last executing test programs: 35.162156525s ago: executing program 1 (id=220): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0x119}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0x38, 0x8, 0x70, 0x6e}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(0x0, 0x198) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$FIOCLEX(r2, 0x5451) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x5, r3, &(0x7f0000000040), 0x6) listen(r0, 0x8) 35.147613866s ago: executing program 1 (id=221): syz_io_uring_setup(0xec6, &(0x7f0000000280)={0x0, 0x322a, 0x3000, 0xfffff7fe, 0xc5}, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r1 = eventfd(0x2) fchmod(r1, 0xa0ffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0088a80180c20068fc462a9e990208a2dc5886dd694f920600103a0000000000000000000000ffffe0000002ff0200000000000000000000000000018c009078407a00070000000000000009"], 0x4a) getpid() creat(&(0x7f0000000180)='./file0\x00', 0x70) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = epoll_create1(0x80000) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x0, 0x4}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @remote, @ipv4={'\x00', '\xff\xff', @remote}, @local, @mcast2}}, 0x38) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x4, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@msize={'msize', 0x3d, 0x5bf1b928}}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 34.790090487s ago: executing program 1 (id=222): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x210cc0, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f00000000c0)) (async) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f00000000c0)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000100)={0x98, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x400, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @nested={0x7c, 0x11, 0x0, 0x1, [@typed={0x75, 0xdd, 0x0, 0x0, @binary="43d1a7564e679de4aa6f34b2eaba77f7c0db004fbf68823670f2b6e29a59193068a2e30b61b259f2e6902c62ae567d312890be4ae1743fc79a3e0efe0635533134e04fff68653bac170be3e63acb9e5c71020d0bb0d5ee1477d47c78ec1f78fcbaa818a86ab80d0e02051285775b35c28a"}]}]}, 0x98}], 0x1}, 0x0) 34.789563467s ago: executing program 1 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x6020400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000480902120001000000000904000000ef01"], 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, &(0x7f00000002c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) timer_create(0x4, &(0x7f0000000340)={0x0, 0x5, 0x2, @tid=r2}, &(0x7f0000000380)) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r1) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 33.617364796s ago: executing program 1 (id=228): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000001040), 0x201, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, 0xffffffffffffffff, 0x7e224000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_open_pts(r1, 0x200000) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x81, 0x60, 0x74, {0x8, 0xb, 0x1, 0x1, 0x1, 0xc, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x3, 0x9, 0xae}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x2, 0xd, {0x8, 0x25, 0x1, 0x2, 0x30, 0x5, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xd, 0x0, 0x0, {0x8, 0x25, 0x1, 0x3, 0x3b2a742fe3793aea, 0xe2, 0x400}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x6a, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x6, 0x0, [{0x572, 0x0, 0x2}, {0xa0c, 0x0, 0x9}, {0xbda, 0x0, 0x7f}, {0x2c, 0x0, 0x1a}, {0x8e1}, {0x316, 0x0, 0x5}]}) 33.421900072s ago: executing program 1 (id=232): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r1, 0x9f264000) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r3 = dup(r2) ioctl$USBDEVFS_WAIT_FOR_RESUME(r3, 0x5523) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000003f80)="95530eed86407f2262fa0fce4d7cab7ab53c23412b12bbad20c802fec6d81edcfbec7a418c442d1b2fec9bd3c9a9f11c72bba89897d65046aeff6a12d7a267a22aebdd034a60bb681409dd5c30ab253cccaa85f674c4fdc9ec2d1534f64fb081dc6a63d4d5d683825714217e178cb8e778cdfe67dd6c4dfe67b899cd90a55edb5b", 0x81) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) sendmmsg(0xffffffffffffffff, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000001400)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000b40)=@pppoe={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'macvtap0\x00'}}, 0x80, &(0x7f00000024c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005a40)=ANY=[@ANYBLOB="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"], 0x1370}}], 0x4, 0x40000) ioctl$BLKRRPART(r1, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x1, 0x0, {{0xd, 0x4, 0x0, 0x1, 0x34, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private, {[@ssrr={0x89, 0x1f, 0x46, [@local, @local, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast1, @rand_addr=0x64010102, @multicast2, @private=0xa010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x7, 0x40, 0x7, 0xe04, {{0x10, 0x4, 0x2, 0x0, 0x40, 0x64, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0x3a, 0x3, 0x8, [{@private=0xa010101, 0x80000001}, {@multicast1, 0x3}, {@loopback, 0x8001}, {@private=0xa010102, 0x7fffffff}, {@local, 0x5}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x3c, 0xff, 0x0, 0x4, @local, @private2, 0x8, 0x1, 0x6, 0x5}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x84, 0x0, 0x104, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40011}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @empty, 0x23}, 0x1c) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x9, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) sendfile(r0, r0, &(0x7f0000000040)=0x7, 0x0) 33.395870773s ago: executing program 32 (id=232): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r1, 0x9f264000) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r3 = dup(r2) ioctl$USBDEVFS_WAIT_FOR_RESUME(r3, 0x5523) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000003f80)="95530eed86407f2262fa0fce4d7cab7ab53c23412b12bbad20c802fec6d81edcfbec7a418c442d1b2fec9bd3c9a9f11c72bba89897d65046aeff6a12d7a267a22aebdd034a60bb681409dd5c30ab253cccaa85f674c4fdc9ec2d1534f64fb081dc6a63d4d5d683825714217e178cb8e778cdfe67dd6c4dfe67b899cd90a55edb5b", 0x81) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) sendmmsg(0xffffffffffffffff, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000001400)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000b40)=@pppoe={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'macvtap0\x00'}}, 0x80, &(0x7f00000024c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005a40)=ANY=[@ANYBLOB="b8000000000000000000000003000000d8502e464a565c85a5a854cd7d972b19b96dd36c033e1faa10e02506298896d8edbcf5de760f5f3faeb402dda48fbf88b7e9e33669041f8288fe516df850a56f143965c99f1192575a9384ef09c18e6cc5d90a720a2d04cba9811a2137226506138301b422bda56aa2c8e072812a73fabc44324d915cb47e3b284a4f0c0e2279506bd573993b6b056354e23e72984f25600ea9a401dc9fbc8069799a26e869c24c57fc9e0000000020000000000200000901000008000000cf6b87a54b8e3a90a46709630000000010100000000000003a0000000c040000d832e7872826891e7d7642ede74db2baaaebd8def626b9743ddf1feb01e2614bb2d9e64e5ead91ffd9593f6ffc06c4bbea77bade5b53b50dee686513350f10da2faf54388cb19fd2b6d95e1ac9f977d1b12d4f4497025e9875ed064679bb46bec110da5d688d452d72a368b0d1a5359116d2dc26ee7f048fb290951ca6aea8d61d02cf0f736cd3ccf8d4c23f7d555fe3de58f997456cc08299f01f6d4007d86fa25c5628df4d684abfd9ea621e40d930fa1ff2565c2e48349cf139d7a593a47cac829636dc3613a1434ef99ff436a3f73a1ec043d23f1c10ecd1360d1d9c5db0f4c85d4de32a979f51d2ab04badabf6abcebc1ee2148073e90e6cd45abf9ef8f3e9e76574099e51c03d0e9bc0cb426ca94ddfb6a74db2322db3d0ea7038bb1a295e24873bde2f9a127d22f167d4ca2477536e8c852fabd2459d47e9f14d2101a8de912b616ba434a0f0c2404d806b984810b99edbbd48580e27529e007203a02e2f10a13eec2ec5cef6e5573bbf78c937b06630daf29ed5ee66f4efded9949814b76a42320db64efbe903fb84b2ea1f3d1606e4c71e62d4d20914791706d3733afecdbad3c1dbceec9e3477bf2e6af2c3c20f4824298bb3cb6c217090c2e20ff3724a7882f4aeb3e12120198175347a75a511255be9320f6d8ad5319227d35f564326e66b3e77982d98be2c8647830e2a0fe89ecbaa903a1125c00afcf635cda8bf40d27f535cc09f3b3a473b04ec1d002bfc8ea51fddd186a952c9d3b48dd7119a1eb1de4c546f89574797aad67df93e1087a98991ef0a34529aecfd3feb51ce19c1e528b9f51bac3448b274604b8b4d754f5e2229e608ed84a9cc86ce26a51ccd7f5d7d2d426f38fcdd712b83907c22a087b28916405da443c210f1da6cf6a89a1c0d74b8e48d860c9d199afc68098e0f808a3fc7a1ad4ebc555fba3c2e97f4e24157c3ad94c40822fa222c01fc2c0598698549fe06831dccf29c13638a4713c177d5c1088c62ddf1f73e9ae42bf37d1134a950833da9dcea72fa747c02a65a92a6086c1915f18cb9aedd06e8160134d5ec9b4d2736a1273f9f823d03de7d23ef727683922f3c37bfcbe1ef0a89456f97d4b6a553d6968fb2c8a4a0654ca6e5298f5a421649e2167633520d4de3f1790dae5be5d01d533cacb8197170a18d45c3f555ec230be4176f02e69a992687207a38a409a93dde1a1908a37203594f6534eab367b07ba635fc207a97d92acfe2ec84269b2f6f701319e74db9d6adc9da4737c390a8a052dad73539e5cc0ed44a1716a13d108b3a1adde69e66cbfe10e82f2af1e5e3fc42ae10fc92d015c476b8be812d150c0592fb5ac0fa943fa22a561ca747a705172a5a03143e4b8c3cc20789f242d85fde7ac9d2d1c6083f8c30bad75366a716d22982e0e607ad6e8b3fbc51776d26cefde7faa132c5e3ea5b51000290c05d28e6233f5bb74eb0a806924f232796901f45faa869205cb4d11a7cc7aa0067ab5407b7b7bfcc5a19d4dfc25c065eeb337415b76cfba7c579e09d3a44aff4198a5d683afbfad94e60f47ecb8d2e52c0f07c6d2d09d77a0fdcc056cf36615ca7f7566f59e4d6210dadbc5f9cf54cb6fa79cd09446033a85e20596b61b38fd33592024f88b6042f25a04c6a01ae6262ef9ef8c76aa1921437cfebea51f0c1557fb2e4b565c42269c11dccfe1c0c4f6b223c376e63805afeb2474b96277d4d1bcbece9d757dd836106bad144280bfe5a576b3e9fc8dbe"], 0x1370}}], 0x4, 0x40000) ioctl$BLKRRPART(r1, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x1, 0x0, {{0xd, 0x4, 0x0, 0x1, 0x34, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private, {[@ssrr={0x89, 0x1f, 0x46, [@local, @local, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast1, @rand_addr=0x64010102, @multicast2, @private=0xa010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x7, 0x40, 0x7, 0xe04, {{0x10, 0x4, 0x2, 0x0, 0x40, 0x64, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0x3a, 0x3, 0x8, [{@private=0xa010101, 0x80000001}, {@multicast1, 0x3}, {@loopback, 0x8001}, {@private=0xa010102, 0x7fffffff}, {@local, 0x5}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x3c, 0xff, 0x0, 0x4, @local, @private2, 0x8, 0x1, 0x6, 0x5}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x84, 0x0, 0x104, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40011}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @empty, 0x23}, 0x1c) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x9, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) sendfile(r0, r0, &(0x7f0000000040)=0x7, 0x0) 7.738203159s ago: executing program 0 (id=348): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0xff4f370c567f0000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56e, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x6, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc0, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000180)={0x0, 0x10, 0x28, {0x28, 0x23, "f70fa39f030000000000000000cb4fdca0560f920d54f365c5b105000000bf6fc9520808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_delete(r3) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a"], 0x1c}}, 0x804) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) 6.825319848s ago: executing program 3 (id=351): r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x4, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="e7686688c4aaa8734358f8685484903b4a27dd8c3f9ae9c1162772afce59a9e442d6206ded35d7be0008d1310ff1d5b5c75e3daa8da149b3385f2b92adcaf778fabd476f4164a585f12aa58291a16b3468132785b5cd2a28b2bda5b15759a75a63d9f4b795e5193feb2fad05ed8c22816c6e8311e41546e470a83307dcce985f84728cf0c50d40845733ed8d0217f9bae182c890c5e09ea0a5e384aeeb1ba19623943d436379cc62c7be998621ac0d42e951772aff3142dba061d7267e8a095338af37a837ffef7cd2c9f9abb31731d7822907585ef68068a9273ece7f2868f56953b1905a0cf3d8771c07cc84555ecc437946ceb5611b9606e42fa6ac385bed3ec6a558c6f9eb317157bb68ddec4347d93e01aabcbed0e0343342f4d1c963209979be831f68acb3848179d0e0f900608004002b80a38a9fafe2afb3a97fd33e7dab35846eb51d3048c41c7f86bb47613a04df26abb6d0d8ddc852be48903293873941bdb53f21aad049c79da7c8efbf44f374670415b4d5af5e9b6211659c222068130490f5b4c53b43da8a9eba99a599c6f50d6b130f987b91d22f897f27720f2a6dfd3c512927e2351ecbf91bd910e94768d0cb4289e097baa9f975446c942649000000000000000000000000000000b046c45758b6d7cb760a95e12a645a7517abd91070141826a99c9e2f189878a8c5e49a3f45ad6c787f623150b2fe75740e0ef57bc52573c37513656c1eff96336b941c9ddd5c8abeb306d9e14c9a46a8e204001d80000000db22bed3cd85417585e0a19e9795c324bbb8b13a90e739c74155def8b10d15999c48adbad1e324ed7a9fc8e8c2dd4387ac21fba38a665301756e197bb547f3dbdf3a9d536e272d6ad194bd1a3d74e0685c2993db0b23e49162ccb88a821f5a48cce445be07cdc02a4f9420361ed0b449d2eb7989ec581b2aa510873c2780d72cd0c2404d65f5a1feaac16018ab037602fcc2efa608007d8004003f8000000008001000000800000800d700020000007b00f28004002c800c003800ff7f00000000000004002b80d70c5ae9a44558f556c1b905d3d3bfe30e8184e6563b427e2b657e3289629c29d107825fd7314d27039e038bb0a80d0d413eb82af72b8825a6f72506b54f45dcccd6bd05574f863a2e2aa61ee50d000d002f6465762f6b766d000000006855ba1f85760004007a00140002800d005a002926d650db77e5cb36000008"], 0x478}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) socket$xdp(0x2c, 0x3, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) sendmsg$netlink(r2, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004dc0)=[@cred={{0x1c}}], 0x20, 0x8008000}, 0x8000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300200009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) readahead(r6, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000279000/0x4000)=nil, 0x4000}}) close_range(r7, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x2, 0x2, 0x52, @local, @private1, 0x1, 0x700, 0xfffffff9, 0x4}}) recvfrom(r1, &(0x7f0000000100)=""/76, 0x4c, 0x0, &(0x7f0000000280)=@ll={0x11, 0x1b, r9, 0x1, 0x2}, 0x80) 6.101677402s ago: executing program 0 (id=354): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000000)=""/137, &(0x7f00000000c0)=0x89) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0xa, 0x4) 6.077118753s ago: executing program 0 (id=355): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) syz_usb_connect(0x5, 0x46, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/1, 0xb}], 0x1}, 0x11001}, {{0x0, 0x0, 0x0}}], 0x56, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1, 0x0) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 5.056180216s ago: executing program 3 (id=361): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000200)="13000000010203", 0x7}, {&(0x7f0000000340)="a4", 0x1}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x40500, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r2, &(0x7f0000000900)={@val={0x0, 0xd}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x4, 0x1c, 0x66, 0x0, 0x20, 0x2, 0x0, @private=0xa010101, @local}, {0x16, 0xa0, 0x0, @multicast2}}}}}}, 0x32) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000000)="abe2f924a6ac91b08a70aab46b23ee43aae90a6dd2b7107b07482d69a858c87c44595f66d389236b65bf85328e000f14d9453d2d2c31c2d1d431d73c89fdd500c302aee8fdfb8e5f19ec2b16af2bea5c3687abe98a4bf2974e3ca6e4707398a8982aa8a2b9af22932182a3f4b247f31a31153e6ab20a3edb791d1a5bb885ab47a2fc9243d6df1fb00a8d77bf76c5d224700ca93b966edf642681fbfda9eb104a2697785ff7bbe799cb634d2f", 0xac}, {&(0x7f00000000c0)="301efb8a2af8b7e205973ec4edb3853543f61c81a444b1c719438a288cd8309548da1572", 0x24}, {&(0x7f0000000380)="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", 0xfc}], 0x3) 5.037132527s ago: executing program 3 (id=362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) socket$inet6(0xa, 0x3, 0x7) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) mknod(&(0x7f0000001980)='./file0\x00', 0x8, 0x10000) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000740)={0x20, 0x17, 0x4, "a4b3c570"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="000704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001c00)={0x84, &(0x7f00000017c0)={0x20, 0x1, 0x4, "15c26642"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)={0x20, 0xf, 0x4, "5de40487"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x88a8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="cd1008a2dc58", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0x38, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0xffff, {0xf, 