last executing test programs: 8.120668314s ago: executing program 1 (id=77): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) fcntl$setstatus(r0, 0x4, 0x800) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000200)=0x9, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) (async) fcntl$setstatus(r0, 0x4, 0x800) (async) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000200)=0x9, 0x4) (async) 8.022144926s ago: executing program 1 (id=78): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x12, 0x0, 0x101}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 32) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) (rerun: 32) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x580a8, &(0x7f0000000100)=ANY=[@ANYBLOB='mode=0100000000000']) 7.933371728s ago: executing program 1 (id=80): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000ac0)={0x2020}, 0x2020) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000680)=0xfeab) fchown(r3, r5, 0xee01) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x8, 0x9, 0x2, 0x3}, {0x7, 0x8, 0x3, 0x4}, {0x7, 0x9, 0x9, 0x6d}, {0x3, 0x0, 0x2, 0x3}, {0x6, 0xa, 0xb7, 0x9}, {0x9, 0x47, 0x6, 0x9}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x8, 0x9, 0x2, 0x3}, {0x7, 0x8, 0x3, 0x4}, {0x7, 0x9, 0x9, 0x6d}, {0x3, 0x0, 0x2, 0x3}, {0x6, 0xa, 0xb7, 0x9}, {0x9, 0x47, 0x6, 0x9}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.706100565s ago: executing program 1 (id=93): syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000080)=ANY=[@ANYBLOB="120110030000004035120c80400001020301090269000301053009080b00010109208c090400000001012000092401004004090007090401000001022000090401010101022000fbf11cfb5cbff14c0407000000000000000904020000010220000904020101010220000905820908004006030825018203f30600c5d8dab69b1cba2862d984bb068246647180c56da3199cf84cff9deb"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 3.961317685s ago: executing program 0 (id=95): syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) recvmsg$unix(r1, &(0x7f0000000240)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000180)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x120) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8, @ANYRES16], 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x28, 0x0, 0x606, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000) socket$packet(0x11, 0x2, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) recvmsg$unix(r1, &(0x7f0000000240)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000180)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x120) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8, @ANYRES16], 0x0) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x28, 0x0, 0x606, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000) (async) socket$packet(0x11, 0x2, 0x300) (async) 3.37564059s ago: executing program 1 (id=99): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9e, {0xfffffffffffffe8b}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.150155846s ago: executing program 0 (id=100): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000001280)={{r0}}) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) socket(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000040)=0x58) 3.066195408s ago: executing program 2 (id=101): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x88880, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x15, 0xb0, 0x65, 0x0, 0x82, 0x11, 0x0, @rand_addr=0x65010102, @remote}, {0x4e22, 0x4e23, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "0b5ca6205f985c1414e634290090845158db14d524f7e17816000e932a2e41ff", "df68c5d1b101900425e0b2d26f7dd136fb0bad72357e0c4956a2bd50db8f72b5859ac7e9dc4cdb1744be43107ad9abdc", "42acc3b16cfaf1e3009f03620c1cf87cceb460cd9c078962c42a5241", {"0fdf9474563034dd56882db407ea2c59", "d12f33bf1f4672482d289eb435ce0433"}}}}}}}}, 0xc6) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x40000081, 0x0, 0x8}]}) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) unshare(0x400) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000600)={0xa0000013}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x6) read$FUSE(r0, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), 0xfffffffffffffffd, 0x0, 0x0, 0x0) 3.053197759s ago: executing program 0 (id=102): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 64) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) (rerun: 64) ioctl$KVM_CAP_XEN_HVM(r0, 0x4068aea3, &(0x7f0000000080)) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000002000)='cgroup.clone_children\x00', 0x2, 0x0) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'vlan1\x00', @random="0100c3201000"}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000040), 0x1) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x85) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0xc028ae92, &(0x7f0000000040)={0x9, 0x7}) 2.845995784s ago: executing program 0 (id=103): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x0, 0x4, 0xa0, {0xa0, 0x30, "36e9c4866c0ab8b6e5d4a64a0fcf9b719fb6f8770d6f67b84df3f5ca8ce151c2d4ac304a3b063f4756a66055c1156a57935b01b67d5295ea7b07b049104d9b2d4ca325be3fea184e484ec818d6f8a6cd851dbcc1f1d3cb6d4b2b0abfab42357676c304aade7a612fc274546ba9b727f3879ed747366fdde41ccd6df0dd6c04c3051036e3826f41af14157a368e06412cc95e0f0f60ca351acfc7bc47fb8f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8e, 0x20, 0xac, "", [{{0x9, 0x4, 0x0, 0x9c, 0x2, 0x7, 0x1, 0x3, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x81, 0x81, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xa, 0x9, 0x1}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x3, 0x9c, 0x3, 0x20, 0x7}, 0x4c, &(0x7f0000000080)={0x5, 0xf, 0x4c, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x80, 0x2, 0xfffb}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x7, 0xa, 0x5}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x7, 0xe, 0xf6, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x6, 0x0, 0x5a00, [0xcf, 0x0, 0x10100c0, 0x3f0f, 0x3f0f]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x5, 0x1, 0x7fff, 0x2}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x4ff}}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000480)={@val={0x0, 0x22f0}, @void, @eth={@random="414f670bc70e", @remote, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, '\x00\a\x00', 0x1c, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[@dstopts={0x2f}], "b961880bb3e5de9efee5134127462f7cab990021"}}}}}}, 0x56) sendmsg$nl_route_sched_retired(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f00000015c0)=@newtfilter={0x24, 0x2c, 0x603, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0xffff, 0xa}, {0x6, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80) 2.758560406s ago: executing program 2 (id=104): socket$inet_udp(0x2, 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1e) 2.689313519s ago: executing program 2 (id=105): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000de6000/0x1000)=nil, 0x1000}}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',version=9p2000.u']) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x88) socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r4 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, 0x0, 0x0) socket(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00b5cfec6ddc3c82dbe4d9429b90e4c277453190c8959268d64f5292da10ba2ac2a0176617f6bb9346c7b53f95ede97bc0d138cbd569d21639d8330d5dec437e9944258fab359c90b1f15ba4e0b48f3433c19a23d3a7f3634bf2f35b92f1705882f72c1a774ae03b74294e45c0c9314cfbc3e37d1460eefbcfd67190caa25a409bf74bf8ad857d689a361076eba083e31684dde25c002d2920d94bd69a0a6dea58447293c85378f4f267e056c1cb4ae0c86635ddb65f56399861b2032badc666c7dc2969686db83f0f98cc730515a8fc43f14239d479d0e1b123ec0e0739c73f9b581b1e06eebaddee1f84540dd55bab8b093e8b36218c7ae0d883d08f98", 0xfffffffffffffff8}], 0x10000000000001e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) write$binfmt_misc(r6, &(0x7f00000002c0), 0x15) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="110000001900010026bd7000000000001d"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x804) splice(r5, 0x0, r7, 0x0, 0x19404, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000180)={r6, 0x2100, {0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x12, 0x1e, 0x0, "cf05063e191072fcf7bbd2c9f9bb3f65bad4513a4aa93f8fd04288f26f4b346a3c74ffba0f1d6157f0f18cbd9bde3332a6dd14bee5d04fa884e108bf4fdc6fab", "8bc091f785279c6139bf3ddb3c9d5b0b3ee2f92b0389d9f7bc8693dabce6456622d2c9151f55da05fd08f04ee44e3262f4cb6d3909e0ca419d3f1e19980870d6", "b1f459173e0e79df66af9e8cca9cdc7de8b816f3a88fcadaed0c73adecc1de08", [0x2670, 0x5]}}) 2.538024972s ago: executing program 2 (id=106): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=']') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff77, 0x0, 0x0}, &(0x7f0000000000)=0x40) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) recvmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}, 0xe4400000}], 0x1, 0x10141, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffc, 0x1000}, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000400), 0x48) write$cgroup_subtree(r9, &(0x7f0000000440)=ANY=[@ANYBLOB='-'], 0x7) socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000200)={0x0, 0x1462, 0x10700, 0x0, 0xb2}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x10002, 0x1, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x7, 0x230, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x10000, 0x4, 0x902c4, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x5200, 0x2, 0x21b, 0x0, r2}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) socket$inet6(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 1.833312341s ago: executing program 3 (id=108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) (async) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000100)=0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200004, 0x200004, 0x3, 0x0, 0x4}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x5}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18e0688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc7fbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc0fa31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae1786a46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4cc05c8c8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212ee01af2e49bbeb0a27e07c5714b74e373798c7bebce265f700ef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c075aacfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba5340e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c70629730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5c3049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0x1049) (async) write$UHID_INPUT(r4, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1049) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r3, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc58a}, 0x1c) writev(r6, &(0x7f0000000680)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000200)="b726a38c", 0x4}], 0x1}, 0x48000) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000100)="110000005a001f001007f4110800040002", 0x11) close(0x4) (async) close(0x4) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000140)={0x2, 0x983a}) (async) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000140)={0x2, 0x983a}) sendmmsg$unix(r1, &(0x7f0000000340), 0x1, 0x0) 1.674917386s ago: executing program 3 (id=109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x0, 0x3e}, @flat=@weak_handle={0x77682a85, 0x100}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, 0x0}, 0x1040}], 0x0, 0x0, 0x0}) 1.598025337s ago: executing program 2 (id=110): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x169841, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="001806"], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.388795433s ago: executing program 3 (id=111): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) (async) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x30}], 