last executing test programs: 21.159398525s ago: executing program 1 (id=1627): sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x38}}, 0x20000000) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x4) ioprio_get$pid(0x2, 0x0) 21.159125915s ago: executing program 1 (id=1628): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f00000005c0)="0f0013c441fc5a9b31aacf330f3235001000000f3066ba2100ec66baf80cb8402a2484ef66bafc0c66edc4a1f5fbf1f3450f2a89040000006642f4c4e21dbf7939b805000000b97499008c0f01c148b804000000000000000f23c00f21f835020004000f23f8", 0xffffffffffffffd5}], 0x1, 0xe8, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000240)="e7736a", 0x3}], 0x1) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000000)={0x2000, 0xc000}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04000000000000001c000000180001801400020076657468315f6d6200000000004000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x805}, 0x90) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000000b000/0x1000)=nil) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="a905000000007464001100000000000000e5c09a0349f9cd417e5d4c8ba3d218c4f7e4eb", 0x58}], 0x1, 0x0, 0xffffffffffffffe3}}], 0x1, 0x24004044) 20.988468934s ago: executing program 1 (id=1631): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) fadvise64(r0, 0xcb6, 0x5004, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x32c29000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc298"], 0x14}}, 0x20008000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffffffffffc) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x800000000000000, 0x1000000000, 0x5, 0x41, 0x4, 0x1, 0x2004cb, 0x0, 0x42000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0x0, 0xee], 0x10000, 0x36c606}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0x10000, 0x1f, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7, 0xff, 0x0, 0x5}, {0xeeee0000, 0xeeee1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x1, 0x48, 0x3, 0x0, 0x3}, {0x1, 0xffff1000, 0xe, 0x0, 0x1, 0x0, 0x9, 0x5, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x100000, 0x0, 0x0, 0x74, 0x5, 0x5, 0x2, 0x0, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x3, 0xa1, 0x20, 0x0, 0x9}, {0x0, 0x6000, 0x8, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x5}, {0xeeef0000, 0x3}, {0xdddd1000, 0x400}, 0xddf8ffdb, 0x0, 0x0, 0x400, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="080e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="001602"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io$uac2(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) 18.764077393s ago: executing program 2 (id=1659): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0xfffffffffffffcc2, &(0x7f0000000040)='\xea\xa9\xec\xf4\xad&\x80\xe4\x1f\x89\xd1\xe5L\xb46\xac3\xb2+\x8a\x81I\xaf\xf1\x88FW\t\xf4\xd1g\xbc~[J\xa5\x85\x1e\xf4\r\x9a\xbej\xd4\xd1\xe7\xf4#\"\xf8?\xa0\xee\xd5\xb9[<\x04\x85\v\xb5K\x9a\xdc#\xf6\xff\xa3\x8c\xb2\x0f\xc8\x8e\x9a\aH\x18\x83\v\xa1t\x8d\xb3\xe3') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0xffffffffffffffd9, &(0x7f0000000000)='\x00') prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setresuid(0xee01, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) madvise(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x10) 18.712423426s ago: executing program 2 (id=1660): sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="000400000000000000000d001d000500070012000000050019"], 0x24}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="150000", @ANYRESHEX=r0], 0x15) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, 0x0, 0x0) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0x501c4814, &(0x7f0000000000)={0x2, 0x100, 0x0, 0x401, 0x0, 0xfffffffc}) pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a0000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x4008080) 18.187896612s ago: executing program 3 (id=1666): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000180)=0x7, 0x4) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x1ff, 0x4) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc]}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) 18.175081983s ago: executing program 3 (id=1667): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x891d, &(0x7f0000001b00)={'ip_vti0\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120151002f4a0e408680d3079778012203010902120001cd06c0010904370500ac0aa109"], 0x0) syz_usb_connect$midi(0x1, 0x0, 0x0, 0x0) 18.002422481s ago: executing program 2 (id=1668): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000480)) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000100)=0x6, 0x4) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x2600) 17.928700925s ago: executing program 2 (id=1669): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0xa, 0x4e23, 0x161, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x900}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@hopopts={{0x18, 0x29, 0x36, {0x11}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x84}}}], 0x30}, 0x400c015) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0x8000e4d, 0x80, 0x3fc, 0xfffd, 0x5, 0x1, 0x7ff, 0x7543, 0x4, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17.894168376s ago: executing program 0 (id=1670): syz_usb_connect(0x3, 0xfd5d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xb3, 0x7e, 0x83, 0x40, 0xa168, 0x613, 0xa909, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x8, 0x38, 0x6, "", [{{0x9, 0x4, 0x3d, 0x9, 0x0, 0x84, 0x6d, 0x20, 0x3, [], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0x9, 0x5, 0xc9}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x10, 0x5, 0x2, [@uac_iso={0x0, 0x25, 0x1, 0x4, 0x0, 0x1000}, @generic={0x0, 0x21, "731c798706799369204e83775f347c878f2c46c0910faa78248ab1eef66a3bfdd31eab158b59a6a6169e58f9d17cea62de02c145fc008ff68a499b1d70ad7cd8f0e22c"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x5, 0xff, 0x3}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x8, 0x4, 0x9, [@generic={0x0, 0x379a864adccc77ec, "4d0a00ccfa7e4e192753b18b218b58f7983d75f5a7397bad3e8473"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x5, 0xff, 0xff, [@uac_iso={0x0, 0x25, 0x1, 0xc, 0x2, 0x400}]}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0x8, 0xf, 0x40, [@uac_iso={0x0, 0x25, 0x1, 0x8, 0x4, 0x4}]}}]}}, {{0x9, 0x4, 0x7c, 0x3, 0x0, 0xcb, 0x6a, 0xf0, 0x4, [@cdc_ncm={{0x0, 0x24, 0x6, 0x0, 0x1, 'z'}, {0x0, 0x24, 0x0, 0x17}, {0x0, 0x24, 0xf, 0x1, 0xc, 0x7, 0x2, 0xc5}, {0x0, 0x24, 0x1a, 0x7ff, 0x34}, [@call_mgmt={0x0, 0x24, 0x1, 0x3, 0x4}]}, @generic={0x0, 0xd, "ee0b9fb94233dd38f8ced9431bb49fd92a49c4d0a3ce4cffc159455cafd7392470136fb7c963634850d106f3a48e4e12800251807777551e7ce8427c0ce54a842d12b1cfd07ca53193d1a518b74eca0b79c8798feb4a55fff32360c4a561771faa981a29e177c8c8e7662a31f99050730e81f1a2920def5fc060b6b8ea67b878768808eca5c1744b14849a462630995940811dfa935ebb83e16364a2f07fdcca94ca0b3248617afa693d77"}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x3, 0x9, 0x6}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x2, 0xab, 0x2, [@uac_iso={0x0, 0x25, 0x1, 0x8, 0x0, 0x8}, @generic={0x0, 0x10, "5c6aff6825e50c0b8b2fea44d25c09bf1504c8de607ea5010d93e2974fd14807ceaefd5048e98332896475ddd1c38b343dd09c52e114ff665c05a9dedc524a5a01375131332723fe96dcbdbb8b99ae4520d94f105c4f075a66e5473d952227a4385efac48dd81db30313852b89a103ae53d6e76892db6fd41507828fa8f7a9978636f11b799e028afe5e5b160c97096d4b1685113046d0d003d3363b803aafc1414592d2b36d7ae2247accda15"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x6, 0x1, 0x6, [@generic={0x0, 0x10, "f3003639ddda6fb68f49048d1747d255edd2a393ed891d556080af1cc55d72a2313c810648f47329e06b60fec35f5621344b51831a0d50a110c10756a14d4b4da88eca9da6f9"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x25fbbd4a25a4a236, 0xc, 0x7f, 0x3}}, {{0x9, 0x5, 0xd, 0xc, 0x20, 0x83, 0x1, 0x1}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x80, 0xd0, 0x3, [@generic={0x0, 0x11, "1869149444297639590c5af2e7573ce5c008ed140a00b0dc8e83ed27e93458011d159055fe1585060cfcdfe05412ebab890138855bedf45cc55fe8cfc8d48a"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x3, 0x2, 0xb}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x8, 0x6, 0x6}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x8, 0x3, 0x2, [@generic={0x0, 0x6, "885bd4ffb9fe1552eb3b77ea7ebd98603a971965d95aa0c102adade63f366886c99ccbf4d0a2ab8714c0ba62162c111645447a38dc9d1d9d9144eeeacb323dc3c0dedc659b852a09d3d2c9d1cd0e995781286374005b532aa91a5a8b2cd30cfffe5817d07199ee07538ca3665c2a3888700ce30683f1c7bc3c753dc80d013944"}, @uac_iso={0x0, 0x25, 0x1, 0xc, 0x5, 0x3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x7, 0x8e, 0x8}}, {{0x9, 0x5, 0x0, 0x3, 0x555f2a055e784d02, 0x6a, 0xc}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0xb, 0x5, 0x2b, [@uac_iso={0x0, 0x25, 0x1, 0xc, 0x7}]}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x9e, 0x7, 0x8, [@generic={0x0, 0x5, "15f61ffe34a4dee968467f5df9f37d3754cf660bdd36f405b39a471e67e6543b40333e6ae8dfec7cb469d936ddea9fc09863c85e1a1dc97f5e3422659687919d76e5641913f945284fd68ee7f8967e468e6dd9df63984666780b4a98f69d5e5039ddb0afa0672b6b3df361997b18df16b869bf46d2e527933c1e788db6bafb9d93897138e8d4eccc7ee8c3f35686ce888c97125a0c3ecf05539fd1746d754fae6206"}, @uac_iso={0x0, 0x25, 0x1, 0x4, 0x1, 0x1a96}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0xb, 0x3, 0x4, [@generic={0x0, 0x5, "cfaa6661807843a157b2ba"}, @uac_iso={0x0, 0x25, 0x1, 0xc, 0x8, 0x4}]}}, {{0x9, 0x5, 0xb, 0x8, 0x0, 0x6, 0x2, 0x3}}]}}, {{0x9, 0x4, 0x1, 0x8, 0x0, 0x94, 0xdf, 0xae, 0x0, [@generic={0x0, 0x9, "2d801d39b3eb6f47e4576192b1e959be7699ba8001a77d45f7955dfdafed6af716a766c6c1"}, @cdc_ecm={{0x0, 0x24, 0x6, 0x0, 0x0, '\\X'}, {0x0, 0x24, 0x0, 0xfffe}, {0x0, 0x24, 0xf, 0x1, 0x7, 0xe000, 0x2, 0x3}, [@mbim={0x0, 0x24, 0x1b, 0x3, 0x6, 0xe8, 0x3, 0x8, 0x1}, @mdlm_detail={0x0, 0x24, 0x13, 0x2, "c14c6e563f217a9f66e6b0a52c2f8c284181507bd39f29c27741f0c5db4b3245063f059817694e981c71325791fb6326e7d8be3f079bc07bd5b0ee2ec8217ed442665dc6361d4f96555b7dc4fc2eb883555e90e19671"}, @obex={0x0, 0x24, 0x15, 0x1}]}], [{{0x9, 0x5, 0x1, 0xc, 0x20, 0x7, 0x7, 0x2, [@uac_iso={0x0, 0x25, 0x1, 0x0, 0x0, 0x9d}, @uac_iso={0x0, 0x25, 0x1, 0xc, 0xd, 0x7fff}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x3, 0x2, 0x6}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x6, 0x5, 0x8}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0x4, 0x0, 0xe, [@uac_iso={0x0, 0x25, 0x1, 0xc, 0x5, 0x8001}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x8, 0x3, 0x2}}, {{0x9, 0x5, 0xb, 0x2, 0x400, 0x93, 0x70, 0x5, [@generic={0x0, 0x21, "e41a9d1ea2e8fa20fa8aa9a75a09008fb51a8f0b2b92ccf23064f97d85ce42189d99b833f4baad07b78e6769256da6f7d0d155b946274ba70ab65b379aa6be991f7306cd6d9690543857b2a4c442ae414582df6d5e24077f2ebc47d746526a787d2bd2e386dd9d7c7a6131c014dab561e42f2420e26660fd022081a7819bde405aac2c2cfb335977c1b8a973623d230deb036f62466aa6f77770c09a81be0fe45f8c2884973488bada837ee8b9d9188233358b73"}, @generic={0x0, 0x6, "a67bcf42dc32d30f2122389a76d3b003f6120c8a"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x200, 0x0, 0x3, 0x66, [@uac_iso={0x0, 0x25, 0x1, 0x4, 0x7, 0x81}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x1, 0x2, 0x4a}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0xe2, 0x51, 0xe7, [@uac_iso={0x0, 0x25, 0x1, 0xc, 0x5, 0x7}]}}]}}]}}]}}, 0x0) 17.775902162s ago: executing program 1 (id=1671): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x5, 0x6, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async, rerun: 32) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (async, rerun: 32) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 32) unshare(0x64000600) (rerun: 32) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) (async, rerun: 32) listen(r3, 0xa) (async, rerun: 32) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) (async) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) (async) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x12000, 0x0) accept$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x1c) (async, rerun: 64) listen(r4, 0xe8a2) (async, rerun: 64) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 17.718837115s ago: executing program 1 (id=1672): socket$netlink(0x10, 0x3, 0x0) r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000001280)={0x20, 0x9, 0x4, "61853749"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001e40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="2bc4ee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x20, 0xc, 0xfa, {0xfa, 0x2, "422eca3e567ed3df43e0850aff1db5b48ca45b55cd814481cb021afa4ea1178bc5832114219abcc765dd1810c6a48a5f3f041ce6cc363a3c68d84f54a529e8dfd175b3dc475840480e192796ac51443a7538969364a21ff88206577a32b76c3ed76041a96a3426b9ac7e601f328a13b54d8a1865323acd762e84910e21923506c19800f76eab8f1a835e27ae73eb40c32143eeb495a8201a991eff2f020a0d1a4ce0bd516ef57e8d3d928f383b6d5d173e57e09e6690025ea4e612a8748d8d8ba576ec2d9598f77e67e7ef62b5af0d9ed5f5ad85bc29d7ba3a46774bfbf0fbe7856d0acbac17acb49b7b5c744d2161469fb67e28b1e8081a"}}, &(0x7f0000000040)={0x0, 0x3, 0x52, @string={0x52, 0x3, "6dab2a9c8f281a2571da9512e34a3c12f5ca27b40460973b9c05a4994d5884af1ac1d7090b898309a114462435446c3fd4ce32972bbd9e0858bc54050190d8b8d69fabd4a015f9d002b52c359fa800c6"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x40, 0xa, 0xf0, "dd8acbb878b75744bfa5fe121d770470c7393e47db5d0bcce8e4348d340422abd97fc0894c3fea64efbdeb902268a03b2eb94c113de7e80691cc19d4602b004737c03187390f1b707b316c2db5dcc2d4806f5680c209a477c4105ae17ae92edac3b0e3524e6d0c4f84c1c775eb93884e5ff71453ffde4baf54230df9e0567c644ac63029fe84cc8f53e9d57985466f20f2158772e00d8b3fc5c11706251048260e6916eed8ce7f2527ea2021e8f5ebeab033b5cc205578fdfeb90a280118889a5bd218e37615b1ac991050683f4d252825a2e590cd859c619ff275c9f21d17f4ac76836f4d59249942c9fbae4ef129fe"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x34}, &(0x7f00000003c0)={0x20, 0x0, 0xb, {0x9, "0849f1f974f2326d36"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0xff}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x1}}) 17.656347058s ago: executing program 3 (id=1673): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x5865, r1, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003300)='C', 0x558}], 0x1}}], 0x1, 0x20000081) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6, 0x0, 0x0, 0x6, 0xb, 0x7}, 0xfffffffffffffc74) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) 17.604017411s ago: executing program 3 (id=1674): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x1, 0x20010, r1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) wait4(0x0, 0x0, 0x4, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000100)={[0x7, 0xa, 0x9, 0x40d6, 0xfe5b, 0x4, 0x6, 0x800, 0x10001, 0x6, 0x401, 0x9, 0x434f99e5, 0x0, 0xfffffffd, 0x2, 0x5, 0x86d7, 0xa, 0x3ff, 0x6, 0x1000, 0x407, 0x3, 0x1, 0x8, 0x7, 0x8, 0x2, 0x5, 0x7, 0x1, 0x6, 0x7, 0x6, 0x1, 0x7, 0xd27e, 0x80, 0xff, 0x6, 0x7ff, 0x1, 0x8, 0x0, 0x1, 0x400, 0x96, 0x8, 0x5f34, 0x10000, 0x80, 0x2, 0x7fffffff, 0x9, 0x3, 0x37, 0xfffffff9, 0x9, 0x8, 0x6, 0xfffffff9, 0xfffffffb, 0xaba1, 0xd, 0xfffffff3, 0x3, 0x85a0, 0x5, 0xa8, 0x1000, 0xfffffffb, 0x7, 0x800, 0x8000, 0x2, 0x4, 0x1, 0x9, 0x9, 0x3, 0x0, 0x0, 0x7, 0x8000, 0x7, 0x2, 0xc, 0x190c, 0x6, 0xa, 0x1, 0x4, 0x9, 0x9a, 0x3, 0x100, 0xfa, 0x7, 0xe5eb, 0x5, 0x8, 0x2, 0x4, 0x0, 0x9, 0xffff7fff, 0x7, 0x7, 0xffff5988, 0x4, 0xfffffff7, 0x98, 0x3782, 0x9, 0x4, 0x5, 0x5, 0x3, 0x2, 0x7ff, 0x1000, 0x2, 0x2, 0x8, 0xfffffffe, 0x6, 0x9, 0x40, 0x7, 0x7, 0x1, 0x8, 0x0, 0x8001, 0x1, 0x200, 0x3b4, 0x10, 0x6, 0xd2f3, 0x3, 0xe46, 0x6, 0x9, 0x101, 0x4606, 0x9968, 0x9, 0x6, 0x5, 0x400, 0x4, 0x3, 0x4, 0x2, 0x1, 0x4, 0x2, 0x8, 0x7, 0x7, 0x6, 0x2, 0x4, 0x0, 0x51f8c8fa, 0x8, 0x1ff, 0x1, 0x2, 0x81, 0x2f8, 0x0, 0xfffffe00, 0xd, 0x6, 0x7, 0x7, 0x2, 0x4, 0x4, 0x5, 0x9, 0xfffffc01, 0x7, 0x6, 0x8, 0x401, 0x1, 0x9, 0x1000, 0x3, 0x7, 0x3, 0x8001, 0x2, 0x8, 0x8088, 0x8001, 0xffff, 0x7, 0x97d, 0x8, 0x400461, 0x7, 0x80000000, 0x6, 0x5, 0x1, 0x0, 0x7, 0x3, 0x1, 0x2, 0x7, 0x2, 0x6, 0x7, 0x12000000, 0x400, 0x40, 0x1, 0x7, 0x7, 0xfffffffc, 0xa110, 0x4, 0x10001, 0x4, 0x8d, 0x9, 0x8000, 0x8, 0x3, 0xd2, 0x9, 0x5, 0x0, 0x4, 0x6, 0x7, 0x9, 0x818, 0x5, 0x7, 0x4, 0x4, 0x10001, 0x1, 0x1, 0x6, 0x4, 0x3, 0x79f7, 0x9, 0x28, 0x2, 0x8, 0x401, 0xe4, 0x6, 0x133, 0xc, 0x80000000, 0x9, 0x4, 0x7, 0x9, 0x4, 0x4, 0xd, 0x20000000, 0x0, 0xc1a, 0x2, 0x9, 0x7, 