0x6, "db02a9", 0xfffe, 0x2f, 0x1, @private0, @local, [@srh={0x89, 0x0, 0x4, 0x0, 0x7, 0x0, 0x5}]}}}}}}}}, 0x72) 4.31927182s ago: executing program 2 (id=363): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xd0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x101200, 0xa0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x101200, 0xa0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r3, &(0x7f0000000100)=""/134, 0x86) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66baa000eccd4df20fa9d1445897c4c2c509d1660f17858bcc000066baf80cb81fe3ed8eef66bafc0cec66baf80cb8712f4689ef66bafc0cb00eeef30f5d280f20e035200000000f22e0", 0x5a}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.869523625s ago: executing program 2 (id=364): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1, 0x2172, 0xffffffffffffffff, 0x5ef5c000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f00000007c0)=0x2, 0x4) syz_usb_connect(0x2, 0x48, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0xc2, 0x44, 0x8b, 0x8, 0x584, 0x8, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x8, 0x2, 0x0, 0x3, "", [{{0x9, 0x4, 0x2b, 0x11, 0x3, 0x39, 0xee, 0xa0, 0x4, [], [{{0x9, 0x5, 0x91c46c3e7ac7f8e5, 0x16, 0x40, 0x2, 0x4, 0x10}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x9, 0x4, 0x4}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x3, 0x0, 0x7}}]}}, {{0x9, 0x4, 0x23, 0x7, 0x0, 0x9, 0x37, 0x6c, 0xa}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='net/xfrm_stat\x00') write$selinux_user(r1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x8c03, &(0x7f0000000040)={[{@nr_blocks={'nr_blocks', 0x3d, [0x67]}}]}) 3.054792982s ago: executing program 0 (id=365): r0 = signalfd(0xffffffffffffffff, 0x0, 0x21) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) (async) syz_ublk_setup_io_uring(0x4234, &(0x7f0000000040)={0x0, 0x0, 0x400, 0xcf, 0x4000}, 0x0, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000280)={{r0, &(0x7f00000000c0)='@%\')#\x00', 0x80200, &(0x7f0000000100)={@_ha_fsid={[0x5, 0x73]}, {0x7, 0x8, 0xfa, 0x1ff}}, 0xffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x1}, {[0x3, 0x5, 0x7f, 0x7d]}, 0x9, 0x71, &(0x7f0000000200)=""/113}) (async) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) (async) setxattr$security_evm(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0x0, 0x0, 0x2) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x40040, 0x0) ioctl$TIOCGSID(r2, 0x5429, 0x0) read(r2, &(0x7f0000000000)=""/67, 0x43) (async) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000008140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x50, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xf, 0x20, 0x3, {0x8, 0xb, 0x1, 0x2, 0x1, 0x5, 0x30, 0xd5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xa, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x93, 0x6, 0x0, 0x1001, 0xf, 0x5, 0x2, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x6, 0x3, {0xa, 0x25, 0x25, 0x3, 0x1d, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x7ff, 0x9, 0x7, 0x0, {0xa, 0x25, 0x25, 0x9, 0x8}}}}}}}}]}}, 0x0) 1.828214581s ago: executing program 4 (id=366): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24044804) ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000001000)=0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) getsockopt$bt_hci(r0, 0x84, 0x2, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x8, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x3, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.725896214s ago: executing program 4 (id=367): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'ipvlan1\x00', 0x4000}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000002f00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000001d80)={0x1108, 0x39, 0x800, 0x70bd2a, 0x25dfdbfc, {0x9}, [@typed={0xc, 0x157, 0x0, 0x0, @str='$&,]*%\'\x00'}, @generic="1ee4cf545f65f4e2607da4758bd45fa1b81d43e6998a086cbb1572894383ab168ded56421cb8a5c75f4dc6e002933a32654495eae38316ffabcdfc206b47077512e94eb7e5eece95f78e83fec66b71162e094f295ddb3ffdb7347c6d6cc25df65d9affb51edd82c6023dc20e3191283218103068c4279b3da3e431dd45597dc2ff238c7915ff29be868da290251b2e2269b14c5c2d99ad36163659c02334df8bb900e2380f2921648efd4ef10995a3fdb34719a62497d94900c767727741140c44fa3754bfc855ab04722c5fb126d8d7d41223abdddaf6f0a76109e80119d026", @nested={0x8, 0xc8, 0x0, 0x1, [@nested={0x4, 0x159}]}, @generic="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"]}, 0x1108}, 0x1, 0x0, 0x0, 0x8041}, 0x4000804) r5 = dup3(r2, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 1.644832897s ago: executing program 4 (id=368): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000001c0)="890703f700fa528192ddb7d7370db9e5325f30069cb911cbfb1fdf942b541b8c0e6d06323abb44d55c938760dccb7c01ca1d35a45f06cd01649f7f2c4e01c387ee8863ad18f79494f75d43b00aec938b2181011266226e680cd8bff5f11ff790b01d90249ff6678a347de7d35ba6f1f0e223e9f829097b37dec9a5b7822d69e91e1fea239287725124a59cb1243e21de9eee8f07f9825dd71b175ee7861b0b0b59e102ecdf62e6068f90bb8aa531671243a3716e631c818c1a1346bf953273f490f88fe24ae86066e92a2ebf01a1f8f4e4fc2d2ba5340501b0897fcaa602691121d2d04c8572", 0xe6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 1.630332177s ago: executing program 4 (id=369): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000004c0)="b9800000c00f3235000400000f300f794000f30f0966ba2100edb8000000000f23c00f21f835010007000f23f8c4c1785345813e0f79cb0f070f01c8660f3a0aff40", 0x42}], 0x1, 0x3c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES32=0x0], 0xe) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000102030000000000000000b1f2de0600"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008080) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40a02, 0x0) write$khugepaged_scan(r4, &(0x7f0000000000), 0x8) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r6, &(0x7f0000001840)={&(0x7f0000001580)={0xa, 0x4e22, 0x7ffffffc, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16], 0x30}, 0x4000810) r7 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="02000000080000002cbd7000fbdbdf25030007003c0000001414bb0000000000000000030005000000000002004e20ffffffff000000000000000076838963ae5793ea9fe2fe82b4e8a0b505afaeae5242645fcdde9542895d92d0a534620000000000"], 0x40}, 0x1, 0x7}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYRESHEX=r10, @ANYBLOB="70d86829e2a6fd51fbc332892fc41256b67a5664908031d4877fb3e0768896b09b127aa893d7a66a1e56a1480d71979fae05ea55ffb0a8efc0c92022a6a4ef84c6961a1adaf3ef23f11d02c71ab654a9d6f08d3a33974bf99d56264c687efa5c680ebe8532291adbf2618faf923cfc09ec7fbc5268b00db23b4c2cad9f2a6030337d483edbe4a7426887f0099ebc2348bd994eb002f3e09b33046c25db66734b885cfef8a42be24bf2614aa75d09a0c6756fb326eb915a674543c823426846a70651658ec6492a4b59dcbef38d8144cd25b11fd298a91a293e211191e5db75f8097f1ceeb632febd48239d335ac19c3e"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44001) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="01072cbd70000000000045000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000021}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mount$incfs(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100), 0xa18082, &(0x7f0000000040)=ANY=[@ANYBLOB="00b886975488481e75606d58d056fc96c64bb2596a0ceb2cf0722a47e17b2af08c05d58031e659da9aea02"]) 1.437600184s ago: executing program 3 (id=370): r0 = socket(0x1a, 0x3, 0x3a) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r1, 0x9f264000) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000080000000, 0x95, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x33}, 0x8, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x5c, 0xfffffffe}}, 0xe8) setsockopt$inet6_buf(r2, 0x29, 0x2d, &(0x7f0000003f80)="95530eed86407f2262fa0fce4d7cab7ab53c23412b12bbad20c802fec6d81edcfbec7a418c442d1b2fec9bd3c9a9f11c72bba89897d65046aeff6a12d7a267a22aebdd034a60bb681409dd5c30ab253cccaa85f674c4fdc9ec2d1534f64fb081dc6a63d4d5d683825714217e178cb8e778cdfe67dd6c4dfe67b899cd90a55edb5b", 0x81) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x147c7c, 0x0) io_setup(0x2, &(0x7f0000000a00)=0x0) io_submit(r4, 0x1, &(0x7f0000000a40)=[&(0x7f0000000000)={0x0, 0x0, 0x22, 0x8, 0x4, r3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, r3}]) madvise(&(0x7f00000cf000/0x1000)=nil, 0x1000, 0x17) sendmmsg(0xffffffffffffffff, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000001400)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000b40)=@pppoe={0x18, 0x0, {0x3, @local, 'macvtap0\x00'}}, 0x80, &(0x7f00000024c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005a40)=ANY=[@ANYBLOB="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"], 0x1370}}], 0x4, 0x40000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f000008e000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getsockopt$MRT6(r0, 0x29, 0x24, 0x0, &(0x7f0000000080)) 987.148308ms ago: executing program 4 (id=371): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40a02, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x401, 0xeb, "a9a0a78a52a3d414266963ffe971a1c601217c5dc386aea898e18d5cb691c2706cfd92b2ae2452b93260b6651c5565fd7b04c68d2b1d879c36afdafe3229e9aab97c613c3aac8f3a6c46aef5082dab0f8d2ccdda51df1aa6f080794d408023b5866f4b33f45ede7fb38ec9e3ee4b8a916959fa58b0d41003802c38add78ed6d26c7a91e9ac6bd8ccb32ee8e09ef823defacb50dfa6100f0e3d3d7e632e98f66764ad64890be3112083281d2677e4909c64f8e59bd0c430a39df08cbfa75a3dfad4a1fb553a5ad174b64806ce5d69b7988fce013d70a1fbc79b7986caa63e578ea54b7d2d41de243dc9d616"}}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000001300)=0xffff0002) close(0x3) 917.83936ms ago: executing program 4 (id=372): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0xcf, 0x4000}, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d40)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x20, 0x80, 0x1c, {0x7, 0x5, 0x3, 0x5, 0x6, 0x5, 0x9, 0x800, 0x8, 0x5c2b, 0x2, 0x8}}, &(0x7f0000000c40)={0x20, 0x85, 0x4, 0xffffffff}, &(0x7f0000000c80)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000cc0)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000d00)={0x20, 0x89, 0x2, 0x2}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xc004) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 837.117073ms ago: executing program 2 (id=373): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000400)="2ae0e510", 0xa1, 0x24000014, &(0x7f0000000000)={0xa, 0x0, 0x20000000, @mcast1}, 0x1c) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='unlock m'], 0xb) unshare(0x6020400) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004844}, 0x4004010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendto$inet6(r2, &(0x7f0000000400)="2ae0e510", 0xa1, 0x24000014, &(0x7f0000000000)={0xa, 0x0, 0x20000000, @mcast1}, 0x1c) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) (async) write$vga_arbiter(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='unlock m'], 0xb) (async) unshare(0x6020400) (async) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004844}, 0x4004010) (async) 816.179764ms ago: executing program 3 (id=374): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, 0x3000, 0x2}) 805.436854ms ago: executing program 2 (id=375): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) getrandom(&(0x7f0000000000)=""/234, 0xea, 0x3) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 712.659067ms ago: executing program 3 (id=376): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000200)={@val={0xa, 0x88a8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="cd1008a2dc58", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0x10, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x407a, 0x7, 0x9}}}}}}}, 0x4a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x16, 0x0, 0x101}}) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x6, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xa, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000040)={0x2c, &(0x7f0000000180)={0x40, 0x0, 0x28, {0x28, 0x2, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup(r6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="79611200000000"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 293.145001ms ago: executing program 2 (id=377): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x4, 0x6}, {0x64}, {0x6}]}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x7c, 0x0, 0x0) (async) unshare(0x62040200) (async) r3 = socket(0x8000000010, 0x2, 0x0) setpriority(0x1, 0x0, 0xe) write(r3, &(0x7f0000000500)="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", 0xfc) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae03, 0x8) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000020ac0)={{0x9000, 0x10000, 0x0, 0x9, 0xfd, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16, 0x10}, {0x200000, 0x10000, 0x9, 0xff, 0x40, 0xf5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0x1, 0x100000, 0x0, 0x4, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0xfc, 0x4}, {0x100000, 0x100000, 0xf, 0xe, 0x4, 0x42, 0xb, 0x81, 0xf4, 0xdb, 0xe, 0x2}, {0x10000, 0xc000, 0xb, 0x3, 0x3, 0x6, 0xeb, 0x7f, 0x6, 0xff, 0x9, 0x3a}, {0x34000, 0x14a000, 0x9, 0x9, 0xb1, 0x4, 0x21, 0x81, 0x7f, 0x0, 0x1, 0x8}, {0x3000, 0x8000000, 0x9, 0x1, 0x3, 0x8, 0x7, 0x7, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x1000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x0, 0x0, 0xb0, 0x9}, {0x10000, 0x1800}, {0x2000, 0x5}, 0x80000031, 0x0, 0x40000, 0x2026, 0x8, 0x500, 0x4000, [0x6, 0x3, 0x80, 0xffc]}) 175.617295ms ago: executing program 2 (id=378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="e80000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400000000000000000000000000000000000c0002800500010011"], 0xe8}}, 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x800c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x50, 0x16, {0x8, 0xb, 0x0, 0x2, 0x1, 0x22, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x85, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x77, 0x3, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 751.7µs ago: executing program 0 (id=379): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 0s ago: executing program 0 (id=380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x60000600) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') r2 = dup(0xffffffffffffffff) memfd_create(&(0x7f0000000980)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7\xc6yE\xa8\xd6A\xe8*\xedEd\x14m|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6E&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00'/717, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) r5 = syz_ublk_setup_io_uring(0x5f77, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, r2}, &(0x7f0000000380)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000180)={0x2e, 0x23, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0x64a, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x197}}}, &(0x7f0000000280)=0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r9, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r5, r13, &(0x7f0000000200)={0x0, 0xcedb, 0x10700, 0x0, 0xd1}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x10002, 0x5, 0x3ab, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x0, 0x2, 0x262}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10, 0x1, 0x902c4, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40002030, 0x5200, 0x2, 0x9e, 0x0, r5}}], 0x16, &(0x7f0000001540)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r12, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r14, 0x4004ae99, &(0x7f0000000040)=0x1) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x20}) r15 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r15, 0x5404, &(0x7f0000000000)={0x1, 0xc9a, 0xfffffffc, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) ioctl$TCSETSF(r15, 0x5404, &(0x7f0000000040)={0xa, 0xf7af, 0xdff1f001, 0x2, 0x7, "4cb8b26f2184c4030016001e00"}) kernel console output (not intermixed with test programs): [ 56.420841][ T312] usb 2-1: device descriptor read/8, error -71 [ 56.505337][ T842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.152'. [ 56.517457][ T576] Bluetooth: hci0: Frame reassembly failed (-84) [ 56.524471][ T576] Bluetooth: hci0: Frame reassembly failed (-84) [ 56.539867][ T312] usb usb2-port1: unable to enumerate USB device [ 56.659786][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 