0x1}, 0x0) 1.300797225s ago: executing program 3 (id=112): fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.opaque\x00') timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000080)) (async) r0 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x4c800, 0x40, 0x7}, 0x18) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x94}}, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x7800, 0x40, 0x101, 0xa, {{0x1d, 0x4, 0x1, 0x3a, 0x74, 0x66, 0x0, 0x1, 0x2f, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0x4f, 0x1, 0xd, [{@private=0xa010102, 0x4}, {@multicast2, 0xe}, {@remote, 0x8}, {@empty, 0x4a3}, {@broadcast, 0x4}, {@broadcast, 0x5}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0xa8, [@multicast1, @rand_addr=0x64010102, @remote, @remote, @local, @multicast1, @private=0xa010102, @multicast2]}]}}}}}) (async) getpeername$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000480)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x0, 0xf9, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x80, 0xce, 0x3}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x1, 0x0, 0xfffffffb, 0xd74e, {{0xa, 0x4, 0x0, 0x3, 0x28, 0x65, 0x0, 0xd, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x4c, [@multicast2, @private=0xa010100, @multicast2]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x40, 0x3, {{0x17, 0x4, 0x3, 0x30, 0x5c, 0x68, 0x0, 0x1, 0x2f, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0x7, 0xf6, [@broadcast]}, @ssrr={0x89, 0x27, 0xe7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @rand_addr=0x64010102, @empty, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @noop, @end, @generic={0x86, 0xd, "92721c89154621e1f946e1"}]}}}}}) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000740)={0x0, @rand_addr, @initdev}, &(0x7f0000000780)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'ip6gre0\x00', 0x0, 0x29, 0xb6, 0x6, 0x401, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x7800, 0x1, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x6, 0x5, 0xcb, 0xfff, 0x3c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x7, 0x80000000, 0xb}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000bc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x1ac, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4040040}, 0x20044804) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000000c00)="7f3cd8b6c676b317580eff22cdb1c6fb35be35dbfe3f433c0f19fc2fc9da0755ea9e15af8f61a86b949898545887b49ae94a509558e469db0e8d943b0d35bb9c63b27abc14eeb13052835ea9948874d12b1cb34e5b1f3975689bdc1ab6b1611d2e91e5c56255b8fda7b3c3dc8888e0f51d2c0f8d89ac7cae39ab3355482a51cadad7cd329154aaeb43f3e02386f185c5e7e6bfa13b58cabf2acee0fc7958ed6e9fe68664665997bfef94b52ac2a7ec5afd87fa5371a88095f41bfae6412579deee0d1322ace76c9587f63901028e5cd3fc5d3ba767049e1b66c6e690952a0ace9e287cd7e82ca7", 0xe7, 0x4000000, &(0x7f0000000d00)={0xa, 0x4e23, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) (async, rerun: 64) r13 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r13) (async) r14 = socket$netlink(0x10, 0x3, 0x7) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d40)={'ip6gre0\x00', r2, 0x29, 0x5, 0xff, 0x7, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x20, 0x7800, 0x0, 0x2}}) (async, rerun: 64) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) (async, rerun: 64) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) r15 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000ec0)={0x1, 0x2, [{r0, 0x0, 0x1000000}, {r0, 0x0, 0x8000, 0x2000}]}) fstatfs(r15, &(0x7f0000000f00)=""/223) (async) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x4e20, 0x4a, @loopback, 0x5ef}, {0xa, 0x4e22, 0x9, @loopback, 0x4}, 0x0, {[0x9, 0xeb, 0xffffffff, 0x1ff, 0xd, 0x7c, 0x3, 0x1]}}, 0x5c) io_cancel(0x0, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x3, 0x0, r14, &(0x7f0000001080)="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", 0x1000, 0x81, 0x0, 0x1, r0}, &(0x7f00000020c0)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 1.025576173s ago: executing program 3 (id=113): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206c256e0000000000000109022400010000800009040ea0090300020009210900000122250009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000280)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="000525000000251115704d7129735767579e4362ca24299542a92c5e9e12588b55f5804806412617b359a3"], 0x0}, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002680)={0x24, &(0x7f00000024c0)={0x20, 0x9, 0xcf, {0xcf, 0xf, "9cb44c1d301ad9cc40ae8cb7ee316d0e947a0603005ba4a4553be84422b33863bb55034e85cbf0d02f876e7d9358e367b34a0f21324f6ea1af6075059c7381eb689e5760ece9d6ec8f0769698422dbd9b3a1c8d817d7089bbe039417c291307199cf116f9e0828560ebba412d93a02eccfc49b5893de2ddc69e3ca6de3f9687dba74e1a2b0452e3604236e4d6aca35404ccd9fe95a7fe4ab2d164440a069d2ff5584506844324cfff427f7827b7cfa84454e03e5302b3b9550931571bdff89d75913877cf89d52c802494b11e7"}}, &(0x7f00000025c0)=ANY=[@ANYBLOB="05000000000000001604"], &(0x7f0000002600)={0x0, 0x22, 0xf, {[@global=@item_012={0x1, 0x1, 0x0, 'S'}, @global=@item_012={0x0, 0x1, 0x4}, @local=@item_4={0x3, 0x2, 0x7, "a8366d4f"}, @main=@item_4={0x3, 0x0, 0x9, "07cf974c"}, @local=@item_012={0x1, 0x2, 0x4, "ab"}]}}, &(0x7f0000002640)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff, 0x40, 0x1, {0x22, 0xa41}}}}, &(0x7f00000028c0)={0x2c, &(0x7f00000026c0)={0x0, 0x12, 0x9b, "ef7640e6810ad452aa6600cf6477545e2e82ebd7eded2c9ebeeaa46d87ff05465e729cd4b9b07090eb808b68b8830d93fca161ef46e290621696183fba951a44ea45b48a4b057d80cd1bde960582745c50599a6d4dce5c97919e44f4fc7ea1896d1400a3ead4821f5120316b17772e51c6f4ba9c7945a4aa1a624ad91c6b3267f65d2815561d0efc97f3f6445b3952403327ddc62dcdd3eda8faae"}, &(0x7f0000002780)={0x0, 0xa, 0x1, 0xa6}, &(0x7f00000027c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000002800)={0x20, 0x1, 0x59, "aeb8ed2e811a63eca1fa715a3e1907306736fb2d550a42ec2704da1556207fd51c1c3c9667db959e1b0722a869be62da967579697b5a28f68091856a47b750c521a11628ea95175629e660244b361625347436b174673f7802"}, &(0x7f0000002880)={0x20, 0x3, 0x1, 0xc0}}) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000004200)={@remote, 0x2, 0x1, 0xff, 0x2}, 0x20) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, 0x0) (async) prctl$PR_SET_DUMPABLE(0x4, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="dc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="bb", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYRES8=r3], 0x20}}], 0x2, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000002180)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="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"], 0x1d0}, 0x1, 0x0, 0x0, 0x40}, 0x8800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000010c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fe880000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000ffffffffffffffff0000000000000000000a0000000000000000000000804000000000000000000800000000000000000100020000000000c4000500ac1414bb000000000000000000000000000004d5330000000a00000000000000000000000000ffffe00000020000000000020700000000000000008001020000ff010000000000000000000000000001000004d46c0000000a0000000a0101000000000000000000000000000135000009"], 0x17c}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) (async) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01022ebd70001b0000000f0010000c009900000000002500000004000e00"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) setsockopt$inet6_int(r6, 0x29, 0x42, 0x0, 0x0) (async) r9 = dup(r6) sendmmsg$inet(r9, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="be06", 0x2}], 0x1}}], 0x1, 0x91) read$FUSE(r9, &(0x7f00000075c0)={0x2020}, 0x2020) (async) write$binfmt_elf32(r9, &(0x7f00000004c0)=ANY=[], 0x258) (async) read$FUSE(r9, &(0x7f0000002a00)={0x2020}, 0x2020) (async) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) 1.025312133s ago: executing program 0 (id=114): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x52b242d) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xffffffffffffffff) socket(0x1f, 0x80000, 0xb75) 992.894193ms ago: executing program 0 (id=115): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'filter\x00', 0x0, [0x3, 0x9, 0x0, 0x0, 0xa70]}, &(0x7f00000000c0)=0x54) getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, 0x0) (async) getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000404c05a00b00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) socket$inet(0x2, 0x6, 0x800001) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 322.168352ms ago: executing program 1 (id=116): r0 = inotify_init1(0x800) (async) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) (async) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000580)=@ethtool_per_queue_op={0x4b, 0xe, [0x7a794a9a, 0x81, 0x4000000, 0x9, 0x1000, 0x7, 0x9, 0x81, 0x80000000, 0x6, 0x7, 0xfffffffe, 0x1a65, 0x1, 0x7ff, 0x2, 0x3, 0x6, 0x4, 0x8, 0x10000, 0x0, 0x4, 0x8, 0xc08, 0xfffffff7, 0x8, 0x5, 0x0, 0x8, 0x100000, 0x4, 0x2, 0xfffffff7, 0x40, 0x280, 0x4, 0x81, 0x170, 0x3daf, 0xfffffffb, 0x4, 0x3, 0x1, 0x80, 0x400, 0xd, 0x3, 0x5, 0x10000, 0x4, 0xe26, 0x8, 0xfffffff9, 0x3, 0x1, 0x100, 0x6ce9, 0xdb5c, 0x4, 0xe951, 0xaf3d, 0xfffffffd, 0x9, 0xa, 0x40, 0x1, 0x4, 0x4, 0x3, 0xb6cc, 0x0, 0x5, 0x9, 0x80000001, 0x7, 0x8, 0x0, 0x400, 0x8, 0x1c9, 0x3, 0x4, 0x0, 0x4, 0x40, 0xfffffff5, 0x2, 0xbd69, 0xd99f, 0x0, 0x55aa, 0x1a, 0x0, 0xe232, 0x6, 0x25, 0x101, 0x7, 0x6, 0x2, 0x8000, 0x800, 0x1ff, 0x640a, 0x4, 0x4, 0x4, 0xa75a, 0x8f, 0x60, 0x3, 0x7, 0x0, 0x3, 0xec73, 0x2336, 0x40, 0x2, 0x101, 0x800, 0x10, 0xca, 0x4, 0x9, 0x2, 0x3ff, 0x3ff], "1d48e632abbce63ef0b7c610c78b73e0aeaef32b4caa0d0b59123fbd7335598e2a719739cadc38893e6af66ad628cc1ab7ae294b8b987f46b511d69a298663b032065ef3193820c136df8814008e4fa441c479dfb162aaceb64368e2b7b2b61b1db5a422d87f3849830d9970a5c82f83fdcebad5deb4c32502bc8cf32579a97be25662d3d86efb170fb430710bee8a5da35e223e44af7e903f52c9d1"}}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = getpid() (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read(r3, &(0x7f0000000200)=""/9, 0x9) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000140)=0x0) close(r5) syz_ublk_add_dev(r4, r6, r7, r8, &(0x7f0000000180)={0x2e, 0x0, 0x0, r5, 0x1200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xd4) r10 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffc, 0x1000, 0x0, 0x12}, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)) (async) r14 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530495c) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r15 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r15, 0x0, 0x0) close(r14) (async) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200), 0x0) syz_io_uring_submit$UBLK(r6, r12, 0x0, &(0x7f0000000280)=@ublk_del_dev_sqe={0x2e, 0x20, 0x0, r3, 0xc0207505, 0x0, 0x0, 0x0, 0x1, 0xff}) (async) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) 113.953387ms ago: executing program 2 (id=117): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7e, 0x5, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xf, 0xfd}}}}}]}}]}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x96, 0x75, 0x8d, 0x40, 0x3eb, 0x4343, 0x8d99, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x2, 0x9, 0x0, 0x90, 0x2, "", [{{0x9, 0x4, 0x3e, 0x8, 0x2, 0xff, 0x5d, 0x1, 0x3, [], [{{0x9, 0x5, 0xf, 0x44c921cc9cdd93f6, 0x40, 0x3, 0x2, 0x7}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x81, 0x7, 0x63, [@generic={0x2, 0x10}]}}]}}, {{0x9, 0x4, 0x31, 0x9e, 0x0, 0xa8, 0x85, 0x5f, 0x1}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x5, &(0x7f0000000b80)={0x5, 0xf, 0x5}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)={0x30, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x30}}, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x2a38, 