0xfff, 0x2, 0x5, 0x93, 0xc32, 0x80000000, 0x6, 0x9, 0xfffffffa, 0x8, 0x8, 0x8, 0x6, 0x9a, 0xb0c4, 0x40, 0x0, 0x8, 0x3, 0x3, 0x170, 0x80000000, 0x9, 0x7fffffff, 0x5, 0x1000, 0x8, 0xff, 0x6, 0x2, 0xfef2, 0x7, 0xdd, 0xe, 0xe000, 0x2, 0x8, 0x3, 0x0, 0x7fffffff, 0x6884, 0x1ff, 0x400, 0x6, 0x2, 0x8000, 0x6, 0x5, 0x6, 0x800, 0xfffffff9, 0x8, 0x3, 0x8001, 0x80000000, 0xfffffff8, 0x3, 0x8, 0xfffffffc, 0x5, 0x2, 0x4, 0x1, 0x180, 0x3, 0x6, 0x4, 0x1, 0x80000000, 0x58, 0x200, 0x3, 0x7, 0x4, 0x8, 0x3, 0x1, 0x5, 0x3, 0xf17, 0x6, 0x2, 0x223f049, 0x5, 0x10, 0xbd16, 0x7, 0x6, 0x200, 0x3, 0x5, 0x8, 0x7, 0x9, 0xd, 0x6, 0x4, 0x839, 0x2e1a, 0x101, 0x1f, 0x6, 0x8, 0x3, 0x8919, 0x7, 0x7, 0x8, 0x6, 0x101, 0x401, 0x400, 0x26, 0x2, 0x781, 0x2, 0x2, 0x7, 0x1, 0x51ca, 0xa25, 0x1, 0xc, 0x0, 0x636, 0xfffffff7, 0x2, 0x4000000, 0xc631, 0x85ef, 0x5, 0x9, 0x0, 0xd8d, 0x96ef, 0xf, 0x7ff, 0x3, 0x2, 0x4, 0x0, 0xffffffbe, 0x59, 0xffffffff, 0x6, 0x1, 0x5, 0x5, 0xa, 0x9, 0x0, 0xd36, 0x6, 0xffff, 0xff, 0x9, 0x485a, 0x80, 0x8, 0x5, 0x6, 0x10000, 0xc764, 0x401, 0xfffffff2, 0x4, 0x401, 0x3, 0x10000, 0x9, 0x8, 0x1, 0x6, 0x9, 0x3, 0x2, 0x101, 0x7, 0x3, 0x7, 0x7, 0x4, 0x8, 0x80, 0x5, 0x1, 0x3, 0x9, 0xffffffc0, 0x9, 0xffffffff, 0x0, 0x6, 0x6, 0x8, 0xee, 0xe52, 0xfffffff9, 0xc, 0x1, 0x1, 0x0, 0x6, 0x2, 0x10, 0x40, 0x7, 0xfffffffb, 0x9, 0x0, 0x2, 0x7, 0x1ff, 0xfffffeff, 0x7f, 0xc, 0xa, 0x3ff, 0xa, 0x2, 0x5, 0x4, 0x3, 0x5, 0x1, 0x7, 0x5, 0x8062, 0x1, 0x3, 0x10, 0xe, 0x8001, 0x5, 0x401, 0xa, 0xfffffff9, 0x8, 0x3, 0x0, 0x80000001, 0x7, 0xd4, 0xf, 0x2, 0xcb, 0x401, 0x10, 0x2, 0x259, 0x7fff, 0x3, 0x68, 0x8, 0x8000, 0x2, 0x9, 0x5dbd2e38, 0xdbb, 0x7, 0x204, 0xb, 0x1, 0x9, 0x401, 0x5, 0x4, 0x9, 0x200, 0x0, 0x1216, 0x5, 0x9b, 0xfffffffc, 0x7f, 0x1, 0xffffffff, 0x2, 0x0, 0x400, 0xf1c, 0xd2f, 0x2, 0x10000, 0xb, 0x4, 0x4, 0x7, 0x8, 0x1, 0xfff, 0xf, 0x9, 0x80000000, 0x5, 0x5f, 0x7, 0x8000, 0x800, 0x4, 0xfffffffb, 0xaa3d, 0x4, 0x99, 0x6, 0x1, 0x3, 0x59, 0x8, 0x4e, 0x1, 0x2, 0xffff, 0xfffffffb, 0x31, 0xd0, 0x2d, 0x8001, 0x1, 0x11a, 0x34, 0x4, 0xffffffff, 0x3, 0x0, 0x5ef, 0x7, 0x6, 0x5, 0x7fffffff, 0x5, 0x8, 0x8000, 0x6b, 0x0, 0x3, 0x5, 0x800, 0xfffffff9, 0x7, 0x2, 0x334d, 0x38e640, 0x1, 0x100, 0x1, 0xfffffffe, 0x1000, 0x9, 0x102308ed, 0x8, 0x4, 0x9, 0x9, 0x2, 0x4, 0x1, 0x708, 0x1c0, 0xd, 0x2, 0x3, 0x80, 0x298b, 0x2, 0x9, 0x7, 0x8, 0xfffffe00, 0x1ff, 0x7, 0x0, 0xed, 0x9, 0x4, 0x5, 0xfffffffd, 0x3, 0xe, 0x80000001, 0x2, 0x1ff, 0x9, 0x2, 0x7, 0x8, 0x1, 0x8, 0x264, 0x10000, 0x8, 0xfffffeff, 0x7, 0x8, 0x6, 0x1000, 0x2, 0x4, 0x9, 0x80, 0x7, 0x6, 0x5, 0x81, 0x47, 0x7e, 0x7, 0x3, 0x2, 0x1, 0x5, 0x9, 0x0, 0x9, 0x1, 0x3, 0x1, 0xffffff00, 0x8, 0x2e, 0x3, 0x1, 0x80000001, 0xa45, 0x4, 0x8001, 0x0, 0x250, 0xfff, 0x2a7c, 0xffffffff, 0xc, 0x51b1070d, 0xfffffffd, 0xfff, 0x477b, 0x1ff, 0xffffbfdb, 0x9, 0x0, 0x5, 0xab68, 0x9, 0x8001, 0x40, 0x4, 0x1526, 0x10001, 0x2, 0x1, 0x4, 0x6, 0x40, 0x1, 0x7fffffff, 0x3, 0x3, 0x1, 0x6, 0xc, 0xca, 0xb6, 0x80000000, 0x5, 0x9, 0xd, 0xc, 0x8bb, 0x8, 0x2, 0x10001, 0x3, 0x9, 0x3, 0x9, 0x4, 0x9, 0xccde, 0xfffffff9, 0x800, 0x4, 0x7, 0x3ff, 0x8000000, 0x3, 0x4, 0x6, 0x0, 0x80000001, 0xff, 0x7, 0x5, 0x2, 0x9, 0x5, 0x2, 0x20000, 0xe, 0x8001, 0xfffffffb, 0x4, 0x1d18, 0x8, 0x7, 0x5, 0x5, 0x5, 0xf, 0x0, 0x0, 0x9, 0x4, 0x5, 0xff, 0x7, 0x702, 0x1ef, 0x65, 0x3, 0x6, 0x9, 0x9, 0x200, 0x2, 0x5, 0x370, 0xfffffffd, 0x8, 0x100, 0x7, 0x5, 0x100, 0x7, 0x0, 0x4, 0x6, 0x0, 0x7, 0x7, 0x10001, 0x7, 0x8, 0x80000000, 0xb, 0x237a, 0x99, 0x3, 0x800, 0x7, 0x84b8, 0x5, 0x5, 0x85, 0x6, 0xfff, 0x2, 0xd0, 0xfffffffd, 0x5, 0x5, 0x9, 0x5, 0x1, 0x6, 0x10000, 0x7ff, 0x9, 0x9, 0x5, 0x4, 0x4, 0x5, 0x2, 0xfffffffd, 0x2, 0xea2, 0x7ff, 0x6, 0x2, 0x0, 0x80000001, 0x2, 0x2, 0xaf, 0x9, 0x4, 0x8, 0x5af6, 0x22df4e, 0x8, 0x2, 0xe8, 0xe, 0x6, 0x8, 0x3ff, 0xd, 0x0, 0x3, 0x4, 0xf, 0x3, 0x9, 0x738101a9, 0x9, 0xa6, 0x6, 0x71d, 0x766a, 0xfffffffd, 0x7fffffff, 0x401, 0x5, 0x90, 0x5, 0x9, 0xffffffff, 0x2, 0x1, 0x7, 0x7, 0x1, 0x7, 0x9, 0x4, 0x5c, 0x3, 0x6, 0x166cba4, 0x200, 0x3b8a85c1, 0x10, 0x5, 0x3, 0x80000001, 0xfffffff9, 0x7, 0x98e, 0x9, 0x30, 0x759, 0x8, 0x45, 0x200, 0x1, 0x9, 0x8, 0x9, 0x200, 0x721ca50d, 0x3, 0x0, 0xc, 0x4, 0xffffffff, 0x2, 0xffffffff, 0x80, 0x5, 0xfffffe00, 0x4c3, 0x3, 0x6, 0xfffffff7, 0x4, 0xfffffffa, 0x200, 0x5, 0xd, 0xb7, 0x3800, 0x7, 0x5, 0x4, 0xbf, 0x3, 0x9, 0x10000, 0xb, 0x7a, 0x7, 0x2, 0x342b, 0x4, 0x400, 0x401, 0x5, 0x0, 0x4, 0x3, 0x1, 0x6, 0x20de988b, 0x7ff, 0x8, 0x5, 0x6, 0x7, 0x5, 0x7fffffff, 0xaf, 0x2, 0xfffffffc, 0x3, 0x6, 0xa, 0x6db, 0x10000, 0x4, 0x8, 0x3, 0x401, 0xffff8001, 0xfff, 0x6, 0xfffffffd, 0x300000, 0x8, 0x5, 0x6, 0x1000, 0x6, 0x5, 0x9, 0xfff, 0x1, 0x3, 0x80000000, 0x3, 0x9, 0x5, 0x10000, 0x0, 0x5, 0x10001, 0x9, 0x8000, 0xffff, 0x2, 0x2, 0x77a, 0x8, 0x4, 0xf, 0x2, 0x2]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r3, 0x8930, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x2}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x1a, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) lseek(r0, 0xffffffffdf849a03, 0x1) cachestat(r0, &(0x7f0000000080)={0x4, 0x6e}, &(0x7f00000001c0), 0x0) 17.378232232s ago: executing program 0 (id=1675): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000180)=0x7, 0x4) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x1ff, 0x4) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 17.365451513s ago: executing program 0 (id=1676): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xa, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x1ff, 0x0, 0x3, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) close_range(r1, 0xffffffffffffffff, 0x0) openat(r1, &(0x7f0000000080)='./file2\x00', 0x823c0, 0x2b) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@volatile}], [], 0x2c}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fsync(r2) 17.080019146s ago: executing program 3 (id=1677): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) (async) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000280)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d8b9100800000f320f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x69}], 0x1, 0x14, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) (async) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x9, 0x2}]}, 0x10) listen(r5, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="9150f61d9104f549e6b5fbedc73dc5f0cff1e7719dbe0cc79c0dfe6735886a9234599cf44a", 0x25, 0x20001084, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40101, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/155, 0x9b}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00']}) (async) execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00']}) 16.827411549s ago: executing program 0 (id=1678): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) (async) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20e0110}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100026bd7000fcdbdf25620000000c009900070000006a000000"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f00000000c0)) 16.623807479s ago: executing program 0 (id=1679): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') exit(0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x1d4) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 16.323385364s ago: executing program 2 (id=1680): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x10c000) openat$kvm(0xffffff9c, 0x0, 0x20000, 0x0) mmap(&(0x7f0000028000/0x1000)=nil, 0x1000, 0x10, 0x10, 0xffffffffffffffff, 0x24124000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getdents64(r3, &(0x7f0000004440)=""/4096, 0x1000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)="1d4b5bc9", 0x4}], 0x1, &(0x7f00000017c0)=ANY=[], 0xb0}}], 0x2, 0x4008004) 16.289761016s ago: executing program 2 (id=1681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'veth0_to_bridge\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb81001000080046560018006700008211907865010102ac1414bb070370004e224e2300649078020000000900000000000000c906a8285ea5be4aec03d80133d69853f713bebea61484678f63278aad7a1b6b9502a5a639e893b14bf03620263e94605c1c5870a3f41fc3650ee82fb051cdd4e82d7a984eb33f070000000000ce00fd690000"], 0x8e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x82aad11eceec8b32, 0x1) accept4(r3, 0x0, 0x0, 0x80000) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@uuid_auto}], [], 0x2c}) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fsync(r4) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={r5, 0x3, 0x6, 0x2}) (async) r7 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400001202060000052406000005240000000d24ec01000000000000000000090582020002000000090503020002000000"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_ep_write(r7, 0x82, 0x5, &(0x7f0000002340)='hello') (async) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f0000000080)=0xb, 0x4) (async) syz_open_dev$loop(&(0x7f0000000440), 0xf, 0x183043) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20040, 0x0) r8 = epoll_create1(0x0) (async) r9 = epoll_create1(0x80000) r10 = fcntl$dupfd(r8, 0x406, r9) (async) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r8, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000100)={0x1}) 13.732885342s ago: executing program 0 (id=1682): r0 = socket$igmp6(0xa, 0x3, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r1 = syz_clone(0x122a000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000100)={0xa05, 0x800, 0x9, 0x0, 0x0, 0xfffffffb}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setuid(r3) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) unlink(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') fsetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0, 0x0) creat(&(0x7f00000006c0)='./file0\x00', 0x50) r5 = inotify_init1(0x1800) execveat(r4, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000003c0)={[&(0x7f0000000300)='!:#}{,@\xfe,\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00']}, &(0x7f0000000500)={[&(0x7f0000000400)=':++.](@{/]],\x00', &(0x7f0000000440)='\\+,!}\x1a(\')&\xbe\x00', &(0x7f0000000480)='rdma.current\x00']}, 0x100) inotify_add_watch(r5, &(0x7f0000000140)='./file0\x00', 0x88) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000100)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000001000)='9p\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@private1, 0x6, 0x0, 0xff, 0x6, 0x8, 0x7}, 0x20) 11.204006357s ago: executing program 1 (id=1683): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0xffff1000}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x80, @ipv4={'\x00', '\xff\xff', @empty}, 0x8007}, 0x1c) 7.850981162s ago: executing program 3 (id=1684): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000180)=0x7, 0x4) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x1ff, 0x4) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 0s ago: executing program 32 (id=1681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'veth0_to_bridge\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb81001000080046560018006700008211907865010102ac1414bb070370004e224e2300649078020000000900000000000000c906a8285ea5be4aec03d80133d69853f713bebea61484678f63278aad7a1b6b9502a5a639e893b14bf03620263e94605c1c5870a3f41fc3650ee82fb051cdd4e82d7a984eb33f070000000000ce00fd690000"], 0x8e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x82aad11eceec8b32, 0x1) accept4(r3, 0x0, 0x0, 0x80000) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@uuid_auto}], [], 0x2c}) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fsync(r4) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={r5, 0x3, 0x6, 0x2}) (async) r7 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400001202060000052406000005240000000d24ec01000000000000000000090582020002000000090503020002000000"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_ep_write(r7, 0x82, 0x5, &(0x7f0000002340)='hello') (async) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f0000000080)=0xb, 0x4) (async) syz_open_dev$loop(&(0x7f0000000440), 0xf, 0x183043) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20040, 0x0) r8 = epoll_create1(0x0) (async) r9 = epoll_create1(0x80000) r10 = fcntl$dupfd(r8, 0x406, r9) (async) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r8, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000100)={0x1}) kernel console output (not intermixed with test programs): igh-speed USB device number 61 using dummy_hcd [ 129.582274][ T3498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.879'. [ 129.605742][ T365] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.620617][ T365] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 129.629911][ T365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 129.638404][ T365] usb 3-1: Product: syz [ 129.642565][ T365] usb 3-1: Manufacturer: syz [ 129.647381][ T365] usb 3-1: SerialNumber: syz [ 129.664419][ T379] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 129.685412][ T379] usb 2-1: device descriptor read/8, error -71 [ 129.815579][ T379] usb 2-1: device descriptor read/8, error -71 [ 129.856481][ T365] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 129.924477][ T379] usb usb2-port1: unable to enumerate USB device [ 130.057337][ T36] audit: type=1400 audit(1773724062.260:60267): avc: denied { read write } for pid=3479 comm="syz.2.871" name="lp0" dev="devtmpfs" ino=811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 130.081256][ T36] audit: type=1400 audit(1773724062.260:60268): avc: denied { open } for pid=3479 comm="syz.2.871" path="/dev/usb/lp0" dev="devtmpfs" ino=811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 130.124520][ T36] audit: type=1400 audit(1773724062.330:60269): avc: denied { watch } for pid=3516 comm="syz.3.887" path="/309/file0" dev="tmpfs" ino=1725 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 130.179585][ T3529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'. [ 130.238695][ T3538] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 130.240069][ T3539] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 130.252798][ T3538] overlayfs: missing 'lowerdir' [ 130.256947][ T3539] overlayfs: missing 'lowerdir' [ 130.439575][ T3552] fuse: Bad value for 'rootmode' [ 130.610065][ T3556] cgroup: Unknown subsys name 'measure' [ 131.114309][ T10] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 131.265586][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.274349][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 131.283090][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.293638][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 72, setting to 64 [ 131.304783][ T10] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.317250][ T10] usb 2-1: New USB device found, idVendor=4752, idProduct=0711, bcdDevice= 0.40 [ 131.326476][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.334769][ T10] usb 2-1: Product: syz [ 131.339076][ T10] usb 2-1: Manufacturer: syz [ 131.343930][ T10] usb 2-1: SerialNumber: syz [ 131.349632][ T3568] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 131.557918][ T36] audit: type=1400 audit(1773724063.760:60270): avc: denied { append } for pid=3567 comm="syz.1.903" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.620869][ T3581] Dead loop on virtual device ip6_vti0, fix it urgently! [ 131.661825][ T3583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=3583 comm=syz.3.909 [ 131.674811][ T36] audit: type=1400 audit(1773724063.880:60271): avc: denied { mounton } for pid=3582 comm="syz.3.909" path="/file0" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 131.891682][ T3594] overlay: Unknown parameter 'smackfsroot' [ 132.414331][ T3600] fuse: Unknown parameter 'fd}00000000000000000003' [ 133.676020][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 133.676036][ T36] audit: type=1400 audit(1773724065.880:60273): avc: denied { write } for pid=3617 comm="syz.3.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.719897][ T36] audit: type=1400 audit(1773724065.920:60274): avc: denied { nlmsg_read } for pid=3626 comm="syz.3.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 133.746076][ T36] audit: type=1400 audit(1773724065.950:60275): avc: denied { execheap } for pid=3626 comm="syz.3.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 133.820066][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 133.822545][ T36] audit: type=1400 audit(1773724066.020:60276): avc: denied { listen } for pid=3641 comm="syz.1.