56.789780][ T10] usb 3-1: device descriptor read/64, error -71 [ 56.949630][ T36] audit: type=1400 audit(1780477365.379:262): avc: denied { read } for pid=843 comm="syz.1.153" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.972303][ T36] audit: type=1400 audit(1780477365.379:263): avc: denied { open } for pid=843 comm="syz.1.153" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.995373][ T36] audit: type=1400 audit(1780477365.379:264): avc: denied { ioctl } for pid=843 comm="syz.1.153" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.039857][ T10] usb 3-1: device descriptor read/64, error -71 [ 57.110477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:3d:8c:06:9c:07, vlan:0) [ 57.149951][ T10] usb usb3-port1: attempt power cycle [ 57.339796][ T387] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 57.489776][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 57.497397][ T387] usb 2-1: Using ep0 maxpacket: 8 [ 57.503553][ T387] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 57.514724][ T387] usb 2-1: config 0 interface 0 has no altsetting 0 [ 57.521523][ T387] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 57.530597][ T387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.539264][ T10] usb 3-1: device descriptor read/8, error -71 [ 57.545909][ T387] usb 2-1: config 0 descriptor?? [ 57.680727][ T10] usb 3-1: device descriptor read/8, error -71 [ 57.752395][ T36] audit: type=1400 audit(1780477366.189:265): avc: denied { mount } for pid=843 comm="syz.1.153" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 57.919765][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 57.940727][ T10] usb 3-1: device descriptor read/8, error -71 [ 57.974214][ T36] audit: type=1400 audit(1780477366.409:266): avc: denied { create } for pid=843 comm="syz.1.153" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.994857][ T36] audit: type=1400 audit(1780477366.409:267): avc: denied { read } for pid=843 comm="syz.1.153" name="file2" dev="tmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.017767][ T387] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x3 [ 58.024605][ T387] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 58.024619][ T36] audit: type=1400 audit(1780477366.409:268): avc: denied { open } for pid=843 comm="syz.1.153" path="/38/file2" dev="tmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.031444][ T387] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 58.054172][ T36] audit: type=1400 audit(1780477366.409:269): avc: denied { ioctl } for pid=843 comm="syz.1.153" path="/38/file2" dev="tmpfs" ino=227 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.060583][ T387] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 58.091428][ T387] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 58.098304][ T387] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 58.105223][ T387] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 58.112083][ T387] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 58.124675][ T10] usb 3-1: device descriptor read/8, error -71 [ 58.131548][ T387] arvo 0003:1E7D:30D4.0007: hidraw0: USB HID v0.04 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 58.152139][ T311] usb 4-1: USB disconnect, device number 22 [ 58.177375][ T36] audit: type=1326 audit(1780477366.609:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.3.154" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f776779ce59 code=0x0 [ 58.204397][ T312] usb 2-1: USB disconnect, device number 24 [ 58.239969][ T10] usb usb3-port1: unable to enumerate USB device [ 58.278823][ T848] x_tables: unsorted entry at hook 1 [ 58.549812][ T661] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.550635][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 58.569868][ T36] audit: type=1400 audit(1780477367.009:271): avc: denied { setopt } for pid=849 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.589346][ T311] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 58.638689][ T855] fuse: Bad value for 'group_id' [ 58.643693][ T855] fuse: Bad value for 'group_id' [ 58.739771][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 58.745208][ T311] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 58.753931][ T311] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 58.761542][ T311] usb 4-1: can't read configurations, error -61 [ 58.889773][ T311] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 58.914893][ T878] __vm_enough_memory: pid: 878, comm: syz.1.164, bytes: 140737488359424 not enough memory for the allocation [ 59.039964][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 59.045470][ T311] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 59.054217][ T311] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 59.061826][ T311] usb 4-1: can't read configurations, error -61 [ 59.068151][ T311] usb usb4-port1: attempt power cycle [ 59.419783][ T311] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 59.440106][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 59.445613][ T311] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 59.454273][ T311] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 59.461875][ T311] usb 4-1: can't read configurations, error -61 [ 59.600619][ T311] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 59.630422][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 59.635890][ T311] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 59.644871][ T311] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 59.652789][ T311] usb 4-1: can't read configurations, error -61 [ 59.659308][ T311] usb usb4-port1: unable to enumerate USB device [ 59.939782][ T311] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 60.101040][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 60.109082][ T311] usb 2-1: not running at top speed; connect to a high speed hub [ 60.118091][ T311] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.129587][ T311] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 60.138678][ T311] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 60.147397][ T311] usb 2-1: Product: syz [ 60.151602][ T311] usb 2-1: Manufacturer: syz [ 60.156197][ T311] usb 2-1: SerialNumber: syz [ 60.161320][ T311] usb 2-1: config 0 descriptor?? [ 60.369410][ T311] usb 2-1: USB disconnect, device number 25 [ 60.379777][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 60.540864][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.551005][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 60.560751][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.574816][ T10] usb 1-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 60.583873][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.591867][ T10] usb 1-1: Product: syz [ 60.596003][ T10] usb 1-1: Manufacturer: syz [ 60.600624][ T10] usb 1-1: SerialNumber: syz [ 60.605721][ T10] usb 1-1: config 0 descriptor?? [ 60.611749][ T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 60.619474][ T10] usb 1-1: Detected SIO [ 60.623724][ T10] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 60.631435][ T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 60.850116][ T10] usb 1-1: USB disconnect, device number 25 [ 60.857278][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 60.866852][ T10] ftdi_sio 1-1:0.0: device disconnected [ 61.119788][ T311] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 61.249784][ T311] usb 2-1: device descriptor read/64, error -71 [ 61.409552][ T895] process 'syz.0.171' launched './file0' with NULL argv: empty string added [ 61.499764][ T311] usb 2-1: device descriptor read/64, error -71 [ 61.579801][ T312] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 61.679818][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 61.730804][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.741804][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.751580][ T311] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 61.759102][ T312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.772045][ T312] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.781494][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.791763][ T312] usb 4-1: config 0 descriptor?? [ 61.809754][ T10] usb 1-1: device descriptor read/64, error -71 [ 61.919755][ T311] usb 2-1: device descriptor read/64, error -71 [ 62.049777][ T10] usb 1-1: device descriptor read/64, error -71 [ 62.066681][ T915] input: syz0 as /devices/virtual/input/input4 [ 62.073529][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 62.073552][ T36] audit: type=1400 audit(1780477370.509:285): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=619 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.101894][ T36] audit: type=1400 audit(1780477370.519:286): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=619 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.125780][ T36] audit: type=1400 audit(1780477370.519:287): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=619 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.183969][ T311] usb 2-1: device descriptor read/64, error -71 [ 62.199111][ T312] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 62.208726][ T312] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 62.299794][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 62.300269][ T311] usb usb2-port1: attempt power cycle [ 62.419790][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 62.429859][ T10] usb 1-1: device descriptor read/64, error -71 [ 62.511477][ T387] usb 4-1: USB disconnect, device number 27 [ 62.569771][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 62.575967][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 62.587153][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 62.598458][ T9] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 62.607603][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.615673][ T9] usb 3-1: Product: syz [ 62.619944][ T9] usb 3-1: Manufacturer: syz [ 62.624532][ T9] usb 3-1: SerialNumber: syz [ 62.629957][ T922] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 62.649755][ T311] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 62.670781][ T311] usb 2-1: device descriptor read/8, error -71 [ 62.679788][ T10] usb 1-1: device descriptor read/64, error -71 [ 62.789848][ T10] usb usb1-port1: attempt power cycle [ 62.800811][ T311] usb 2-1: device descriptor read/8, error -71 [ 62.809747][ T387] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 62.842176][ T9] usb 3-1: USB disconnect, device number 27 [ 62.851706][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.939861][ T387] usb 4-1: device descriptor read/64, error -71 [ 63.049830][ T311] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 63.080762][ T311] usb 2-1: device descriptor read/8, error -71 [ 63.129785][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 63.150736][ T10] usb 1-1: device descriptor read/8, error -71 [ 63.179806][ T387] usb 4-1: device descriptor read/64, error -71 [ 63.220748][ T311] usb 2-1: device descriptor read/8, error -71 [ 63.280815][ T10] usb 1-1: device descriptor read/8, error -71 [ 63.329967][ T311] usb usb2-port1: unable to enumerate USB device [ 63.393882][ T929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=929 comm=syz.2.181 [ 63.429816][ T387] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 63.519793][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 63.540835][ T10] usb 1-1: device descriptor read/8, error -71 [ 63.559771][ T387] usb 4-1: device descriptor read/64, error -71 [ 63.659826][ T311] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 63.670806][ T10] usb 1-1: device descriptor read/8, error -71 [ 63.779854][ T10] usb usb1-port1: unable to enumerate USB device [ 63.809799][ T387] usb 4-1: device descriptor read/64, error -71 [ 63.810884][ T311] usb 3-1: config index 0 descriptor too short (expected 7768, got 18) [ 63.824379][ T311] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 63.833432][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.841913][ T311] usb 3-1: config 0 descriptor?? [ 63.847754][ T311] ftdi_sio 3-1:0.0: Ignoring interface reserved for JTAG [ 63.919887][ T387] usb usb4-port1: attempt power cycle [ 64.049335][ T31] usb 3-1: USB disconnect, device number 28 [ 64.279782][ T311] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 64.429805][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 64.436154][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.448846][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.458644][ T311] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 64.471522][ T311] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 64.480598][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.489778][ T387] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 64.489934][ T311] usb 2-1: config 0 descriptor?? [ 64.510312][ T387] usb 4-1: Using ep0 maxpacket: 8 [ 64.516541][ T387] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 64.529752][ T387] usb 4-1: config 0 interface 0 has no altsetting 0 [ 64.536379][ T387] usb 4-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00 [ 64.545861][ T387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.554775][ T387] usb 4-1: config 0 descriptor?? [ 64.570524][ T36] audit: type=1400 audit(1780477373.009:288): avc: denied { execstack } for pid=944 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 64.606791][ T36] audit: type=1400 audit(1780477373.039:289): avc: denied { read write } for pid=946 comm="syz.2.188" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.630234][ T36] audit: type=1400 audit(1780477373.039:290): avc: denied { open } for pid=946 comm="syz.2.188" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.653505][ T36] audit: type=1400 audit(1780477373.039:291): avc: denied { ioctl } for pid=946 comm="syz.2.188" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.799836][ T31] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 64.859757][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 64.903680][ T933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.912259][ T933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.922354][ T311] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 64.931342][ T311] microsoft 0003:045E:07DA.0009: unknown main item tag 0x4 [ 64.938577][ T311] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 64.945860][ T311] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 64.953267][ T311] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 64.960861][ T311] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 64.968127][ T311] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 64.975493][ T311] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 64.977406][ T935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.982937][ T311] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 64.993144][ T935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.998647][ T311] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 65.013097][ T935] GUP no longer grows the stack in syz.3.184 (935): 200000004000-20000000a000 (200000002000) [ 65.013614][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 65.023962][ T935] CPU: 0 UID: 0 PID: 935 Comm: syz.3.184 Not tainted syzkaller #0 cd47f8e0083a5f781c340422d7a309d6c8dfd054 [ 65.023994][ T935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 65.024019][ T935] Call Trace: [ 65.024025][ T935] [ 65.024033][ T935] __dump_stack+0x21/0x30 [ 65.024066][ T935] dump_stack_lvl+0x140/0x1c0 [ 65.024095][ T935] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.024120][ T935] ? find_vma+0xd3/0x120 [ 65.024140][ T935] ? vma_is_secretmem+0x11/0x50 [ 65.024165][ T935] dump_stack+0x19/0x20 [ 65.024189][ T935] __get_user_pages+0x1e37/0x22d0 [ 65.024225][ T935] ? populate_vma_page_range+0x220/0x220 [ 65.024251][ T935] get_user_pages_remote+0x3af/0xc00 [ 65.024278][ T935] ? __cfi_get_user_pages_remote+0x10/0x10 [ 65.024304][ T935] __access_remote_vm+0x1df/0x630 [ 65.024327][ T935] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 65.024353][ T935] ? access_remote_vm+0x60/0x60 [ 65.024374][ T935] ? _raw_spin_lock+0x92/0x120 [ 65.024393][ T935] ? __cfi__raw_spin_lock+0x10/0x10 [ 65.024412][ T935] access_remote_vm+0x39/0x60 [ 65.024433][ T935] proc_pid_cmdline_read+0x4c8/0xb80 [ 65.024458][ T935] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 65.024482][ T935] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 65.024506][ T935] vfs_readv+0x5f0/0xa10 [ 65.024528][ T935] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 65.024551][ T935] ? do_readv+0x2e0/0x2e0 [ 65.024578][ T935] __x64_sys_preadv+0x1a6/0x2c0 [ 65.024598][ T935] ? __cfi___x64_sys_preadv+0x10/0x10 [ 65.024618][ T935] ? switch_fpu_return+0x12/0x20 [ 65.024641][ T935] x64_sys_call+0x1ee9/0x2ee0 [ 65.024659][ T935] do_syscall_64+0x57/0xf0 [ 65.024677][ T935] ? clear_bhb_loop+0x50/0xa0 [ 65.024698][ T935] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.024720][ T935] RIP: 0033:0x7f776779ce59 [ 65.024741][ T935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.024757][ T935] RSP: 002b:00007f77685a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 65.024785][ T935] RAX: ffffffffffffffda RBX: 00007f7767a15fa0 RCX: 00007f776779ce59 [ 65.024799][ T935] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005 [ 65.024812][ T935] RBP: 00007f7767832d6f R08: 00000000fffffff9 R09: 0000000000000000 [ 65.024826][ T935] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 65.024838][ T935] R13: 00007f7767a16038 R14: 00007f7767a15fa0 R15: 00007ffd7cd2ce68 [ 65.024855][ T935] [ 65.025732][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 65.031416][ T36] audit: type=1400 audit(1780477373.449:292): avc: denied { execute } for pid=934 comm="syz.3.184" name="file0" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.046628][ T10] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 65.052888][ T311] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 65.057428][ T387] logitech 0003:046D:C283.000A: unknown main item tag 0x0 [ 65.059090][ T311] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 65.065228][ T387] logitech 0003:046D:C283.000A: unknown main item tag 0x0 [ 65.068183][ T311] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 65.073694][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 65.077771][ T36] audit: type=1400 audit(1780477373.449:293): avc: denied { execute_no_trans } for pid=934 comm="syz.3.184" path="/33/file0" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.082783][ T387] logitech 0003:046D:C283.000A: unknown main item tag 0x0 [ 65.086747][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 65.092009][ T10] usb 3-1: config 220 has no interface number 2 [ 65.097381][ T311] microsoft 0003:045E:07DA.0009: unsupported Resolution Multiplier 0 [ 65.102923][ T387] logitech 0003:046D:C283.000A: unknown main item tag 0x0 [ 65.108450][ T36] audit: type=1400 audit(1780477373.449:294): avc: denied { execmem } for pid=934 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 65.113807][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 65.119198][ T31] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 65.126922][ T387] logitech 0003:046D:C283.000A: unknown main item tag 0x0 [ 65.129588][ T311] microsoft 0003:045E:07DA.0009: unsupported Resolution Multiplier 0 [ 65.134007][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 65.139091][ T311] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 65.144372][ T387] logitech 0003:046D:C283.000A: unknown main item tag 0x0 [ 65.157557][ T311] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 65.169741][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 65.170122][ T311] microsoft 0003:045E:07DA.0009: no inputs found [ 65.179757][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 65.180364][ T31] usb 1-1: string descriptor 0 read error: -22 [ 65.185398][ T387] logitech 0003:046D:C283.000A: unknown main item tag 0x0 [ 65.190308][ T31] usb 1-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 65.203464][ T387] logitech 0003:046D:C283.000A: unknown main item tag 0x0 [ 65.205374][ T311] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 65.210099][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 65.229332][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.238163][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.251159][ T311] usb 2-1: USB disconnect, device number 30 [ 65.253901][ T387] logitech 0003:046D:C283.000A: hidraw1: USB HID v0.04 Device [HID 046d:c283] on usb-dummy_hcd.3-1/input0 [ 65.632238][ T10] usb 3-1: Product: syz [ 65.636515][ T10] usb 3-1: Manufacturer: syz [ 65.641169][ T10] usb 3-1: SerialNumber: syz [ 65.646215][ T387] logitech 0003:046D:C283.000A: no inputs found [ 65.661785][ T387] usb 4-1: USB disconnect, device number 30 [ 65.690887][ T959] 9pnet_fd: Insufficient options for proto=fd [ 66.015197][ T10] uvcvideo 3-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 66.024628][ T10] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 66.033212][ T10] usb 3-1: No valid video chain found. [ 66.038747][ T10] usb 3-1: selecting invalid altsetting 0 [ 66.051282][ T10] usb 3-1: USB disconnect, device number 29 [ 66.109763][ T328] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 66.259757][ T328] usb 2-1: Using ep0 maxpacket: 8 [ 66.264886][ T45] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 66.273551][ T328] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 1023 [ 66.283579][ T328] usb 2-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 66.296479][ T328] usb 2-1: config 1 interface 0 has no altsetting 0 [ 66.304430][ T328] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 66.313506][ T328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.321566][ T328] usb 2-1: Product: ᧷䠖圍爕汽族푣硎笏⁈ [ 66.328606][ T328] usb 2-1: Manufacturer: У [ 66.333134][ T328] usb 2-1: SerialNumber: ㈣⣒觀䎹啕וּ睨틖㭻ඟ휞欱Σ㷦דּ䐡巉ﳒ혿驛⦜㷽ⵚ덆傷꾦蜢덤䢘堑珇ᱦ霫驞䠓풫閪⨌⻩ꈋ퇚觖躍전걓奂芯遷ꀓ蹆困콛리襑谚捏볲㴎㉈샮❯엦ਠꯧ욜퍻᲌砏㇎ມ鷂⤘퉡￞찔뤁擩䰽๩ᖅﶾ陞鈣烎폠껋煦ᑊ㫳ഐ訒鷚빐鉙坑떇擱숨ꬉ兟鎶㸋⻳墑੟媙㦁懆鈤 [ 66.369691][ T983] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 66.376916][ T983] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 66.422818][ T991] ======================================================= [ 66.422818][ T991] WARNING: The mand mount option has been deprecated and [ 66.422818][ T991] and is ignored by this kernel. Remove the mand [ 66.422818][ T991] option from the mount to silence this warning. [ 66.422818][ T991] ======================================================= [ 66.460023][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 66.468378][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 66.480790][ T45] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice= 0.40 [ 66.490605][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.498659][ T45] usb 4-1: Product: syz [ 66.502950][ T45] usb 4-1: Manufacturer: syz [ 66.507566][ T45] usb 4-1: SerialNumber: syz [ 66.585201][ T983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.593765][ T983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.602253][ T983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.610742][ T983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.619102][ T983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.628227][ T983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.642734][ T328] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 6 proto 1 vid 0x04B8 pid 0x0202 [ 66.654838][ T328] usb 2-1: USB disconnect, device number 31 [ 66.661993][ T328] usblp0: removed [ 66.719152][ T988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.727708][ T988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.740948][ T45] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 08, bLength 9, bSynchAddress 07 [ 66.759397][ T45] usb 4-1: USB disconnect, device number 31 [ 66.779161][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.869753][ T387] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 67.019745][ T387] usb 3-1: Using ep0 maxpacket: 8 [ 67.025897][ T387] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.037013][ T387] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 67.049932][ T387] usb 3-1: config 0 interface 0 has no altsetting 0 [ 67.056545][ T387] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 67.065602][ T387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.074250][ T387] usb 3-1: config 0 descriptor?? [ 67.139767][ T45] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 67.163424][ T36] kauditd_printk_skb: 49 callbacks suppressed [ 67.163452][ T36] audit: type=1400 audit(1780477375.599:344): avc: denied { bpf } for pid=1004 comm="syz.1.202" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.289749][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 67.295942][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 67.307619][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 67.318785][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 67.330044][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 67.339195][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.347947][ T45] usb 4-1: config 0 descriptor?? [ 67.353375][ T1002] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 67.361777][ T45] hub 4-1:0.0: USB hub found [ 67.439770][ T10] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 67.482274][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.489316][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.496316][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.503294][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.510362][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.517319][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.524430][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.531527][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.538562][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.545582][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.554612][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.561615][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.562037][ T45] hub 4-1:0.0: 2 ports detected [ 67.568569][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.568599][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.587482][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.594546][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.601570][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.602273][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 67.608528][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.608555][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.633605][ T31] usb 1-1: USB disconnect, device number 30 [ 67.635470][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.646849][ T36] audit: type=1400 audit(1780477376.069:345): avc: denied { create } for pid=1008 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 67.648590][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.670383][ T36] audit: type=1400 audit(1780477376.109:346): avc: denied { write } for pid=1008 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 67.673207][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 67.703258][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.710264][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.717231][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.724211][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 67.734866][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.741838][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 67.754678][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.761663][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.763184][ T36] audit: type=1400 audit(1780477376.199:347): avc: denied { connect } for pid=1001 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.768618][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.789976][ T45] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 67.794876][ T10] usb 2-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 67.806065][ T45] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 67.810402][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.825805][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.832855][ T36] audit: type=1400 audit(1780477376.229:348): avc: denied { write } for pid=1001 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.833645][ T10] usb 2-1: config 0 descriptor?? [ 67.853849][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 67.862915][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.862945][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.872696][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 67.884653][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.884685][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.898818][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.898954][ T1007] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 67.905888][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.915916][ T45] usb 4-1: USB disconnect, device number 32 [ 67.920160][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.933486][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.940931][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.948021][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.955047][ T387] cherry 0003:046A:0023.000B: unknown main item tag 0x0 [ 67.962616][ T387] cherry 0003:046A:0023.000B: hidraw0: USB HID v0.06 Device [HID 046a:0023] on usb-dummy_hcd.2-1/input0 [ 68.039753][ T31] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 68.134846][ T1007] netlink: 'syz.1.203': attribute type 1 has an invalid length. [ 68.189774][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 68.196318][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 68.204697][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.214821][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.225174][ T31] usb 1-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 68.234334][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.242357][ T31] usb 1-1: Product: syz [ 68.246515][ T31] usb 1-1: Manufacturer: syz [ 68.251124][ T31] usb 1-1: SerialNumber: syz [ 68.344377][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.351274][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.358172][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.364979][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.371772][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.378553][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.385355][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.392243][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.399023][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.405817][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.412607][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.419379][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.426177][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.432976][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.439776][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.446545][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.453336][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.460203][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.466655][ T31] usb 1-1: Unsupported UAC3 BADD profile [ 68.467005][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.479510][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.486440][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.488452][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 68.493249][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.508949][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.515761][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.520557][ T31] usb 1-1: USB disconnect, device number 31 [ 68.525559][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.537830][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.539340][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.561965][ T36] audit: type=1400 audit(1780477376.979:349): avc: denied { create } for pid=1012 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.582479][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.589282][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.593012][ T36] audit: type=1400 audit(1780477376.979:350): avc: denied { connect } for pid=1012 comm="syz.3.205" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.596082][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.616968][ T36] audit: type=1400 audit(1780477376.979:351): avc: denied { getopt } for pid=1012 