0x6, &(0x7f0000000c40)="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"}, {0x1, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x3, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0xfffffff4, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000500)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) read$FUSE(r4, &(0x7f0000003f80)={0x2020}, 0x2020) read$watch_queue(r4, &(0x7f0000000340)=""/133, 0x85) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x4, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x43, 0xb9) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x20) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x5}}, 0x24, 0x2) copy_file_range(r5, &(0x7f0000000000)=0xfffffffffffff61b, r5, 0x0, 0x4, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@remote, 0xffff, 0x0, 0xf7fb, 0x2002, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x20000000000000}, {0x81, 0x9, 0x83}, 0x4, 0x0, 0x1, 0x1, 0x0, 0x3}, [@tmpl={0x144, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x3506, 0x0, 0x0, 0x2}, {{@in=@private=0xa010100, 0x4, 0x2b}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4d3, 0x32}, 0x0, @in=@loopback}, {{@in6=@remote, 0x4d5, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x14, 0x4, 0x0, 0xfc, 0x1, 0x40000}]}]}, 0x1fc}}, 0x4080) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000429"], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=118): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x2000000ff, 0x9}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 64) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e22ac1414aa925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) syz_usb_connect(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x9b, 0xa7, 0xc4, 0x40, 0x44f, 0xec60, 0x79aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x1, 0x20, 0x6, "", [{{0x9, 0x4, 0x38, 0x5, 0x2, 0xff, 0x47, 0xd0, 0x40, [], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0x81, 0x2, 0x40}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x5, 0x1, 0x8}}]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x14e, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13c, 0x2, 0x1, 0x9, 0xf0, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "5fb6ee4794e8"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0xde7, 0x7}, {0x6, 0x24, 0x1a, 0x1}, [@country_functional={0xe, 0x24, 0x7, 0x8, 0xd136, [0x8, 0x100, 0xc29a, 0xaf8]}, @mdlm={0x15, 0x24, 0x12, 0x410e}, @mdlm_detail={0xb7, 0x24, 0x13, 0x6, "23e35ffbdbd5a442aeb2a1525db10d135a0f22a2d04e677151ee8114fda8dedc11710ee2bc0ca23a884714662061b0352efe8c76509816609664d96de2131ca2720d92f36697b1ab7ac6f5ff37e7266b14a01a91782fcc9eeaed5c5900e17fbf9a6718aa290b9b44890621b049303c92984574c4da94dca42238e5e88bf60439ebed6e2d6a13eaab0efee4d8d9125a6c7c133b6a2988db63100f1f4356914700de4bc3199ff0081c3da4ef5d8094eacb9a9a41"}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0xa, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0xa6fef37267df90a0, 0x6, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x49, 0x3}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0x7, 0x0, 0x8, 0x10, 0x9}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x1, [{0xf1, &(0x7f0000000340)=@string={0xf1, 0x3, "ae9792f5ffd9d72df9315e2c5fce78541308abfee695c08dd6d9c4d024fadac8da2f9b2d0abc633c152b2decbfd7d6b7c874750450cfd103bb06bb1e628b60a0398dc22a6dd3c5c9f2174bb67f7088d5e2ad74ef16d0790e8bd2be30b6ae4a932d83a38d28f8e078e8071ae3a12287797c720e7302c426b00eb8df8fc844645e4d28ed222edb58b534b0a9ed6d4362ce69c2e26a0a5e0346530c93628abd6ab36819c23dac79e58a4123aa875383f1e2c0ea611a9bba6fee4f80a58a7cbddfe0dcd9827b07e9c345fcfc17fd968c4e5fc019081a65ea37c3fefc5d9f1eb133910ddfb4ee95085056c6b54dd93ae6bb"}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.187' (ED25519) to the list of known hosts. [ 23.707753][ T36] audit: type=1400 audit(1777700861.790:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.711378][ T287] cgroup: Unknown subsys name 'net' [ 23.730418][ T36] audit: type=1400 audit(1777700861.790:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.757782][ T36] audit: type=1400 audit(1777700861.820:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.758288][ T287] cgroup: Unknown subsys name 'devices' [ 23.957716][ T287] cgroup: Unknown subsys name 'hugetlb' [ 23.963348][ T287] cgroup: Unknown subsys name 'rlimit' [ 24.139794][ T36] audit: type=1400 audit(1777700862.220:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.162988][ T36] audit: type=1400 audit(1777700862.220:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.187831][ T36] audit: type=1400 audit(1777700862.220:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.211952][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.220764][ T36] audit: type=1400 audit(1777700862.300:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.246316][ T36] audit: type=1400 audit(1777700862.300:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.276740][ T36] audit: type=1400 audit(1777700862.360:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.302515][ T36] audit: type=1400 audit(1777700862.360:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.303245][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.166173][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.173233][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.180433][ T294] bridge_slave_0: entered allmulticast mode [ 25.186740][ T294] bridge_slave_0: entered promiscuous mode [ 25.194745][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.201867][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.209125][ T294] bridge_slave_1: entered allmulticast mode [ 25.215335][ T294] bridge_slave_1: entered promiscuous mode [ 25.246228][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.253302][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.260582][ T295] bridge_slave_0: entered allmulticast mode [ 25.266879][ T295] bridge_slave_0: entered promiscuous mode [ 25.286770][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.293841][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.301178][ T295] bridge_slave_1: entered allmulticast mode [ 25.307528][ T295] bridge_slave_1: entered promiscuous mode [ 25.344704][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.351814][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.358923][ T296] bridge_slave_0: entered allmulticast mode [ 25.365144][ T296] bridge_slave_0: entered promiscuous mode [ 25.374504][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.381591][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.388844][ T296] bridge_slave_1: entered allmulticast mode [ 25.395089][ T296] bridge_slave_1: entered promiscuous mode [ 25.428191][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.435267][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.442519][ T297] bridge_slave_0: entered allmulticast mode [ 25.448933][ T297] bridge_slave_0: entered promiscuous mode [ 25.465669][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.472764][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.479900][ T297] bridge_slave_1: entered allmulticast mode [ 25.486214][ T297] bridge_slave_1: entered promiscuous mode [ 25.572875][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.579976][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.587329][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.594388][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.611258][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.618341][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.625693][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.632760][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.691607][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.698798][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.706206][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.713342][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.722090][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.730084][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.737584][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.744814][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.752785][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.760188][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.773060][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.780139][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.787818][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.794877][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.807203][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.814266][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.822005][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.829081][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.891285][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.898406][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.911839][ T294] veth0_vlan: entered promiscuous mode [ 25.921638][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.928726][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.936707][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.943750][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.957020][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.964056][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.978609][ T295] veth0_vlan: entered promiscuous mode [ 25.999920][ T294] veth1_macvtap: entered promiscuous mode [ 26.021577][ T295] veth1_macvtap: entered promiscuous mode [ 26.037954][ T297] veth0_vlan: entered promiscuous mode [ 26.060895][ T296] veth0_vlan: entered promiscuous mode [ 26.077652][ T297] veth1_macvtap: entered promiscuous mode [ 26.084243][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.115046][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.138737][ T296] veth1_macvtap: entered promiscuous mode [ 26.213952][ T313] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 26.245156][ T323] netlink: 'syz.3.4': attribute type 28 has an invalid length. [ 26.265091][ T313] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 26.265134][ T313] rust_binder: Read failure Err(EFAULT) in pid:2 [ 26.274551][ T325] process 'syz.1.5' launched './file0' with NULL argv: empty string added [ 26.282284][ T313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 26.443312][ T311] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.476873][ T340] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.499642][ T340] ======================================================= [ 26.499642][ T340] WARNING: The mand mount option has been deprecated and [ 26.499642][ T340] and is ignored by this kernel. Remove the mand [ 26.499642][ T340] option from the mount to silence this warning. [ 26.499642][ T340] ======================================================= [ 26.536052][ T340] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 26.544542][ T340] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 26.595735][ T318] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 26.615615][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 26.622111][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 26.631191][ T311] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 26.639583][ T311] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 26.650411][ T311] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 26.659656][ T311] usb 3-1: config 128 has no interface number 0 [ 26.666062][ T311] usb 3-1: config 128 interface 127 has no altsetting 0 [ 26.674551][ T311] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 26.683679][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.691809][ T311] usb 3-1: Product: syz [ 26.696001][ T311] usb 3-1: Manufacturer: syz [ 26.700607][ T311] usb 3-1: SerialNumber: syz [ 26.756669][ T318] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 26.764753][ T318] usb 2-1: config 0 has no interface number 0 [ 26.771110][ T318] usb 2-1: config 0 interface 2 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 26.782280][ T318] usb 2-1: config 0 interface 2 