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.834488][ T10] usb 2-1: USB disconnect, device number 80 [ 133.867126][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 133.905483][ T3647] overlayfs: failed to resolve './file0': -2 [ 133.911811][ T3647] overlayfs: failed to resolve './file0': -2 [ 133.918161][ T3647] overlayfs: failed to resolve './file0': -2 [ 133.924466][ T3647] overlayfs: failed to resolve './file0': -2 [ 133.930718][ T3647] overlayfs: failed to resolve './file0': -2 [ 133.937301][ T3647] overlayfs: failed to resolve './file0': -2 [ 133.943725][ T3647] overlayfs: failed to resolve './file0': -2 [ 133.950012][ T3647] overlayfs: failed to resolve './file0': -2 [ 133.956317][ T3647] overlayfs: failed to resolve './file0': -2 [ 133.962763][ T3647] overlayfs: failed to resolve './file0': -2 [ 133.969085][ T3647] overlayfs: failed to resolve './file0': -2 [ 133.975402][ T3647] overlayfs: failed to resolve './file0': -2 [ 133.981823][ T3647] overlayfs: failed to resolve './file0': -2 [ 133.988214][ T3647] overlayfs: failed to resolve './file0': -2 [ 133.995082][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.001557][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.008029][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.014428][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.020697][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.027046][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.033351][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.039669][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.046118][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.052410][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.058675][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.065237][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.071459][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.077845][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.084501][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.091118][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.097502][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.104114][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.110654][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.116897][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.123138][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.129573][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.135867][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.142122][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.148496][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.154762][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.160997][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.167452][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.173765][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.180266][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.186695][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.193035][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.199607][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.206338][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.212669][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.219129][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.225504][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.231749][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.238308][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.245074][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.251447][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.257735][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.264091][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.270834][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.277086][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.283298][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.289598][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.296196][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.302416][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.308760][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.315127][ T3647] overlayfs: failed to resolve './file0': -2 [ 134.350801][ T36] audit: type=1400 audit(1773724066.550:60277): avc: denied { create } for pid=3657 comm="syz.1.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 134.803040][ T36] audit: type=1400 audit(1773724067.000:60278): avc: denied { ioctl } for pid=3666 comm="batadv" path="socket:[20195]" dev="sockfs" ino=20195 ioctlcmd=0x582d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.470417][ T3691] tipc: Trying to set illegal importance in message [ 135.678041][ T3702] netlink: 9 bytes leftover after parsing attributes in process `syz.3.950'. [ 135.687404][ T3702] gretap0: entered promiscuous mode [ 135.694835][ T36] audit: type=1326 audit(1773724067.900:60279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.3.950" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f483359c799 code=0x0 [ 136.033191][ T3739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'. [ 136.635817][ T3747] SELinux: policydb string does not match my string SE Linux [ 136.643507][ T3747] SELinux: failed to load policy [ 136.649062][ T3747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.962'. [ 136.658107][ T3747] bridge_slave_1: left allmulticast mode [ 136.663750][ T3747] bridge_slave_1: left promiscuous mode [ 136.669421][ T3747] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.676967][ T3747] bridge_slave_0: left allmulticast mode [ 136.682670][ T3747] bridge_slave_0: left promiscuous mode [ 136.688456][ T3747] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.807922][ T1654] Bluetooth: hci0: Frame reassembly failed (-84) [ 136.825396][ T365] usb 3-1: USB disconnect, device number 61 [ 136.832452][ T365] usblp0: removed [ 136.836930][ T36] audit: type=1400 audit(1773724069.038:60280): avc: denied { mounton } for pid=3751 comm="syz.2.964" path="/194/file0" dev="tmpfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 136.956498][ T36] audit: type=1400 audit(1773724069.158:60281): avc: denied { create } for pid=3763 comm="syz.0.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 137.003100][ T3775] netlink: 108 bytes leftover after parsing attributes in process `syz.0.971'. [ 137.020809][ T3780] overlay: Unknown parameter 'subj_role' [ 137.039972][ T3782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.973'. [ 137.244738][ T3797] netlink: 'syz.3.979': attribute type 16 has an invalid length. [ 137.271384][ T36] audit: type=1326 audit(1773724069.468:60282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3800 comm="syz.3.981" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f483359c799 code=0x0 [ 138.024314][ T365] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 138.175556][ T365] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.185873][ T365] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.196393][ T365] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 138.205563][ T365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.213742][ T365] usb 3-1: SerialNumber: syz [ 138.420749][ T365] usb 3-1: 0:2 : does not exist [ 138.427331][ T365] usb 3-1: USB disconnect, device number 62 [ 138.434621][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 138.884331][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 138.884342][ T511] Bluetooth: hci0: command 0x1003 tx timeout [ 139.805862][ T3890] netlink: 'syz.1.1012': attribute type 4 has an invalid length. [ 140.064293][ T10] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 140.065700][ T3910] GUP no longer grows the stack in syz.3.1017 (3910): 200000005000-200000008000 (200000004000) [ 140.082514][ T3910] CPU: 1 UID: 0 PID: 3910 Comm: syz.3.1017 Not tainted syzkaller #0 e9db8685c400c70f0098c2bc673af807e74041bb [ 140.082698][ T3910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 140.082712][ T3910] Call Trace: [ 140.082719][ T3910] [ 140.082727][ T3910] __dump_stack+0x21/0x30 [ 140.082766][ T3910] dump_stack_lvl+0x140/0x1c0 [ 140.082802][ T3910] ? __cfi_dump_stack_lvl+0x10/0x10 [ 140.082824][ T3910] ? futex_lock_pi_atomic+0xe3/0xcd0 [ 140.082849][ T3910] dump_stack+0x19/0x20 [ 140.082868][ T3910] fixup_user_fault+0x62a/0x6b0 [ 140.082888][ T3910] fault_in_user_writeable+0x75/0xe0 [ 140.082907][ T3910] futex_lock_pi+0x2d7/0xa70 [ 140.082929][ T3910] ? __cfi_futex_lock_pi+0x10/0x10 [ 140.082952][ T3910] ? __kasan_check_write+0x18/0x20 [ 140.082975][ T3910] ? wake_up_q+0x10f/0x1c0 [ 140.083001][ T3910] ? __cfi_futex_wake_mark+0x10/0x10 [ 140.083024][ T3910] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 140.083048][ T3910] ? mas_find+0x358/0x5f0 [ 140.083066][ T3910] do_futex+0x270/0x510 [ 140.083085][ T3910] ? do_vmi_munmap+0x245/0x2e0 [ 140.083109][ T3910] ? __cfi_do_futex+0x10/0x10 [ 140.083129][ T3910] ? __vm_munmap+0x2de/0x390 [ 140.083152][ T3910] __se_sys_futex+0x13c/0x320 [ 140.083174][ T3910] ? __x64_sys_futex+0x110/0x110 [ 140.083195][ T3910] ? __kasan_check_write+0x18/0x20 [ 140.083218][ T3910] __x64_sys_futex+0xe9/0x110 [ 140.083237][ T3910] x64_sys_call+0x227f/0x2ee0 [ 140.083260][ T3910] do_syscall_64+0x57/0xf0 [ 140.083282][ T3910] ? clear_bhb_loop+0x50/0xa0 [ 140.083305][ T3910] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 140.083327][ T3910] RIP: 0033:0x7f483359c799 [ 140.083349][ T3910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.083365][ T3910] RSP: 002b:00007f48344e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.083386][ T3910] RAX: ffffffffffffffda RBX: 00007f4833815fa0 RCX: 00007f483359c799 [ 140.083401][ T3910] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 140.083413][ T3910] RBP: 00007f4833632c99 R08: 0000000000000000 R09: 0000000000000000 [ 140.083427][ T3910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.083439][ T3910] R13: 00007f4833816038 R14: 00007f4833815fa0 R15: 00007ffd899dddf8 [ 140.083456][ T3910] [ 140.324323][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 140.330730][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 140.339659][ T10] usb 2-1: config 179 has no interface number 0 [ 140.346192][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 140.357395][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 140.368818][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 140.380169][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 140.381706][ T3918] netlink: 'syz.3.1019': attribute type 1 has an invalid length. [ 140.391704][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 140.391749][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 140.399875][ T378] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 140.423766][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.442641][ T3890] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 140.564677][ T378] usb 3-1: device descriptor read/64, error -71 [ 140.804406][ T378] usb 3-1: device descriptor read/64, error -71 [ 140.857635][ T365] usb 2-1: USB disconnect, device number 81 [ 140.857725][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 140.873156][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 141.044326][ T378] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 141.174314][ T378] usb 3-1: device descriptor read/64, error -71 [ 141.204811][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 141.204829][ T36] audit: type=1400 audit(1773724073.408:60284): avc: denied { read } for pid=3925 comm="syz.0.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 141.377760][ T3929] syz.1.1023(3929): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 141.414309][ T378] usb 3-1: device descriptor read/64, error -71 [ 141.509651][ T3945] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 141.524560][ T378] usb usb3-port1: attempt power cycle [ 141.582078][ T3951] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1029'. [ 141.864302][ T378] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 141.885229][ T378] usb 3-1: device descriptor read/8, error -71 [ 142.015350][ T378] usb 3-1: device descriptor read/8, error -71 [ 142.114311][ T3965] overlayfs: failed to clone upperpath [ 142.254509][ T378] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 142.275358][ T378] usb 3-1: device descriptor read/8, error -71 [ 142.421023][ T378] usb 3-1: device descriptor read/8, error -71 [ 142.558459][ T378] usb usb3-port1: unable to enumerate USB device [ 142.914936][ T3986] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1039'. [ 144.084287][ T4029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1052'. [ 144.141054][ T4036] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1054'. [ 144.175488][ T4031] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 144.385256][ T4045] overlay: ./file0 is not a directory [ 144.424998][ T4052] fuse: Unknown parameter 'f„C÷§¨ù1' [ 144.604812][ T36] audit: type=1400 audit(1773724076.808:60285): avc: denied { shutdown } for pid=4058 comm="syz.0.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.684308][ T477] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 144.796718][ T4066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1064'. [ 144.831855][ T4066] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1064'. [ 144.844329][ T477] usb 3-1: Using ep0 maxpacket: 8 [ 144.851915][ T4067] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1064'. [ 144.864269][ T477] usb 3-1: config 1 has an invalid descriptor of length 162, skipping remainder of the config [ 144.875198][ T477] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 144.889728][ T477] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 144.899761][ T477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.920834][ T477] usb 3-1: Product: syz [ 144.925229][ T477] usb 3-1: Manufacturer: syz [ 144.930006][ T477] usb 3-1: SerialNumber: syz [ 144.937047][ T4073] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1067'. [ 145.159514][ T4057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.169388][ T4057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.183380][ T477] usb 3-1: USB disconnect, device number 67 [ 145.190451][ T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 145.355901][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 145.364466][ T10] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 145.373493][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 145.385274][ T10] usb 2-1: config 220 has no interface number 2 [ 145.397118][ T10] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 145.413525][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 145.427070][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 145.435493][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 145.445198][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 145.453514][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 145.473019][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.493291][ T10] usb 2-1: Product: syz [ 145.497708][ T10] usb 2-1: Manufacturer: syz [ 145.502312][ T10] usb 2-1: SerialNumber: syz [ 145.719931][ T10] usb 2-1: selecting invalid altsetting 0 [ 145.745159][ T10] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 145.765797][ T10] usb 2-1: No valid video chain found. [ 145.782507][ T10] usb 2-1: USB disconnect, device number 82 [ 145.828798][ T4080] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 146.253251][ T4091] devpts: called with bogus options [ 146.453181][ T4105] SELinux: policydb magic number 0x4aa2ceb1 does not match expected magic number 0xf97cff8c [ 146.463759][ T4105] SELinux: failed to load policy [ 146.469131][ T4105] syz.1.1076 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 146.594395][ T4113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=4113 comm=syz.3.1080 [ 146.635048][ T477] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 146.664159][ T4116] netlink: 'syz.1.1081': attribute type 16 has an invalid length. [ 146.672584][ T4116] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1081'. [ 146.723107][ T4119] 9pnet_fd: Insufficient options for proto=fd [ 146.806206][ T477] usb 3-1: unable to get BOS descriptor or descriptor too short [ 146.820046][ T477] usb 