comm="syz.3.205" laddr=172.20.20.10 lport=255 faddr=172.20.20.40 fport=20064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.623376][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.648194][ T36] audit: type=1400 audit(1780477376.989:352): avc: denied { create } for pid=1006 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.655227][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.674236][ T36] audit: type=1400 audit(1780477376.989:353): avc: denied { mounton } for pid=1006 comm="syz.1.203" path="/55/file0" dev="tmpfs" ino=316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.680910][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.709887][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.716657][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.723633][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.730453][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.737211][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.744002][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.750787][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.757544][ T10] sony 0003:1345:3008.000C: unknown main item tag 0x0 [ 68.765452][ T10] sony 0003:1345:3008.000C: hiddev96,hidraw1: USB HID v80.08 Device [HID 1345:3008] on usb-dummy_hcd.1-1/input0 [ 68.777312][ T10] sony 0003:1345:3008.000C: failed to claim input [ 68.783822][ T387] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 68.795828][ T10] usb 2-1: USB disconnect, device number 32 [ 68.919782][ T387] usb 4-1: device descriptor read/64, error -71 [ 69.101800][ T1020] syz.1.207 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 69.113632][ T1020] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.169786][ T387] usb 4-1: device descriptor read/64, error -71 [ 69.359793][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 69.409804][ T387] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 69.489773][ T10] usb 2-1: device descriptor read/64, error -71 [ 69.524086][ T31] usb 3-1: USB disconnect, device number 30 [ 69.540014][ T387] usb 4-1: device descriptor read/64, error -71 [ 69.556086][ T1024] tmpfs: Invalid uid '0x00000000ffffffff' [ 69.562081][ T1024] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 69.729771][ T10] usb 2-1: device descriptor read/64, error -71 [ 69.779786][ T387] usb 4-1: device descriptor read/64, error -71 [ 69.851808][ T1028] netlink: 100 bytes leftover after parsing attributes in process `syz.0.211'. [ 69.889880][ T387] usb usb4-port1: attempt power cycle [ 69.969918][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 70.076687][ T1033] incfs: ino conflict with backing FS 1 [ 70.099787][ T10] usb 2-1: device descriptor read/64, error -71 [ 70.239772][ T387] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 70.260933][ T387] usb 4-1: device descriptor read/8, error -71 [ 70.319784][ T65] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 70.339767][ T10] usb 2-1: device descriptor read/64, error -71 [ 70.391036][ T387] usb 4-1: device descriptor read/8, error -71 [ 70.449911][ T10] usb usb2-port1: attempt power cycle [ 70.470845][ T65] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1600, setting to 1023 [ 70.483309][ T65] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 70.492468][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.500558][ T65] usb 1-1: Product: syz [ 70.504712][ T65] usb 1-1: Manufacturer: syz [ 70.509303][ T65] usb 1-1: SerialNumber: syz [ 70.579770][ T31] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 70.639752][ T387] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 70.660663][ T387] usb 4-1: device descriptor read/8, error -71 [ 70.709809][ T31] usb 3-1: device descriptor read/64, error -71 [ 70.717567][ T65] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 70.724544][ T65] usb 1-1: unit 4 not found! [ 70.731818][ T65] usb 1-1: USB disconnect, device number 32 [ 70.740179][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.790923][ T387] usb 4-1: device descriptor read/8, error -71 [ 70.799782][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 70.820903][ T10] usb 2-1: device descriptor read/8, error -71 [ 70.900045][ T387] usb usb4-port1: unable to enumerate USB device [ 70.950948][ T10] usb 2-1: device descriptor read/8, error -71 [ 70.959945][ T31] usb 3-1: device descriptor read/64, error -71 [ 71.189813][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 71.199803][ T31] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 71.210810][ T10] usb 2-1: device descriptor read/8, error -71 [ 71.329815][ T31] usb 3-1: device descriptor read/64, error -71 [ 71.340735][ T10] usb 2-1: device descriptor read/8, error -71 [ 71.449867][ T10] usb usb2-port1: unable to enumerate USB device [ 71.459810][ T387] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 71.569758][ T31] usb 3-1: device descriptor read/64, error -71 [ 71.619782][ T387] usb 1-1: Using ep0 maxpacket: 8 [ 71.626064][ T387] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.639132][ T387] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 71.648216][ T387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.657449][ T387] usb 1-1: config 0 descriptor?? [ 71.690140][ T31] usb usb3-port1: attempt power cycle [ 71.929800][ T45] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 72.029760][ T31] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 72.050737][ T31] usb 3-1: device descriptor read/8, error -71 [ 72.059752][ T45] usb 4-1: device descriptor read/64, error -71 [ 72.093195][ T387] usbhid 1-1:0.0: can't add hid device: -71 [ 72.099184][ T387] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 72.110643][ T387] usb 1-1: USB disconnect, device number 33 [ 72.155218][ T1054] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 72.190874][ T31] usb 3-1: device descriptor read/8, error -71 [ 72.309804][ T45] usb 4-1: device descriptor read/64, error -71 [ 72.429766][ T31] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 72.462195][ T31] usb 3-1: device descriptor read/8, error -71 [ 72.549769][ T45] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 72.590777][ T31] usb 3-1: device descriptor read/8, error -71 [ 72.611992][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 72.612009][ T36] audit: type=1400 audit(1780477381.049:372): avc: denied { load_policy } for pid=1063 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 72.612035][ T1064] SELinux: policydb string length -2135898710 does not match expected length 8 [ 72.647814][ T1064] SELinux: failed to load policy [ 72.654650][ T1064] netlink: 5 bytes leftover after parsing attributes in process `syz.0.224'. [ 72.671070][ T1066] netlink: 'syz.0.225': attribute type 58 has an invalid length. [ 72.679758][ T45] usb 4-1: device descriptor read/64, error -71 [ 72.699783][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 72.699899][ T31] usb usb3-port1: unable to enumerate USB device [ 72.850124][ T10] usb 2-1: too many configurations: 72, using maximum allowed: 8 [ 72.862925][ T10] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 72.872000][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.880614][ T10] usb 2-1: config 0 descriptor?? [ 72.919775][ T45] usb 4-1: device descriptor read/64, error -71 [ 72.929762][ T387] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 73.029902][ T45] usb usb4-port1: attempt power cycle [ 73.081104][ T387] usb 1-1: unable to get BOS descriptor or descriptor too short [ 73.089505][ T387] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 73.099956][ T387] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 73.110924][ T387] usb 1-1: config 1 interface 1 has no altsetting 0 [ 73.118926][ T387] usb 1-1: New USB device found, idVendor=2a6b, idProduct=0101, bcdDevice= 0.40 [ 73.128137][ T387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.136224][ T387] usb 1-1: Product: syz [ 73.140439][ T387] usb 1-1: Manufacturer: syz [ 73.145013][ T387] usb 1-1: SerialNumber: syz [ 73.355830][ T36] audit: type=1400 audit(1780477381.789:373): avc: denied { append } for pid=1065 comm="syz.0.225" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 73.356398][ T1066] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 73.378869][ T45] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 73.393773][ T1066] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 73.401140][ T36] audit: type=1400 audit(1780477381.829:374): avc: denied { write } for pid=1067 comm="syz.2.226" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.420572][ T387] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 73.423921][ T36] audit: type=1400 audit(1780477381.829:375): avc: denied { block_suspend } for pid=1067 comm="syz.2.226" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.439754][ T387] usb 1-1: found format II with max.bitrate = 2418, frame size=7 [ 73.453866][ T45] usb 4-1: device descriptor read/8, error -71 [ 73.466733][ T387] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 73.474590][ T387] usb 1-1: found format II with max.bitrate = 2418, frame size=7 [ 73.492158][ T387] usb 1-1: USB disconnect, device number 34 [ 73.505863][ T614] udevd[614]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.512029][ T36] audit: type=1400 audit(1780477381.939:376): avc: denied { read write } for pid=1069 comm="syz.2.227" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 73.530219][ T65] hid-generic 0000:0004:261D.000D: unknown main item tag 0x0 [ 73.545267][ T36] audit: type=1400 audit(1780477381.939:377): avc: denied { open } for pid=1069 comm="syz.2.227" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 73.562849][ T65] hid-generic 0000:0004:261D.000D: unknown main item tag 0x0 [ 73.582701][ T65] hid-generic 0000:0004:261D.000D: unknown main item tag 0x0 [ 73.590107][ T65] hid-generic 0000:0004:261D.000D: unknown main item tag 0x0 [ 73.597493][ T65] hid-generic 0000:0004:261D.000D: unknown main item tag 0x0 [ 73.600697][ T45] usb 4-1: device descriptor read/8, error -71 [ 73.619177][ T65] hid-generic 0000:0004:261D.000D: hidraw0: HID v0.03 Device [syz1] on syz0 [ 73.621665][ T31] usb 2-1: USB disconnect, device number 37 [ 73.667542][ T36] audit: type=1400 audit(1780477382.099:378): avc: denied { bind } for pid=1069 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.713702][ T36] audit: type=1400 audit(1780477382.129:379): avc: denied { listen } for pid=1069 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.733623][ T36] audit: type=1400 audit(1780477382.129:380): avc: denied { connect } for pid=1069 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.756841][ T36] audit: type=1400 audit(1780477382.129:381): avc: denied { write } for pid=1069 comm="syz.2.227" path="socket:[8869]" dev="sockfs" ino=8869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.814376][ T557] bridge_slave_1: left allmulticast mode [ 73.820180][ T557] bridge_slave_1: left promiscuous mode [ 73.825810][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.833957][ T557] bridge_slave_0: left allmulticast mode [ 73.839611][ T557] bridge_slave_0: left promiscuous mode [ 73.845460][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.865130][ T45] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 73.900670][ T45] usb 4-1: device descriptor read/8, error -71 [ 73.952517][ T557] veth1_macvtap: left promiscuous mode [ 73.958113][ T557] veth0_vlan: left promiscuous mode [ 74.030828][ T45] usb 4-1: device descriptor read/8, error -71 [ 74.043368][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.050558][ T1085] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.066503][ T1085] bridge_slave_0: entered allmulticast mode [ 74.075118][ T1085] bridge_slave_0: entered promiscuous mode [ 74.081983][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.089117][ T1085] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.096400][ T1085] bridge_slave_1: entered allmulticast mode [ 74.102860][ T1085] bridge_slave_1: entered promiscuous mode [ 74.150694][ T45] usb usb4-port1: unable to enumerate USB device [ 74.188689][ T570] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.195752][ T570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.205939][ T576] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.213001][ T576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.236943][ T1085] veth0_vlan: entered promiscuous mode [ 74.247468][ T1085] veth1_macvtap: entered promiscuous mode [ 74.419794][ T387] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 74.509817][ T65] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.573276][ T387] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 74.581598][ T387] usb 1-1: config 0 has no interface number 0 [ 74.597118][ T387] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 74.608041][ T387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.619976][ T387] usb 1-1: Product: syz [ 74.626438][ T387] usb 1-1: Manufacturer: syz [ 74.628023][ T1114] netlink: 172 bytes leftover after parsing attributes in process `syz.2.242'. [ 74.631388][ T387] usb 1-1: SerialNumber: syz [ 74.649845][ T387] usb 1-1: config 0 descriptor?? [ 74.661203][ T65] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 74.668452][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 74.678136][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 74.690545][ T65] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 74.699682][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.712848][ T65] usb 5-1: Product: syz [ 74.717100][ T65] usb 5-1: Manufacturer: syz [ 74.722024][ T65] usb 5-1: SerialNumber: syz [ 74.727515][ T65] usb 5-1: config 0 descriptor?? [ 74.737264][ T65] usb 5-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 74.879792][ T31] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 74.903148][ T387] usb 1-1: Found UVC 0.08 device syz (046d:0823) [ 74.909608][ T387] usb 1-1: No valid video chain found. [ 74.916586][ T387] usb 1-1: USB disconnect, device number 35 [ 74.939654][ T65] usb 5-1: USB disconnect, device number 2 [ 75.030972][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.041972][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.052465][ T31] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 75.061523][ T31] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 75.069502][ T31] usb 3-1: Manufacturer: syz [ 75.069762][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 75.080681][ T31] usb 3-1: config 0 descriptor?? [ 75.229776][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 75.236033][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 75.244281][ T9] usb 4-1: config 0 has no interface number 0 [ 75.251766][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 75.260841][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.268839][ T9] usb 4-1: Product: syz [ 75.273062][ T9] usb 4-1: Manufacturer: syz [ 75.277655][ T9] usb 4-1: SerialNumber: syz [ 75.283251][ T9] usb 4-1: config 0 descriptor?? [ 75.288991][ T9] smsc95xx v2.0.0 [ 75.419130][ T1125] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 75.659754][ T45] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 75.689507][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 75.700336][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 75.730459][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 75.745286][ T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 75.755987][ T9] usb 4-1: USB disconnect, device number 41 [ 75.809747][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 75.815938][ T45] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 75.826230][ T45] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 75.835733][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.843791][ T45] usb 1-1: Product: syz [ 75.848247][ T45] usb 1-1: Manufacturer: syz [ 75.852877][ T45] usb 1-1: SerialNumber: syz [ 75.857977][ T45] usb 1-1: config 0 descriptor?? [ 75.864111][ T45] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 75.871921][ T45] usb 1-1: Detected FT232R [ 75.890477][ T1114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1114 comm=syz.2.242 [ 75.903268][ T31] uclogic 0003:256C:006D.000E: interface is invalid, ignoring [ 76.064055][ T45] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 76.071120][ T45] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 