number 11 [ 45.043568][ T471] udevd[471]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.146301][ T48] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.156607][ T48] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 255, changing to 11 [ 45.167807][ T48] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 59391, setting to 1024 [ 45.181101][ T48] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 45.190226][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.198316][ T48] usb 3-1: Product: syz [ 45.202530][ T48] usb 3-1: Manufacturer: syz [ 45.207176][ T48] usb 3-1: SerialNumber: syz [ 45.212777][ T756] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 45.235049][ T374] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 45.386158][ T374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.397218][ T374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.407046][ T374] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.420032][ T374] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.429178][ T374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.439000][ T374] usb 1-1: config 0 descriptor?? [ 45.445835][ T48] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 45.455999][ T48] usb 3-1: USB disconnect, device number 13 [ 45.646035][ T767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.654813][ T767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.864659][ T374] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.872527][ T374] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.879977][ T374] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.887521][ T374] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.894921][ T374] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.902381][ T374] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.909791][ T374] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.917324][ T374] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.924756][ T374] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.932460][ T374] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 45.947385][ T374] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 46.091445][ T781] overlayfs: missing 'lowerdir' [ 46.395109][ T374] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 46.546523][ T374] usb 4-1: unable to get BOS descriptor or descriptor too short [ 46.554716][ T374] usb 4-1: not running at top speed; connect to a high speed hub [ 46.563233][ T374] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.573440][ T374] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 46.586230][ T374] usb 4-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 46.595369][ T374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.603397][ T374] usb 4-1: Product: syz [ 46.607705][ T374] usb 4-1: Manufacturer: syz [ 46.612345][ T374] usb 4-1: SerialNumber: syz [ 46.821863][ T374] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 46.830477][ T374] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 46.838505][ T374] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 46.851969][ T374] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 46.861166][ T374] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 46.871464][ T374] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 46.881467][ T374] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 46.889591][ T374] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 46.898129][ T374] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 46.908411][ T374] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 46.918825][ T374] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 46.927354][ T374] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 46.935496][ T374] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 46.945025][ T374] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 46.957126][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 46.957143][ T36] audit: type=1400 audit(1785816821.180:243): avc: denied { unlink } for pid=790 comm="syz.2.186" name="#5" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 46.987281][ T791] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 46.989100][ T374] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 47.008059][ T36] audit: type=1400 audit(1785816821.200:244): avc: denied { mount } for pid=790 comm="syz.2.186" name="/" dev="overlay" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.011896][ T374] usb 4-1: USB disconnect, device number 12 [ 47.048032][ T483] udevd[483]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.117537][ T65] usb 2-1: USB disconnect, device number 7 [ 47.182277][ T802] tc_dump_action: action bad kind [ 47.202930][ T804] overlayfs: missing 'lowerdir' [ 