altsetting 11 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 26.793196][ T318] usb 2-1: config 0 interface 2 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.806283][ T318] usb 2-1: config 0 interface 2 has no altsetting 0 [ 26.812935][ T318] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 26.822428][ T318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.831529][ T318] usb 2-1: config 0 descriptor?? [ 26.836949][ T327] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 26.845992][ T67] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.913342][ T317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.922009][ T317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.930323][ T317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.938910][ T317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.947371][ T317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.955931][ T317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.964286][ T317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.973734][ T317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.982663][ T317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.991277][ T317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.006831][ T67] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 27.019982][ T67] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 27.027547][ T311] usb 3-1: USB disconnect, device number 2 [ 27.036090][ T67] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 27.050688][ T67] usb 4-1: config 220 has no interface number 2 [ 27.057715][ T67] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 27.071447][ T67] usb 4-1: config 220 interface 0 has no altsetting 0 [ 27.078631][ T67] usb 4-1: config 220 interface 76 has no altsetting 0 [ 27.086341][ T67] usb 4-1: config 220 interface 1 has no altsetting 0 [ 27.094636][ T67] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 27.105334][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.121436][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.132939][ T67] usb 4-1: Product: syz [ 27.137766][ T67] usb 4-1: Manufacturer: syz [ 27.142419][ T67] usb 4-1: SerialNumber: syz [ 27.185623][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.264447][ T318] usbhid 2-1:0.2: can't add hid device: -71 [ 27.270526][ T318] usbhid 2-1:0.2: probe with driver usbhid failed with error -71 [ 27.279312][ T318] usb 2-1: USB disconnect, device number 2 [ 27.335609][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 27.343524][ T10] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 27.353334][ T343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.361752][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.369950][ T10] usb 1-1: Product: syz [ 27.374169][ T10] usb 1-1: Manufacturer: syz [ 27.378241][ T343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.387131][ T343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.395123][ T10] usb 1-1: SerialNumber: syz [ 27.400044][ T343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.404282][ T10] usb 1-1: config 0 descriptor?? [ 27.413969][ T343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.423113][ T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 27.430792][ T343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.431918][ T10] usb 1-1: Detected FT-X [ 27.443015][ T343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.451920][ T343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.465106][ T67] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 27.472197][ T67] usb 4-1: No valid video chain found. [ 27.477799][ T67] usb 4-1: selecting invalid altsetting 0 [ 27.491129][ T67] usb 4-1: USB disconnect, device number 2 [ 27.619406][ T345] overlay: filesystem on ./bus not supported as upperdir [ 27.629457][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 27.696734][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 27.703970][ T10] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 27.711342][ T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 27.720728][ T10] usb 1-1: USB disconnect, device number 2 [ 27.728537][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 27.738326][ T10] ftdi_sio 1-1:0.0: device disconnected [ 27.806469][ T362] netlink: 37 bytes leftover after parsing attributes in process `syz.1.16'. [ 27.816842][ T347] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.975658][ T347] usb 3-1: Using ep0 maxpacket: 32 [ 27.998754][ T347] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 28.014232][ T347] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 28.026956][ T347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.038467][ T347] usb 3-1: config 0 descriptor?? [ 28.049905][ T347] hub 3-1:0.0: bad descriptor, ignoring hub [ 28.065571][ T347] hub 3-1:0.0: probe with driver hub failed with error -5 [ 28.077767][ T347] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 28.185597][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 28.338038][ T10] usb 2-1: config 1 has an invalid descriptor of length 141, skipping remainder of the config [ 28.348366][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.360911][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.370063][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.375708][ T311] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.380386][ T10] usb 2-1: Product: syz [ 28.390753][ T10] usb 2-1: Manufacturer: syz [ 28.395377][ T10] usb 2-1: SerialNumber: syz [ 28.495641][ T318] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.538308][ T311] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 28.546590][ T311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.556765][ T311] usb 4-1: config 0 has no interface number 0 [ 28.567288][ T311] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 28.576539][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.584571][ T311] usb 4-1: Product: syz [ 28.588778][ T311] usb 4-1: Manufacturer: syz [ 28.593429][ T311] usb 4-1: SerialNumber: syz [ 28.600038][ T311] usb 4-1: config 0 descriptor?? [ 28.610935][ T311] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 28.617401][ T311] usb 4-1: No valid video chain found. [ 28.658323][ T318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 28.668644][ T318] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 28.678841][ T318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 28.690099][ T318] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 28.704571][ T318] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 28.714861][ T318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.723671][ T318] usb 1-1: Product: syz [ 28.728565][ T318] usb 1-1: Manufacturer: syz [ 28.733208][ T318] usb 1-1: SerialNumber: syz [ 28.740259][ T318] usb 1-1: config 0 descriptor?? [ 28.746042][ T36] kauditd_printk_skb: 208 callbacks suppressed [ 28.746057][ T36] audit: type=1400 audit(1777700866.830:282): avc: denied { ioctl } for pid=371 comm="syz.0.19" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.779233][ T318] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 28.786236][ T36] audit: type=1400 audit(1777700866.860:283): avc: denied { ioctl } for pid=371 comm="syz.0.19" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.811500][ T36] audit: type=1400 audit(1777700866.860:284): avc: denied { ioctl } for pid=371 comm="syz.0.19" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.829193][ T311] usb 4-1: USB disconnect, device number 3 [ 28.865628][ T36] audit: type=1400 audit(1777700866.860:285): avc: denied { ioctl } for pid=371 comm="syz.0.19" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.891159][ T36] audit: type=1400 audit(1777700866.860:286): avc: denied { ioctl } for pid=371 comm="syz.0.19" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.916948][ T36] audit: type=1400 audit(1777700866.890:287): avc: denied { getopt } for pid=369 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.937190][ T36] audit: type=1400 audit(1777700866.890:288): avc: denied { write } for pid=369 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.966677][ T36] audit: type=1400 audit(1777700867.050:289): avc: denied { ioctl } for pid=359 comm="syz.2.15" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.992650][ T36] audit: type=1400 audit(1777700867.070:290): avc: denied { mount } for pid=371 comm="syz.0.19" name="/" dev="configfs" ino=1234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 29.011744][ T372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.024236][ T372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.030589][ T36] audit: type=1400 audit(1777700867.090:291): avc: denied { read write } for pid=371 comm="syz.0.19" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.063161][ T318] scsi host1: usb-storage 1-1:0.0 [ 29.070693][ T318] usb 1-1: USB disconnect, device number 3 [ 29.414317][ T390] netlink: 212 bytes leftover after parsing attributes in process `syz.2.21'. [ 29.445956][ T347] usb 3-1: USB disconnect, device number 3 [ 29.479145][ T390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21'. [ 29.847973][ T408] netlink: 56 bytes leftover after parsing attributes in process `syz.3.28'. [ 30.045632][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.269829][ T416] syz.3.30 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 30.280101][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 30.296618][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 30.316379][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 30.327566][ T319] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 30.345216][ T9] usb 1-1: string descriptor 0 read error: -22 [ 30.351559][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice= 0.40 [ 30.365597][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.488926][ T319] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 30.497319][ T319] usb 3-1: config 0 has no interface number 0 [ 30.503425][ T319] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 30.514215][ T319] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 12736, setting to 64 [ 30.525278][ T319] usb 3-1: config 0 interface 2 has no altsetting 0 [ 30.535494][ T319] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 30.544617][ T319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.552688][ T319] usb 3-1: Product: syz [ 30.556938][ T319] usb 3-1: Manufacturer: syz [ 30.561590][ T319] usb 3-1: SerialNumber: syz [ 30.568536][ T319] usb 3-1: config 0 descriptor?? [ 30.575283][ T412] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 30.582997][ T412] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 30.685715][ T311] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.811787][ T10] usb 2-1: 0:2 : does not exist [ 30.817372][ T10] usb 2-1: unit 9 not found! [ 30.827449][ T10] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4) [ 30.851111][ T10] usb 2-1: 4:0: cannot get min/max values for control 4 (id 4) [ 30.865565][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 30.869498][ T10] usb 2-1: 4:0: cannot get min/max values for control 5 (id 4) [ 30.885704][ T311] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.893964][ T10] usb 2-1: 4:0: cannot get min/max values for control 6 (id 4) [ 30.911120][ T311] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.922009][ T10] usb 2-1: 4:0: cannot get min/max values for control 7 (id 4) [ 30.932432][ T311] usb 4-1: config 0 interface 0 has no altsetting 0 [ 30.938322][ T10] usb 2-1: 4:0: cannot get min/max values for control 8 (id 4) [ 30.949102][ T311] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 30.959673][ T10] usb 2-1: 4:0: cannot get min/max values for control 9 (id 4) [ 30.978354][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.991228][ T10] usb 2-1: 4:0: cannot get min/max values for control 10 (id 4) [ 31.000292][ T311] usb 4-1: config 0 descriptor?? [ 31.009594][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 31.018172][ T10] usb 2-1: USB disconnect, device number 3 [ 31.034607][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 31.068304][ T9] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 31.095844][ T9] usb 1-1: USB disconnect, device number 4 [ 31.227815][ T420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.275751][ T420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.294007][ T420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.315750][ T420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.559923][ T311] smartjoyplus 0003:6666:8804.0001: unknown main item tag 0x0 [ 31.568236][ T311] smartjoyplus 0003:6666:8804.0001: item fetching failed at offset 4/5 [ 31.577748][ T311] smartjoyplus 0003:6666:8804.0001: parse failed [ 31.584217][ T311] smartjoyplus 0003:6666:8804.0001: probe with driver smartjoyplus failed with error -22 [ 32.972252][ T319] usb 3-1: USB disconnect, device number 4 [ 33.087326][ T376] udevd[376]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 33.275640][ T9] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 33.283109][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 33.415673][ T10] usb 2-1: device descriptor read/64, error -71 [ 33.438113][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 33.450306][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 33.451009][ T311] usb 4-1: USB disconnect, device number 4 [ 33.466967][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 33.472513][ T387] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 33.481378][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.517668][ T9] usb 1-1: config 0 descriptor?? [ 33.534591][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 33.564687][ T432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 33.638122][ T387] usb 3-1: device descriptor read/64, error -71 [ 33.655608][ T10] usb 2-1: device descriptor read/64, error -71 [ 33.736291][ T9] usb 1-1: USB disconnect, device number 5 [ 33.755998][ T36] kauditd_printk_skb: 353 callbacks suppressed [ 33.756014][ T36] audit: type=1400 audit(1777700871.830:645): avc: denied { ioctl } for pid=429 comm="syz.2.35" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.787973][ T36] audit: type=1400 audit(1777700871.840:646): avc: denied { ioctl } for pid=429 comm="syz.2.35" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.819937][ T36] audit: type=1400 audit(1777700871.850:647): avc: denied { ioctl } for pid=422 comm="syz.1.32" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.868077][ T36] audit: type=1400 audit(1777700871.850:648): avc: denied { ioctl } for pid=422 comm="syz.1.32" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.892754][ T387] usb 3-1: device descriptor read/64, error -71 [ 33.896123][ T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 33.909352][ T36] audit: type=1400 audit(1777700871.890:649): avc: denied { read write } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.951469][ T36] audit: type=1400 audit(1777700871.890:650): avc: denied { read write open } for pid=294 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.985593][ T311] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.995051][ T36] audit: type=1400 audit(1777700871.890:651): avc: denied { ioctl } for pid=294 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.020628][ T36] audit: type=1400 audit(1777700871.900:652): avc: denied { ioctl } for pid=429 comm="syz.2.35" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.046097][ T36] audit: type=1400 audit(1777700871.920:653): avc: denied { ioctl } for pid=422 comm="syz.1.32" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.070699][ T36] audit: type=1400 audit(1777700871.940:654): avc: denied { ioctl } for pid=433 comm="syz.3.37" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.145604][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 34.153917][ T311] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 34.163483][ T311] usb 4-1: config 0 has no interface number 0 [ 34.169799][ T387] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 34.177438][ T311] usb 4-1: config 0 interface 184 has no altsetting 0 [ 34.189281][ T311] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 34.198400][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.206459][ T311] usb 4-1: Product: syz [ 34.210648][ T311] usb 4-1: Manufacturer: syz [ 34.215262][ T311] usb 4-1: SerialNumber: syz [ 34.221797][ T311] usb 4-1: config 0 descriptor?? [ 34.229947][ T311] smsc75xx v1.0.0 [ 34.235576][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.315571][ T387] usb 3-1: device descriptor read/64, error -71 [ 34.388717][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 34.401113][ T9] usb 1-1: string descriptor 0 read error: -22 [ 34.407430][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.40 [ 34.416558][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.565610][ T387] usb 3-1: device descriptor read/64, error -71 [ 34.576715][ T10] usb usb2-port1: attempt power cycle [ 34.636634][ T311] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 34.655325][ T311] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 34.675794][ T387] usb usb3-port1: attempt power cycle [ 34.686980][ T311] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 34.701773][ T311] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 34.713111][ T311] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 34.747294][ T311] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 34.761368][ T311] usb 4-1: USB disconnect, device number 5 [ 34.787058][ T445] netlink: 100 bytes leftover after parsing attributes in process `syz.3.40'. [ 34.863967][ T447] syz.3.41 uses obsolete (PF_INET,SOCK_PACKET) [ 34.915604][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 34.949609][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.960405][ T10] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.974226][ T10] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.985290][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 34.992609][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 35.002581][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.015924][ T10] usb 2-1: config 0 descriptor?? [ 35.025568][ T387] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 35.039543][ T9] apple 0003:05AC:024A.0002: item 0 0 0 11 parsing failed [ 35.053338][ T9] apple 0003:05AC:024A.0002: parse failed [ 35.060500][ T9] apple 0003:05AC:024A.0002: probe with driver apple failed with error -22 [ 35.071528][ T387] usb 3-1: device descriptor read/8, error -71 [ 35.208611][ T387] usb 3-1: device descriptor read/8, error -71 [ 35.252472][ T439] netlink: 'syz.0.38': attribute type 27 has an invalid length. [ 35.315715][ T311] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.323777][ T9] usb 1-1: USB disconnect, device number 6 [ 35.433712][ T10] kye 0003:0458:5015.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 35.444631][ T10] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 35.454214][ T10] kye 0003:0458:5015.0003: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 35.456976][ T387] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 35.478325][ T10] kye 0003:0458:5015.0003: tablet-enabling feature report not found [ 35.495592][ T10] kye 0003:0458:5015.0003: tablet enabling failed [ 35.502350][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 35.514942][ T387] usb 3-1: device descriptor read/8, error -71 [ 35.522116][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.533842][ T311] usb 4-1: config 127 has an invalid interface number: 1 but max is 0 [ 35.542743][ T311] usb 4-1: config 127 has no interface number 0 [ 35.549208][ T311] usb 4-1: config 127 interface 1 has no altsetting 0 [ 35.559483][ T311] usb 4-1: New USB device found, idVendor=09fb, idProduct=602e, bcdDevice=db.43 [ 35.568713][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.576852][ T311] usb 4-1: Product: syz [ 35.581131][ T311] usb 4-1: Manufacturer: syz [ 35.585895][ T311] usb 4-1: SerialNumber: syz [ 35.650146][ T318] usb 2-1: USB disconnect, device number 6 [ 35.676558][ T387] usb 3-1: device descriptor read/8, error -71 [ 35.796385][ T387] usb usb3-port1: unable to enumerate USB device [ 35.804669][ T311] ftdi_sio 4-1:127.1: FTDI USB Serial Device converter detected [ 35.813685][ T311] ftdi_sio ttyUSB0: unknown device type: 0xdb43 [ 35.825074][ T311] usb 4-1: USB disconnect, device number 6 [ 35.839692][ T311] ftdi_sio 4-1:127.1: device disconnected [ 36.335574][ T311] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 36.495567][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 36.504727][ T311] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 36.513924][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=8 [ 36.522008][ T311] usb 1-1: SerialNumber: syz [ 36.528214][ T311] usb 1-1: config 0 descriptor?? [ 36.538509][ T311] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 36.546477][ T311] usb 1-1: Detected FT232A [ 36.552328][ T311] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 36.555649][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 36.595625][ T31] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 36.615613][ T318] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 36.732518][ T10] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 36.735714][ T31] usb 4-1: device descriptor read/64, error -71 [ 36.741923][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.757233][ T46] usb 1-1: USB disconnect, device number 7 [ 36.764299][ T10] usb 2-1: Product: syz [ 36.768747][ T10] usb 2-1: Manufacturer: syz [ 36.773373][ T10] usb 2-1: SerialNumber: syz [ 36.779614][ T46] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 36.793170][ T318] usb 3-1: unable to get BOS descriptor or descriptor too short [ 36.813501][ T318] usb 3-1: not running at top speed; connect to a high speed hub [ 36.822474][ T46] ftdi_sio 1-1:0.0: device disconnected [ 36.833933][ T318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.849741][ T318] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.871051][ T318] usb 3-1: string descriptor 0 read error: -22 [ 36.878719][ T318] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.888875][ T318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.906682][ T318] usb 3-1: 0:2 : does not exist [ 37.005631][ T31] usb 4-1: device descriptor read/64, error -71 [ 37.215794][ T476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.224380][ T476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.245584][ T31] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 37.246741][ T476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.265758][ T476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.343234][ T10] rtl8150 2-1:1.0: couldn't reset the device [ 37.351937][ T481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.363169][ T10] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 37.377447][ T481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.381935][ T10] usb 2-1: USB disconnect, device number 7 [ 37.401308][ T31] usb 4-1: device descriptor read/64, error -71 [ 37.411219][ T481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.429439][ T481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.575646][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 37.675591][ T31] usb 4-1: device descriptor read/64, error -71 [ 37.715617][ T9] usb 1-1: device descriptor read/64, error -71 [ 37.785825][ T31] usb usb4-port1: attempt power cycle [ 37.955564][ T9] usb 1-1: device descriptor read/64, error -71 [ 37.971337][ T488] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 37.989145][ T487] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 38.125589][ T31] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 38.148160][ T31] usb 4-1: device descriptor read/8, error -71 [ 38.205611][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 38.277980][ T31] usb 4-1: device descriptor read/8, error -71 [ 38.345603][ T9] usb 1-1: device descriptor read/64, error -71 [ 38.515589][ T31] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 38.538215][ T31] usb 4-1: device descriptor read/8, error -71 [ 38.585613][ T9] usb 1-1: device descriptor read/64, error -71 [ 38.668437][ T31] usb 4-1: device descriptor read/8, error -71 [ 38.695764][ T9] usb usb1-port1: attempt power cycle [ 38.766429][ T36] kauditd_printk_skb: 598 callbacks suppressed [ 38.766464][ T36] audit: type=1400 audit(1777700876.850:1253): avc: denied { ioctl } for pid=480 comm="syz.0.52" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.811713][ T493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.54'. [ 38.815742][ T31] usb usb4-port1: unable to enumerate USB device [ 38.842455][ T36] audit: type=1400 audit(1777700876.850:1254): avc: denied { ioctl } for pid=480 comm="syz.0.52" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.867154][ T36] audit: type=1400 audit(1777700876.910:1255): avc: denied { ioctl } for pid=477 comm="syz.3.51" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.892009][ T36] audit: type=1400 audit(1777700876.920:1256): avc: denied { read write } for pid=297 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.916082][ T36] audit: type=1400 audit(1777700876.920:1257): avc: denied { read write open } for pid=297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.941061][ T36] audit: type=1400 audit(1777700876.920:1258): avc: denied { ioctl } for pid=297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.975737][ T36] audit: type=1400 audit(1777700877.050:1259): avc: denied { read write } for pid=494 comm="syz.1.55" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.025298][ T36] audit: type=1400 audit(1777700877.050:1260): avc: denied { read write open } for pid=494 comm="syz.1.55" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.050089][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 39.057769][ T36] audit: type=1400 audit(1777700877.050:1261): avc: denied { ioctl } for pid=494 comm="syz.1.55" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.082473][ T36] audit: type=1400 audit(1777700877.050:1262): avc: denied { ioctl } for pid=494 comm="syz.1.55" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.109880][ T9] usb 1-1: device descriptor read/8, error -71 [ 39.245641][ T46] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 39.253907][ T9] usb 1-1: device descriptor read/8, error -71 [ 39.405840][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 39.424397][ T318] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 39.456319][ T318] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 39.481023][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 39.492657][ T318] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 39.503999][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 39.515565][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 39.527186][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 39.548654][ T318] usb 3-1: USB disconnect, device number 9 [ 39.565018][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 39.565995][ T9] usb 1-1: device descriptor read/8, error -71 [ 39.594613][ T504] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.616966][ T46] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 39.633787][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.641488][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 39.661644][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 39.695305][ T46] usb 2-1: string descriptor 0 read error: -22 [ 39.702578][ T46] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 39.717294][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.737017][ T46] usb 2-1: config 0 descriptor?? [ 39.740902][ T9] usb 1-1: device descriptor read/8, error -71 [ 39.750137][ T495] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 39.856050][ T9] usb usb1-port1: unable to enumerate USB device [ 39.990121][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.169048][ T495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.195785][ T495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.268845][ T46] usb 2-1: USB disconnect, device number 8 [ 40.343242][ T522] netlink: 76 bytes leftover after parsing attributes in process `syz.1.61'. [ 40.797597][ T544] Zero length message leads to an empty skb [ 40.866457][ T563] netlink: 228 bytes leftover after parsing attributes in process `syz.2.69'. [ 40.930269][ T566] tipc: Started in network mode [ 40.935248][ T566] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 40.944420][ T566] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:04bb [ 40.952710][ T566] tipc: Enabled bearer , priority 10 [ 40.965589][ T318] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 41.113635][ T571] netlink: 'syz.3.72': attribute type 27 has an invalid length. [ 41.128368][ T318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.145090][ T318] usb 2-1: config 1 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 41.165603][ T318] usb 2-1: config 1 interface 0 has no altsetting 0 [ 41.175506][ T571] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.182809][ T571] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.195585][ T318] usb 2-1: string descriptor 0 read error: -22 [ 41.201874][ T318] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 41.212322][ T318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.315583][ T46] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 41.451809][ T319] usb 2-1: USB disconnect, device number 9 [ 41.488472][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.499857][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.509651][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 41.522589][ T46] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 41.531716][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.539764][ T318] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 41.549967][ T46] usb 3-1: config 0 descriptor?? [ 41.695569][ T318] usb 4-1: Using ep0 maxpacket: 16 [ 41.703292][ T318] usb 4-1: config 184 has an invalid interface number: 19 but max is 0 [ 41.711723][ T318] usb 4-1: config 184 has an invalid descriptor of length 0, skipping remainder of the config [ 41.722086][ T318] usb 4-1: config 184 has no interface number 0 [ 41.728418][ T318] usb 4-1: config 184 interface 19 altsetting 6 has an invalid endpoint descriptor of length 6, skipping [ 41.739713][ T318] usb 4-1: config 184 interface 19 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.752836][ T318] usb 4-1: config 184 interface 19 has no altsetting 0 [ 41.764762][ T318] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01dd, bcdDevice=c4.6b [ 41.774521][ T318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.782827][ T318] usb 4-1: Product: syz [ 41.787186][ T318] usb 4-1: Manufacturer: syz [ 41.791903][ T318] usb 4-1: SerialNumber: syz [ 41.828340][ T46] usbhid 3-1:0.0: can't add hid device: -71 [ 41.846635][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 41.870015][ T46] usb 3-1: USB disconnect, device number 10 [ 42.012113][ T318] ftdi_sio 4-1:184.19: FTDI USB Serial Device converter detected [ 42.024765][ T318] ftdi_sio ttyUSB0: unknown device type: 0xc46b [ 42.050701][ T318] usb 4-1: USB disconnect, device number 11 [ 42.065566][ T319] tipc: Node number set to 1 [ 42.072820][ T318] ftdi_sio 4-1:184.19: device disconnected [ 42.227299][ T598] netlink: 32 bytes leftover after parsing attributes in process `syz.2.79'. [ 42.446386][ T603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.455476][ T603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.555577][ T318] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 42.645566][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 42.705568][ T318] usb 3-1: device descriptor read/64, error -71 [ 42.771022][ T609] netlink: 88 bytes leftover after parsing attributes in process `syz.3.82'. [ 42.785587][ T9] usb 2-1: device descriptor read/64, error -71 [ 42.965609][ T318] usb 3-1: device descriptor read/64, error -71 [ 43.035600][ T9] usb 2-1: device descriptor read/64, error -71 [ 43.080501][ T616] netlink: 'syz.3.84': attribute type 58 has an invalid length. [ 43.205603][ T318] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 43.275597][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 43.345597][ T318] usb 3-1: device descriptor read/64, error -71 [ 43.425584][ T9] usb 2-1: device descriptor read/64, error -71 [ 43.585613][ T318] usb 3-1: device descriptor read/64, error -71 [ 43.665577][ T9] usb 2-1: device descriptor read/64, error -71 [ 43.715684][ T318] usb usb3-port1: attempt power cycle [ 43.775670][ T9] usb usb2-port1: attempt power cycle [ 43.776651][ T36] kauditd_printk_skb: 2168 callbacks suppressed [ 43.776693][ T36] audit: type=1400 audit(1777700881.860:3431): avc: denied { ioctl } for pid=601 comm="syz.1.80" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.812423][ T36] audit: type=1400 audit(1777700881.860:3432): avc: denied { ioctl } for pid=601 comm="syz.1.80" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.837207][ T36] audit: type=1400 audit(1777700881.860:3433): avc: denied { ioctl } for pid=601 comm="syz.1.80" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.862208][ T36] audit: type=1400 audit(1777700881.890:3434): avc: denied { ioctl } for pid=597 comm="syz.2.79" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.886894][ T36] audit: type=1400 audit(1777700881.890:3435): avc: denied { ioctl } for pid=597 comm="syz.2.79" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.912695][ T36] audit: type=1400 audit(1777700881.920:3436): avc: denied { ioctl } for pid=619 comm="syz.0.86" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.915652][ T319] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 43.937360][ T36] audit: type=1400 audit(1777700881.950:3437): avc: denied { ioctl } for pid=601 comm="syz.1.80" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.969987][ T36] audit: type=1400 audit(1777700881.950:3438): avc: denied { ioctl } for pid=601 comm="syz.1.80" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.994722][ T36] audit: type=1400 audit(1777700881.970:3439): avc: denied { read write } for pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.022780][ T36] audit: type=1400 audit(1777700882.000:3440): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.075701][ T318] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 44.098105][ T318] usb 3-1: device descriptor read/8, error -71 [ 44.125580][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 44.141651][ T319] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 44.151125][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.159637][ T319] usb 1-1: Product: syz [ 44.164580][ T319] usb 1-1: Manufacturer: syz [ 44.169397][ T319] usb 1-1: SerialNumber: syz [ 44.174073][ T9] usb 2-1: device descriptor read/8, error -71 [ 44.228699][ T318] usb 3-1: device descriptor read/8, error -71 [ 44.285605][ T46] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 44.308065][ T9] usb 2-1: device descriptor read/8, error -71 [ 44.465586][ T318] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 44.489062][ T318] usb 3-1: device descriptor read/8, error -71 [ 44.555600][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 44.578312][ T9] usb 2-1: device descriptor read/8, error -71 [ 44.591134][ T621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.599714][ T621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.621162][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 44.635573][ T319] (unnamed net_device) (uninitialized): Assigned a random MAC address: 0e:54:4a:0a:93:61 [ 44.646465][ T46] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 44.657441][ T318] usb 3-1: device descriptor read/8, error -71 [ 44.669775][ T46] usb 4-1: can't read configurations, error -71 [ 44.676110][ T319] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 44.693829][ T319] usb 1-1: USB disconnect, device number 12 [ 44.709221][ T9] usb 2-1: device descriptor read/8, error -71 [ 44.786052][ T318] usb usb3-port1: unable to enumerate USB device [ 44.836979][ T9] usb usb2-port1: unable to enumerate USB device [ 45.166484][ T319] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 45.341834][ T319] usb 1-1: not running at top speed; connect to a high speed hub [ 45.351518][ T319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.366578][ T319] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 45.375824][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.383831][ T319] usb 1-1: Product: syz [ 45.389135][ T319] usb 1-1: Manufacturer: syz [ 45.393853][ T319] usb 1-1: SerialNumber: syz [ 45.515600][ T46] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 45.612633][ T319] usb 1-1: unknown interface protocol 0xc, assuming v1 [ 45.619670][ T319] usb 1-1: cannot find UAC_HEADER [ 45.621463][ T318] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 45.634506][ T319] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 45.648656][ T319] usb 1-1: USB disconnect, device number 13 [ 45.684270][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 45.694276][ T46] usb 4-1: too many endpoints for config 1 interface 0 altsetting 128: 253, using maximum allowed: 30 [ 45.708253][ T46] usb 4-1: config 1 interface 0 altsetting 128 endpoint 0x82 is Bulk; changing to Interrupt [ 45.718541][ T46] usb 4-1: config 1 interface 0 altsetting 128 endpoint 0x3 is Bulk; changing to Interrupt [ 45.728894][ T46] usb 4-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 45.742893][ T46] usb 4-1: config 1 interface 0 has no altsetting 0 [ 45.748477][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.767139][ T46] usb 4-1: string descriptor 0 read error: -22 [ 45.774049][ T46] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.783928][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.795742][ T636] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 45.805579][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 45.824663][ T636] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 45.831922][ T318] usb 3-1: Using ep0 maxpacket: 16 [ 45.848485][ T46] usb 4-1: bad CDC descriptors [ 45.856126][ T318] usb 3-1: config 8 has an invalid interface number: 216 but max is 0 [ 45.865650][ T318] usb 3-1: config 8 has no interface number 0 [ 45.871774][ T318] usb 3-1: config 8 interface 216 has no altsetting 0 [ 45.883599][ T318] usb 3-1: New USB device found, idVendor=0ace, idProduct=2011, bcdDevice= 1.01 [ 45.894076][ T318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.902950][ T318] usb 3-1: Product: syz [ 45.907898][ T318] usb 3-1: Manufacturer: syz [ 45.912528][ T318] usb 3-1: SerialNumber: syz [ 45.969305][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 45.978567][ T31] usb 2-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 45.988945][ T31] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 45.997938][ T31] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 46.014492][ T31] usb 2-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 46.023639][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.031717][ T31] usb 2-1: Product: syz [ 46.035960][ T31] usb 2-1: Manufacturer: syz [ 46.040609][ T31] usb 2-1: SerialNumber: syz [ 46.062538][ T46] usb 4-1: USB disconnect, device number 13 [ 46.137220][ T318] usb-storage 3-1:8.216: USB Mass Storage device detected [ 46.165107][ T318] usb-storage 3-1:8.216: device ignored [ 46.236238][ T318] usb 3-1: USB disconnect, device number 15 [ 46.348805][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 46.359536][ T31] usb 2-1: USB disconnect, device number 14 [ 46.420804][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.515614][ T46] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 46.672470][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.683237][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.695214][ T46] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 46.705028][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 46.719184][ T46] usb 1-1: SerialNumber: syz [ 46.885845][ T660] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 46.895808][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 46.925401][ T657] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 46.925424][ T657] rust_binder: Read failure Err(EFAULT) in pid:73 [ 46.939151][ T657] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 46.946408][ T657] rust_binder: Read failure Err(EFAULT) in pid:73 [ 46.955837][ T46] usb 1-1: invalid UAC_HEADER (v1) [ 46.979633][ T46] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 46.989460][ T46] usb 1-1: USB disconnect, device number 14 [ 47.080815][ T31] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 47.095594][ T318] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 47.114692][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.143740][ T31] usb 4-1: Product: syz [ 47.148614][ T31] usb 4-1: Manufacturer: syz [ 47.151720][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.153237][ T31] usb 4-1: SerialNumber: syz [ 47.245566][ T318] usb 2-1: device descriptor read/64, error -71 [ 47.515560][ T318] usb 2-1: device descriptor read/64, error -71 [ 47.565595][ T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 47.624462][ T31] rtl8150 4-1:1.0: couldn't reset the device [ 47.642303][ T31] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 47.664183][ T31] usb 4-1: USB disconnect, device number 14 [ 47.728166][ T10] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 47.750149][ T10] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.765797][ T318] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 47.771850][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 47.789916][ T10] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 47.804452][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.815824][ T10] usb 1-1: config 0 descriptor?? [ 47.915564][ T318] usb 2-1: device descriptor read/64, error -71 [ 48.155574][ T318] usb 2-1: device descriptor read/64, error -71 [ 48.232785][ T10] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x3 [ 48.276097][ T318] usb usb2-port1: attempt power cycle [ 48.283447][ T10] hid-steam 0003:28DE:1102.0004: unbalanced collection at end of report description [ 48.305788][ T10] hid-steam 0003:28DE:1102.0004: steam_probe:parse of hid interface failed [ 48.314606][ T10] hid-steam 0003:28DE:1102.0004: probe with driver hid-steam failed with error -22 [ 48.437405][ T674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.466578][ T674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.560011][ T319] usb 1-1: USB disconnect, device number 15 [ 48.612449][ T708] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 48.640463][ T708] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 48.640488][ T708] rust_binder: Read failure Err(EFAULT) in pid:114 [ 48.654665][ T708] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 48.661788][ T318] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 48.664364][ T708] rust_binder: Read failure Err(EFAULT) in pid:114 [ 48.735564][ T318] usb 2-1: device descriptor read/8, error -71 [ 48.805574][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 48.818286][ T36] kauditd_printk_skb: 1694 callbacks suppressed [ 48.818304][ T36] audit: type=1400 audit(1777700886.900:5135): avc: denied { ioctl } for pid=705 comm="syz.2.110" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.861620][ T36] audit: type=1400 audit(1777700886.900:5136): avc: denied { ioctl } for pid=705 comm="syz.2.110" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.886629][ T36] audit: type=1400 audit(1777700886.900:5137): avc: denied { ioctl } for pid=705 comm="syz.2.110" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.911846][ T36] audit: type=1400 audit(1777700886.920:5138): avc: denied { read write } for pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.938581][ T318] usb 2-1: device descriptor read/8, error -71 [ 48.946290][ T36] audit: type=1400 audit(1777700886.920:5139): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.971596][ T36] audit: type=1400 audit(1777700886.920:5140): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.979502][ T10] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 48.997250][ T36] audit: type=1400 audit(1777700886.960:5141): avc: denied { create } for pid=720 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.018263][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.027360][ T36] audit: type=1400 audit(1777700886.960:5142): avc: denied { write } for pid=720 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.043142][ T10] usb 3-1: config 0 descriptor?? [ 49.059941][ T36] audit: type=1400 audit(1777700886.960:5143): avc: denied { read } for pid=720 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.121598][ T36] audit: type=1400 audit(1777700886.970:5144): avc: denied { ioctl } for pid=705 comm="syz.2.110" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.175574][ T318] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 49.208597][ T318] usb 2-1: device descriptor read/8, error -71 [ 49.338060][ T318] usb 2-1: device descriptor read/8, error -71 [ 49.405556][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 49.445601][ T46] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 49.453503][ T318] usb usb2-port1: unable to enumerate USB device [ 49.479421][ T10] usb 3-1: Cannot set MAC address [ 49.484664][ T10] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 49.501736][ T10] usb 3-1: USB disconnect, device number 16 [ 49.555952][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 49.563272][ T9] usb 4-1: config 0 has an invalid interface number: 14 but max is 0 [ 49.571420][ T9] usb 4-1: config 0 has no interface number 0 [ 49.577739][ T9] usb 4-1: config 0 interface 14 altsetting 160 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.588950][ T9] usb 4-1: config 0 interface 14 altsetting 160 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.599056][ T9] usb 4-1: config 0 interface 14 altsetting 160 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 49.612154][ T9] usb 4-1: config 0 interface 14 has no altsetting 0 [ 49.618932][ T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 49.627990][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.636707][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.640408][ T9] usb 4-1: config 0 descriptor?? [ 49.654239][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.664831][ T46] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 49.675726][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.689278][ T46] usb 1-1: config 0 descriptor?? [ 50.083798][ T9] uclogic 0003:256C:006E.0005: interface is invalid, ignoring [ 50.101872][ T46] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 50.115739][ T46] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 50.129206][ T318] usb 4-1: USB disconnect, device number 15 [ 50.137357][ T46] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 50.148927][ T46] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 50.167987][ T46] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 50.185622][ T46] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 50.205454][ T46] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 50.224831][ T46] playstation 0003:054C:0BA0.0006: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.0-1/input0 [ 50.295607][ T479] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 50.306809][ T46] playstation 0003:054C:0BA0.0006: Failed to retrieve feature with reportID 18: -32 [ 50.325710][ T46] playstation 0003:054C:0BA0.0006: Failed to retrieve DualShock4 pairing info: -32 [ 50.347051][ T46] playstation 0003:054C:0BA0.0006: Failed to get MAC address from DualShock4 [ 50.356784][ T46] playstation 0003:054C:0BA0.0006: Failed to create dualshock4. [ 50.367310][ T746] ================================================================== [ 50.367837][ T46] playstation 0003:054C:0BA0.0006: probe with driver playstation failed with error -32 [ 50.375422][ T746] BUG: KASAN: slab-use-after-free in read_report_descriptor+0xbf/0x100 [ 50.393324][ T746] Read of size 7 at addr ffff88810b651a60 by task fido_id/746 [ 50.400090][ T46] usb 1-1: USB disconnect, device number 16 [ 50.400896][ T746] [ 50.400937][ T746] CPU: 0 UID: 0 PID: 746 Comm: fido_id Not tainted syzkaller #0 2d55ab0d08d30afb2392ba3a535ea3e888ff1e10 [ 50.401041][ T746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 50.401076][ T746] Call Trace: [ 50.401113][ T746] [ 50.401135][ T746] __dump_stack+0x21/0x30 [ 50.401228][ T746] dump_stack_lvl+0x140/0x1c0 [ 50.401288][ T746] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.401364][ T746] print_address_description+0x71/0x210 [ 50.401434][ T746] print_report+0x4a/0x70 [ 50.401508][ T746] kasan_report+0x162/0x1a0 [ 50.401572][ T746] ? read_report_descriptor+0xbf/0x100 [ 50.401647][ T746] ? read_report_descriptor+0xbf/0x100 [ 50.401724][ T746] kasan_check_range+0x25a/0x2b0 [ 50.401781][ T746] ? read_report_descriptor+0xbf/0x100 [ 50.401855][ T746] __asan_memcpy+0x31/0x80 [ 50.401935][ T746] read_report_descriptor+0xbf/0x100 [ 50.402027][ T746] ? __cfi_read_report_descriptor+0x10/0x10 [ 50.402087][ T746] sysfs_kf_bin_read+0x1c3/0x200 [ 50.402180][ T746] ? __cfi_sysfs_kf_bin_read+0x10/0x10 [ 50.402266][ T746] kernfs_fop_read_iter+0x30b/0x580 [ 50.402342][ T746] vfs_read+0x657/0xcb0 [ 50.402451][ T746] ? __cfi_vfs_read+0x10/0x10 [ 50.402558][ T746] ? __kasan_slab_free+0x6a/0x80 [ 50.402623][ T746] ? putname+0x113/0x150 [ 50.402743][ T746] ? putname+0x113/0x150 [ 50.402824][ T746] ? __kasan_check_read+0x15/0x20 [ 50.402909][ T746] ksys_read+0x145/0x260 [ 50.402997][ T746] ? __cfi_ksys_read+0x10/0x10 [ 50.403083][ T746] ? __kasan_check_read+0x15/0x20 [ 50.403169][ T746] __x64_sys_read+0x7f/0x90 [ 50.403246][ T746] x64_sys_call+0x2638/0x2ee0 [ 50.403334][ T746] do_syscall_64+0x57/0xf0 [ 50.403412][ T746] ? clear_bhb_loop+0x50/0xa0 [ 50.403489][ T746] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.403567][ T746] RIP: 0033:0x7ffa902a7407 [ 50.403629][ T746] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 50.403685][ T746] RSP: 002b:00007ffd57718cf0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 50.403758][ T746] RAX: ffffffffffffffda RBX: 00007ffa90a3c880 RCX: 00007ffa902a7407 [ 50.403826][ T746] RDX: 0000000000001000 RSI: 00007ffd57718d40 RDI: 0000000000000004 [ 50.403894][ T746] RBP: 0000564a9b0af2c0 R08: 0000000000000000 R09: 0000000000000000 [ 50.403935][ T746] R10: 0000000000000000 R11: 0000000000000202 R12: 0000564a9b0ae4c0 [ 50.403976][ T746] R13: 00007ffd57718d40 R14: 0000000000000004 R15: 0000564a5d8ed4d8 [ 50.404028][ T746] [ 50.404050][ T746] [ 50.595671][ T479] usb 3-1: Using ep0 maxpacket: 16 [ 50.607245][ T746] Allocated by task 46: [ 50.607262][ T746] kasan_save_track+0x3e/0x80 [ 50.607286][ T746] kasan_save_alloc_info+0x40/0x50 [ 50.624846][ T479] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.631686][ T746] __kasan_kmalloc+0x96/0xb0 [ 50.631716][ T746] __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 50.648356][ T479] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 50.655778][ T746] kmemdup_noprof+0x31/0x80 [ 50.655812][ T746] hid_open_report+0x200/0x1110 [ 50.655833][ T746] ps_probe+0x2b/0x4850 [ 50.655853][ T746] hid_device_probe+0x2c1/0x5d0 [ 50.655874][ T746] really_probe+0x2d8/0x890 [ 50.655896][ T746] __driver_probe_device+0x198/0x280 [ 50.655917][ T746] driver_probe_device+0x54/0x3f0 [ 50.655938][ T746] __device_attach_driver+0x2f1/0x4b0 [ 50.667394][ T479] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 50.670643][ T746] bus_for_each_drv+0x264/0x300 [ 50.670681][ T746] __device_attach+0x2c9/0x3c0 [ 50.680154][ T479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.680481][ T746] device_initial_probe+0x1e/0x30 [ 50.705659][ T479] usb 3-1: config 0 descriptor?? [ 50.715128][ T746] bus_probe_device+0x18b/0x270 [ 50.715179][ T746] device_add+0x80c/0xbf0 [ 50.799555][ T746] hid_add_device+0x39b/0x560 [ 50.804307][ T746] usbhid_probe+0xde3/0x12b0 [ 50.808941][ T746] usb_probe_interface+0x6ac/0xc00 [ 50.814088][ T746] really_probe+0x2d8/0x890 [ 50.818705][ T746] __driver_probe_device+0x198/0x280 [ 50.824025][ T746] driver_probe_device+0x54/0x3f0 [ 50.829081][ T746] __device_attach_driver+0x2f1/0x4b0 [ 50.834495][ T746] bus_for_each_drv+0x264/0x300 [ 50.839439][ T746] __device_attach+0x2c9/0x3c0 [ 50.844237][ T746] device_initial_probe+0x1e/0x30 [ 50.849290][ T746] bus_probe_device+0x18b/0x270 [ 50.854181][ T746] device_add+0x80c/0xbf0 [ 50.858537][ T746] usb_set_configuration+0x1acf/0x20b0 [ 50.864073][ T746] usb_generic_driver_probe+0x95/0x160 [ 50.869577][ T746] usb_probe_device+0x1d4/0x380 [ 50.874485][ T746] really_probe+0x2d8/0x890 [ 50.879019][ T746] __driver_probe_device+0x198/0x280 [ 50.884378][ T746] driver_probe_device+0x54/0x3f0 [ 50.889442][ T746] __device_attach_driver+0x2f1/0x4b0 [ 50.894843][ T746] bus_for_each_drv+0x264/0x300 [ 50.899760][ T746] __device_attach+0x2c9/0x3c0 [ 50.904560][ T746] device_initial_probe+0x1e/0x30 [ 50.909617][ T746] bus_probe_device+0x18b/0x270 [ 50.914507][ T746] device_add+0x80c/0xbf0 [ 50.918870][ T746] usb_new_device+0x9f8/0x15b0 [ 50.923673][ T746] hub_event+0x30c6/0x4700 [ 50.928118][ T746] process_scheduled_works+0x7d4/0x1020 [ 50.933703][ T746] worker_thread+0xc51/0x1370 [ 50.938411][ T746] kthread+0x2c9/0x370 [ 50.942535][ T746] ret_from_fork+0x67/0xa0 [ 50.946993][ T746] ret_from_fork_asm+0x1a/0x30 [ 50.951807][ T746] [ 50.954156][ T746] Freed by task 46: [ 50.957980][ T746] kasan_save_track+0x3e/0x80 [ 50.962697][ T746] kasan_save_free_info+0x4a/0x60 [ 50.967785][ T746] __kasan_slab_free+0x5f/0x80 [ 50.972586][ T746] kfree+0x158/0x440 [ 50.975696][ T738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.976546][ T746] hid_close_report+0x628/0x6f0 [ 50.976575][ T746] hid_device_probe+0x523/0x5d0 [ 50.994595][ T746] really_probe+0x2d8/0x890 [ 50.999135][ T746] __driver_probe_device+0x198/0x280 [ 51.004457][ T746] driver_probe_device+0x54/0x3f0 [ 51.009519][ T746] __device_attach_driver+0x2f1/0x4b0 [ 51.014926][ T746] bus_for_each_drv+0x264/0x300 [ 51.019830][ T746] __device_attach+0x2c9/0x3c0 [ 51.024631][ T746] device_initial_probe+0x1e/0x30 [ 51.029686][ T746] bus_probe_device+0x18b/0x270 [ 51.030015][ T738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.034597][ T746] device_add+0x80c/0xbf0 [ 51.046667][ T746] hid_add_device+0x39b/0x560 [ 51.051381][ T746] usbhid_probe+0xde3/0x12b0 [ 51.055996][ T746] usb_probe_interface+0x6ac/0xc00 [ 51.061136][ T746] really_probe+0x2d8/0x890 [ 51.065679][ T746] __driver_probe_device+0x198/0x280 [ 51.071009][ T746] driver_probe_device+0x54/0x3f0 [ 51.076070][ T746] __device_attach_driver+0x2f1/0x4b0 [ 51.081479][ T746] bus_for_each_drv+0x264/0x300 [ 51.086377][ T746] __device_attach+0x2c9/0x3c0 [ 51.091166][ T746] device_initial_probe+0x1e/0x30 [ 51.096254][ T746] bus_probe_device+0x18b/0x270 [ 51.101151][ T746] device_add+0x80c/0xbf0 [ 51.105518][ T746] usb_set_configuration+0x1acf/0x20b0 [ 51.111017][ T746] usb_generic_driver_probe+0x95/0x160 [ 51.116538][ T746] usb_probe_device+0x1d4/0x380 [ 51.121421][ T746] really_probe+0x2d8/0x890 [ 51.125976][ T746] __driver_probe_device+0x198/0x280 [ 51.131297][ T746] driver_probe_device+0x54/0x3f0 [ 51.136370][ T746] __device_attach_driver+0x2f1/0x4b0 [ 51.141773][ T746] bus_for_each_drv+0x264/0x300 [ 51.146669][ T746] __device_attach+0x2c9/0x3c0 [ 51.151461][ T746] device_initial_probe+0x1e/0x30 [ 51.156507][ T746] bus_probe_device+0x18b/0x270 [ 51.161398][ T746] device_add+0x80c/0xbf0 [ 51.165761][ T746] usb_new_device+0x9f8/0x15b0 [ 51.170559][ T746] hub_event+0x30c6/0x4700 [ 51.175002][ T746] process_scheduled_works+0x7d4/0x1020 [ 51.180578][ T746] worker_thread+0xc51/0x1370 [ 51.185286][ T746] kthread+0x2c9/0x370 [ 51.189380][ T746] ret_from_fork+0x67/0xa0 [ 51.193830][ T746] ret_from_fork_asm+0x1a/0x30 [ 51.198646][ T746] [ 51.200989][ T746] The buggy address belongs to the object at ffff88810b651a60 [ 51.200989][ T746] which belongs to the cache kmalloc-8 of size 8 [ 51.214726][ T746] The buggy address is located 0 bytes inside of [ 51.214726][ T746] freed 8-byte region [ffff88810b651a60, ffff88810b651a68) [ 51.228208][ T746] [ 51.230551][ T746] The buggy address belongs to the physical page: [ 51.236987][ T746] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810b651b20 pfn:0x10b651 [ 51.247170][ T746] flags: 0x4000000000000000(zone=1) [ 51.252406][ T746] page_type: f5(slab) [ 51.256417][ T746] raw: 4000000000000000 ffff888100041500 ffffea0004269f80 dead000000000002 [ 51.265028][ T746] raw: ffff88810b651b20 000000000080006d 00000001f5000000 0000000000000000 [ 51.273629][ T746] page dumped because: kasan: bad access detected [ 51.280070][ T746] page_owner tracks the page as allocated [ 51.285806][ T746] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 2194523199, free_ts 2108759606 [ 51.304160][ T746] post_alloc_hook+0x37d/0x3b0 [ 51.308971][ T746] prep_new_page+0x2d/0x190 [ 51.313514][ T746] get_page_from_freelist+0x496e/0x4a20 [ 51.319101][ T746] __alloc_pages_noprof+0x35f/0x7e0 [ 51.324338][ T746] alloc_slab_page+0x6b/0x1e0 [ 51.329038][ T746] allocate_slab+0x69/0x420 [ 51.333569][ T746] ___slab_alloc+0x5a2/0x8d0 [ 51.338192][ T746] __kmalloc_noprof+0x2fc/0x500 [ 51.343081][ T746] acpi_ns_internalize_name+0x2d6/0x480 [ 51.348663][ T746] acpi_ns_get_node+0x1ab/0x360 [ 51.353545][ T746] acpi_get_handle+0x18e/0x2a0 [ 51.358347][ T746] acpi_evaluate_object_typed+0xd4/0x3a0 [ 51.364018][ T746] acpi_init_properties+0x210/0xbc0 [ 51.369255][ T746] acpi_init_device_object+0x857/0x1620 [ 51.374836][ T746] acpi_add_single_object+0x107/0x1af0 [ 51.380329][ T746] acpi_bus_check_add+0x371/0x870 [ 51.385388][ T746] page last free pid 1 tgid 1 stack trace: [ 51.391219][ T746] free_unref_page+0xbcf/0xf80 [ 51.396027][ T746] __free_pages+0x6b/0x3b0 [ 51.400476][ T746] __free_slab+0xb5/0x110 [ 51.404844][ T746] free_slab+0x18/0xe0 [ 51.408942][ T746] __put_partials+0x11b/0x150 [ 51.413675][ T746] put_cpu_partial+0x91/0xc0 [ 51.418302][ T746] __slab_free+0x1cf/0x2a0 [ 51.422791][ T746] ___cache_free+0xc9/0xe0 [ 51.427255][ T746] qlist_free_all+0xb5/0x130 [ 51.431886][ T746] kasan_quarantine_remove_cache+0x1df/0x360 [ 51.437911][ T746] kasan_cache_shrink+0xd/0x20 [ 51.442708][ T746] kmem_cache_shrink+0x11/0x30 [ 51.447511][ T746] acpi_os_purge_cache+0x19/0x30 [ 51.452487][ T746] acpi_purge_cached_objects+0x93/0xd0 [ 51.457983][ T746] acpi_initialize_objects+0x32/0xb0 [ 51.463304][ T746] acpi_bus_init+0xca/0x700 [ 51.467843][ T746] [ 51.470191][ T746] Memory state around the buggy address: [ 51.475853][ T746] ffff88810b651900: fa fc fc fc 04 fc fc fc fa fc fc fc fa fc fc fc [ 51.483964][ T746] ffff88810b651980: 00 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 51.492052][ T746] >ffff88810b651a00: 00 fc fc fc 06 fc fc fc fa fc fc fc fa fc fc fc [ 51.500150][ T746] ^ [ 51.507365][ T746] ffff88810b651a80: fa fc fc fc 00 fc fc fc fa fc fc fc fa fc fc fc [ 51.515448][ T746] ffff88810b651b00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 51.523523][ T746] ================================================================== [ 51.589489][ T748] can0: slcan on ttyS3. [ 51.658641][ T746] Disabling lock debugging due to kernel taint [ 51.680565][ T748] can0 (unregistered): slcan off ttyS3. [ 53.092386][ T479] usbhid 3-1:0.0: can't add hid device: -71 [ 53.105925][ T479] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 53.119626][ T479] usb 3-1: USB disconnect, device number 17