3-1: not running at top speed; connect to a high speed hub [ 146.831780][ T477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 146.846818][ T477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 146.858168][ T477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 146.871576][ T477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 146.881551][ T477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 12336, setting to 64 [ 146.895341][ T477] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 146.904755][ T477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.912847][ T477] usb 3-1: Product: syz [ 146.917556][ T477] usb 3-1: Manufacturer: syz [ 146.922317][ T477] usb 3-1: SerialNumber: syz [ 146.932046][ T477] usb 3-1: config 0 descriptor?? [ 146.938783][ T4097] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.946698][ T4097] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 147.074324][ T10] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 147.158898][ T477] usb 3-1: USB disconnect, device number 68 [ 147.236247][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 147.244595][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 147.256442][ T10] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 147.272829][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.282205][ T10] usb 2-1: Product: syz [ 147.286695][ T10] usb 2-1: Manufacturer: syz [ 147.291420][ T10] usb 2-1: SerialNumber: syz [ 147.316469][ T4128] overlayfs: failed to clone upperpath [ 147.353983][ T4132] netlink: 'syz.3.1087': attribute type 1 has an invalid length. [ 147.361964][ T4132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1087'. [ 147.447110][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 147.459352][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 147.471844][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 147.475419][ T4136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1089'. [ 147.484111][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 147.493273][ T4137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1089'. [ 147.504974][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 147.526219][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 147.538422][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 147.550707][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 147.563347][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 147.575742][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 147.755150][ T10] usb 2-1: USB disconnect, device number 83 [ 147.861194][ T4146] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4146 comm=syz.1.1093 [ 147.983071][ T36] audit: type=1400 audit(1773724080.178:60286): avc: denied { create } for pid=4148 comm="syz.2.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 148.009706][ T4146] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=14 sclass=netlink_xfrm_socket pid=4146 comm=syz.1.1093 [ 148.091620][ T4158] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 148.100468][ T4158] rust_binder: Write failure EINVAL in pid:687 [ 148.437509][ T36] audit: type=1400 audit(1773724080.638:60287): avc: denied { read write } for pid=4170 comm="syz.1.1108" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.530557][ T36] audit: type=1400 audit(1773724080.638:60288): avc: denied { open } for pid=4170 comm="syz.1.1108" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.557569][ T36] audit: type=1400 audit(1773724080.638:60289): avc: denied { ioctl } for pid=4170 comm="syz.1.1108" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.724312][ T10] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 148.877117][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.888561][ T10] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 148.907948][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.927918][ T10] usb 2-1: config 0 descriptor?? [ 148.943999][ T10] usb 2-1: bad CDC descriptors [ 149.118572][ T4192] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4192 comm=syz.2.1107 [ 149.159572][ T10] usb 2-1: USB disconnect, device number 84 [ 149.200406][ T4192] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=14 sclass=netlink_xfrm_socket pid=4192 comm=syz.2.1107 [ 149.367615][ T36] audit: type=1400 audit(1773724081.568:60290): avc: denied { getopt } for pid=4196 comm="syz.3.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.684344][ T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 149.704032][ T4211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1114'. [ 149.713211][ T4211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'. [ 149.722456][ T4211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'. [ 149.733831][ T4211] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1114'. [ 149.836755][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 149.845169][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 149.856766][ T10] usb 3-1: config 220 has no interface number 2 [ 149.863314][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 149.877870][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 149.884935][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 149.891799][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 149.911077][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 149.922559][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.930952][ T10] usb 3-1: Product: syz [ 149.938597][ T10] usb 3-1: Manufacturer: syz [ 149.943227][ T10] usb 3-1: SerialNumber: syz [ 150.023876][ T4226] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4226 comm=syz.3.1119 [ 150.044495][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 150.079796][ T4226] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4226 comm=syz.3.1119 [ 150.157843][ T10] usb 3-1: selecting invalid altsetting 0 [ 150.173488][ T10] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 150.180527][ T10] usb 3-1: No valid video chain found. [ 150.196324][ T10] usb 3-1: USB disconnect, device number 69 [ 150.208418][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.223777][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.234968][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.249030][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.261711][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.276488][ T9] usb 2-1: config 0 descriptor?? [ 150.689470][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 150.702314][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 150.710139][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 150.733194][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 150.741094][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 150.759500][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 150.767552][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 150.777186][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 150.784708][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 150.792390][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 150.799972][ T9] plantronics 0003:047F:FFFF.000E: unbalanced collection at end of report description [ 150.817147][ T9] plantronics 0003:047F:FFFF.000E: parse failed [ 150.823559][ T9] plantronics 0003:047F:FFFF.000E: probe with driver plantronics failed with error -22 [ 150.901660][ T9] usb 2-1: USB disconnect, device number 85 [ 150.964318][ T10] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 151.116779][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 151.125789][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.138620][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.148784][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 151.159108][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 151.169317][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 151.180455][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 151.308997][ T4245] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4245 comm=syz.0.1128 [ 151.356525][ T4245] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=14 sclass=netlink_xfrm_socket pid=4245 comm=syz.0.1128 [ 151.550839][ T36] audit: type=1400 audit(1773724083.748:60291): avc: denied { setattr } for pid=4253 comm="syz.1.1132" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 151.950578][ T4267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.963478][ T4267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.989131][ T4267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.007221][ T4267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.184302][ T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 152.344319][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 152.352109][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 152.360935][ T9] usb 2-1: config 0 has no interface number 0 [ 152.368226][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 152.377300][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 152.386935][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.395797][ T9] usb 2-1: Product: syz [ 152.400148][ T9] usb 2-1: Manufacturer: syz [ 152.406267][ T9] usb 2-1: SerialNumber: syz [ 152.415670][ T9] usb 2-1: config 0 descriptor?? [ 152.424053][ T9] smsc75xx v1.0.0 [ 152.454383][ C1] net_ratelimit: 29615 callbacks suppressed [ 152.454400][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 152.473785][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 152.486208][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 152.499047][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 152.511474][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 152.523858][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 152.536805][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 152.549267][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 152.562000][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 152.575096][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 152.624315][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 152.639523][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 152.654671][ T9] usb 2-1: USB disconnect, device number 86 [ 153.404347][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 153.574610][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 153.587434][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.603284][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.616825][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 153.626247][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.635851][ T9] usb 2-1: config 0 descriptor?? [ 153.649415][ T9] hub 2-1:0.0: USB hub found [ 153.717576][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.734302][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.747718][ T10] usb 3-1: can't set config #1, error -71 [ 153.779185][ T10] usb 3-1: USB disconnect, device number 70 [ 153.805497][ T36] audit: type=1400 audit(1773724086.008:60292): avc: denied { ioctl } for pid=4305 comm="syz.2.1152" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 153.845709][ T9] hub 2-1:0.0: 1 port detected [ 153.911422][ T36] audit: type=1400 audit(1773724086.108:60293): avc: denied { setopt } for pid=4313 comm="syz.2.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.449808][ T9] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 154.710200][ T4321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 155.035783][ T31] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 155.205723][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 155.238107][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 155.263382][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 156.197801][ T4337] binder: Unknown parameter 'ÿÿÿÿ' [ 156.226407][ T4337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4337 comm=syz.1.1164 [ 156.294816][ T10] usb 2-1: USB disconnect, device number 87 [ 156.495492][ T36] audit: type=1326 audit(1773724088.688:60294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5870d9c799 code=0x7fc00000 [ 156.527197][ T36] audit: type=1326 audit(1773724088.688:60295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5870d9c799 code=0x7fc00000 [ 156.551018][ T36] audit: type=1326 audit(1773724088.688:60296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5870d9c799 code=0x7fc00000 [ 156.576471][ T36] audit: type=1326 audit(1773724088.688:60297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5870d9c799 code=0x7fc00000 [ 156.601398][ T36] audit: type=1326 audit(1773724088.688:60298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5870d9c799 code=0x7fc00000 [ 156.626970][ T36] audit: type=1326 audit(1773724088.688:60299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5870d9c799 code=0x7fc00000 [ 156.651015][ T36] audit: type=1326 audit(1773724088.688:60300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5870d9c799 code=0x7fc00000 [ 156.666535][ T4347] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1167'. [ 156.674780][ T10] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 156.675420][ T36] audit: type=1326 audit(1773724088.688:60301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5870d9c799 code=0x7fc00000 [ 156.824277][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 156.830433][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.840993][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.852723][ T10] usb 2-1: New USB device found, idVendor=0e41, idProduct=4250, bcdDevice= 0.40 [ 156.862212][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.870490][ T10] usb 2-1: Product: syz [ 156.886038][ T4350] netlink: 'syz.3.1168': attribute type 29 has an invalid length. [ 156.895621][ T10] usb 2-1: Manufacturer: syz [ 156.904204][ T10] usb 2-1: SerialNumber: syz [ 157.079662][ T4365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'. [ 157.125228][ T10] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 157.150688][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 157.183099][ T10] usb 2-1: USB disconnect, device number 88 [ 157.212275][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 157.464279][ C1] net_ratelimit: 73471 callbacks suppressed [ 157.464302][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.482496][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 157.494914][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.507074][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.519129][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.531515][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 157.544186][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.556948][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.569192][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.581441][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 157.786937][ T4389] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1178'. [ 157.810736][ T4389] netlink: 'syz.3.1178': attribute type 5 has an invalid length. [ 157.822242][ T4389] netlink: 'syz.3.1178': attribute type 5 has an invalid length. [ 157.830456][ T4389] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1178'. [ 157.847993][ T4389] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 158.024671][ T31] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 158.033916][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.124286][ T10] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 158.264741][ T31] usb 3-1: Product: á  [ 158.269021][ T31] usb 3-1: Manufacturer: ㇷå«è¤¼äµŠã‹Šå©Ÿâ¨“纅꯼ç—î•Žà±ëœƒìœŠê¹’뜸ꌥ㤈羨몰䈉㠚ࠅ躶℉ⵒ쮑╓ꎓ魄郀䔑ַ夎匿ᚯ⻉ëžâ”ƒã‹¨â­±ã”³èž°î ¨éˆ”㽒陙㘕髩á»ë¾Ÿè™¾í•†ï±¯é”¹äœŽçŸ·á—»â§¦î’呷쨰æ¯é—ºä’¼å‰¯ï‹¶â¶„稱由꘴巑옙ᯔ嘴颚솊 [ 158.305729][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 158.315429][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 158.323996][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.334730][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.345993][ T10] usb 2-1: string descriptor 0 read error: -22 [ 158.352797][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.372548][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.403638][ T10] usb 2-1: 0:2 : does not exist [ 159.189312][ T4433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 159.199103][ T4384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.218951][ T4384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.233739][ T36] kauditd_printk_skb: 2218 callbacks suppressed [ 159.233756][ T36] audit: type=1401 audit(1773724091.428:62520): op=setxattr invalid_context="system_u:object_r:apt_var_lib_t:s0" [ 159.271467][ T4440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1198'. [ 159.475586][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 159.489001][ T10] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 159.498910][ T10] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 159.514614][ T10] usb 2-1: USB disconnect, device number 89 [ 159.568689][ T36] audit: type=1400 audit(1773724091.768:62521): avc: denied { create } for pid=4443 comm="syz.3.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 159.700207][ T31] usb 3-1: can't set config #1, error -71 [ 159.719285][ T31] usb 3-1: USB disconnect, device number 71 [ 160.019742][ T4448] loop7: detected capacity change from 0 to 7 [ 160.026883][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.036153][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 160.044620][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.053851][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 160.061849][ T332] loop7: unable to read partition table [ 161.033613][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.033642][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.226550][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.233089][ T4487] rust_binder: 742: no such ref 1 [ 161.244735][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.244758][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.251192][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.259815][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.266502][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.273399][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.280201][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.288311][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.294961][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.301557][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.308250][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.314992][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.327342][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.339384][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.349327][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.356054][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.362644][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.369535][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.377595][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.384433][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.391034][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.397797][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.407840][ T36] audit: type=1400 audit(1773724093.608:62522): avc: denied { setopt } for pid=4488 comm="syz.3.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.438609][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.438639][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.451365][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.462280][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.469413][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.476472][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.502260][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.519714][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.536458][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.565887][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.581856][ T4505] overlayfs: failed to clone upperpath [ 161.593918][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.593943][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.604318][ T4504] overlayfs: failed to clone upperpath [ 161.623322][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.623350][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.633686][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.645541][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.674331][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.694335][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.712488][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.722587][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.739275][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.749374][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.764365][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.782569][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.792651][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.809495][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.824359][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.833618][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.848452][ T36] audit: type=1400 audit(1773724094.048:62523): avc: denied { read } for pid=4515 comm="syz.3.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.877146][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.877175][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.890525][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.904344][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.921194][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.932912][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.949821][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.959919][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.974335][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.985817][ T4519] netlink: 'syz.3.1224': attribute type 13 has an invalid length. [ 162.000353][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.000378][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.007141][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.013777][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.474412][ C1] net_ratelimit: 66680 callbacks suppressed [ 162.474436][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 162.499028][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.511088][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.523245][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 162.535639][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 162.547790][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.559977][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.572385][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 162.584691][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 162.596836][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.687978][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 162.710377][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.719574][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.729960][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.739141][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.747385][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.756550][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.765453][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.774633][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.782942][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.792205][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 163.028746][ T4549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1233'. [ 163.098274][ T4554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1235'. [ 163.154286][ T477] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 163.247132][ T4548] kvm: pic: non byte write [ 163.315679][ T477] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 163.324580][ T477] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.335203][ T477] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 163.344416][ T477] usb 2-1: config 1 has no interface number 1 [ 163.352437][ T477] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 163.365729][ T477] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 163.377287][ T477] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.387177][ T477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.395502][ T477] usb 2-1: Product: syz [ 163.399843][ T477] usb 2-1: Manufacturer: syz [ 163.404710][ T477] usb 2-1: SerialNumber: syz [ 163.615872][ T4544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.626311][ T4544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.636824][ T4544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.646312][ T4544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.665668][ T4544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.676601][ T4544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.690621][ T477] usb 2-1: MIDIStreaming interface descriptor not found [ 163.702554][ T477] usb 2-1: USB disconnect, device number 90 [ 163.895686][ T4561] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1237'. [ 164.247411][ T36] audit: type=1400 audit(1773724096.448:62524): avc: denied { getopt } for pid=4576 comm="syz.0.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.315592][ T4580] IPv6: Can't replace route, no match found [ 164.322075][ T4580] netlink: 'syz.0.1243': attribute type 32 has an invalid length. [ 164.941042][ T4610] overlayfs: failed to resolve './file1': -2 [ 165.382186][ T36] audit: type=1400 audit(1773724097.578:62525): avc: denied { create } for pid=4618 comm="syz.3.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 165.834297][ T10] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 165.994301][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 166.002318][ T10] usb 2-1: config index 0 descriptor too short (expected 164, got 36) [ 166.011439][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.024085][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.039323][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 166.053654][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.065839][ T10] usb 2-1: config 0 descriptor?? [ 166.078773][ T4638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1263'. [ 166.103771][ T4640] netlink: 'syz.0.1264': attribute type 22 has an invalid length. [ 166.262730][ T4644] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=51431 sclass=netlink_tcpdiag_socket pid=4644 comm=syz.3.1266 [ 166.276973][ T36] audit: type=1400 audit(1773724098.478:62526): avc: denied { create } for pid=4643 comm="syz.3.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 166.309066][ T36] audit: type=1400 audit(1773724098.498:62527): avc: denied { map } for pid=4643 comm="syz.3.1266" path="socket:[26233]" dev="sockfs" ino=26233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 166.334038][ T36] audit: type=1400 audit(1773724098.498:62528): avc: denied { accept } for pid=4643 comm="syz.3.1266" path="socket:[26233]" dev="sockfs" ino=26233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 166.494061][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 166.503342][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 166.510794][ T10] logitech 0003:046D:C29C.000F: item fetching failed at offset 2/5 [ 166.519297][ T10] logitech 0003:046D:C29C.000F: parse failed [ 166.526915][ T10] logitech 0003:046D:C29C.000F: probe with driver logitech failed with error -22 [ 166.656436][ T36] audit: type=1400 audit(1773724098.858:62529): avc: denied { create } for pid=4647 comm="syz.0.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 166.690480][ T4650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1269'. [ 166.699849][ T4650] bridge_slave_1: left allmulticast mode [ 166.706816][ T4650] bridge_slave_1: left promiscuous mode [ 166.712609][ T4650] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.723712][ T4650] bridge_slave_0: left allmulticast mode [ 166.742852][ T4650] bridge_slave_0: left promiscuous mode [ 166.750593][ T4650] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.812167][ T10] usb 2-1: USB disconnect, device number 91 [ 167.058387][ T4671] 9p: Unknown Cache mode or invalid value ! [ 167.208099][ T4681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.229598][ T4681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.247977][ T4681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.269182][ T4681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.335816][ T4685] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1278'. [ 167.484426][ C1] net_ratelimit: 74362 callbacks suppressed [ 167.484448][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 167.503392][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.515454][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.528234][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 167.540728][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 167.552887][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.565039][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.577274][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 167.589593][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 167.601733][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.754314][ T10] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 167.817464][ T4699] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1283'. [ 167.837094][ T36] audit: type=1400 audit(1773724100.038:62530): avc: denied { map } for pid=4698 comm="syz.2.1283" path="socket:[26690]" dev="sockfs" ino=26690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.873535][ T4699] kvm: kvm [4698]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 167.906023][ T36] audit: type=1400 audit(1773724100.038:62531): avc: denied { read } for pid=4698 comm="syz.2.1283" path="socket:[26690]" dev="sockfs" ino=26690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.934303][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 167.969000][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 167.979531][ T10] usb 2-1: config 179 has no interface number 0 [ 167.994300][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 168.024281][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 168.044372][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 168.063396][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 168.090513][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 168.118689][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 168.128217][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.142129][ T4687] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.204845][ T36] audit: type=1326 audit(1773724100.408:62532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.3.1284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f483359c799 code=0x0 [ 168.363112][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input25 [ 168.914315][ T10] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 169.096045][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 169.104963][ T10] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 169.114071][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 169.125849][ T10] usb 3-1: config 220 has no interface number 2 [ 169.133279][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 169.148951][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 169.156072][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 169.163312][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 169.172355][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 169.182275][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.191202][ T10] usb 3-1: Product: syz [ 169.195813][ T10] usb 3-1: Manufacturer: syz [ 169.200524][ T10] usb 3-1: SerialNumber: syz [ 169.421901][ T10] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 169.431686][ T10] usb 3-1: No valid video chain found. [ 169.437669][ T10] usb 3-1: selecting invalid altsetting 0 [ 169.449453][ T10] usb 3-1: USB disconnect, device number 72 [ 169.966743][ T36] audit: type=1400 audit(1773724102.168:62533): avc: denied { map } for pid=4706 comm="syz.2.1286" path="socket:[26715]" dev="sockfs" ino=26715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 170.222386][ T36] audit: type=1400 audit(1773724102.418:62534): avc: denied { read write } for pid=4725 comm="syz.0.1293" name="file0" dev="tmpfs" ino=1943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 170.260918][ T36] audit: type=1400 audit(1773724102.418:62535): avc: denied { open } for pid=4725 comm="syz.0.1293" path="/355/file0" dev="tmpfs" ino=1943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 170.292129][ T36] audit: type=1400 audit(1773724102.448:62536): avc: denied { map } for pid=4725 comm="syz.0.1293" path="/355/file0" dev="tmpfs" ino=1943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 170.315190][ T10] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 170.432140][ T9] usb 2-1: USB disconnect, device number 92 [ 170.432189][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 170.432220][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 170.460843][ T9] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 170.475779][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 170.485779][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 170.504909][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 4 [ 170.517351][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 221, setting to 0 [ 170.528502][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 170.538587][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 170.548757][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 170.558928][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 170.575438][ T10] usb 3-1: string descriptor 0 read error: -22 [ 170.581965][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 170.594278][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.612327][ T10] usb 3-1: config 0 descriptor?? [ 170.618160][ T4712] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 170.863666][ T4756] tipc: Enabled bearer , priority 10 [ 170.927943][ T10] usb 3-1: USB disconnect, device number 73 [ 171.244523][ T4761] overlayfs: failed to resolve './cgroup': -2 [ 171.924279][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 171.974294][ T10] tipc: Node number set to 1001825241 [ 172.034769][ T4778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1310'. [ 172.049667][ T4778] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1310'. [ 172.088685][ T4782] fuse: Bad value for 'user_id' [ 172.093790][ T4782] fuse: Bad value for 'user_id' [ 172.098746][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 172.106464][ T4782] /dev/loop0: Can't lookup blockdev [ 172.298331][ T36] audit: type=1400 audit(1773724104.500:62537): avc: denied { mounton } for pid=4790 comm="syz.0.1315" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 172.322714][ T4791] overlay: filesystem on ./bus is read-only [ 172.494406][ C1] net_ratelimit: 49582 callbacks suppressed [ 172.494426][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.512524][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.524586][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.536858][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 172.549450][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.561689][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.573776][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.586124][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 172.598522][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.610674][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.036272][ T36] audit: type=1400 audit(1773724105.240:62538): avc: denied { getopt } for pid=4821 comm="syz.0.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 173.217347][ T4836] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1329'. [ 174.554694][ T36] audit: type=1400 audit(1773724106.760:62539): avc: denied { remount } for pid=4864 comm="syz.1.1339" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 174.664179][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice= 0.40 [ 174.687631][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.701904][ T9] usb 3-1: can't set config #1, error -71 [ 174.714831][ T9] usb 3-1: USB disconnect, device number 74 [ 174.774637][ T4875] syz.1.1342 (4875): /proc/4874/oom_adj is deprecated, please use /proc/4874/oom_score_adj instead. [ 174.803740][ T4880] syzkaller1: entered promiscuous mode [ 174.818418][ T4880] syzkaller1: entered allmulticast mode [ 174.890529][ T4887] IPv6: Can't replace route, no match found [ 175.020756][ T36] audit: type=1400 audit(1773724107.220:62540): avc: denied { accept } for pid=4886 comm="syz.1.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 175.041673][ T1654] Bluetooth: hci0: Frame reassembly failed (-84) [ 175.048233][ T1653] Bluetooth: hci1: Frame reassembly failed (-84) [ 175.610020][ T36] audit: type=1400 audit(1773724107.810:62541): avc: denied { ioctl } for pid=4900 comm="syz.3.1349" path="socket:[31507]" dev="sockfs" ino=31507 ioctlcmd=0x586e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 175.926127][ T36] audit: type=1400 audit(1773724108.130:62542): avc: denied { create } for pid=4910 comm="syz.1.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 175.998365][ T4920] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.001901][ T4920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:813 [ 176.178219][ T4924] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1356'. [ 176.254319][ T10] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 176.414316][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 176.422308][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.433129][ T10] usb 2-1: config 0 has no interfaces? [ 176.440111][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 176.450865][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 176.459391][ T10] usb 2-1: Manufacturer: syz [ 176.468237][ T10] usb 2-1: config 0 descriptor?? [ 176.685813][ T4920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.695669][ T4920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.704997][ T10] usb 2-1: USB disconnect, device number 93 [ 177.044365][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 177.048455][ T4899] Bluetooth: hci1: command 0x1003 tx timeout [ 177.051606][ T511] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 177.394617][ T4974] netlink: 'syz.1.1371': attribute type 4 has an invalid length. [ 177.504262][ C1] net_ratelimit: 57221 callbacks suppressed [ 177.504284][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 177.522527][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.534882][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.547321][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 177.559693][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 177.572062][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.584576][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.597198][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 177.609608][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 177.621524][ T36] audit: type=1400 audit(1773724109.810:62543): avc: denied { mounton } for pid=4992 comm="syz.2.1376" path="/258/file0" dev="tmpfs" ino=1444 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 177.621861][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.767802][ T36] audit: type=1400 audit(1773724109.970:62544): avc: denied { watch_reads } for pid=5006 comm="syz.3.1381" path="/488/file1" dev="tmpfs" ino=2685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 177.794915][ T36] audit: type=1400 audit(1773724109.990:62545): avc: denied { mounton } for pid=5005 comm="syz.1.1380" path="/245/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 178.054343][ T10] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 178.215875][ T10] usb 2-1: config 0 has an invalid interface number: 148 but max is 0 [ 178.224278][ T10] usb 2-1: config 0 has no interface number 0 [ 178.230485][ T10] usb 2-1: config 0 interface 148 has no altsetting 0 [ 178.241091][ T10] usb 2-1: New USB device found, idVendor=04e6, idProduct=0024, bcdDevice= 2.00 [ 178.251232][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.259560][ T10] usb 2-1: Product: syz [ 178.263911][ T10] usb 2-1: Manufacturer: syz [ 178.269149][ T10] usb 2-1: SerialNumber: syz [ 178.279771][ T10] usb 2-1: config 0 descriptor?? [ 178.287182][ T10] usb-storage 2-1:0.148: USB Mass Storage device detected [ 178.309899][ T5024] overlayfs: missing 'lowerdir' [ 178.487943][ T10] usb 2-1: USB disconnect, device number 94 [ 178.574504][ T5039] syzkaller1: entered promiscuous mode [ 178.580414][ T5039] syzkaller1: entered allmulticast mode [ 179.258779][ T5061] overlayfs: failed to clone upperpath [ 179.484294][ T10] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 179.658519][ T5059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.672643][ T5059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.683384][ T5059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.694504][ T5059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.708426][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 179.722033][ T10] usb 2-1: can't read configurations, error -71 [ 180.016523][ T5083] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1406'. [ 180.371878][ T5109] fuse: Unknown parameter 'rootmodg' [ 180.660376][ T36] audit: type=1400 audit(1773724112.860:62546): avc: denied { read } for pid=5125 comm="syz.0.1420" lport=14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 180.812011][ T5143] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1426'. [ 180.892603][ T36] audit: type=1400 audit(1773724113.090:62547): avc: denied { setattr } for pid=5149 comm="syz.3.1429" name="/" dev="configfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 181.512910][ T5182] overlayfs: failed to clone upperpath [ 181.549006][ T36] audit: type=1400 audit(1773724113.750:62548): avc: denied { read write } for pid=5185 comm="syz.1.1438" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 181.617720][ T5188] overlayfs: failed to clone upperpath [ 181.688299][ T36] audit: type=1400 audit(1773724113.750:62549): avc: denied { open } for pid=5185 comm="syz.1.1438" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 182.514381][ C1] net_ratelimit: 59248 callbacks suppressed [ 182.514406][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 182.532513][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.544764][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.557105][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 182.569855][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 182.582921][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.594999][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.607221][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 182.619646][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 182.632117][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.924300][ T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 183.094276][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 185.484384][ T5239] cgroup: Unknown subsys name 'appraise_type' [ 185.897293][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 185.921011][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 185.943368][ T9] usb 3-1: can't read configurations, error -71 [ 185.959670][ T5251] fuse: Bad value for 'group_id' [ 185.965112][ T5251] fuse: Bad value for 'group_id' [ 185.992438][ T1659] Bluetooth: hci0: Frame reassembly failed (-84) [ 186.294310][ T9] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 186.394295][ T10] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 186.455935][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 186.464573][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 186.477285][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 186.492441][ T9] usb 3-1: string descriptor 0 read error: -22 [ 186.499049][ T9] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 186.508435][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.544295][ T10] usb 2-1: device descriptor read/64, error -71 [ 186.784316][ T10] usb 2-1: device descriptor read/64, error -71 [ 187.034300][ T10] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 187.087677][ T5278] /dev/loop0: Can't lookup blockdev [ 187.137394][ T5285] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1471'. [ 187.214306][ T10] usb 2-1: device descriptor read/64, error -71 [ 187.262057][ T5291] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1474'. [ 187.282544][ T5291] overlayfs: failed to clone lowerpath [ 187.464341][ T10] usb 2-1: device descriptor read/64, error -71 [ 187.524280][ C1] net_ratelimit: 60056 callbacks suppressed [ 187.524301][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.542746][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 187.555098][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.567172][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.579421][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.591588][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 187.594405][ T10] usb usb2-port1: attempt power cycle [ 187.603908][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.621154][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.633246][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.645430][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 187.974350][ T10] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 187.996817][ T10] usb 2-1: device descriptor read/8, error -71 [ 188.004288][ T511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 188.137323][ T10] usb 2-1: device descriptor read/8, error -71 [ 188.374382][ T10] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 188.426961][ T10] usb 2-1: device descriptor read/8, error -71 [ 188.565427][ T10] usb 2-1: device descriptor read/8, error -71 [ 188.701378][ T10] usb usb2-port1: unable to enumerate USB device [ 188.945450][ T9] usb 3-1: Can't get UAC3 power state for id 10 [ 188.959002][ T9] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 188.970409][ T9] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 189.004403][ T9] usb 3-1: USB disconnect, device number 76 [ 189.060893][ T36] audit: type=1400 audit(1773724121.260:62550): avc: denied { mounton } for pid=5332 comm="syz.2.1488" path="/syzcgroup/unified/syz2" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 189.104736][ T5333] netlink: 'syz.2.1488': attribute type 4 has an invalid length. [ 189.112738][ T36] audit: type=1400 audit(1773724121.280:62551): avc: denied { mount } for pid=5332 comm="syz.2.1488" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 189.136395][ T5333] netlink: 'syz.2.1488': attribute type 6 has an invalid length. [ 189.144854][ T5333] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1488'. [ 189.365189][ T36] audit: type=1400 audit(1773724121.560:62552): avc: denied { accept } for pid=5344 comm="syz.2.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 189.464259][ C1] sched: DL replenish lagged too much [ 189.534297][ T10] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 189.685438][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.696639][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.708300][ T10] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 189.717770][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.728924][ T10] usb 2-1: config 0 descriptor?? [ 189.947618][ T5350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.966631][ T5350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.187217][ T5350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1494'. [ 190.208050][ T5350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1494'. [ 190.226308][ T5350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1494'. [ 190.239309][ T5384] incfs_lookup_dentry err:-36 [ 190.248792][ T5350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.263042][ T5350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.542291][ T5397] incfs: Error accessing: ./file0. [ 190.558552][ T5397] incfs: mount failed -20 [ 190.751482][ T5422] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 191.214317][ T9] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 191.370942][ T36] audit: type=1400 audit(1773724123.570:62553): avc: denied { listen } for pid=5438 comm="syz.0.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.401850][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 191.554351][ T9] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 191.724373][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 191.729938][ T9] usb usb3-port1: attempt power cycle [ 192.104375][ T9] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 192.124913][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 192.152826][ T5484] netlink: 'syz.0.1537': attribute type 11 has an invalid length. [ 192.160971][ T5484] netlink: 'syz.0.1537': attribute type 2 has an invalid length. [ 192.254369][ T9] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 192.296067][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 192.313172][ T9] usb usb3-port1: unable to enumerate USB device [ 192.323166][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 192.343281][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 192.356270][ T10] usb 2-1: USB disconnect, device number 101 [ 192.534283][ C1] net_ratelimit: 61609 callbacks suppressed [ 192.534299][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.552587][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 192.565144][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 192.577349][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.589539][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.601699][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 192.614160][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 192.626473][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.638504][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.650735][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 192.718004][ T5502] 9pnet_fd: p9_fd_create_unix (5502): problem connecting socket: ./file0: -111 [ 192.740877][ T5504] overlayfs: failed to clone upperpath [ 192.753780][ T5504] overlay: ./bus is not a directory [ 192.890848][ T5515] overlayfs: failed to resolve './cgroup.cpu/cpuset.cpus': -2 [ 192.899904][ T5515] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 193.944927][ T36] audit: type=1400 audit(1773724126.150:62554): avc: denied { append } for pid=5541 comm="syz.1.1557" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.005042][ T5549] tipc: Enabling of bearer rejected, already enabled [ 194.065380][ T5558] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1558'. [ 194.080419][ T36] audit: type=1400 audit(1773724126.280:62555): avc: denied { shutdown } for pid=5553 comm="syz.0.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 194.169421][ T5575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5575 comm=syz.3.1568 [ 194.304289][ T10] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 194.364365][ T36] audit: type=1400 audit(1773724126.560:62556): avc: denied { accept } for pid=5573 comm="syz.0.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 194.477308][ T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 194.487259][ T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 194.499058][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.508559][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.518121][ T10] usb 3-1: Product: syz [ 194.522501][ T10] usb 3-1: Manufacturer: syz [ 194.527498][ T10] usb 3-1: SerialNumber: syz [ 194.737590][ T10] cdc_ncm 3-1:1.0: bind() failure [ 194.745543][ T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 194.752666][ T10] cdc_ncm 3-1:1.1: bind() failure [ 194.760451][ T10] usb 3-1: USB disconnect, device number 81 [ 194.902231][ T36] audit: type=1400 audit(1773724127.100:62557): avc: denied { read write } for pid=5596 comm="syz.1.1573" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 194.929093][ T36] audit: type=1400 audit(1773724127.130:62558): avc: denied { open } for pid=5596 comm="syz.1.1573" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 195.018423][ T36] audit: type=1400 audit(1773724127.130:62559): avc: denied { map } for pid=5596 comm="syz.1.1573" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 195.067331][ T36] audit: type=1400 audit(1773724127.130:62560): avc: denied { execute } for pid=5596 comm="syz.1.1573" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 195.093019][ T36] audit: type=1400 audit(1773724127.130:62561): avc: denied { ioctl } for pid=5596 comm="syz.1.1573" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 195.174574][ T36] audit: type=1326 audit(1773724127.380:62562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.1.1576" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f318bf9c799 code=0x0 [ 195.484289][ T10] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 195.617972][ T5618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5618 comm=syz.2.1579 [ 195.644349][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 195.654599][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.666457][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.686215][ T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 195.701151][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.709641][ T10] usb 2-1: Product: syz [ 195.714201][ T36] audit: type=1400 audit(1773724127.910:62563): avc: denied { write } for pid=5619 comm="syz.2.1580" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 195.737897][ T10] usb 2-1: Manufacturer: syz [ 195.742534][ T10] usb 2-1: SerialNumber: syz [ 196.024306][ T351] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 196.184304][ T351] usb 3-1: Using ep0 maxpacket: 16 [ 196.192255][ T351] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 196.204040][ T351] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.217533][ T351] usb 3-1: config 0 interface 0 has no altsetting 0 [ 196.224924][ T351] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 196.236262][ T351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.250671][ T351] usb 3-1: config 0 descriptor?? [ 196.256403][ T5621] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 196.668748][ T5620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.678388][ T5620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.691245][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.698561][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.707795][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.715406][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.722605][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.730905][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.739663][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.747188][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.754651][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.761985][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.769487][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.776876][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.784184][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.792374][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.799807][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.807344][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.814743][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.821979][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.830773][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.838193][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.845527][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.852784][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.861530][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.869027][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.876471][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.883712][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.894725][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.901915][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.910919][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.918319][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.925779][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.933111][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.942696][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.950335][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.957767][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.965189][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.972582][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.980016][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.987829][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 196.995231][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 197.002468][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 197.009910][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 197.017336][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 197.025915][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 197.033171][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 197.040865][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 197.048306][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 197.055733][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 197.063223][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 197.072033][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 197.079464][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 197.086789][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 197.094050][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 197.109253][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 197.121787][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 197.129290][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 197.136862][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 197.144449][ T351] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 197.151806][ T351] samsung 0003:0419:0001.0010: unknown global tag 0xc [ 197.160554][ T351] samsung 0003:0419:0001.0010: item 0 2 1 12 parsing failed [ 197.169074][ T351] samsung 0003:0419:0001.0010: parse failed [ 197.176136][ T351] samsung 0003:0419:0001.0010: probe with driver samsung failed with error -22 [ 197.191975][ T351] usb 3-1: USB disconnect, device number 82 [ 197.544268][ C1] net_ratelimit: 70536 callbacks suppressed [ 197.544289][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 197.563717][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 197.576533][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.588586][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.601007][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 197.613481][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 197.625974][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.638174][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.650431][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 197.662700][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 198.124296][ T351] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 198.196786][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 198.220072][ T10] usb 2-1: USB disconnect, device number 102 [ 198.294371][ T351] usb 3-1: Using ep0 maxpacket: 32 [ 198.308107][ T351] usb 3-1: unable to get BOS descriptor or descriptor too short [ 198.317896][ T351] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 198.337462][ T351] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 198.350205][ T351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.367608][ T36] audit: type=1400 audit(1773724130.570:62564): avc: denied { map } for pid=5646 comm="syz.1.1589" path="socket:[21866]" dev="sockfs" ino=21866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.391124][ T351] usb 3-1: Product: syz [ 198.401370][ T351] usb 3-1: Manufacturer: syz [ 198.411633][ T351] usb 3-1: SerialNumber: syz [ 198.633661][ T351] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 198.662411][ T351] usb 3-1: USB disconnect, device number 83 [ 199.248023][ T351] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 199.414299][ T10] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 199.424419][ T351] usb 2-1: Using ep0 maxpacket: 16 [ 199.436049][ T351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.455519][ T351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.476611][ T351] usb 2-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 199.495908][ T351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.516121][ T351] usb 2-1: config 0 descriptor?? [ 199.574279][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 199.588774][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 199.606925][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 199.629368][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0456, bcdDevice= 0.41 [ 199.642020][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.660280][ T10] usb 3-1: Product: syz [ 199.669003][ T10] usb 3-1: Manufacturer: syz [ 199.679391][ T10] usb 3-1: SerialNumber: syz [ 199.726313][ T5649] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1590'. [ 199.895776][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 199.914021][ T10] usb 3-1: USB disconnect, device number 84 [ 200.296333][ T36] audit: type=1326 audit(1773724132.500:62565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.3.1597" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f483359c799 code=0x0 [ 200.430215][ T351] usbhid 2-1:0.0: can't add hid device: -71 [ 200.444599][ T351] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 200.456813][ T351] usb 2-1: USB disconnect, device number 103 [ 200.470882][ T5674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=5674 comm=syz.1.1599 [ 200.484002][ T5674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=5674 comm=syz.1.1599 [ 200.498783][ T5674] netlink: 'syz.1.1599': attribute type 4 has an invalid length. [ 200.525302][ T5675] netlink: 'syz.1.1599': attribute type 4 has an invalid length. [ 200.534848][ T5674] netlink: 'syz.1.1599': attribute type 4 has an invalid length. [ 200.552961][ T5674] overlayfs: failed to resolve './file1': -2 [ 200.560416][ T5679] overlayfs: failed to clone upperpath [ 200.567825][ T5674] overlayfs: failed to set uuid (277/file1, err=-1); falling back to uuid=null. [ 200.579944][ T5674] TCP: TCP_TX_DELAY enabled [ 200.601237][ T5681] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5681 comm=syz.0.1602 [ 200.615911][ T36] audit: type=1400 audit(1773724132.820:62566): avc: denied { nlmsg_write } for pid=5680 comm="syz.0.