47.370202][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.377664][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.385164][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.392695][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.400489][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.408233][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.415736][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.423160][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.430756][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.438173][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.445695][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.453152][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.460506][ T65] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 47.465140][ T384] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 47.475816][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.483319][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.490981][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.498506][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.506024][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.513473][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.521044][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.528530][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.536054][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.543443][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.550922][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.558531][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.566097][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.573563][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.581079][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.588563][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.596117][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.603579][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.611070][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.618662][ T811] overlay: filesystem on ./file0 not supported as upperdir [ 47.626478][ T65] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.635165][ T384] usb 3-1: Using ep0 maxpacket: 16 [ 47.637603][ T65] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 47.651070][ T65] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 47.661063][ T384] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.663540][ T65] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 47.671379][ T384] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.682284][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.697634][ T65] usb 2-1: Product: syz [ 47.704114][ T65] usb 2-1: Manufacturer: syz [ 47.711775][ T65] usb 2-1: SerialNumber: syz [ 47.717325][ T384] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 47.735126][ T384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.752006][ T384] usb 3-1: Product: syz [ 47.757894][ T36] audit: type=1400 audit(1785816821.980:245): avc: denied { mount } for pid=816 comm="syz.3.197" name="/" dev="configfs" ino=1354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 47.773397][ T815] ------------[ cut here ]------------ [ 47.780366][ T384] usb 3-1: Manufacturer: syz [ 47.786026][ T815] WARNING: CPU: 0 PID: 815 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 47.790816][ T384] usb 3-1: SerialNumber: syz [ 47.800399][ T815] Modules linked in: [ 47.808533][ T815] CPU: 0 UID: 0 PID: 815 Comm: syz.0.196 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 47.810246][ T36] audit: type=1400 audit(1785816821.980:246): avc: denied { search } for pid=816 comm="syz.3.197" name="/" dev="configfs" ino=1354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 47.820009][ T815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.842808][ T36] audit: type=1400 audit(1785816821.980:247): avc: denied { read } for pid=816 comm="syz.3.197" name="/" dev="configfs" ino=1354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 47.852453][ T815] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 47.874469][ T36] audit: type=1400 audit(1785816821.980:248): avc: denied { open } for pid=816 comm="syz.3.197" path="/" dev="configfs" ino=1354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 47.879991][ T815] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d e4 d8 0b 06 00 0f 85 c2 00 00 00 c6 05 d7 d8 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 47.880017][ T815] RSP: 0018:ffffc9000ddbf520 EFLAGS: 00010246 [ 47.902240][ T36] audit: type=1400 audit(1785816821.980:249): avc: denied { load_policy } for pid=814 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 47.921636][ T815] [ 47.949887][ T815] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 47.957943][ T815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000ddbf5d8 [ 47.966004][ T815] RBP: ffffc9000ddbf660 R08: ffffc9000ddbf5d7 R09: 0000000000000000 [ 47.974012][ T815] R10: ffffc9000ddbf5c0 R11: fffff52001bb7ebb R12: ffffc9000ddbf560 [ 47.982072][ T815] R13: dffffc0000000000 R14: 1ffff92001bb7ea8 R15: 0000000000000000 [ 47.990147][ T815] FS: 00007fa7776a46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 47.999160][ T815] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.005815][ T815] CR2: 0000200000001000 CR3: 0000000113df0000 CR4: 00000000003526b0 [ 48.013831][ T815] DR0: 0000000000003706 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.021889][ T815] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 48.029934][ T815] Call Trace: [ 48.033248][ T815] [ 48.036257][ T815] ? vfs_write+0x3c1/0xfd0 [ 48.040717][ T815] ? ksys_write+0x145/0x260 [ 48.045285][ T815] ? x64_sys_call+0x271c/0x2ee0 [ 48.050186][ T815] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 48.055987][ T815] ? hashtab_init+0xd6/0x1f0 [ 48.060625][ T815] ___kmalloc_large_node+0x81/0x220 [ 48.065908][ T815] ? hashtab_init+0xd6/0x1f0 [ 48.070546][ T815] __kmalloc_large_node_noprof+0x1e/0xd0 [ 48.075242][ T374] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 48.076261][ T815] ? hashtab_init+0xd6/0x1f0 [ 48.088438][ T815] __kmalloc_noprof+0x326/0x510 [ 48.093335][ T815] ? kasan_save_alloc_info+0x3a/0x50 [ 48.098717][ T815] hashtab_init+0xd6/0x1f0 [ 48.103175][ T815] ? class_read+0x17f/0x8a0 [ 48.107759][ T815] symtab_init+0x44/0x70 [ 48.112040][ T815] class_read+0x208/0x8a0 [ 48.116454][ T815] ? __kasan_kmalloc+0x96/0xb0 [ 48.121323][ T815] ? hashtab_init+0xd6/0x1f0 [ 48.125998][ T815] ? __cfi_class_read+0x10/0x10 [ 48.130931][ T815] ? hashtab_init+0x100/0x1f0 [ 48.135705][ T815] policydb_read+0xa83/0x2860 [ 48.140426][ T815] ? __kasan_kmalloc+0x96/0xb0 [ 48.141427][ T384] usb 3-1: 0:2 : does not exist [ 48.145269][ T815] ? __cfi_policydb_read+0x10/0x10 [ 48.155295][ T815] ? security_load_policy+0x130/0x12d0 [ 48.160811][ T815] security_load_policy+0x16a/0x12d0 [ 48.164752][ T384] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 48.166197][ T815] ? irqentry_exit+0x4a/0x60 [ 48.166226][ T815] ? __kasan_check_write+0x18/0x20 [ 48.183160][ T815] ? mutex_lock+0x97/0x1d0 [ 48.187699][ T815] ? __cfi_security_load_policy+0x10/0x10 [ 48.190111][ T384] usb 3-1: USB disconnect, device number 14 [ 48.193488][ T815] ? rep_movs_alternative+0x4a/0xa0 [ 48.204675][ T815] sel_write_load+0x258/0x600 [ 48.209473][ T815] ? __cfi_sel_write_load+0x10/0x10 [ 48.214707][ T815] ? bpf_lsm_file_permission+0xd/0x20 [ 48.220161][ T815] ? __cfi_sel_write_load+0x10/0x10 [ 48.225447][ T815] vfs_write+0x3c1/0xfd0 [ 48.229727][ T815] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 48.235233][ T374] usb 4-1: Using ep0 maxpacket: 8 [ 48.235423][ T815] ? __cfi_vfs_write+0x10/0x10 [ 48.243097][ T374] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 48.245175][ T815] ? __kasan_check_write+0x18/0x20 [ 48.255399][ T374] usb 4-1: config 179 has no interface number 0 [ 48.258526][ T815] ? mutex_lock+0x97/0x1d0 [ 48.269277][ T815] ? __cfi_mutex_lock+0x10/0x10 [ 48.274179][ T815] ksys_write+0x145/0x260 [ 48.278617][ T815] ? xfd_validate_state+0x68/0x140 [ 48.283789][ T815] ? __cfi_ksys_write+0x10/0x10 [ 48.286627][ T374] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 48.288735][ T815] ? __kasan_check_write+0x18/0x20 [ 48.302204][ T483] udevd[483]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.304865][ T815] ? fpregs_restore_userregs+0x11c/0x260 [ 48.321623][ T374] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 48.326205][ T815] __x64_sys_write+0x7f/0x90 [ 48.342055][ T815] x64_sys_call+0x271c/0x2ee0 [ 48.346811][ T815] do_syscall_64+0x57/0xf0 [ 48.350957][ T374] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 48.351271][ T815] ? clear_bhb_loop+0x50/0xa0 [ 48.367149][ T815] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.371562][ T374] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 48.373091][ T815] RIP: 0033:0x7fa77679e019 [ 48.373115][ T815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.373137][ T815] RSP: 002b:00007fa7776a4028 EFLAGS: 00000246 [ 48.385732][ T374] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 48.389006][ T815] ORIG_RAX: 0000000000000001 [ 48.410818][ T374] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 48.414738][ T815] RAX: ffffffffffffffda RBX: 00007fa776a25fa0 RCX: 00007fa77679e019 [ 48.414761][ T815] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 48.428908][ T374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.432765][ T815] RBP: 00007fa77683500c R08: 0000000000000000 R09: 0000000000000000 [ 48.432785][ T815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.450531][ T817] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 48.457899][ T815] R13: 00007fa776a26038 R14: 00007fa776a25fa0 R15: 00007ffe519ac5e8 [ 48.497076][ T815] [ 48.500124][ T815] ---[ end trace 0000000000000000 ]--- [ 48.505751][ T815] SELinux: failed to load policy [ 48.509011][ T417] usb 1-1: USB disconnect, device number 11 [ 48.517913][ T65] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 48.526746][ T65] usb 2-1: clock source 0 is not valid, cannot use [ 48.541275][ T65] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 48.549498][ T65] usb 2-1: 1:1: cannot set freq 48000 (v2/v3): err -71 [ 48.566870][ T65] usb 2-1: USB disconnect, device number 8 [ 48.588290][ T467] udevd[467]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.672326][ T9] usb 4-1: USB disconnect, device number 13 [ 48.672498][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 48.686784][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending?