last executing test programs: 4.617042093s ago: executing program 1 (id=296): arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000001280)) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000180)={0x1}) syz_usb_connect(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b", @ANYBLOB='ag'], 0x0) 3.341333896s ago: executing program 1 (id=299): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) syz_usb_connect$uac3(0x5, 0x8c, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x2b53, 0x31, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x8, 0x50, 0x1, {0x8, 0xb, 0x1, 0x1, 0x1, 0x25, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x16, 0x6}, [@source_unit={0xc, 0x24, 0xb, 0x8, 0x1, 0x3, 0x8, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xd, 0x9, 0x0, {0xa, 0x25, 0x25, 0x9, 0x2, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x2, 0x4, 0x0, {0xa, 0x25, 0x25, 0x460, 0x40, 0x44}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x3a, 0x52, 0x1, 0x8, 0x6}, 0x18, &(0x7f0000000200)={0x5, 0xf, 0x18, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x1, 0xed7cec195d9f74aa, 0xfffc}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x4, 0xfff8}]}, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000280)='./file0\x00', r1, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 2.081110629s ago: executing program 1 (id=309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'netdevsim0\x00', @random="e7427c23cb7d"}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa81000e0086dd695ee60400000000000000bbff0200000000000000000000000000018700907800000000000000000002000000000001"], 0x53) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000262000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, r4, 0xf56b1000) 1.904350975s ago: executing program 0 (id=314): creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x175) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001500), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030129bd7000fbdbdf2501000000000000000241000000030013"], 0x2c}, 0x1, 0x0, 0x0, 0x200040c4}, 0x40000) 1.895925296s ago: executing program 0 (id=315): r0 = syz_usb_connect$rtl8150(0x5, 0x0, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f00000007c0)="58000000140019234042953809da8a809683f36acf4b80040d8c560a117436c30058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0cf5b63d69ec4ad2d300000000000000", 0x60}], 0x1) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149004006040800", 0x58}], 0x1) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$midi(0x4, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="0500050000"], 0x1, [{0x85, &(0x7f0000000240)=ANY=[@ANYBLOB="85037bae8fb5f0b34639f9e712a5ede7fdce68895032edd630d42d000dbd994a5ed586c1cc5bf3c05ce4a5a735342d02000000c9d7c7da87a8934cbf4252d097f55e3e39ae8f36515dfc8e2eb26a4957dbefce776eaa9c4f7b69f2e66ea6a0fb3a1e007a61126446a909f965b13a18e748df14aae03df74730e5f407eff5b5ff7cd3200000"]}]}) (async) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) (async) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f00005b3000/0x400000)=nil) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000016c0)={0x44, 0x0, &(0x7f00000005c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000440)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'veth1_to_batadv\x00', 0x800}) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x210482, 0x116, 0x10}, 0x18) r9 = openat2(r8, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x402, 0x81, 0xa}, 0x18) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) write$binfmt_misc(r11, &(0x7f00000003c0)="a6dc60eba058763a45487ea6dbeef1e1fc27db5f36061d10e023b0588bf8e63a71309b3f1c3a4043af484a89", 0x2c) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB], 0x18}], 0x1}, 0x0) (async) openat$kvm(0x0, &(0x7f0000000100), 0x8000, 0x0) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) statx(r9, &(0x7f0000000380)='./file0\x00', 0x4000, 0x100, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r8, 0xffffffff80000301, r13, 0x0) syz_io_uring_setup(0x42ba, &(0x7f0000000640)={0x0, 0x2906, 0x4000, 0x3, 0x33c}, &(0x7f0000000580), &(0x7f00000006c0), &(0x7f0000000840)) 1.77706207s ago: executing program 1 (id=318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x16401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfd000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000007c0)={0x0, 0x0}) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000640)={0x200000, 0x40000, 0xe, 0x6, 0x8}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.704383482s ago: executing program 1 (id=319): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000140)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000040)="49a7694cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000002c0)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="20fc83"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x3, "b8c189"}, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x32, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0xa8, 0x1e, 0x21, 0x0, 0x25dfdbfc, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @generic="c85904cbc2919363b2917f57cf841a34dab6c06376fbe41dc75dd9ff1f13969b96398c31a78d0ca64024c49ab016ae2c4bd51f64159e7d48a6c5e9e90cd26c66025743a85922453a9cb5fff57f67c61d45f39a7927934e329d9b5115556969b0fd4b3c33b6212efa2913e59aee0f5272f735602d88b7796e2e38096a21fc8a0389a201128e4a521946256f"]}, 0xa8}}, 0x0) 1.265383857s ago: executing program 0 (id=321): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async, rerun: 64) mkdir(&(0x7f0000000100)='./bus\x00', 0x1c8) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async, rerun: 64) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file1\x00') (rerun: 64) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async, rerun: 64) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async, rerun: 64) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x180000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f00000002c0)={'broute\x00', 0x0, 0x3, 0x27, [0x3, 0xb9, 0x6, 0x6, 0xfff, 0x2f8], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=""/39}, &(0x7f0000000100)=0x78) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64169400ff0325010ebc070000000000008000f0fffeffe809005300fff5dd00ba27a9792edb16db819a000010000200060c1000000001000000000095cbb4f8abd9927c29667bc2d10c0fb8cced9a8edbd1a2fee22ccf7bc361e65692ff29036e523b4d47d442f1fa5618eb122482d483561b472da91c48390325bd8f98d4bbd664cd0ac826f2af1a84c115059ec4498dab8e091c5b16e670243334a6c12e013675b10b994dd06afe03ff7448", 0x81}], 0x1) 1.263180767s ago: executing program 0 (id=322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x4, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5, 0x1}], 0xffffffff}) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)}], 0x1}}], 0x1, 0x40040) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x101, 0x0, 0x2, 0x0, 0x4002004c4, 0x1008, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x8000000b3, 0x8d], 0xeeee8000, 0x14d3}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x1d9, 0x0, 0xff000000000c0002}]}) 1.261189777s ago: executing program 2 (id=323): r0 = socket(0x8000000010, 0x2, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x3) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) unshare(0x22020400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r3 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r3, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0x14, 0x0, &(0x7f0000000180)) syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x400) timer_create(0x3, &(0x7f0000000140)={0x0, 0x1, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) timer_settime(r5, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1e71, 0x2020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xe0, 0x1, "", [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x1b, 0x8, 0x1, {0x22, 0x346}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x7}}}}}]}}]}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222400000096010006010003000000804b7177f37f753883c83e25031bdde840505a0c68932924"], 0x0}, 0x0) r6 = inotify_init1(0x800) sync_file_range(r6, 0xfffffffffffff800, 0x0, 0x7) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x804) 1.142377551s ago: executing program 0 (id=324): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000580)={0x3, &(0x7f0000000680)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x2c, 0x2, 0x1, 0x3}, {0x6, 0xd5, 0x9, 0x5}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121100, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x0, 0xfffffffffffffffe}) 1.044404165s ago: executing program 0 (id=325): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x8001, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x56d8, 0x3, 0x81, 'syz1\x00'}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) 667.722448ms ago: executing program 2 (id=329): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x280, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x40000004000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setresuid(0xee00, 0xee00, 0x0) setpriority(0x1, 0x0, 0xfffffffffffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 649.636648ms ago: executing program 2 (id=330): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x109200, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getpeername(r1, 0x0, 0x0) (async) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) (async) syz_usb_connect(0x3, 0x36, &(0x7f0000000c40)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff030406090221072501"], 0x0) 545.289042ms ago: executing program 3 (id=331): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x2052000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 544.902492ms ago: executing program 3 (id=332): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010002000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="10003a08000024000e7b402d5e2d0000"], 0x30}], 0x1, 0x0, 0x0, 0x4c0c1}, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) close_range(r0, r1, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x234cc0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xa00, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) 540.553472ms ago: executing program 3 (id=333): mkdir(&(0x7f0000000040)='./file0\x00', 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@default_permissions}, {@uuid_off}]}) 517.570162ms ago: executing program 3 (id=334): sched_yield() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000002040), 0x410281, 0x0) (rerun: 64) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000106, 0x0, 0x1}]}) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x29, 0x3, 0x0, {0x7, @ether_spec={@local, @remote, 0x1ff}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x0, 0x8000, [0x2, 0x2]}, @udp_ip6_spec={@empty, @mcast1, 0x4e23, 0x4e22, 0x9c}, {0x0, @broadcast, 0x3, 0x0, [0x3, 0x5]}, 0xfffffffffffffffe, 0x1}}}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x0) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0xd}) 401.271577ms ago: executing program 3 (id=335): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @local}, @local, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x800000, 0xa, 0x0, 0x0, 0x7ffffffe, 0x140192}) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) (async) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @private}, 0x0}, &(0x7f0000000080)=0x14) (async) r3 = socket$inet(0x2, 0xa, 0x80) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000080)={0x0, 0x0, 0x2000, 0x0, 0x2e3}, 0x0, 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4111, 0x100f}], 0x1, 0x144, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x8, 0x4e22, 0xffff, 0x2, 0x20, 0x0, 0x6c, 0x0, r8}, {0x2, 0x6, 0x6800000000000000, 0x200, 0xffffffffffff7fff, 0x8000000000000001, 0x2, 0x2}, {0x7ff, 0xffa, 0x3, 0x7}, 0x1, 0x6e6bb5, 0xe6c5419f4dc095cb, 0x1, 0x0, 0x2}, {{@in6=@private1, 0x4d3, 0x33}, 0xa, @in6=@private2, 0x3504, 0x3, 0x3, 0x6, 0x406, 0x8, 0x7ff}}, 0xe8) sendmmsg$inet(r3, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40489d1) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @loopback, 0xfffff9bd, 0xb1a7, 0x7, 0x400, 0x7, 0x2000100, r2}) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async) madvise(&(0x7f0000365000/0x1000)=nil, 0x1000, 0x4) 381.531957ms ago: executing program 3 (id=336): getrandom(&(0x7f0000000500)=""/295, 0x127, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_clone(0x20000011, 0x0, 0x3abcb77132126cbf, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0x3]}, 0x0, 0x8) getrandom(&(0x7f0000000040)=""/40, 0x28, 0x1) gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x35, 0x4, @thr={&(0x7f0000000380)="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", &(0x7f0000000480)="854aac601236fb9d160296327954fcc405d7bccd438674b8ee0f8da1b4f4b31383c4c7d92ad61043b309e694276f50f3eeb7628eda58768c2f43e976c69fe2944af1a5485855748b57c47a82790a078b82e5d455a2fb1998b5866a5e50c3fb4efbf41d63a01e07168d6d4a39a240ee07fadfbb89a4eb55d10bba4069"}}, &(0x7f00000000c0)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x3d, 0x0, 0x1, 0xfffffffc}, {0x4, 0x2}, {0x6, 0xfc, 0x0, 0x6}]}) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_gettime(r1, 0x0) io_pgetevents(0x0, 0xf83a, 0x0, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={[0x7]}, 0x8}) mremap(&(0x7f00000e3000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000014000/0x3000)=nil) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) io_setup(0x5, &(0x7f0000000140)) 95.838396ms ago: executing program 2 (id=337): chdir(&(0x7f0000000000)='./cgroup\x00') (async) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) close(0x3) (async) r2 = socket(0x10, 0x803, 0x0) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000680)=ANY=[@ANYRES64=r2], 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) syz_usb_control_io$uac1(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x40, 0xd, 0x6, "b351770fd91a"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000300)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="0009050000007c4455b6f37442b037e3c0dc16f6b0c3c176792d6579cef06215be1ce16b305992ab2548e9ba42d5a9c4d742cc633b283138e68c0ca8e164559941cf4f80bacd30ea0ed390"], 0x0, 0x0, &(0x7f0000000240)={0x20, 0x1, 0x3b, "1ec2ed672709775a1e5ca232787998411cb73cbcaaadb4e94725700ed2107c9f9606d32f6dc2d6bb420c7684683cf39f56a2811888ba76109ccf7a"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x4}}) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_per_queue_op={0x4b, 0xf, [0x102, 0x0, 0x82a4, 0x5, 0xcc, 0xe49, 0x4, 0x7, 0x9, 0x6, 0x200, 0x40, 0x5ca, 0x8, 0x81, 0x1, 0x80000000, 0x1, 0xfffffff8, 0xc, 0xa, 0x40009e, 0x1000, 0xfffffffd, 0x0, 0x1, 0xd6, 0x400, 0x1ff, 0x180, 0xa, 0x2, 0xfffffffd, 0x4, 0xff4, 0x8, 0x9, 0x800, 0x3, 0x6, 0x5, 0x0, 0x10000, 0xa7, 0x1ff, 0x5, 0x0, 0x4, 0x7fff, 0x10000, 0xffffff66, 0x201b, 0x1, 0x8000001, 0xffff1de7, 0x80000001, 0x3, 0xc0af, 0x4, 0x0, 0x81, 0xc74, 0x1, 0x1, 0x4, 0x4, 0x213, 0x9, 0xfffffffd, 0x40000000, 0x3, 0x8, 0x7, 0x0, 0x4, 0x9, 0x800, 0x1, 0x6, 0x4, 0x3638aa87, 0x3d7e, 0x7, 0x3, 0x6, 0x7, 0x0, 0x1, 0x5, 0x6, 0x40e5, 0x6, 0x0, 0x5, 0x3, 0x10000, 0xffffffff, 0x1, 0x1, 0xf78, 0x7, 0x2, 0x120, 0x10000, 0x39e, 0x5, 0x9, 0xffffff01, 0x3, 0x81, 0x9, 0x7, 0x9efc6186, 0x8823, 0x8000, 0xffffa694, 0xa5d, 0x94, 0x1, 0x10, 0xda800000, 0x4, 0x354, 0x52, 0x0, 0x8, 0x8, 0x3]}}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) readv(r0, &(0x7f0000000140)=[{0x0, 0x2f}, {&(0x7f0000000940)=""/101, 0x65}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$OCFS2_IOC_MOVE_EXT(r2, 0x40406f06, &(0x7f00000003c0)={0x4, 0xfffffffffffffff8, 0x9, 0x3}) r4 = open$dir(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x86) mknodat$null(r4, &(0x7f0000000100)='./file0\x00', 0x1, 0x103) (async) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc20e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x21}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) fstat(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000440)='./cgroup\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200080, &(0x7f0000000580)={'trans=unix,', {[{@msize={'msize', 0x3d, 0x100000000}}, {@posixacl}, {@cache_none}, {@posixacl}, {@mmap}, {@access_uid={'access', 0x3d, 0xee01}}, {@msize={'msize', 0x3d, 0x2}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@appraise}, {@fsname={'fsname', 0x3d, 'veth0_to_team\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r6}}, {@dont_hash}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}}) 41.402849ms ago: executing program 2 (id=338): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040), 0x8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/wake_unlock', 0x801, 0x4) write(r1, &(0x7f0000000000)='\x00', 0x1) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0xf5, 0x7, 0x57, 0x0, 0x0, 0x9, 0x10, 0x5, 0x8, 0x6, 0x6, 0x1, 0x0, 0xffffff9f, 0x2, 0x9, 0xf7, 0x2, 0x5, '\x00', 0xb8, 0x2}) 40.147569ms ago: executing program 2 (id=339): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000090) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 0s ago: executing program 1 (id=340): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="cba2eea91986691a0a004e2300000009ff0100000000000000000000000000010800"/144], 0x90) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'pim6reg\x00', {}, 0xb2c}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/27, 0x1b}], 0x1, 0xfffffe00, 0xfffffbfc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts. [ 20.421513][ T36] audit: type=1400 audit(1774814573.910:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.422597][ T282] cgroup: Unknown subsys name 'net' [ 20.444269][ T36] audit: type=1400 audit(1774814573.910:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.471628][ T36] audit: type=1400 audit(1774814573.930:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.471817][ T282] cgroup: Unknown subsys name 'devices' [ 20.652413][ T282] cgroup: Unknown subsys name 'hugetlb' [ 20.658019][ T282] cgroup: Unknown subsys name 'rlimit' [ 20.830763][ T36] audit: type=1400 audit(1774814574.320:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.853947][ T36] audit: type=1400 audit(1774814574.320:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.878788][ T36] audit: type=1400 audit(1774814574.320:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.884447][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.910649][ T36] audit: type=1400 audit(1774814574.390:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.936036][ T36] audit: type=1400 audit(1774814574.400:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.939445][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.961825][ T36] audit: type=1400 audit(1774814574.420:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.995833][ T36] audit: type=1400 audit(1774814574.420:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.288099][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.295358][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.302651][ T289] bridge_slave_0: entered allmulticast mode [ 22.308811][ T289] bridge_slave_0: entered promiscuous mode [ 22.316583][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.323654][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.330777][ T289] bridge_slave_1: entered allmulticast mode [ 22.336964][ T289] bridge_slave_1: entered promiscuous mode [ 22.353154][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.360187][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.367270][ T291] bridge_slave_0: entered allmulticast mode [ 22.373413][ T291] bridge_slave_0: entered promiscuous mode [ 22.382232][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.389365][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.396421][ T291] bridge_slave_1: entered allmulticast mode [ 22.402608][ T291] bridge_slave_1: entered promiscuous mode [ 22.429562][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.436624][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.443741][ T292] bridge_slave_0: entered allmulticast mode [ 22.449876][ T292] bridge_slave_0: entered promiscuous mode [ 22.459376][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.466522][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.473583][ T292] bridge_slave_1: entered allmulticast mode [ 22.479794][ T292] bridge_slave_1: entered promiscuous mode [ 22.506418][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.513509][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.520656][ T290] bridge_slave_0: entered allmulticast mode [ 22.526903][ T290] bridge_slave_0: entered promiscuous mode [ 22.535741][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.542785][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.549814][ T290] bridge_slave_1: entered allmulticast mode [ 22.556055][ T290] bridge_slave_1: entered promiscuous mode [ 22.669119][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.676194][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.683481][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.690496][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.712152][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.719184][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.726416][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.733454][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.745112][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.752158][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.759431][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.766471][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.786138][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.793200][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.800436][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.807468][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.824792][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.832404][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.839613][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.847141][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.854714][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.861954][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.869135][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.876365][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.888738][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.895791][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.910700][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.917731][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.939845][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.946915][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.954956][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.962008][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.978836][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.985886][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.993562][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.000600][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.031368][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.038391][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.046796][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.053827][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.075581][ T292] veth0_vlan: entered promiscuous mode [ 23.104019][ T289] veth0_vlan: entered promiscuous mode [ 23.109631][ T291] veth0_vlan: entered promiscuous mode [ 23.118362][ T290] veth0_vlan: entered promiscuous mode [ 23.126316][ T292] veth1_macvtap: entered promiscuous mode [ 23.144409][ T289] veth1_macvtap: entered promiscuous mode [ 23.154253][ T291] veth1_macvtap: entered promiscuous mode [ 23.161577][ T290] veth1_macvtap: entered promiscuous mode [ 23.207108][ T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.262315][ T314] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 23.286235][ T310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 23.287437][ T314] overlay: filesystem on ./bus not supported as upperdir [ 23.335720][ T323] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.392754][ T323] netlink: 'syz.1.5': attribute type 5 has an invalid length. [ 23.400234][ T323] netlink: 'syz.1.5': attribute type 5 has an invalid length. [ 23.409101][ T323] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.5'. [ 23.418522][ T317] netlink: 'syz.0.1': attribute type 12 has an invalid length. [ 23.520696][ T65] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.557422][ T337] Zero length message leads to an empty skb [ 23.611225][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 23.671828][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.682439][ T65] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 23.695063][ T65] usb 4-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 23.705355][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.713909][ T65] usb 4-1: Product: syz [ 23.718137][ T65] usb 4-1: Manufacturer: syz [ 23.724238][ T65] usb 4-1: SerialNumber: syz [ 23.761579][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 23.773042][ T9] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 23.782310][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.790311][ T9] usb 3-1: Product: syz [ 23.794513][ T9] usb 3-1: Manufacturer: syz [ 23.799122][ T9] usb 3-1: SerialNumber: syz [ 23.804782][ T9] usb 3-1: config 0 descriptor?? [ 23.811616][ T9] plusb 3-1:0.0: probe with driver plusb failed with error -22 [ 23.933154][ T65] usb 4-1: 0:1 : does not exist [ 23.938079][ T65] usb 4-1: unit 0 not found! [ 23.944911][ T65] usb 4-1: USB disconnect, device number 2 [ 23.961267][ T306] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.971257][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.012491][ T326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.021356][ T326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.029564][ T326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.039161][ T326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.047952][ T326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.057304][ T326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.074378][ T31] usb 3-1: USB disconnect, device number 2 [ 24.110632][ T306] usb 2-1: Using ep0 maxpacket: 32 [ 24.120694][ T306] usb 2-1: unable to get BOS descriptor or descriptor too short [ 24.131696][ T306] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 190, changing to 7 [ 24.136030][ T343] overlayfs: conflicting options: nfs_export=on,index=off [ 24.151390][ T306] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 24.160472][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.168481][ T306] usb 2-1: Product: syz [ 24.173404][ T306] usb 2-1: Manufacturer: syz [ 24.177996][ T306] usb 2-1: SerialNumber: syz [ 24.384290][ T340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.390659][ T65] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.392880][ T340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.423516][ T306] usb 2-1: USB disconnect, device number 2 [ 24.462638][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.550851][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 24.557291][ T65] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 24.565679][ T353] netlink: 'syz.3.13': attribute type 4 has an invalid length. [ 24.573275][ T65] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 24.586871][ T65] usb 1-1: config 0 has no interface number 0 [ 24.601052][ T355] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 24.604881][ T65] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 24.625245][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.642019][ T65] usb 1-1: Product: syz [ 24.646771][ T65] usb 1-1: Manufacturer: syz [ 24.651892][ T65] usb 1-1: SerialNumber: syz [ 24.657432][ T65] usb 1-1: config 0 descriptor?? [ 24.664014][ T65] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 24.684774][ T65] usb 1-1: No valid video chain found. [ 24.691250][ T371] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.706942][ T370] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.781571][ T378] tmpfs: Unknown parameter 'noinode32' [ 24.787140][ T377] tmpfs: Unknown parameter 'noinode32' [ 24.795490][ T378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.804052][ T378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.866348][ T306] usb 1-1: USB disconnect, device number 2 [ 25.060615][ T329] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.170861][ T65] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 25.190600][ T329] usb 4-1: device descriptor read/64, error -71 [ 25.300774][ T65] usb 3-1: device descriptor read/64, error -71 [ 25.430624][ T329] usb 4-1: device descriptor read/64, error -71 [ 25.540752][ T65] usb 3-1: device descriptor read/64, error -71 [ 25.670642][ T329] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 25.690613][ T306] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 25.780611][ T65] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 25.800609][ T329] usb 4-1: device descriptor read/64, error -71 [ 25.841935][ T306] usb 1-1: unable to get BOS descriptor or descriptor too short [ 25.849935][ T306] usb 1-1: not running at top speed; connect to a high speed hub [ 25.859703][ T306] usb 1-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 25.868792][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.876803][ T306] usb 1-1: Product: syz [ 25.881133][ T306] usb 1-1: Manufacturer: syz [ 25.885721][ T306] usb 1-1: SerialNumber: syz [ 25.892503][ T306] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 25.913403][ T65] usb 3-1: device descriptor read/64, error -71 [ 25.928226][ T393] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 25.952323][ T36] kauditd_printk_skb: 85 callbacks suppressed [ 25.952338][ T36] audit: type=1400 audit(1774814579.430:159): avc: denied { read } for pid=394 comm="syz.1.25" dev="nsfs" ino=4026532355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.983149][ T36] audit: type=1400 audit(1774814579.430:160): avc: denied { open } for pid=394 comm="syz.1.25" path="net:[4026532355]" dev="nsfs" ino=4026532355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.007557][ T36] audit: type=1400 audit(1774814579.440:161): avc: denied { ioctl } for pid=394 comm="syz.1.25" path="socket:[4465]" dev="sockfs" ino=4465 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.060646][ T329] usb 4-1: device descriptor read/64, error -71 [ 26.092749][ T36] audit: type=1400 audit(1774814579.580:162): avc: denied { create } for pid=390 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.093381][ T306] usb 1-1: unit 13 not found! [ 26.129259][ T306] usb 1-1: USB disconnect, device number 3 [ 26.170683][ T329] usb usb4-port1: attempt power cycle [ 26.180621][ T65] usb 3-1: device descriptor read/64, error -71 [ 26.250609][ T341] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 26.290667][ T65] usb usb3-port1: attempt power cycle [ 26.401644][ T341] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 26.412684][ T341] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.422432][ T341] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 26.431479][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.441223][ T341] hub 2-1:4.0: USB hub found [ 26.510631][ T329] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 26.531751][ T329] usb 4-1: device descriptor read/8, error -71 [ 26.627329][ T36] audit: type=1400 audit(1774814580.110:163): avc: denied { read } for pid=404 comm="syz.0.27" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.650595][ T65] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 26.650608][ T341] hub 2-1:4.0: 4 ports detected [ 26.650632][ T341] usb 2-1: selecting invalid altsetting 1 [ 26.660905][ T36] audit: type=1400 audit(1774814580.110:164): avc: denied { open } for pid=404 comm="syz.0.27" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.666058][ T341] hub 2-1:4.0: Using single TT (err -22) [ 26.669824][ T36] audit: type=1400 audit(1774814580.130:165): avc: denied { ioctl } for pid=404 comm="syz.0.27" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.692971][ T341] hub 2-1:4.0: insufficient power available to use all downstream ports [ 26.701001][ T329] usb 4-1: device descriptor read/8, error -71 [ 26.736741][ T65] usb 3-1: device descriptor read/8, error -71 [ 26.871641][ T65] usb 3-1: device descriptor read/8, error -71 [ 26.980725][ T329] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 27.001793][ T329] usb 4-1: device descriptor read/8, error -71 [ 27.059759][ T341] usb 2-1: USB disconnect, device number 3 [ 27.100622][ T402] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 27.110725][ T65] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 27.131704][ T329] usb 4-1: device descriptor read/8, error -71 [ 27.138272][ T65] usb 3-1: device descriptor read/8, error -71 [ 27.240891][ T329] usb usb4-port1: unable to enumerate USB device [ 27.251690][ T402] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.262711][ T402] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.272487][ T402] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 27.285521][ T402] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 27.294642][ T402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.303146][ T65] usb 3-1: device descriptor read/8, error -71 [ 27.309782][ T402] usb 1-1: config 0 descriptor?? [ 27.410681][ T65] usb usb3-port1: unable to enumerate USB device [ 27.665095][ T421] fuse: Bad value for 'fd' [ 27.721432][ T402] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 27.731138][ T36] audit: type=1400 audit(1774814581.210:166): avc: granted { setsecparam } for pid=423 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 27.752678][ T402] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 27.823820][ T429] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 27.842928][ T427] kvm: kvm [426]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0xc0010000) = 0x8000000f [ 27.855003][ T427] kvm: kvm [426]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0xc0010000) = 0x800000b8 [ 27.864575][ T427] kvm: kvm [426]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0xc0010000) = 0x80000028 [ 27.874200][ T427] kvm: kvm [426]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0xc0010000) = 0x80000078 [ 27.883972][ T427] kvm: kvm [426]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0xc0010000) = 0x80000068 [ 27.893546][ T427] kvm: kvm [426]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0xc0010000) = 0x80000038 [ 27.903641][ T427] kvm: kvm [426]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0xc0010000) = 0x800000a8 [ 27.905478][ T433] SELinux: Context system_u:object_r:cpu_online_t:s0 is not valid (left unmapped). [ 27.923056][ T36] audit: type=1400 audit(1774814581.410:167): avc: denied { relabelto } for pid=426 comm="syz.2.33" name="file1" dev="overlay" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:cpu_online_t:s0" [ 27.951724][ T36] audit: type=1400 audit(1774814581.410:168): avc: denied { associate } for pid=426 comm="syz.2.33" name="#63" dev="tmpfs" ino=63 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:cpu_online_t:s0" [ 27.980679][ T306] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.012040][ T437] netlink: 'syz.2.36': attribute type 10 has an invalid length. [ 28.019739][ T437] netlink: 40 bytes leftover after parsing attributes in process `syz.2.36'. [ 28.028725][ T437] veth1: entered promiscuous mode [ 28.034259][ T437] capability: warning: `syz.2.36' uses deprecated v2 capabilities in a way that may be insecure [ 28.055989][ T419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.065675][ T419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.115362][ T341] usb 1-1: USB disconnect, device number 4 [ 28.131690][ T306] usb 2-1: config 1 has an invalid interface number: 253 but max is 1 [ 28.135863][ T448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.38'. [ 28.146109][ T306] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.159985][ T306] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 28.170902][ T306] usb 2-1: config 1 has no interface number 2 [ 28.177000][ T306] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.180444][ T450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=450 comm=syz.0.39 [ 28.187958][ T306] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 28.205680][ T448] kvm: kvm [447]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 28.213315][ T306] usb 2-1: config 1 interface 1 has no altsetting 0 [ 28.225813][ T448] kvm: kvm [447]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 28.232589][ T306] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.245278][ T448] kvm: kvm [447]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 28.246885][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.265597][ T306] usb 2-1: Product: syz [ 28.274854][ T306] usb 2-1: Manufacturer: syz [ 28.279653][ T306] usb 2-1: SerialNumber: syz [ 28.294002][ T306] cdc_ncm 2-1:1.253: CDC Union missing and no IAD found [ 28.301150][ T306] cdc_ncm 2-1:1.253: bind() failure [ 28.489129][ T306] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 28.503329][ T306] usb 2-1: USB disconnect, device number 4 [ 28.521301][ T465] fuse: Bad value for 'fd' [ 28.526356][ T465] overlayfs: failed to clone upperpath [ 28.851332][ T477] rust_binder: Write failure EFAULT in pid:39 [ 28.861415][ T479] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 29.039417][ T489] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 29.140608][ T306] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 29.140621][ T402] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 29.290629][ T402] usb 1-1: Using ep0 maxpacket: 16 [ 29.296863][ T402] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 29.308121][ T402] usb 1-1: config 0 interface 0 has no altsetting 0 [ 29.314741][ T402] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 29.321712][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.323838][ T65] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 29.334973][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.342149][ T402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.352114][ T306] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 29.360600][ T402] usb 1-1: config 0 descriptor?? [ 29.375188][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.383910][ T306] usb 4-1: config 0 descriptor?? [ 29.522083][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 29.531965][ T65] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 29.541050][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.549046][ T65] usb 2-1: Product: syz [ 29.553219][ T65] usb 2-1: Manufacturer: syz [ 29.557816][ T65] usb 2-1: SerialNumber: syz [ 29.579603][ T495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.588534][ T496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.589293][ T495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.597269][ T496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.614076][ T402] logitech 0003:046D:C24F.0002: unknown main item tag 0x6 [ 29.621445][ T402] logitech 0003:046D:C24F.0002: unknown global tag 0xd [ 29.628400][ T402] logitech 0003:046D:C24F.0002: item 0 2 1 13 parsing failed [ 29.635995][ T402] logitech 0003:046D:C24F.0002: parse failed [ 29.642134][ T402] logitech 0003:046D:C24F.0002: probe with driver logitech failed with error -22 [ 29.706159][ T500] netlink: 37 bytes leftover after parsing attributes in process `syz.2.58'. [ 29.724581][ T503] netlink: 'syz.2.59': attribute type 10 has an invalid length. [ 29.732369][ T503] netlink: 40 bytes leftover after parsing attributes in process `syz.2.59'. [ 29.765598][ T65] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 29.774629][ T65] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 29.787315][ T65] usb 2-1: USB disconnect, device number 5 [ 29.803141][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.813606][ T306] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 29.838566][ T306] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 29.857492][ T341] usb 1-1: USB disconnect, device number 5 [ 30.026622][ T306] cp2112 0003:10C4:EA90.0003: Part Number: 0x47 Device Version: 0xD0 [ 30.376765][ T520] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 30.410393][ T527] fuse: Bad value for 'fd' [ 30.427545][ T482] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 30.436974][ T482] syzkaller1: linktype set to 270 [ 30.492272][ T539] overlayfs: failed to resolve './file0': -2 [ 30.670634][ T65] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 30.791600][ T549] 8021q: VLANs not supported on ip_vti0 [ 30.823051][ T555] fuse: Bad value for 'fd' [ 30.828076][ T555] overlayfs: failed to resolve './file1': -2 [ 30.831930][ T65] usb 1-1: unable to get BOS descriptor or descriptor too short [ 30.850251][ T65] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 30.870598][ T65] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 30.882842][ T65] usb 1-1: string descriptor 0 read error: -22 [ 30.889033][ T65] usb 1-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.40 [ 30.898091][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.906979][ T531] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 30.915378][ T65] usb 1-1: MIDIStreaming interface descriptor not found [ 30.969394][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 30.969427][ T561] process 'syz.2.78' launched '/dev/fd/3' with NULL argv: empty string added [ 30.969431][ T36] audit: type=1400 audit(1774814584.450:216): avc: denied { execute } for pid=560 comm="syz.2.78" dev="tmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 31.005115][ T36] audit: type=1400 audit(1774814584.490:217): avc: denied { execute_no_trans } for pid=560 comm="syz.2.78" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 31.118158][ T65] usb 1-1: USB disconnect, device number 6 [ 31.125862][ T567] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 31.125880][ T567] rust_binder: Read failure Err(EFAULT) in pid:63 [ 31.141208][ T36] audit: type=1400 audit(1774814584.630:218): avc: denied { read } for pid=566 comm="syz.1.81" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.170756][ T36] audit: type=1400 audit(1774814584.630:219): avc: denied { open } for pid=566 comm="syz.1.81" path="/dev/input/event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.194558][ T36] audit: type=1400 audit(1774814584.630:220): avc: denied { ioctl } for pid=566 comm="syz.1.81" path="/dev/input/event2" dev="devtmpfs" ino=209 ioctlcmd=0x4507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.633009][ T65] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 31.751826][ T306] cp2112 0003:10C4:EA90.0003: error setting SMBus config [ 31.759519][ T306] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -71 [ 31.773257][ T306] usb 4-1: USB disconnect, device number 7 [ 31.791999][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 31.801944][ T65] usb 2-1: not running at top speed; connect to a high speed hub [ 31.812408][ T584] overlayfs: failed to resolve './file1': -2 [ 31.812407][ T65] usb 2-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 31.812432][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.835553][ T65] usb 2-1: Product: syz [ 31.839840][ T65] usb 2-1: Manufacturer: syz [ 31.844923][ T65] usb 2-1: SerialNumber: syz [ 31.860192][ T65] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 31.873178][ T36] audit: type=1400 audit(1774814585.360:221): avc: denied { ioctl } for pid=588 comm="syz.3.88" path="socket:[5695]" dev="sockfs" ino=5695 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.900610][ T403] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 32.030682][ T403] usb 1-1: device descriptor read/64, error -71 [ 32.063893][ T65] usb 2-1: unit 13 not found! [ 32.079925][ T65] usb 2-1: USB disconnect, device number 6 [ 32.200641][ T306] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 32.270618][ T403] usb 1-1: device descriptor read/64, error -71 [ 32.350605][ T306] usb 4-1: Using ep0 maxpacket: 8 [ 32.357022][ T306] usb 4-1: unable to get BOS descriptor or descriptor too short [ 32.366809][ T306] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 32.375904][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.384052][ T306] usb 4-1: Product: syz [ 32.388221][ T306] usb 4-1: Manufacturer: syz [ 32.393002][ T306] usb 4-1: SerialNumber: syz [ 32.520675][ T403] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 32.602016][ T306] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 32.611876][ T306] usb 4-1: USB disconnect, device number 8 [ 32.650611][ T403] usb 1-1: device descriptor read/64, error -71 [ 32.890617][ T403] usb 1-1: device descriptor read/64, error -71 [ 32.951906][ T603] netlink: 'syz.1.92': attribute type 58 has an invalid length. [ 32.960765][ T603] netlink: 'syz.1.92': attribute type 58 has an invalid length. [ 32.978889][ T605] ======================================================= [ 32.978889][ T605] WARNING: The mand mount option has been deprecated and [ 32.978889][ T605] and is ignored by this kernel. Remove the mand [ 32.978889][ T605] option from the mount to silence this warning. [ 32.978889][ T605] ======================================================= [ 33.000699][ T403] usb usb1-port1: attempt power cycle [ 33.125235][ T36] audit: type=1400 audit(1774814586.610:222): avc: denied { create } for pid=606 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 33.145261][ T36] audit: type=1400 audit(1774814586.610:223): avc: denied { setopt } for pid=606 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 33.192155][ T609] netlink: 'syz.3.95': attribute type 13 has an invalid length. [ 33.234033][ T611] overlayfs: failed to resolve './file1': -2 [ 33.270608][ T65] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 33.280302][ T36] audit: type=1400 audit(1774814586.760:224): avc: denied { ioctl } for pid=614 comm="syz.3.98" path="socket:[5751]" dev="sockfs" ino=5751 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.370625][ T403] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 33.391576][ T403] usb 1-1: device descriptor read/8, error -71 [ 33.421582][ T65] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 33.429731][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 33.440733][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8224, setting to 1024 [ 33.451809][ T65] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 33.464726][ T65] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 33.473767][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.482464][ T65] usb 2-1: config 0 descriptor?? [ 33.521634][ T403] usb 1-1: device descriptor read/8, error -71 [ 33.580620][ T306] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 33.731687][ T306] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 33.741776][ T306] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 33.751708][ T306] usb 4-1: config 1 interface 0 has no altsetting 0 [ 33.759779][ T306] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 33.768956][ T403] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 33.776547][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.784624][ T306] usb 4-1: Product: syz [ 33.788867][ T306] usb 4-1: Manufacturer: syz [ 33.793479][ T306] usb 4-1: SerialNumber: syz [ 33.799306][ T618] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 33.806524][ T618] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 33.814564][ T403] usb 1-1: device descriptor read/8, error -71 [ 33.889989][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 33.898383][ T65] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 33.907777][ T65] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 33.961555][ T403] usb 1-1: device descriptor read/8, error -71 [ 34.070676][ T403] usb usb1-port1: unable to enumerate USB device [ 34.151410][ T65] usb 2-1: USB disconnect, device number 7 [ 34.217181][ T306] (unnamed net_device) (uninitialized): Assigned a random MAC address: ba:ff:bd:9a:c7:2b [ 34.228631][ T306] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 34.267915][ T36] audit: type=1400 audit(1774814587.750:225): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.568559][ C1] usb 4-1: eth1: intr status -71 [ 34.573730][ C1] usb 4-1: eth1: intr status -71 [ 34.578731][ C1] usb 4-1: eth1: intr status -71 [ 34.583809][ C1] usb 4-1: eth1: intr status -71 [ 34.588790][ T403] usb 4-1: USB disconnect, device number 9 [ 34.594632][ C1] usb 4-1: eth1: intr status -71 [ 34.595545][ T149] usb 4-1: device reset failed [ 34.949430][ T307] Bluetooth: hci0: Frame reassembly failed (-84) [ 35.130608][ T403] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 35.290637][ T403] usb 2-1: Using ep0 maxpacket: 16 [ 35.297395][ T403] usb 2-1: unable to get BOS descriptor or descriptor too short [ 35.305723][ T403] usb 2-1: config 9 has an invalid interface number: 88 but max is 0 [ 35.313824][ T403] usb 2-1: config 9 has no interface number 0 [ 35.319879][ T403] usb 2-1: config 9 interface 88 has no altsetting 0 [ 35.327865][ T403] usb 2-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=52.b8 [ 35.336933][ T403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.344927][ T403] usb 2-1: Product: 됸⿕Ȟ䷹㫁ᆐ螑ꐚ뽵ﹲ렟吪븃蟃燿㝅ݿꉮЈ틳微롄↴녹饏퉎╥엵ㆽד顗◈熟鞧쪋滭ᷝ뾹쓱늲퓤ࡸ㵽醫왰遮븿﨡㡾⪂宫⺩ᙋ랼⊶閆Პ跸잶ﴤ薽쫳鱋㱛ᑑָ噂偲힠ퟨ䰽剣鐖쬶櫽躤왃霰쾔闓䜚䮾烮夢ᅓ瘒適倊둰㨷ⱐ甊⪈┇㢰穎恗나搇芜箰呈㠦똢ꣻ [ 35.379201][ T403] usb 2-1: Manufacturer: ь [ 35.383749][ T403] usb 2-1: SerialNumber: 䘩粒䋍楙ꑠ椣጑蛯使푀䪅⁻鯎琒餻洞豊珹㦼岬䥫໪㾉 [ 35.401491][ T65] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 35.550600][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 35.556733][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.567820][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 35.580631][ T65] usb 4-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 35.589655][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.599004][ T65] usb 4-1: config 0 descriptor?? [ 35.600626][ T403] ums-datafab 2-1:9.88: USB Mass Storage device detected [ 35.631402][ T403] ums-sddr55 2-1:9.88: USB Mass Storage device detected [ 35.652489][ T403] usb 2-1: USB disconnect, device number 8 [ 36.012085][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.019144][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.026047][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.032925][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.039765][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.047852][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.054740][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.061624][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.068463][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.075318][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.082184][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.089018][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.095872][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.102734][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.109568][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.119300][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.126510][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.133707][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.140988][ T36] kauditd_printk_skb: 1568 callbacks suppressed [ 36.141001][ T36] audit: type=1400 audit(1774814589.630:249): avc: denied { read } for pid=702 comm="syz.1.117" name="msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 36.141834][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.147465][ T36] audit: type=1400 audit(1774814589.630:250): avc: denied { open } for pid=702 comm="syz.1.117" path="/dev/cpu/1/msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 36.169722][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.197614][ T36] audit: type=1400 audit(1774814589.680:251): avc: denied { getopt } for pid=702 comm="syz.1.117" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.199754][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.233462][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.240467][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.247452][ T403] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 36.255273][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.262283][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.267510][ T403] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 36.269192][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.295711][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.311209][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.318136][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.325439][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.325705][ T36] audit: type=1400 audit(1774814589.810:252): avc: denied { write } for pid=704 comm="syz.1.118" name="hidraw0" dev="devtmpfs" ino=510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 36.337964][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.362164][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.369028][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.375924][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.382806][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.389795][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.396679][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.403565][ T65] wacom 0003:056A:00B3.0005: unknown main item tag 0x0 [ 36.410769][ T65] wacom 0003:056A:00B3.0005: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 36.420900][ T65] wacom 0003:056A:00B3.0005: hidraw0: USB HID v0.81 Device [HID 056a:00b3] on usb-dummy_hcd.3-1/input0 [ 36.424743][ T709] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 36.446672][ T65] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B3.0005/input/input5 [ 36.476971][ T36] audit: type=1400 audit(1774814589.960:253): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=514 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.484193][ T65] usb 4-1: USB disconnect, device number 10 [ 36.499295][ T36] audit: type=1400 audit(1774814589.960:254): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=514 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.531753][ T36] audit: type=1400 audit(1774814590.020:255): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=514 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.599708][ T36] audit: type=1400 audit(1774814590.080:256): avc: denied { remount } for pid=724 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.742867][ T36] audit: type=1400 audit(1774814590.230:257): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 36.750080][ T732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.771958][ T732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.890626][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 37.000645][ T675] Bluetooth: hci0: command 0x1003 tx timeout [ 37.000645][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.041676][ T9] usb 2-1: config 0 has no interfaces? [ 37.047212][ T9] usb 2-1: New USB device found, idVendor=0cbb, idProduct=f001, bcdDevice= 0.00 [ 37.056283][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.065339][ T9] usb 2-1: config 0 descriptor?? [ 37.100597][ T65] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 37.260596][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 37.266836][ T65] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 37.279638][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.291366][ T402] usb 2-1: USB disconnect, device number 9 [ 37.300599][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.310430][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 37.325299][ T65] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 37.334380][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.340604][ T306] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 37.353352][ T65] usb 4-1: config 0 descriptor?? [ 37.360726][ T36] audit: type=1326 audit(1774814590.840:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=743 comm="syz.2.131" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd11a59c819 code=0x0 [ 37.501889][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.512809][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.522555][ T306] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 37.535437][ T306] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.544475][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.553307][ T306] usb 1-1: config 0 descriptor?? [ 37.767050][ T65] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0007/input/input8 [ 37.779594][ T65] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0007/input/input9 [ 37.801461][ T65] kye 0003:0458:5013.0007: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 37.959785][ T738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.969425][ T738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.975103][ T736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.978983][ T306] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 37.991678][ T736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.996240][ T306] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 38.008239][ T306] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 38.015899][ T306] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 38.029107][ T306] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 38.045762][ T306] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 38.053666][ T306] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 38.061224][ T306] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 38.068766][ T306] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 38.076203][ T306] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 38.084213][ T341] usb 4-1: USB disconnect, device number 11 [ 38.090450][ T306] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 38.099174][ T306] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 38.107251][ T306] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 38.115755][ T306] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 38.123506][ T306] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 38.132537][ T306] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 38.142985][ T306] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 38.183034][ T738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.191591][ T738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.265467][ T306] usb 1-1: USB disconnect, device number 11 [ 38.290645][ T65] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 38.451699][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.462693][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.472443][ T65] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 38.481517][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.489962][ T65] usb 2-1: config 0 descriptor?? [ 38.570657][ T306] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 38.610790][ T776] netlink: 72 bytes leftover after parsing attributes in process `syz.3.140'. [ 38.621113][ T776] overlay: Unknown parameter 'fsuuid' [ 38.720609][ T306] usb 1-1: Using ep0 maxpacket: 8 [ 38.727112][ T306] usb 1-1: unable to get BOS descriptor or descriptor too short [ 38.735505][ T306] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 38.745604][ T306] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 38.754490][ T306] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 38.768762][ T306] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.777838][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.785834][ T306] usb 1-1: Product: syz [ 38.789981][ T306] usb 1-1: Manufacturer: syz [ 38.794584][ T306] usb 1-1: SerialNumber: syz [ 38.910607][ T402] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 38.955715][ T65] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x2 [ 38.962606][ T65] pyra 0003:1E7D:2CF6.0009: item fetching failed at offset 4/7 [ 38.970256][ T65] pyra 0003:1E7D:2CF6.0009: parse failed [ 38.975975][ T65] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -22 [ 39.059786][ T781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'. [ 39.061701][ T402] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.079001][ T402] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.089960][ T402] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.107814][ T402] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.116928][ T402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.126277][ T402] usb 4-1: Product: syz [ 39.131124][ T402] usb 4-1: Manufacturer: syz [ 39.135778][ T402] usb 4-1: SerialNumber: syz [ 39.143638][ T786] netlink: 'syz.2.144': attribute type 12 has an invalid length. [ 39.151396][ T786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 39.312260][ T65] usb 2-1: USB disconnect, device number 10 [ 39.508573][ T306] cdc_ncm 1-1:1.0: skipping garbage [ 39.513858][ T306] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 39.526721][ T306] cdc_ncm 1-1:1.0: bind() failure [ 39.534390][ T306] usb 1-1: USB disconnect, device number 12 [ 39.851852][ T803] netlink: 220 bytes leftover after parsing attributes in process `syz.1.151'. [ 39.986600][ T814] input: syz1 as /devices/virtual/input/input10 [ 40.300651][ T306] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 40.320619][ T65] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 40.344329][ T402] cdc_ncm 4-1:1.0: bind() failure [ 40.350139][ T402] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 40.356954][ T402] cdc_ncm 4-1:1.1: bind() failure [ 40.451754][ T306] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 40.459956][ T306] usb 1-1: config 0 has no interface number 0 [ 40.466147][ T306] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 40.478829][ T306] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 40.480595][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 40.487993][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.496244][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 40.501045][ T306] usb 1-1: Product: syz [ 40.509783][ T829] fuse: Bad value for 'fd' [ 40.512868][ T306] usb 1-1: Manufacturer: syz [ 40.518691][ T829] netlink: 25 bytes leftover after parsing attributes in process `syz.2.162'. [ 40.521804][ T306] usb 1-1: SerialNumber: syz [ 40.522560][ T306] usb 1-1: config 0 descriptor?? [ 40.531696][ T65] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 113, changing to 7 [ 40.537227][ T819] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 40.541560][ T65] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 40.558315][ T306] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 7a:16:29:f5:d6:54 [ 40.558762][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.589935][ T65] usb 2-1: Product: syz [ 40.594268][ T307] tipc: Subscription rejected, illegal request [ 40.601126][ T65] usb 2-1: Manufacturer: syz [ 40.611312][ T65] usb 2-1: SerialNumber: syz [ 40.683025][ T306] usb 4-1: USB disconnect, device number 12 [ 40.828974][ T65] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 40.835916][ T65] usb 2-1: unit 2 not found! [ 40.846658][ T65] usb 2-1: USB disconnect, device number 11 [ 40.853821][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.961040][ T9] usb 1-1: USB disconnect, device number 13 [ 40.967173][ T9] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 41.239143][ T876] overlayfs: failed to clone upperpath [ 41.248646][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 41.248660][ T36] audit: type=1400 audit(1774814850.725:279): avc: denied { search } for pid=875 comm="syz.2.165" name="/" dev="configfs" ino=2489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 41.276753][ T36] audit: type=1400 audit(1774814850.725:280): avc: denied { write } for pid=875 comm="syz.2.165" name="/" dev="configfs" ino=2489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 41.490606][ T65] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 41.520031][ T887] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 41.530916][ T889] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 41.590608][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 41.650617][ T65] usb 4-1: Invalid ep0 maxpacket: 32 [ 41.730647][ T9] usb 2-1: device descriptor read/64, error -71 [ 41.790628][ T65] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 41.850651][ T306] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 41.940637][ T65] usb 4-1: Invalid ep0 maxpacket: 32 [ 41.946064][ T65] usb usb4-port1: attempt power cycle [ 41.970617][ T9] usb 2-1: device descriptor read/64, error -71 [ 41.990659][ T306] usb 1-1: device descriptor read/64, error -71 [ 42.137691][ T900] fuse: Bad value for 'fd' [ 42.142739][ T900] overlayfs: failed to clone upperpath [ 42.210634][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 42.230627][ T306] usb 1-1: device descriptor read/64, error -71 [ 42.290630][ T65] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 42.310954][ T65] usb 4-1: Invalid ep0 maxpacket: 32 [ 42.340614][ T9] usb 2-1: device descriptor read/64, error -71 [ 42.440621][ T65] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 42.461052][ T65] usb 4-1: Invalid ep0 maxpacket: 32 [ 42.466425][ T65] usb usb4-port1: unable to enumerate USB device [ 42.470618][ T306] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 42.580638][ T9] usb 2-1: device descriptor read/64, error -71 [ 42.610629][ T306] usb 1-1: device descriptor read/64, error -71 [ 42.690722][ T9] usb usb2-port1: attempt power cycle [ 42.850626][ T306] usb 1-1: device descriptor read/64, error -71 [ 42.960721][ T306] usb usb1-port1: attempt power cycle [ 43.030633][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 43.051611][ T9] usb 2-1: device descriptor read/8, error -71 [ 43.181679][ T9] usb 2-1: device descriptor read/8, error -71 [ 43.300609][ T306] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 43.321661][ T306] usb 1-1: device descriptor read/8, error -71 [ 43.420634][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 43.441658][ T9] usb 2-1: device descriptor read/8, error -71 [ 43.451604][ T306] usb 1-1: device descriptor read/8, error -71 [ 43.571622][ T9] usb 2-1: device descriptor read/8, error -71 [ 43.680693][ T9] usb usb2-port1: unable to enumerate USB device [ 43.690625][ T306] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 43.711588][ T306] usb 1-1: device descriptor read/8, error -71 [ 43.841608][ T306] usb 1-1: device descriptor read/8, error -71 [ 43.950710][ T306] usb usb1-port1: unable to enumerate USB device [ 44.263122][ T36] audit: type=1400 audit(1774814853.745:281): avc: denied { read } for pid=905 comm="syz.3.175" name="/" dev="configfs" ino=2489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.285282][ T36] audit: type=1400 audit(1774814853.745:282): avc: denied { open } for pid=905 comm="syz.3.175" path="/" dev="configfs" ino=2489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.307289][ T36] audit: type=1400 audit(1774814853.745:283): avc: denied { write } for pid=905 comm="syz.3.175" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.352860][ T906] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 44.491697][ T36] audit: type=1400 audit(1774814853.975:284): avc: denied { create } for pid=912 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 44.638583][ T36] audit: type=1400 audit(1774814854.115:285): avc: denied { read } for pid=918 comm="syz.0.179" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.661591][ T36] audit: type=1400 audit(1774814854.115:286): avc: denied { open } for pid=918 comm="syz.0.179" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.685255][ T36] audit: type=1400 audit(1774814854.115:287): avc: denied { ioctl } for pid=918 comm="syz.0.179" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.712179][ T36] audit: type=1400 audit(1774814854.115:288): avc: denied { map } for pid=918 comm="syz.0.179" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 44.743312][ T921] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.743354][ T921] rust_binder: Read failure Err(EFAULT) in pid:95 [ 44.800616][ T65] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 44.961637][ T65] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 44.973945][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.984033][ T65] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 44.996932][ T402] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 45.005900][ T65] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 45.015051][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.023141][ T65] usb 2-1: Product: syz [ 45.027307][ T65] usb 2-1: Manufacturer: syz [ 45.036690][ T65] usb 2-1: SerialNumber: syz [ 45.044683][ T65] usb 2-1: config 0 descriptor?? [ 45.054723][ T928] fuse: Bad value for 'fd' [ 45.055474][ T65] usb-storage 2-1:0.0: USB Mass Storage device detected [ 45.072226][ T65] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 45.151643][ T402] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 1024, setting to 64 [ 45.167125][ T402] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 45.171716][ T935] 9pnet_fd: Insufficient options for proto=fd [ 45.176505][ T402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.183457][ T935] 9pnet_fd: Insufficient options for proto=fd [ 45.190593][ T402] usb 1-1: Product: syz [ 45.200476][ T402] usb 1-1: Manufacturer: syz [ 45.210457][ T402] usb 1-1: SerialNumber: syz [ 45.219322][ T921] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 45.254260][ T911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.262758][ T911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.271065][ T65] usb 2-1: USB disconnect, device number 16 [ 45.431688][ T402] usb 1-1: MIDIStreaming interface descriptor not found [ 45.442113][ T402] usb 1-1: USB disconnect, device number 18 [ 45.460596][ T341] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 45.471656][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.610601][ T341] usb 4-1: Using ep0 maxpacket: 16 [ 45.616760][ T341] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 45.624820][ T341] usb 4-1: config 0 has no interface number 0 [ 45.630917][ T341] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 45.642170][ T341] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 45.651241][ T341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.659221][ T341] usb 4-1: Product: syz [ 45.663406][ T341] usb 4-1: Manufacturer: syz [ 45.667990][ T341] usb 4-1: SerialNumber: syz [ 45.673138][ T341] usb 4-1: config 0 descriptor?? [ 45.680251][ T341] snd-usb-audio 4-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 45.693464][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.933555][ T950] SELinux: Context system_u:object_r:xconsole_device_t:s0 is not valid (left unmapped). [ 45.953029][ T952] sit0: entered promiscuous mode [ 45.958840][ T952] netlink: 'syz.0.190': attribute type 1 has an invalid length. [ 45.966629][ T952] netlink: 1 bytes leftover after parsing attributes in process `syz.0.190'. [ 46.035232][ T957] overlayfs: overlapping lowerdir path [ 46.072218][ T962] syzkaller1: entered promiscuous mode [ 46.077686][ T962] syzkaller1: entered allmulticast mode [ 46.085047][ T962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.194'. [ 46.233245][ T972] overlayfs: failed to resolve './file0': -2 [ 46.386811][ T306] usb 4-1: USB disconnect, device number 17 [ 46.610612][ T341] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 46.720606][ T306] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 46.760601][ T341] usb 1-1: Using ep0 maxpacket: 16 [ 46.767101][ T341] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.777091][ T341] usb 1-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 46.786327][ T341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.794631][ T341] usb 1-1: Product: syz [ 46.798832][ T341] usb 1-1: Manufacturer: syz [ 46.803626][ T341] usb 1-1: SerialNumber: syz [ 46.850594][ T306] usb 4-1: device descriptor read/64, error -71 [ 47.010417][ T986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:118 [ 47.010849][ T986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.028454][ T986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.083177][ T341] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 47.090140][ T341] usb 1-1: found format II with max.bitrate = 5, frame size=11 [ 47.097751][ T341] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 47.104088][ T306] usb 4-1: device descriptor read/64, error -71 [ 47.114148][ T341] usb 1-1: USB disconnect, device number 19 [ 47.131820][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.340607][ T306] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 47.340607][ T402] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 47.480658][ T306] usb 4-1: device descriptor read/64, error -71 [ 47.500605][ T402] usb 2-1: Using ep0 maxpacket: 32 [ 47.506693][ T402] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 47.514910][ T402] usb 2-1: config 0 has no interface number 0 [ 47.521012][ T402] usb 2-1: config 0 interface 184 has no altsetting 0 [ 47.529096][ T402] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 47.538169][ T402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.546180][ T402] usb 2-1: Product: syz [ 47.550314][ T402] usb 2-1: Manufacturer: syz [ 47.554899][ T402] usb 2-1: SerialNumber: syz [ 47.559958][ T402] usb 2-1: config 0 descriptor?? [ 47.565658][ T402] smsc75xx v1.0.0 [ 47.597251][ T1000] overlayfs: failed to resolve './file0': -2 [ 47.661473][ T1013] netlink: 124 bytes leftover after parsing attributes in process `syz.0.213'. [ 47.681843][ T65] kernel read not supported for file [fscontext] (pid: 65 comm: kworker/0:2) [ 47.720658][ T306] usb 4-1: device descriptor read/64, error -71 [ 47.830730][ T306] usb usb4-port1: attempt power cycle [ 47.882148][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 47.882163][ T36] audit: type=1400 audit(1774814857.365:305): avc: denied { getopt } for pid=1021 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.926429][ T1028] overlayfs: failed to resolve './file0': -2 [ 47.930608][ T65] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 48.080596][ T65] usb 1-1: Invalid ep0 maxpacket: 64 [ 48.170627][ T306] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 48.191634][ T306] usb 4-1: device descriptor read/8, error -71 [ 48.210684][ T65] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 48.321615][ T306] usb 4-1: device descriptor read/8, error -71 [ 48.360604][ T65] usb 1-1: Invalid ep0 maxpacket: 64 [ 48.366033][ T65] usb usb1-port1: attempt power cycle [ 48.560658][ T306] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 48.581664][ T306] usb 4-1: device descriptor read/8, error -71 [ 48.710638][ T65] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 48.711668][ T306] usb 4-1: device descriptor read/8, error -71 [ 48.730910][ T65] usb 1-1: Invalid ep0 maxpacket: 64 [ 48.831008][ T306] usb usb4-port1: unable to enumerate USB device [ 48.860605][ T65] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 48.880900][ T65] usb 1-1: Invalid ep0 maxpacket: 64 [ 48.886282][ T65] usb usb1-port1: unable to enumerate USB device [ 48.932356][ T402] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 48.943201][ T402] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 48.952654][ T402] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 48.963450][ T402] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 48.973086][ T402] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 48.983333][ T402] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 48.992755][ T402] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 49.002232][ T402] usb 2-1: USB disconnect, device number 17 [ 49.416691][ T1074] overlayfs: failed to resolve './file0': -2 [ 49.436805][ T1076] netlink: 'syz.3.229': attribute type 64 has an invalid length. [ 49.444627][ T1076] netlink: 5 bytes leftover after parsing attributes in process `syz.3.229'. [ 49.800632][ T402] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 49.930607][ T402] usb 4-1: device descriptor read/64, error -71 [ 50.050346][ T36] audit: type=1400 audit(1774814859.525:306): avc: denied { create } for pid=1085 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 50.170711][ T402] usb 4-1: device descriptor read/64, error -71 [ 50.410643][ T402] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 50.540673][ T402] usb 4-1: device descriptor read/64, error -71 [ 50.700294][ T1097] overlayfs: failed to resolve './file0': -2 [ 50.792236][ T402] usb 4-1: device descriptor read/64, error -71 [ 50.909555][ T402] usb usb4-port1: attempt power cycle [ 51.271882][ T402] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 51.294147][ T402] usb 4-1: device descriptor read/8, error -71 [ 51.432714][ T402] usb 4-1: device descriptor read/8, error -71 [ 51.687552][ T402] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 51.709985][ T402] usb 4-1: device descriptor read/8, error -71 [ 51.848486][ T402] usb 4-1: device descriptor read/8, error -71 [ 51.858078][ T306] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 51.964702][ T402] usb usb4-port1: unable to enumerate USB device [ 52.018892][ T306] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.029041][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 52.040013][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.049731][ T306] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 52.062535][ T306] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 52.071577][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.080094][ T306] usb 1-1: config 0 descriptor?? [ 52.251912][ T1118] syz.2.244 uses obsolete (PF_INET,SOCK_PACKET) [ 52.300884][ T306] usbhid 1-1:0.0: can't add hid device: -71 [ 52.306886][ T306] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 52.315460][ T306] usb 1-1: USB disconnect, device number 24 [ 52.584894][ T36] audit: type=1400 audit(1774814861.949:307): avc: denied { write } for pid=1121 comm="syz.3.246" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 52.740429][ T1128] fuse: Bad value for 'fd' [ 52.763990][ T306] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 52.799749][ T36] audit: type=1400 audit(1774814862.146:308): avc: denied { wake_alarm } for pid=1134 comm="syz.2.251" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.818334][ T1135] netlink: 104 bytes leftover after parsing attributes in process `syz.2.251'. [ 52.923811][ T306] usb 1-1: Using ep0 maxpacket: 32 [ 52.930059][ T306] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.940159][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.951021][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.960771][ T306] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 52.973548][ T306] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 52.982575][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.990612][ T403] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 52.999042][ T306] usb 1-1: config 0 descriptor?? [ 53.136938][ T341] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 53.158254][ T403] usb 4-1: Using ep0 maxpacket: 16 [ 53.164399][ T403] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.174509][ T403] usb 4-1: config 0 has no interfaces? [ 53.179999][ T403] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 53.189012][ T403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.197649][ T403] usb 4-1: config 0 descriptor?? [ 53.296801][ T341] usb 2-1: Using ep0 maxpacket: 32 [ 53.302997][ T341] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 53.311390][ T341] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 53.320012][ T341] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 53.328978][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 53.338614][ T341] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 53.348255][ T341] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 53.361225][ T341] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 53.370237][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.378948][ T341] usb 2-1: config 0 descriptor?? [ 53.433952][ T306] betop 0003:20BC:5500.000A: unknown main item tag 0x1 [ 53.442465][ T306] betop 0003:20BC:5500.000A: hidraw0: USB HID v0.00 Device [HID 20bc:5500] on usb-dummy_hcd.0-1/input0 [ 53.453570][ T306] betop 0003:20BC:5500.000A: no inputs found [ 53.599778][ T341] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 53.611778][ T341] usb 2-1: USB disconnect, device number 18 [ 53.618417][ T341] usblp0: removed [ 53.648140][ T306] usb 1-1: USB disconnect, device number 25 [ 53.925656][ T341] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 53.962856][ T1157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 53.979196][ T1159] fuse: Bad value for 'fd' [ 53.984262][ T1159] overlayfs: failed to clone upperpath [ 53.997628][ T1161] 9pnet_fd: Insufficient options for proto=fd [ 54.005320][ T1161] IPv6: Can't replace route, no match found [ 54.020631][ T36] audit: type=1400 audit(1774814863.291:309): avc: denied { getopt } for pid=1162 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.046439][ T36] audit: type=1400 audit(1774814863.319:310): avc: denied { associate } for pid=1166 comm="syz.2.262" name="hugetlb.2MB.rsvd.usage_in_bytes" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 54.079145][ T36] audit: type=1400 audit(1774814863.347:311): avc: denied { listen } for pid=1168 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.098589][ T341] usb 2-1: Using ep0 maxpacket: 32 [ 54.102847][ T36] audit: type=1400 audit(1774814863.366:312): avc: denied { lock } for pid=1170 comm="syz.2.264" path="socket:[8126]" dev="sockfs" ino=8126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 54.104815][ T341] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 54.135523][ T341] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 54.144253][ T341] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 54.153281][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 54.162944][ T341] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 54.172598][ T341] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 54.185936][ T341] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 54.194978][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.203521][ T341] usb 2-1: config 0 descriptor?? [ 54.422845][ T341] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 54.469119][ T306] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 54.628951][ T306] usb 1-1: Using ep0 maxpacket: 16 [ 54.635077][ T306] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.636095][ T36] audit: type=1400 audit(1774814863.863:313): avc: denied { read write } for pid=1142 comm="syz.1.254" name="lp0" dev="devtmpfs" ino=582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 54.645953][ T306] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.674486][ T36] audit: type=1400 audit(1774814863.863:314): avc: denied { open } for pid=1142 comm="syz.1.254" path="/dev/usb/lp0" dev="devtmpfs" ino=582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 54.680726][ T1143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.712157][ T306] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 54.715629][ T36] audit: type=1400 audit(1774814863.901:315): avc: denied { create } for pid=1142 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 54.726031][ T1143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.752949][ T306] usb 1-1: config 0 interface 0 has no altsetting 0 [ 54.759567][ T306] usb 1-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 54.768935][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.785117][ T306] usb 1-1: config 0 descriptor?? [ 54.789296][ T1182] overlayfs: failed to clone upperpath [ 54.805245][ T36] audit: type=1400 audit(1774814864.032:316): avc: denied { setopt } for pid=1183 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.829408][ T1188] netlink: 964 bytes leftover after parsing attributes in process `syz.2.271'. [ 55.218849][ T1177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.227401][ T1177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.236838][ T306] acrux 0003:1A34:F705.000B: unknown main item tag 0x0 [ 55.243713][ T306] acrux 0003:1A34:F705.000B: unknown main item tag 0x0 [ 55.250579][ T306] acrux 0003:1A34:F705.000B: unknown main item tag 0x0 [ 55.257437][ T306] acrux 0003:1A34:F705.000B: unknown main item tag 0x0 [ 55.264300][ T306] acrux 0003:1A34:F705.000B: unknown main item tag 0x0 [ 55.271198][ T306] acrux 0003:1A34:F705.000B: unknown main item tag 0x0 [ 55.278057][ T306] acrux 0003:1A34:F705.000B: unknown main item tag 0x0 [ 55.284917][ T306] acrux 0003:1A34:F705.000B: item fetching failed at offset 14/41 [ 55.292833][ T306] acrux 0003:1A34:F705.000B: parse failed [ 55.298557][ T306] acrux 0003:1A34:F705.000B: probe with driver acrux failed with error -22 [ 55.380284][ T36] audit: type=1400 audit(1774814864.567:317): avc: denied { create } for pid=1191 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.455929][ T306] usb 1-1: USB disconnect, device number 26 [ 55.861271][ T306] usb 4-1: USB disconnect, device number 26 [ 55.935560][ T1198] netlink: 16 bytes leftover after parsing attributes in process `syz.3.275'. [ 56.002404][ T1198] 9pnet: p9_errstr2errno: server reported unknown error [ 56.184814][ T306] usb 2-1: USB disconnect, device number 19 [ 56.201707][ T306] usblp0: removed [ 56.340056][ T1238] overlay: ./bus is not a directory [ 56.673924][ T36] audit: type=1400 audit(1774814865.777:318): avc: denied { write } for pid=1250 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.096280][ T1255] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 57.421187][ T65] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 57.442488][ T306] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 57.559723][ T65] usb 4-1: device descriptor read/64, error -71 [ 57.603364][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 57.613083][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 57.625251][ T306] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 57.634399][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.642385][ T306] usb 2-1: Product: syz [ 57.646554][ T306] usb 2-1: Manufacturer: syz [ 57.651134][ T306] usb 2-1: SerialNumber: syz [ 57.656342][ T306] usb 2-1: config 0 descriptor?? [ 57.815501][ T65] usb 4-1: device descriptor read/64, error -71 [ 57.879925][ T306] usb 2-1: USB disconnect, device number 20 [ 57.887812][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.092599][ T65] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 58.231164][ T65] usb 4-1: device descriptor read/64, error -71 [ 58.486969][ T65] usb 4-1: device descriptor read/64, error -71 [ 58.604229][ T65] usb usb4-port1: attempt power cycle [ 58.700064][ T402] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 58.860036][ T402] usb 2-1: Using ep0 maxpacket: 8 [ 58.870156][ T402] usb 2-1: string descriptor 0 read error: -22 [ 58.876411][ T402] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 58.886291][ T402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.966501][ T65] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 58.988740][ T65] usb 4-1: device descriptor read/8, error -71 [ 59.127470][ T402] usb 2-1: USB disconnect, device number 21 [ 59.134302][ T65] usb 4-1: device descriptor read/8, error -71 [ 59.392786][ T65] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 59.415125][ T65] usb 4-1: device descriptor read/8, error -71 [ 59.539143][ T1305] 9pnet: Could not find request transport:  [ 59.546233][ T1305] overlayfs: upper fs does not support file handles, falling back to index=off. [ 59.555417][ T1305] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 59.565057][ T65] usb 4-1: device descriptor read/8, error -71 [ 59.583135][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 59.583150][ T36] audit: type=1400 audit(1774814868.508:322): avc: denied { lock } for pid=1306 comm="syz.0.308" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.680913][ T65] usb usb4-port1: unable to enumerate USB device [ 59.808967][ T1312] overlayfs: failed to clone upperpath [ 59.825337][ T1312] overlayfs: failed to clone upperpath [ 59.940718][ T1323] 9pnet_fd: Insufficient options for proto=fd [ 60.134360][ T36] audit: type=1400 audit(1774814869.024:323): avc: denied { write } for pid=1338 comm="syz.1.319" name="/" dev="incremental-fs" ino=426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.388075][ T306] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 60.433808][ T36] audit: type=1400 audit(1774814869.305:324): avc: denied { getopt } for pid=1340 comm="syz.3.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.569283][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.580369][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.590263][ T306] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 60.599484][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.608006][ T306] usb 2-1: config 0 descriptor?? [ 60.687975][ T36] audit: type=1326 audit(1774814869.549:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1357 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc9f9c819 code=0x7ffc0000 [ 60.711327][ T36] audit: type=1326 audit(1774814869.549:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1357 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc9f9c819 code=0x7ffc0000 [ 60.734603][ T36] audit: type=1326 audit(1774814869.549:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1357 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbc9f9c819 code=0x7ffc0000 [ 60.757853][ T36] audit: type=1326 audit(1774814869.549:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1357 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc9f9c819 code=0x7ffc0000 [ 60.781447][ T36] audit: type=1326 audit(1774814869.549:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1357 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbc9f9c819 code=0x7ffc0000 [ 60.804788][ T36] audit: type=1326 audit(1774814869.549:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1357 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc9f9c819 code=0x7ffc0000 [ 60.970083][ T402] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 61.065436][ T36] audit: type=1400 audit(1774814869.896:331): avc: denied { audit_write } for pid=1366 comm="syz.3.327" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 61.121670][ T1370] netlink: 'syz.3.328': attribute type 4 has an invalid length. [ 61.131007][ T402] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 61.146956][ T402] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 61.158127][ T402] usb 1-1: config 1 interface 0 has no altsetting 0 [ 61.166958][ T402] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 61.176496][ T402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.186955][ T402] usb 1-1: Product: syz [ 61.191238][ T402] usb 1-1: Manufacturer: syz [ 61.195856][ T402] usb 1-1: SerialNumber: syz [ 61.201217][ T1360] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 61.208429][ T1360] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 61.253279][ T1380] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1380 comm=syz.3.332 [ 61.266523][ T1339] netlink: 140 bytes leftover after parsing attributes in process `syz.1.319'. [ 61.276891][ T306] usbhid 2-1:0.0: can't add hid device: -71 [ 61.282894][ T306] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 61.291768][ T306] usb 2-1: USB disconnect, device number 22 [ 61.822873][ T291] ------------[ cut here ]------------ [ 61.828372][ T291] WARNING: CPU: 0 PID: 291 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 61.836559][ T291] Modules linked in: [ 61.840486][ T291] CPU: 0 UID: 0 PID: 291 Comm: syz-executor Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 61.852140][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.862246][ T291] RIP: 0010:drop_nlink+0xce/0x110 [ 61.867303][ T291] Code: 04 00 00 be 08 00 00 00 e8 df 15 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 e5 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 61.887018][ T291] RSP: 0018:ffffc9000b6efc60 EFLAGS: 00010293 [ 61.893083][ T291] RAX: ffffffff81f1c4be RBX: ffff88811b1ee1e8 RCX: ffff88812682cc00 [ 61.901054][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.909047][ T291] RBP: ffffc9000b6efc88 R08: 0000000000000003 R09: 0000000000000004 [ 61.917005][ T291] R10: dffffc0000000000 R11: fffff520016ddf7c R12: dffffc0000000000 [ 61.924979][ T291] R13: 1ffff1102363dc46 R14: ffff88811b1ee230 R15: 0000000000000000 [ 61.932961][ T291] FS: 0000555588b8c500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 61.941987][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.948608][ T291] CR2: 0000555588baf948 CR3: 0000000102b1c000 CR4: 00000000003526b0 [ 61.956590][ T291] Call Trace: [ 61.959862][ T291] [ 61.962802][ T291] shmem_rmdir+0x5f/0x90 [ 61.967047][ T291] vfs_rmdir+0x3e3/0x560 [ 61.971276][ T291] incfs_kill_sb+0x109/0x230 [ 61.975892][ T291] deactivate_locked_super+0xd5/0x2a0 [ 61.981263][ T291] deactivate_super+0xb8/0xe0 [ 61.985947][ T291] cleanup_mnt+0x406/0x4a0 [ 61.990360][ T291] __cleanup_mnt+0x1d/0x40 [ 61.994793][ T291] task_work_run+0x1e5/0x260 [ 61.999382][ T291] ? __cfi_task_work_run+0x10/0x10 [ 62.004501][ T291] ? __x64_sys_umount+0x12e/0x180 [ 62.009539][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 62.014923][ T291] ? __kasan_check_read+0x15/0x20 [ 62.019947][ T291] resume_user_mode_work+0x35/0x50 [ 62.025045][ T291] syscall_exit_to_user_mode+0x63/0xb0 [ 62.030531][ T291] do_syscall_64+0x63/0xf0 [ 62.034950][ T291] ? clear_bhb_loop+0x50/0xa0 [ 62.039639][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.045532][ T291] RIP: 0033:0x7f85fa19da57 [ 62.049970][ T291] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 62.069588][ T291] RSP: 002b:00007fffafc14698 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 62.077996][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f85fa19da57 [ 62.085972][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffafc14750 [ 62.093960][ T291] RBP: 00007fffafc14750 R08: 00007fffafc15750 R09: 00000000ffffffff [ 62.101946][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffafc157e0 [ 62.109916][ T291] R13: 00007f85fa232048 R14: 000000000000ed95 R15: 00007fffafc15820 [ 62.117891][ T291] [ 62.120906][ T291] ---[ end trace 0000000000000000 ]--- [ 62.126508][ T291] ================================================================== [ 62.134580][ T291] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 62.140814][ T291] Write of size 4 at addr 0000000000000168 by task syz-executor/291 [ 62.148778][ T291] [ 62.151094][ T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Tainted: G W syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 62.151117][ T291] Tainted: [W]=WARN [ 62.151123][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 62.151135][ T291] Call Trace: [ 62.151141][ T291] [ 62.151149][ T291] __dump_stack+0x21/0x30 [ 62.151175][ T291] dump_stack_lvl+0x140/0x1c0 [ 62.151193][ T291] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.151206][ T291] print_report+0x3d/0x70 [ 62.151218][ T291] kasan_report+0x162/0x1a0 [ 62.151229][ T291] ? ihold+0x24/0x70 [ 62.151238][ T291] ? _raw_spin_unlock+0x45/0x60 [ 62.151253][ T291] ? ihold+0x24/0x70 [ 62.151268][ T291] kasan_check_range+0x25a/0x2b0 [ 62.151288][ T291] __kasan_check_write+0x18/0x20 [ 62.151310][ T291] ihold+0x24/0x70 [ 62.151325][ T291] vfs_rmdir+0x26a/0x560 [ 62.151339][ T291] incfs_kill_sb+0x109/0x230 [ 62.151353][ T291] deactivate_locked_super+0xd5/0x2a0 [ 62.151364][ T291] deactivate_super+0xb8/0xe0 [ 62.151374][ T291] cleanup_mnt+0x406/0x4a0 [ 62.151384][ T291] __cleanup_mnt+0x1d/0x40 [ 62.151393][ T291] task_work_run+0x1e5/0x260 [ 62.151415][ T291] ? __cfi_task_work_run+0x10/0x10 [ 62.151435][ T291] ? __x64_sys_umount+0x12e/0x180 [ 62.151456][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 62.151476][ T291] ? __kasan_check_read+0x15/0x20 [ 62.151488][ T291] resume_user_mode_work+0x35/0x50 [ 62.151501][ T291] syscall_exit_to_user_mode+0x63/0xb0 [ 62.151513][ T291] do_syscall_64+0x63/0xf0 [ 62.151524][ T291] ? clear_bhb_loop+0x50/0xa0 [ 62.151540][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.151564][ T291] RIP: 0033:0x7f85fa19da57 [ 62.151580][ T291] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 62.151596][ T291] RSP: 002b:00007fffafc14698 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 62.151616][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f85fa19da57 [ 62.151624][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffafc14750 [ 62.151631][ T291] RBP: 00007fffafc14750 R08: 00007fffafc15750 R09: 00000000ffffffff [ 62.151639][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffafc157e0 [ 62.151646][ T291] R13: 00007f85fa232048 R14: 000000000000ed95 R15: 00007fffafc15820 [ 62.151654][ T291] [ 62.151658][ T291] ================================================================== [ 62.340596][ T402] (unnamed net_device) (uninitialized): Assigned a random MAC address: ca:81:06:dd:0c:ae [ 62.344404][ T291] Disabling lock debugging due to kernel taint [ 62.354412][ T402] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 62.360294][ T291] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 62.375409][ T402] usb 1-1: USB disconnect, device number 27 [ 62.375961][ T291] #PF: supervisor write access in kernel mode [ 62.436423][ T291] #PF: error_code(0x0002) - not-present page [ 62.442388][ T291] PGD 800000013180c067 P4D 800000013180c067 PUD 0 [ 62.448898][ T291] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 62.454944][ T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Tainted: G B W syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 62.468023][ T291] Tainted: [B]=BAD_PAGE, [W]=WARN [ 62.473019][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 62.483053][ T291] RIP: 0010:ihold+0x2a/0x70 [ 62.487544][ T291] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd dc 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 62.507146][ T291] RSP: 0018:ffffc9000b6efca0 EFLAGS: 00010246 [ 62.513197][ T291] RAX: ffff88812682cc00 RBX: 0000000000000000 RCX: ffff88812682cc00 [ 62.521147][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.529100][ T291] RBP: ffffc9000b6efcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 62.537058][ T291] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff88811b1ee1f4 [ 62.545008][ T291] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 62.552960][ T291] FS: 0000555588b8c500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 62.561866][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.568425][ T291] CR2: 0000000000000168 CR3: 0000000102b1c000 CR4: 00000000003526b0 [ 62.576384][ T291] Call Trace: [ 62.579644][ T291] [ 62.582643][ T291] vfs_rmdir+0x26a/0x560 [ 62.587043][ T291] incfs_kill_sb+0x109/0x230 [ 62.591614][ T291] deactivate_locked_super+0xd5/0x2a0 [ 62.596965][ T291] deactivate_super+0xb8/0xe0 [ 62.601618][ T291] cleanup_mnt+0x406/0x4a0 [ 62.606008][ T291] __cleanup_mnt+0x1d/0x40 [ 62.610396][ T291] task_work_run+0x1e5/0x260 [ 62.614965][ T291] ? __cfi_task_work_run+0x10/0x10 [ 62.620061][ T291] ? __x64_sys_umount+0x12e/0x180 [ 62.625087][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 62.630525][ T291] ? __kasan_check_read+0x15/0x20 [ 62.635529][ T291] resume_user_mode_work+0x35/0x50 [ 62.640647][ T291] syscall_exit_to_user_mode+0x63/0xb0 [ 62.646085][ T291] do_syscall_64+0x63/0xf0 [ 62.650481][ T291] ? clear_bhb_loop+0x50/0xa0 [ 62.655136][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.661014][ T291] RIP: 0033:0x7f85fa19da57 [ 62.665405][ T291] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 62.684987][ T291] RSP: 002b:00007fffafc14698 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 62.693376][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f85fa19da57 [ 62.701324][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffafc14750 [ 62.709359][ T291] RBP: 00007fffafc14750 R08: 00007fffafc15750 R09: 00000000ffffffff [ 62.717308][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffafc157e0 [ 62.725256][ T291] R13: 00007f85fa232048 R14: 000000000000ed95 R15: 00007fffafc15820 [ 62.733207][ T291] [ 62.736201][ T291] Modules linked in: [ 62.740066][ T291] CR2: 0000000000000168 [ 62.744193][ T291] ---[ end trace 0000000000000000 ]--- [ 62.749618][ T291] RIP: 0010:ihold+0x2a/0x70 [ 62.754102][ T291] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd dc 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 62.773689][ T291] RSP: 0018:ffffc9000b6efca0 EFLAGS: 00010246 [ 62.779739][ T291] RAX: ffff88812682cc00 RBX: 0000000000000000 RCX: ffff88812682cc00 [ 62.787689][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.795654][ T291] RBP: ffffc9000b6efcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 62.803608][ T291] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff88811b1ee1f4 [ 62.811561][ T291] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 62.819509][ T291] FS: 0000555588b8c500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 62.828425][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.834991][ T291] CR2: 0000000000000168 CR3: 0000000102b1c000 CR4: 00000000003526b0 [ 62.843040][ T291] Kernel panic - not syncing: Fatal exception [ 62.849408][ T291] Kernel Offset: disabled [ 62.853715][ T291] Rebooting in 86400 seconds..