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 200.637708][ T5681] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1602'. [ 200.647763][ T5681] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1602'. [ 200.795314][ T365] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 200.979856][ T365] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 201.004457][ T365] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 201.051906][ T365] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 201.075179][ T365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.083187][ T365] usb 3-1: Product: syz [ 201.105063][ T365] usb 3-1: Manufacturer: syz [ 201.109671][ T365] usb 3-1: SerialNumber: syz [ 201.136648][ T365] usb 3-1: config 0 descriptor?? [ 201.144100][ T5678] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 201.151601][ T5678] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 201.362894][ T5678] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 201.374404][ T5678] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 201.478358][ T5692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1605'. [ 201.502350][ T5692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1605'. [ 201.809461][ T365] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 202.034292][ T351] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 202.174294][ T351] usb 2-1: device descriptor read/64, error -71 [ 202.414327][ T351] usb 2-1: device descriptor read/64, error -71 [ 202.554305][ C1] net_ratelimit: 62224 callbacks suppressed [ 202.554319][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.572751][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.585033][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.597312][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 202.609560][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.621767][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.633794][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.646084][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 202.658452][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.664304][ T351] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 202.670577][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.804306][ T351] usb 2-1: device descriptor read/64, error -71 [ 202.814823][ T365] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 203.044300][ T351] usb 2-1: device descriptor read/64, error -71 [ 203.125657][ T365] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, e2:03:40:31:d6:d5 [ 203.157853][ T351] usb usb2-port1: attempt power cycle [ 203.159857][ T365] usb 3-1: USB disconnect, device number 85 [ 203.186466][ T365] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 203.404898][ T36] audit: type=1400 audit(1773724135.610:62567): avc: denied { execute } for pid=5723 comm="syz.3.1613" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=34815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 203.524459][ T351] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 203.555389][ T351] usb 2-1: device descriptor read/8, error -71 [ 203.689969][ T351] usb 2-1: device descriptor read/8, error -71 [ 203.934306][ T351] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 203.966547][ T351] usb 2-1: device descriptor read/8, error -71 [ 204.101638][ T351] usb 2-1: device descriptor read/8, error -71 [ 204.219596][ T351] usb usb2-port1: unable to enumerate USB device [ 207.564333][ C1] net_ratelimit: 53417 callbacks suppressed [ 207.564357][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 207.582813][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 207.594977][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.607067][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.619352][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 207.631748][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 207.643842][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.656014][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.668232][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 207.680625][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 211.861821][ T5788] netlink: 'syz.3.1623': attribute type 27 has an invalid length. [ 211.875785][ T5788] gretap0: left promiscuous mode [ 211.998993][ T5788] veth0_to_team: left promiscuous mode [ 212.054837][ T5806] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 212.073456][ T5806] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 212.106415][ T5810] x_tables: unsorted underflow at hook 3 [ 212.168656][ T365] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 212.181972][ T5818] 8021q: VLANs not supported on ip_vti0 [ 212.324355][ T10] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 212.345510][ T365] usb 3-1: Using ep0 maxpacket: 32 [ 212.367320][ T365] usb 3-1: unable to get BOS descriptor or descriptor too short [ 212.393577][ T365] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 7 [ 212.444039][ T365] usb 3-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 212.465098][ T365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.473273][ T365] usb 3-1: Product: syz [ 212.495032][ T365] usb 3-1: Manufacturer: syz [ 212.499631][ T365] usb 3-1: SerialNumber: syz [ 212.504484][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 212.512431][ T10] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 212.521341][ T10] usb 2-1: config 0 has no interface number 0 [ 212.529778][ T10] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 212.541859][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 212.552717][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.561113][ T10] usb 2-1: Product: syz [ 212.565755][ T10] usb 2-1: Manufacturer: syz [ 212.570521][ T10] usb 2-1: SerialNumber: syz [ 212.574432][ C1] net_ratelimit: 58620 callbacks suppressed [ 212.574449][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 212.576594][ T10] usb 2-1: config 0 descriptor?? [ 212.581441][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.603373][ T5806] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 212.610423][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.629580][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 212.641937][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 212.654268][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.666403][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.679175][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 212.691491][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 212.703562][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.746753][ T5775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.759543][ T5775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.769296][ T5775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.778843][ T5775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.817295][ T5833] cannot load conntrack support for proto=3 [ 212.830426][ T5806] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 212.831312][ T365] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 212.955030][ T365] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 213.023130][ T365] usb 3-1: USB disconnect, device number 86 [ 213.037275][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 213.254599][ T10] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 213.265151][ T10] asix 2-1:0.188: probe with driver asix failed with error -61 [ 213.349948][ T36] audit: type=1400 audit(1773724145.550:62568): avc: denied { setopt } for pid=5838 comm="syz.2.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 214.534364][ T10] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 214.686809][ T10] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 214.696420][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.708298][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.719500][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 214.729776][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.744510][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.754511][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.763415][ T10] usb 3-1: config 0 descriptor?? [ 214.813706][ T5897] netlink: 'syz.3.1663': attribute type 4 has an invalid length. [ 214.988356][ T10] plantronics 0003:047F:FFFF.0011: unknown main item tag 0xd [ 215.008396][ T10] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 215.023475][ T10] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 215.041541][ T10] usb 3-1: USB disconnect, device number 87 [ 215.069596][ T5914] fido_id[5914]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 215.094130][ T351] usb 2-1: USB disconnect, device number 108 [ 215.434355][ T10] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 215.577273][ T9] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 215.595440][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.606609][ T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 215.618506][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.628004][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.637585][ T10] usb 3-1: Product: syz [ 215.642082][ T10] usb 3-1: Manufacturer: syz [ 215.646854][ T10] usb 3-1: SerialNumber: syz [ 215.653210][ T10] cdc_mbim 3-1:1.0: skipping garbage [ 215.690378][ T5935] overlayfs: failed to clone upperpath [ 215.756857][ T9] usb 2-1: config index 0 descriptor too short (expected 91, got 45) [ 215.766966][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 215.777728][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.786014][ T9] usb 2-1: Product: syz [ 215.790363][ T9] usb 2-1: Manufacturer: syz [ 215.795287][ T9] usb 2-1: SerialNumber: syz [ 215.910774][ T5936] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 216.161043][ T10] cdc_mbim 3-1:1.0: bind() failure [ 216.184478][ T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 216.197758][ T10] cdc_ncm 3-1:1.1: bind() failure [ 216.229367][ T10] usb 3-1: USB disconnect, device number 88 [ 216.415958][ T9] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 216.619965][ T9] usb 2-1: USB disconnect, device number 109 [ 216.790448][ T5964] veth0_to_bridge: entered promiscuous mode [ 216.811230][ T5964] veth0_to_bridge: entered allmulticast mode [ 217.584295][ C1] net_ratelimit: 70195 callbacks suppressed [ 217.584317][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.603056][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 217.615525][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.627521][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.639612][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.651926][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 217.664417][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.676495][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.688481][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.700678][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 222.594286][ C1] net_ratelimit: 53447 callbacks suppressed [ 222.594310][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 222.612608][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.624622][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.636618][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.648716][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 222.661249][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.673264][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.685269][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.697431][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 222.709734][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 227.604367][ C1] net_ratelimit: 52527 callbacks suppressed [ 227.604390][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 227.622586][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.634918][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.647006][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 227.659219][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 227.671213][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.683216][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.695464][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 227.708283][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 227.720299][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.614411][ C1] net_ratelimit: 52418 callbacks suppressed [ 232.614433][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.632523][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.644647][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.656719][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 232.669033][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.681041][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.693046][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.705135][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 232.717426][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.729511][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.547076][ T36] audit: type=1400 audit(1773724167.620:62569): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2819]" dev="pipefs" ino=2819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 237.624315][ C1] net_ratelimit: 50770 callbacks suppressed [ 237.624338][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.642338][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.654509][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.666580][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 237.678903][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.690892][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.702888][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.714966][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 237.727148][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.739237][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.553526][ T5984] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 241.025637][ T5984] CPU: 1 UID: 0 PID: 5984 Comm: syz-executor Not tainted syzkaller #0 e9db8685c400c70f0098c2bc673af807e74041bb [ 241.025673][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.025686][ T5984] Call Trace: [ 241.025693][ T5984] [ 241.025702][ T5984] __dump_stack+0x21/0x30 [ 241.025732][ T5984] dump_stack_lvl+0x140/0x1c0 [ 241.025754][ T5984] ? __cfi_dump_stack_lvl+0x10/0x10 [ 241.025786][ T5984] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 241.025811][ T5984] dump_stack+0x19/0x20 [ 241.025831][ T5984] warn_alloc+0x1e7/0x2c0 [ 241.025852][ T5984] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 241.025874][ T5984] ? __cfi_warn_alloc+0x10/0x10 [ 241.025895][ T5984] ? __get_vm_area_node+0x201/0x3d0 [ 241.025916][ T5984] ? kcov_ioctl+0x5d/0x5a0 [ 241.025941][ T5984] __vmalloc_node_range_noprof+0x6aa/0x1480 [ 241.025965][ T5984] ? locks_remove_posix+0x358/0x570 [ 241.025991][ T5984] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 241.026013][ T5984] ? expand_files+0xd5/0x6e0 [ 241.026033][ T5984] vmalloc_user_noprof+0x77/0x90 [ 241.026054][ T5984] ? kcov_ioctl+0x5d/0x5a0 [ 241.026078][ T5984] kcov_ioctl+0x5d/0x5a0 [ 241.026101][ T5984] ? bpf_lsm_file_ioctl+0xd/0x20 [ 241.026120][ T5984] ? security_file_ioctl+0x3e/0x110 [ 241.026141][ T5984] ? __cfi_kcov_ioctl+0x10/0x10 [ 241.026165][ T5984] __se_sys_ioctl+0x132/0x1b0 [ 241.026191][ T5984] __x64_sys_ioctl+0x7f/0xa0 [ 241.026216][ T5984] x64_sys_call+0x1878/0x2ee0 [ 241.026246][ T5984] do_syscall_64+0x57/0xf0 [ 241.026267][ T5984] ? clear_bhb_loop+0x50/0xa0 [ 241.026290][ T5984] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 241.026312][ T5984] RIP: 0033:0x7fa2e079c42b [ 241.026330][ T5984] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 241.026347][ T5984] RSP: 002b:00007ffe02a80b00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.026369][ T5984] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fa2e079c42b [ 241.026384][ T5984] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d8 [ 241.026398][ T5984] RBP: 00007fa2e0a16038 R08: 0000000000000000 R09: 0000000000000000 [ 241.026411][ T5984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.026424][ T5984] R13: 0000000000000003 R14: 00007ffe02a80db8 R15: 0000000000000000 [ 241.026438][ T5984] [ 241.026458][ T5984] Mem-Info: [ 242.444913][ T5984] active_anon:36344 inactive_anon:176 isolated_anon:0 [ 242.444913][ T5984] active_file:9637 inactive_file:12612 isolated_file:0 [ 242.444913][ T5984] unevictable:16449 dirty:18 writeback:0 [ 242.444913][ T5984] slab_reclaimable:4358 slab_unreclaimable:88193 [ 242.444913][ T5984] mapped:12656 shmem:32787 pagetables:469 [ 242.444913][ T5984] sec_pagetables:0 bounce:0 [ 242.444913][ T5984] kernel_misc_reclaimable:0 [ 242.444913][ T5984] free:1454086 free_pcp:9754 free_cma:0 [ 242.634291][ C1] net_ratelimit: 45185 callbacks suppressed [ 242.634313][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 242.652570][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.664650][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.677709][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.690849][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 242.703267][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.715499][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.727670][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.740278][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:3f:0a:c7:5a:58, vlan:0) [ 242.752870][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 243.629518][ T5984] Node 0 active_anon:135744kB inactive_anon:612kB active_file:38460kB inactive_file:50448kB unevictable:65796kB isolated(anon):0kB isolated(file):0kB mapped:29904kB dirty:64kB writeback:0kB shmem:123536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7024kB pagetables:1692kB sec_pagetables:0kB all_unreclaimable? no [ 244.255844][ T5984] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963360kB mlocked:0kB bounce:0kB free_pcp:5196kB local_pcp:0kB free_cma:0kB [ 245.684724][ T5984] lowmem_reserve[]: 0 3921 3921 [ 245.689907][ T5984] Normal free:3037960kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:110296kB inactive_anon:612kB active_file:38460kB inactive_file:50448kB unevictable:65796kB writepending:64kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:9608kB local_pcp:8556kB free_cma:0kB