76.078181][ T45] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 76.085344][ T45] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 76.094389][ T45] usb 1-1: USB disconnect, device number 36 [ 76.100241][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 76.101003][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 76.112846][ T10] usb 3-1: USB disconnect, device number 35 [ 76.118763][ T45] ftdi_sio 1-1:0.0: device disconnected [ 76.281230][ T9] usb 4-1: config index 0 descriptor too short (expected 8251, got 59) [ 76.289570][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.299745][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 76.315070][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.324916][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 76.333215][ T9] usb 4-1: SerialNumber: syz [ 76.339398][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 76.541209][ T1134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.549829][ T1134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.562852][ T1134] SELinux: failed to load policy [ 76.600911][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.611341][ T31] usb 4-1: USB disconnect, device number 42 [ 76.739804][ T9] usb 5-1: device descriptor read/64, error -71 [ 76.879801][ T387] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 76.909784][ T45] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 76.979774][ T9] usb 5-1: device descriptor read/64, error -71 [ 77.009777][ T387] usb 3-1: device descriptor read/64, error -71 [ 77.060783][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.071723][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.081474][ T45] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 77.090534][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.099633][ T45] usb 1-1: config 0 descriptor?? [ 77.219755][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.249747][ T387] usb 3-1: device descriptor read/64, error -71 [ 77.306774][ T1153] can0: slcan on ttynull. [ 77.349803][ T9] usb 5-1: device descriptor read/64, error -71 [ 77.419763][ T31] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 77.489749][ T387] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 77.512870][ T45] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 77.519934][ T45] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 77.526926][ T45] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 77.533920][ T45] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 77.540900][ T45] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 77.547831][ T45] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 77.554889][ T45] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 77.562456][ T45] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 77.580721][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.591641][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.599774][ T9] usb 5-1: device descriptor read/64, error -71 [ 77.601726][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 77.620511][ T31] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 77.629529][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.629764][ T387] usb 3-1: device descriptor read/64, error -71 [ 77.639994][ T31] usb 4-1: config 0 descriptor?? [ 77.709867][ T9] usb usb5-port1: attempt power cycle [ 77.715634][ T45] cp2112 0003:10C4:EA90.000F: Part Number: 0x00 Device Version: 0x00 [ 77.879781][ T387] usb 3-1: device descriptor read/64, error -71 [ 77.990168][ T387] usb usb3-port1: attempt power cycle [ 78.049765][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 78.058393][ T31] steelseries 0003:1038:1410.0010: not enough fields in HID_OUTPUT_REPORT 0 [ 78.071655][ T9] usb 5-1: device descriptor read/8, error -71 [ 78.116892][ T1153] input: syz0 as /devices/virtual/input/input7 [ 78.123868][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 78.123884][ T36] audit: type=1400 audit(1780477386.559:429): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=710 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.152315][ T36] audit: type=1400 audit(1780477386.559:430): avc: denied { open } for pid=95 comm="acpid" path=2F6465762F696E7075742F6576656E7433202864656C6574656429 dev="devtmpfs" ino=710 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.202283][ T9] usb 5-1: device descriptor read/8, error -71 [ 78.220049][ T1152] can0 (unregistered): slcan off ttynull. [ 78.226142][ T45] cp2112 0003:10C4:EA90.000F: error setting SMBus config [ 78.235552][ T45] cp2112 0003:10C4:EA90.000F: probe with driver cp2112 failed with error -71 [ 78.249221][ T45] usb 1-1: USB disconnect, device number 37 [ 78.339760][ T387] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 78.370744][ T387] usb 3-1: device descriptor read/8, error -71 [ 78.449770][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 78.470895][ T9] usb 5-1: device descriptor read/8, error -71 [ 78.500760][ T387] usb 3-1: device descriptor read/8, error -71 [ 78.611167][ T9] usb 5-1: device descriptor read/8, error -71 [ 78.719877][ T9] usb usb5-port1: unable to enumerate USB device [ 78.739053][ T36] audit: type=1400 audit(1780477387.169:431): avc: denied { wake_alarm } for pid=1199 comm="syz.0.254" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.740319][ T1200] x_tables: unsorted underflow at hook 4 [ 78.760124][ T36] audit: type=1400 audit(1780477387.169:432): avc: denied { getopt } for pid=1199 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.785249][ T387] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 78.810750][ T387] usb 3-1: device descriptor read/8, error -71 [ 78.878272][ T1205] netlink: 104 bytes leftover after parsing attributes in process `syz.0.256'. [ 78.901184][ T1205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 78.922455][ T36] audit: type=1400 audit(1780477387.359:433): avc: denied { mount } for pid=1206 comm="syz.0.257" name="/" dev="pstore" ino=2738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 78.945833][ T387] usb 3-1: device descriptor read/8, error -71 [ 79.059832][ T387] usb usb3-port1: unable to enumerate USB device [ 79.091850][ T1209] netlink: 'syz.0.258': attribute type 11 has an invalid length. [ 79.189345][ T36] audit: type=1400 audit(1780477387.619:434): avc: denied { mounton } for pid=1210 comm="syz.0.259" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.241365][ T36] audit: type=1400 audit(1780477387.679:435): avc: denied { bind } for pid=1210 comm="syz.0.259" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.260592][ T1216] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 79.261464][ T36] audit: type=1400 audit(1780477387.679:436): avc: denied { name_bind } for pid=1210 comm="syz.0.259" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 79.271141][ T1216] SELinux: failed to load policy [ 79.291793][ T36] audit: type=1400 audit(1780477387.679:437): avc: denied { node_bind } for pid=1210 comm="syz.0.259" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 79.323847][ T36] audit: type=1326 audit(1780477387.759:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1219 comm="syz.0.262" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99f139ce59 code=0x7ffe0000 [ 79.769804][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 79.930908][ T45] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 79.940193][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.949026][ T45] usb 5-1: config 0 descriptor?? [ 80.196303][ T31] usb 4-1: USB disconnect, device number 43 [ 80.226841][ T1244] netlink: 'syz.3.270': attribute type 27 has an invalid length. [ 80.241185][ T1244] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.248249][ T1244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.260086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.272259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.284483][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.296558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.308704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.320764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.332889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.344949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.357067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.369145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.536821][ T1248] netlink: 252 bytes leftover after parsing attributes in process `syz.3.272'. [ 80.910286][ T31] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 81.060186][ T31] usb 4-1: device descriptor read/64, error -71 [ 81.129757][ T312] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 81.299774][ T31] usb 4-1: device descriptor read/64, error -71 [ 81.306110][ T312] usb 3-1: Using ep0 maxpacket: 8 [ 81.313531][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.324842][ T312] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 81.337984][ T312] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 81.347358][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.365728][ T312] usb 3-1: config 0 descriptor?? [ 81.559857][ T31] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 81.576948][ T312] konepure 0003:1E7D:2DBE.0011: unknown main item tag 0x0 [ 81.584215][ T1266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.598905][ T45] usb 5-1: Cannot set autoneg [ 81.603786][ T45] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 81.615472][ T312] konepure 0003:1E7D:2DBE.0011: unknown main item tag 0x0 [ 81.622800][ T1266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.633803][ T312] konepure 0003:1E7D:2DBE.0011: unknown main item tag 0x0 [ 81.644361][ T45] usb 5-1: USB disconnect, device number 7 [ 81.650415][ T312] konepure 0003:1E7D:2DBE.0011: unknown main item tag 0x0 [ 81.661804][ T312] konepure 0003:1E7D:2DBE.0011: unknown main item tag 0x0 [ 81.669093][ T312] konepure 0003:1E7D:2DBE.0011: unknown main item tag 0x0 [ 81.676799][ T312] konepure 0003:1E7D:2DBE.0011: unknown main item tag 0x0 [ 81.684218][ T312] konepure 0003:1E7D:2DBE.0011: unknown main item tag 0x0 [ 81.691407][ T311] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 81.699053][ T31] usb 4-1: device descriptor read/64, error -71 [ 81.711381][ T312] konepure 0003:1E7D:2DBE.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.2-1/input0 [ 81.777466][ T312] usb 3-1: USB disconnect, device number 40 [ 81.849756][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 81.857104][ T311] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 81.868555][ T311] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 81.878677][ T311] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 81.890550][ T311] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.899787][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.909589][ T311] usb 1-1: Product: о [ 81.914269][ T311] usb 1-1: Manufacturer: ї [ 81.918787][ T311] usb 1-1: SerialNumber: syz [ 81.939812][ T31] usb 4-1: device descriptor read/64, error -71 [ 82.050329][ T31] usb usb4-port1: attempt power cycle [ 82.130711][ T1264] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 82.138083][ T1264] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 82.230520][ T1274] netlink: 52 bytes leftover after parsing attributes in process `syz.4.280'. [ 82.354299][ T1279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.389778][ T1282] SELinux: policydb version 210515120 does not match my version range 15-33 [ 82.398787][ T31] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 82.406861][ T1280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.426597][ T1279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.435843][ T1282] SELinux: failed to load policy [ 82.447724][ T1280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.461863][ T31] usb 4-1: device descriptor read/8, error -71 [ 82.484642][ T1279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.520927][ T1264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.544910][ T1279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.560673][ T1279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.571024][ T1264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.580187][ T1279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.621249][ T31] usb 4-1: device descriptor read/8, error -71 [ 82.789911][ T327] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 82.802327][ T311] cdc_ncm 1-1:1.0: bind() failure [ 82.811785][ T311] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 82.820031][ T311] cdc_ncm 1-1:1.1: bind() failure [ 82.828449][ T311] usb 1-1: USB disconnect, device number 38 [ 82.859749][ T31] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 82.880798][ T31] usb 4-1: device descriptor read/8, error -71 [ 82.949747][ T327] usb 5-1: Using ep0 maxpacket: 32 [ 82.956471][ T327] usb 5-1: unable to get BOS descriptor or descriptor too short [ 82.967024][ T327] usb 5-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 82.976309][ T327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.984552][ T327] usb 5-1: Product: syz [ 82.988847][ T327] usb 5-1: Manufacturer: syz [ 82.993940][ T327] usb 5-1: SerialNumber: syz [ 83.013317][ T31] usb 4-1: device descriptor read/8, error -71 [ 83.129877][ T31] usb usb4-port1: unable to enumerate USB device [ 83.218782][ T327] usb 5-1: USB disconnect, device number 8 [ 83.686379][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 83.686395][ T36] audit: type=1400 audit(1780477392.119:455): avc: denied { read write } for pid=1314 comm="syz.0.291" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 83.787392][ T36] audit: type=1400 audit(1780477392.159:456): avc: denied { open } for pid=1314 comm="syz.0.291" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 83.815849][ T36] audit: type=1400 audit(1780477392.209:457): avc: denied { write } for pid=1316 comm="syz.4.293" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.039751][ T327] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 84.069753][ T311] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 84.211098][ T327] usb 4-1: unable to get BOS descriptor or descriptor too short [ 84.220068][ T327] usb 4-1: not running at top speed; connect to a high speed hub [ 84.235884][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 84.248127][ T311] usb 1-1: config 1 has an invalid interface number: 2 but max is 1 [ 84.267193][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.281236][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 84.299761][ T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 84.318767][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 84.329926][ T311] usb 1-1: config 1 has no interface number 0 [ 84.341208][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 84.351004][ T311] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.369945][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.378034][ T327] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x65, changing to 0x5 [ 84.407666][ T311] usb 1-1: Product: syz [ 84.428457][ T311] usb 1-1: Manufacturer: syz [ 84.433694][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 25185, setting to 64 [ 84.449725][ T311] usb 1-1: SerialNumber: syz [ 84.471106][ T327] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 84.490090][ T327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.509663][ T327] usb 4-1: Product: syz [ 84.513991][ T327] usb 4-1: Manufacturer: syz [ 84.518586][ T327] usb 4-1: SerialNumber: syz [ 84.553709][ T327] usb 4-1: config 0 descriptor?? [ 84.558972][ T1313] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 84.597941][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.652442][ T36] audit: type=1400 audit(1780477393.089:458): avc: denied { nlmsg_read } for pid=1326 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.674819][ T311] usb 1-1: USB disconnect, device number 39 [ 84.709723][ T36] audit: type=1400 audit(1780477393.129:459): avc: denied { write } for pid=1326 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.759356][ T36] audit: type=1400 audit(1780477393.139:460): avc: denied { setopt } for pid=1326 comm="syz.4.295" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.780415][ T1313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.811226][ T1313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.838504][ T327] usb 4-1: USB disconnect, device number 48 [ 84.986439][ T36] audit: type=1400 audit(1780477393.419:461): avc: denied { append } for pid=1331 comm="syz.4.296" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 85.239312][ T36] audit: type=1400 audit(1780477393.669:462): avc: denied { create } for pid=1333 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 85.269711][ C0] net_ratelimit: 78027 callbacks suppressed [ 85.269729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.287767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.297648][ T36] audit: type=1400 audit(1780477393.699:463): avc: denied { create } for pid=1333 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.299972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 85.331072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:3d:8c:06:9c:07, vlan:0) [ 85.343197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.343220][ T36] audit: type=1400 audit(1780477393.699:464): avc: denied { setopt } for pid=1333 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.355254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 85.355321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 85.355384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.410593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:3d:8c:06:9c:07, vlan:0) [ 85.422975][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.519752][ T327] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 85.659782][ T327] usb 5-1: device descriptor read/64, error -71 [ 85.689761][ T1339] kvm: pic: level sensitive irq not supported [ 85.689941][ T1339] kvm: pic: non byte write [ 85.774677][ T1347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 85.800449][ T1347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=1347 comm=syz.3.301 [ 85.919936][ T327] usb 5-1: device descriptor read/64, error -71 [ 86.069750][ T31] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 86.179740][ T327] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 86.242042][ T31] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 86.260659][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.281068][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 86.310178][ T31] usb 4-1: config 1 has no interface number 0 [ 86.320755][ T31] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 86.331592][ T327] usb 5-1: device descriptor read/64, error -71 [ 86.348032][ T31] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 86.371295][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.380638][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.388752][ T31] usb 4-1: Product: syz [ 86.402864][ T31] usb 4-1: Manufacturer: syz [ 86.407592][ T31] usb 4-1: SerialNumber: syz [ 86.579752][ T327] usb 5-1: device descriptor read/64, error -71 [ 86.618982][ T31] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 86.633712][ T31] usb 4-1: USB disconnect, device number 49 [ 86.659765][ T311] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 86.690213][ T327] usb usb5-port1: attempt power cycle [ 86.759759][ T312] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 86.789872][ T311] usb 3-1: device descriptor read/64, error -71 [ 86.910857][ T312] usb 1-1: config 120 has an invalid interface number: 125 but max is 0 [ 86.919357][ T312] usb 1-1: config 120 has no interface number 0 [ 86.925787][ T312] usb 1-1: config 120 interface 125 altsetting 8 endpoint 0x3 has invalid maxpacket 33206, setting to 64 [ 86.937572][ T312] usb 1-1: config 120 interface 125 has no altsetting 0 [ 86.946171][ T312] usb 1-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 86.955661][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.963830][ T312] usb 1-1: Product: syz [ 86.968107][ T312] usb 1-1: Manufacturer: syz [ 86.973216][ T312] usb 1-1: SerialNumber: syz [ 86.982148][ T1362] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 87.029807][ T327] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 87.037725][ T311] usb 3-1: device descriptor read/64, error -71 [ 87.060830][ T327] usb 5-1: device descriptor read/8, error -71 [ 87.192235][ T327] usb 5-1: device descriptor read/8, error -71 [ 87.198601][ T1362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.209054][ T1362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.222020][ T1362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.231715][ T1362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.243092][ T1362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.252567][ T1362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.268941][ T312] ums-usbat 1-1:120.125: USB Mass Storage device detected [ 87.289744][ T311] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 87.327886][ T312] usb 1-1: USB disconnect, device number 40 [ 87.389745][ T45] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 87.429745][ T311] usb 3-1: device descriptor read/64, error -71 [ 87.440159][ T327] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 87.460824][ T327] usb 5-1: device descriptor read/8, error -71 [ 87.539737][ T45] usb 4-1: Invalid ep0 maxpacket: 16 [ 87.590828][ T327] usb 5-1: device descriptor read/8, error -71 [ 87.670452][ T311] usb 3-1: device descriptor read/64, error -71 [ 87.676960][ T45] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 87.700101][ T327] usb usb5-port1: unable to enumerate USB device [ 87.739752][ T312] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 87.790097][ T311] usb usb3-port1: attempt power cycle [ 87.830463][ T45] usb 4-1: Invalid ep0 maxpacket: 16 [ 87.836921][ T45] usb usb4-port1: attempt power cycle [ 87.869772][ T312] usb 1-1: device descriptor read/64, error -71 [ 88.109747][ T312] usb 1-1: device descriptor read/64, error -71 [ 88.129743][ T311] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 88.160832][ T311] usb 3-1: device descriptor read/8, error -71 [ 88.179766][ T45] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 88.200439][ T45] usb 4-1: Invalid ep0 maxpacket: 16 [ 88.290729][ T311] usb 3-1: device descriptor read/8, error -71 [ 88.329780][ T45] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 88.349760][ T312] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 88.357761][ T45] usb 4-1: Invalid ep0 maxpacket: 16 [ 88.363794][ T45] usb usb4-port1: unable to enumerate USB device [ 88.499752][ T312] usb 1-1: device descriptor read/64, error -71 [ 88.539752][ T311] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 88.561102][ T311] usb 3-1: device descriptor read/8, error -71 [ 88.609749][ T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 88.693870][ T311] usb 3-1: device descriptor read/8, error -71 [ 88.749774][ T312] usb 1-1: device descriptor read/64, error -71 [ 88.756639][ T31] usb 5-1: device descriptor read/64, error -71 [ 88.811987][ T311] usb usb3-port1: unable to enumerate USB device [ 88.872748][ T312] usb usb1-port1: attempt power cycle [ 88.999791][ T31] usb 5-1: device descriptor read/64, error -71 [ 89.209750][ T312] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 89.230814][ T312] usb 1-1: device descriptor read/8, error -71 [ 89.239866][ T31] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 89.362019][ T312] usb 1-1: device descriptor read/8, error -71 [ 89.369884][ T31] usb 5-1: device descriptor read/64, error -71 [ 89.599743][ T312] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 89.609893][ T31] usb 5-1: device descriptor read/64, error -71 [ 89.620806][ T312] usb 1-1: device descriptor read/8, error -71 [ 89.722639][ T31] usb usb5-port1: attempt power cycle [ 89.752221][ T312] usb 1-1: device descriptor read/8, error -71 [ 89.862520][ T312] usb usb1-port1: unable to enumerate USB device [ 90.059744][ T31] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 90.090837][ T31] usb 5-1: device descriptor read/8, error -71 [ 90.232186][ T31] usb 5-1: device descriptor read/8, error -71 [ 90.279772][ C0] net_ratelimit: 84690 callbacks suppressed [ 90.279787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.302778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.314974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 90.327022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:3d:8c:06:9c:07, vlan:0) [ 90.339156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.351270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 90.363289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 90.375850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.387852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:3d:8c:06:9c:07, vlan:0) [ 90.400024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:3d:8c:06:9c:07, vlan:0) [ 90.448664][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 90.448680][ T36] audit: type=1400 audit(1780477398.879:476): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 90.479747][ T31] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 90.512127][ T31] usb 5-1: device descriptor read/8, error -71 [ 90.527724][ T1389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=1389 comm=syz.2.314 [ 90.641229][ T31] usb 5-1: device descriptor read/8, error -71 [ 90.729750][ T312] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 90.750419][ T31] usb usb5-port1: unable to enumerate USB device [ 90.799750][ T311] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 90.869805][ T312] usb 1-1: device descriptor read/64, error -71 [ 90.949734][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 90.957366][ T311] usb 3-1: config 7 has an invalid interface number: 215 but max is 0 [ 90.965977][ T311] usb 3-1: config 7 has no interface number 0 [ 90.972273][ T311] usb 3-1: config 7 interface 215 has no altsetting 0 [ 90.980868][ T311] usb 3-1: New USB device found, idVendor=0403, idProduct=eeec, bcdDevice=1d.28 [ 90.990237][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.998297][ T311] usb 3-1: Product: syz [ 91.004078][ T311] usb 3-1: Manufacturer: syz [ 91.008741][ T311] usb 3-1: SerialNumber: syz [ 91.129741][ T312] usb 1-1: device descriptor read/64, error -71 [ 91.193406][ T36] audit: type=1400 audit(1780477399.629:477): avc: denied { connect } for pid=1396 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.231660][ T311] usb-storage 3-1:7.215: USB Mass Storage device detected [ 91.289402][ T311] ftdi_sio 3-1:7.215: FTDI USB Serial Device converter detected [ 91.297703][ T311] ftdi_sio ttyUSB0: unknown device type: 0x1d28 [ 91.306575][ T311] usb 3-1: USB disconnect, device number 45 [ 91.333219][ T311] ftdi_sio 3-1:7.215: device disconnected [ 91.369770][ T312] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 91.459793][ T31] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 91.491172][ T1403] netlink: 'syz.4.318': attribute type 4 has an invalid length. [ 91.520207][ T312] usb 1-1: device descriptor read/64, error -71 [ 91.543822][ T36] audit: type=1400 audit(1780477399.979:478): avc: denied { read write } for pid=1401 comm="syz.4.318" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.571246][ T36] audit: type=1400 audit(1780477399.999:479): avc: denied { open } for pid=1401 comm="syz.4.318" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.622059][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 91.636980][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 91.650328][ T31] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 91.662962][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.675709][ T31] usb 4-1: config 0 descriptor?? [ 91.799738][ T312] usb 1-1: device descriptor read/64, error -71 [ 91.911200][ T312] usb usb1-port1: attempt power cycle [ 92.019774][ T311] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 92.089374][ T31] zeroplus 0003:0C12:0030.0012: unknown main item tag 0x3 [ 92.097225][ T31] zeroplus 0003:0C12:0030.0012: unknown main item tag 0x6 [ 92.104759][ T31] zeroplus 0003:0C12:0030.0012: unknown global tag 0xc [ 92.111900][ T31] zeroplus 0003:0C12:0030.0012: item 0 0 1 12 parsing failed [ 92.119513][ T31] zeroplus 0003:0C12:0030.0012: parse failed [ 92.125857][ T31] zeroplus 0003:0C12:0030.0012: probe with driver zeroplus failed with error -22 [ 92.172610][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 92.181219][ T311] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 92.192682][ T311] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 92.206754][ T311] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 92.216097][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.224290][ T311] usb 3-1: Product: syz [ 92.228593][ T311] usb 3-1: Manufacturer: syz [ 92.233699][ T311] usb 3-1: SerialNumber: syz [ 92.249755][ T312] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 92.280771][ T312] usb 1-1: device descriptor read/8, error -71 [ 92.299681][ T327] usb 4-1: USB disconnect, device number 54 [ 92.410775][ T312] usb 1-1: device descriptor read/8, error -71 [ 92.442451][ T1413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.454477][ T1413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.467206][ T311] usb 3-1: Can't get UAC3 power state for id 10 [ 92.474764][ T311] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 92.484630][ T311] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 92.499410][ T311] usb 3-1: USB disconnect, device number 46 [ 92.659745][ T312] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 92.669888][ T31] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 92.690807][ T312] usb 1-1: device descriptor read/8, error -71 [ 92.809749][ T31] usb 5-1: device descriptor read/64, error -71 [ 92.823290][ T312] usb 1-1: device descriptor read/8, error -71 [ 92.929835][ T312] usb usb1-port1: unable to enumerate USB device [ 92.998471][ T1419] tipc: Enabling of bearer rejected, failed to enable media [ 93.050201][ T31] usb 5-1: device descriptor read/64, error -71 [ 93.279741][ T311] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 93.290293][ T31] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 93.419787][ T31] usb 5-1: device descriptor read/64, error -71 [ 93.440794][ T311] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.459789][ T311] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 93.481183][ T311] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.490586][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.498585][ T311] usb 4-1: Product: syz [ 93.513006][ T311] usb 4-1: Manufacturer: syz [ 93.533205][ T311] usb 4-1: SerialNumber: syz [ 93.548397][ T311] cdc_mbim 4-1:1.0: skipping garbage [ 93.572153][ T1437] overlayfs: overlapping lowerdir path [ 93.639046][ T1441] overlayfs: failed to resolve './file0': -2 [ 93.669739][ T31] usb 5-1: device descriptor read/64, error -71 [ 93.779919][ T31] usb usb5-port1: attempt power cycle [ 93.869744][ T327] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 93.919749][ T312] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 94.022448][ T327] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.030639][ T327] usb 1-1: not running at top speed; connect to a high speed hub [ 94.038397][ T327] usb 1-1: no configurations [ 94.043383][ T327] usb 1-1: can't read configurations, error -22 [ 94.072308][ T312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.084038][ T312] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.093580][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.101908][ T312] usb 3-1: Product: syz [ 94.106216][ T312] usb 3-1: Manufacturer: syz [ 94.112425][ T312] usb 3-1: SerialNumber: syz [ 94.139737][ T31] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 94.162065][ T31] usb 5-1: device descriptor read/8, error -71 [ 94.179782][ T327] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 94.302168][ T31] usb 5-1: device descriptor read/8, error -71 [ 94.322491][ T312] usb 3-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 94.335030][ T327] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.345574][ T312] usb 3-1: unknown interface protocol 0x9, assuming v1 [ 94.352901][ T312] usb 3-1: cannot find UAC_HEADER [ 94.358149][ T327] usb 1-1: not running at top speed; connect to a high speed hub [ 94.368435][ T312] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 94.377486][ T327] usb 1-1: no configurations [ 94.382424][ T327] usb 1-1: can't read configurations, error -22 [ 94.390004][ T312] usb 3-1: USB disconnect, device number 47 [ 94.398950][ T327] usb usb1-port1: attempt power cycle [ 94.422877][ T614] udevd[614]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.551131][ T31] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 94.570811][ T31] usb 5-1: device descriptor read/8, error -71 [ 94.703434][ T31] usb 5-1: device descriptor read/8, error -71 [ 94.779769][ T327] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 94.802937][ T327] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.811117][ T327] usb 1-1: not running at top speed; connect to a high speed hub [ 94.818872][ T327] usb 1-1: no configurations [ 94.823986][ T31] usb usb5-port1: unable to enumerate USB device [ 94.830360][ T327] usb 1-1: can't read configurations, error -22 [ 94.959734][ T327] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 94.992257][ T327] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.000432][ T327] usb 1-1: not running at top speed; connect to a high speed hub [ 95.008190][ T327] usb 1-1: no configurations [ 95.013148][ T327] usb 1-1: can't read configurations, error -22 [ 95.019564][ T327] usb usb1-port1: unable to enumerate USB device [ 95.129751][ T31] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 95.269918][ T31] usb 3-1: device descriptor read/64, error -71 [ 95.289862][ C0] net_ratelimit: 78612 callbacks suppressed [ 95.289875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 95.307793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:3d:8c:06:9c:07, vlan:0) [ 95.319908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.331988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.343977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.356053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 95.368064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 95.380070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.392111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:3d:8c:06:9c:07, vlan:0) [ 95.404278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:3d:8c:06:9c:07, vlan:0) [ 95.510044][ T31] usb 3-1: device descriptor read/64, error -71 [ 95.749772][ T31] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 95.842560][ T327] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 95.909744][ T31] usb 3-1: device descriptor read/64, error -71 [ 96.009733][ T327] usb 5-1: Using ep0 maxpacket: 32 [ 96.017647][ T327] usb 5-1: unable to get BOS descriptor or descriptor too short [ 96.026326][ T327] usb 5-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.039662][ T327] usb 5-1: config 1 interface 0 has no altsetting 0 [ 96.048363][ T327] usb 5-1: string descriptor 0 read error: -22 [ 96.056084][ T327] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 96.066778][ T327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.078091][ T327] usblp0: Disabling reads from problematic bidirectional printer [ 96.159747][ T31] usb 3-1: device descriptor read/64, error -71 [ 96.210075][ T311] cdc_mbim 4-1:1.0: bind() failure [ 96.227015][ T311] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 96.236987][ T311] cdc_ncm 4-1:1.1: bind() failure [ 96.247674][ T311] usb 4-1: USB disconnect, device number 55 [ 96.281360][ T327] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 10 proto 1 vid 0x03F0 pid 0x0004 [ 96.295515][ T31] usb usb3-port1: attempt power cycle [ 96.316278][ T327] usb 5-1: USB disconnect, device number 21 [ 96.323776][ T327] usblp0: removed [ 96.629743][ T311] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 96.645451][ T31] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 96.682041][ T31] usb 3-1: device descriptor read/8, error -71 [ 96.799568][ T1462] netlink: 'syz.4.338': attribute type 12 has an invalid length. [ 96.807463][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 96.819955][ T311] usb 4-1: config 0 interface 0 has no altsetting 0 [ 96.833647][ T311] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 96.848363][ T31] usb 3-1: device descriptor read/8, error -71 [ 96.854796][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.866899][ T311] usb 4-1: config 0 descriptor?? [ 97.079752][ T327] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 97.099747][ T31] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 97.119764][ T45] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 97.128479][ T31] usb 3-1: device descriptor read/8, error -71 [ 97.229721][ T327] usb 1-1: Using ep0 maxpacket: 16 [ 97.237657][ T327] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.246385][ T327] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 97.256717][ T327] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.266983][ T31] usb 3-1: device descriptor read/8, error -71 [ 97.273687][ T327] usb 1-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice= 0.40 [ 97.286146][ T311] nti 0003:0757:0A00.0013: unknown main item tag 0x3 [ 97.295078][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 97.302774][ T327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.311198][ T311] nti 0003:0757:0A00.0013: item fetching failed at offset 9/40 [ 97.318861][ T327] usb 1-1: Product: syz [ 97.323119][ T45] usb 5-1: not running at top speed; connect to a high speed hub [ 97.331405][ T311] nti 0003:0757:0A00.0013: probe with driver nti failed with error -22 [ 97.339733][ T327] usb 1-1: Manufacturer: syz [ 97.345861][ T327] usb 1-1: SerialNumber: syz [ 97.351049][ T45] usb 5-1: config 129 has an invalid interface number: 80 but max is 0 [ 97.363072][ T45] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 97.371648][ T45] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 97.382477][ T31] usb usb3-port1: unable to enumerate USB device [ 97.389135][ T45] usb 5-1: config 129 has no interface number 0 [ 97.396106][ T45] usb 5-1: config 129 has no interface number 1 [ 97.402571][ T45] usb 5-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 97.416110][ T45] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 97.427282][ T45] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 97.441305][ T45] usb 5-1: config 129 interface 80 has no altsetting 0 [ 97.448193][ T45] usb 5-1: config 129 interface 5 has no altsetting 0 [ 97.457507][ T45] usb 5-1: string descriptor 0 read error: -22 [ 97.463944][ T45] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 97.473292][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.487946][ T45] usb 5-1: MIDIStreaming interface descriptor not found [ 97.499419][ T311] usb 4-1: USB disconnect, device number 56 [ 97.564554][ T327] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 97.577222][ T327] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 97.588515][ T327] usb 1-1: USB disconnect, device number 53 [ 97.643876][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 97.687495][ T36] audit: type=1400 audit(1780477406.119:480): avc: denied { map } for pid=1465 comm="syz.4.339" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.762492][ T36] audit: type=1400 audit(1780477406.199:481): avc: denied { call } for pid=1465 comm="syz.4.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 97.782383][ T1466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.793474][ T1466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.805514][ T327] usb 5-1: USB disconnect, device number 22 [ 97.811468][ T36] audit: type=1400 audit(1780477406.219:482): avc: denied { getopt } for pid=1465 comm="syz.4.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.259773][ T311] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 98.335163][ T1483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.344490][ T327] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 98.352973][ T1483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.421258][ T311] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 98.429365][ T311] usb 3-1: can't read configurations, error -22 [ 98.510871][ T327] usb 4-1: Using ep0 maxpacket: 16 [ 98.517972][ T327] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 98.531157][ T327] usb 4-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 98.540398][ T327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.560746][ T311] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 98.569636][ T327] usb 4-1: config 0 descriptor?? [ 98.578108][ T31] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 98.588943][ T36] audit: type=1400 audit(1780477407.019:483): avc: denied { write } for pid=1485 comm="syz.0.346" name="/" dev="incremental-fs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.624028][ T36] audit: type=1400 audit(1780477407.019:484): avc: denied { add_name } for pid=1485 comm="syz.0.346" name="pids.max" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.645040][ T36] audit: type=1400 audit(1780477407.019:485): avc: denied { create } for pid=1485 comm="syz.0.346" name="pids.max" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.665524][ T36] audit: type=1400 audit(1780477407.019:486): avc: denied { associate } for pid=1485 comm="syz.0.346" name="pids.max" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 98.759733][ T31] usb 5-1: device descriptor read/64, error -71 [ 98.772575][ T311] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 98.780696][ T311] usb 3-1: can't read configurations, error -22 [ 98.787168][ T311] usb usb3-port1: attempt power cycle [ 98.823511][ T1471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.832883][ T1471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.999731][ T31] usb 5-1: device descriptor read/64, error -71 [ 99.043709][ T1471] rust_binder: 1470:1471 transaction to 0 failed: EINVAL [ 99.043927][ T1471] rust_binder: Read failure Err(EFAULT) in pid:194 [ 99.139762][ T311] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 99.181562][ T311] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 99.189713][ T311] usb 3-1: can't read configurations, error -22 [ 99.268571][ T31] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 99.278658][ T327] usbhid 4-1:0.0: can't add hid device: -71 [ 99.285000][ T327] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 99.299110][ T327] usb 4-1: USB disconnect, device number 57 [ 99.339749][ T311] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 99.361685][ T311] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 99.369824][ T311] usb 3-1: can't read configurations, error -22 [ 99.377756][ T311] usb usb3-port1: unable to enumerate USB device [ 99.419763][ T31] usb 5-1: device descriptor read/64, error -71 [ 99.659785][ T31] usb 5-1: device descriptor read/64, error -71 [ 99.771165][ T31] usb usb5-port1: attempt power cycle [ 99.780273][ T327] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 99.939736][ T327] usb 1-1: Using ep0 maxpacket: 32 [ 99.947451][ T327] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 99.958969][ T327] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 99.972074][ T327] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.978754][ T327] usb 1-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 99.988164][ T327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.999876][ T327] usb 1-1: config 0 descriptor?? [ 100.119766][ T31] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 100.151652][ T31] usb 5-1: device descriptor read/8, error -71 [ 100.283695][ T31] usb 5-1: device descriptor read/8, error -71 [ 100.299784][ C0] net_ratelimit: 87431 callbacks suppressed [ 100.299799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:3d:8c:06:9c:07, vlan:0) [ 100.317908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.330009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.342300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.354352][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:3d:8c:06:9c:07, vlan:0) [ 100.366471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.378568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.390600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.402688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.410409][ T327] elecom 0003:056E:00FB.0014: unknown main item tag 0x2 [ 100.414737][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.422480][ T327] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 100.465126][ T327] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 100.472925][ T327] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 100.480119][ T327] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 100.487247][ T327] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 100.494672][ T327] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 100.501912][ T36] audit: type=1400 audit(1780477408.939:487): avc: denied { checkpoint_restore } for pid=1496 comm="syz.3.351" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.523627][ T327] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 100.530936][ T327] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 100.538778][ T327] elecom 0003:056E:00FB.0014: hidraw0: USB HID v0.08 Device [HID 056e:00fb] on usb-dummy_hcd.0-1/input0 [ 100.550070][ T31] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 100.580897][ T31] usb 5-1: device descriptor read/8, error -71 [ 100.599159][ T36] audit: type=1400 audit(1780477409.029:488): avc: denied { bind } for pid=1496 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.631443][ T1491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 100.642518][ T311] usb 1-1: USB disconnect, device number 54 [ 100.711998][ T31] usb 5-1: device descriptor read/8, error -71 [ 100.821123][ T31] usb usb5-port1: unable to enumerate USB device [ 100.859752][ T327] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 101.011034][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 101.022210][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.038006][ T327] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 101.050205][ T327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.059870][ T327] usb 4-1: config 0 descriptor?? [ 101.208221][ T36] audit: type=1400 audit(1780477409.639:489): avc: denied { write } for pid=1508 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.389731][ T31] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 101.469620][ T327] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 101.479893][ T327] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 101.486752][ T327] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 101.495254][ T327] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 101.502577][ T327] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 101.510095][ T327] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 101.517766][ T327] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 101.529188][ T327] isku 0003:1E7D:319C.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 101.559749][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 101.568793][ T31] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 101.579525][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.600180][ T31] usb 3-1: Product: syz [ 101.609636][ T31] usb 3-1: Manufacturer: syz [ 101.614622][ T31] usb 3-1: SerialNumber: syz [ 101.673663][ T311] usb 4-1: USB disconnect, device number 58 [ 102.435872][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 102.447581][ T311] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 102.459457][ T31] usb 3-1: USB disconnect, device number 56 [ 102.489724][ T327] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 102.609735][ T311] usb 5-1: Using ep0 maxpacket: 8 [ 102.617283][ T311] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.630833][ T311] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 102.640566][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.649724][ T327] usb 4-1: Using ep0 maxpacket: 32 [ 102.655475][ T311] usb 5-1: config 0 descriptor?? [ 102.668494][ T327] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 102.678279][ T327] usb 4-1: config 0 has no interface number 0 [ 102.687431][ T327] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 102.696791][ T327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.705068][ T327] usb 4-1: Product: syz [ 102.709372][ T327] usb 4-1: Manufacturer: syz [ 102.714265][ T327] usb 4-1: SerialNumber: syz [ 102.725021][ T327] usb 4-1: config 0 descriptor?? [ 102.733929][ T327] smsc95xx v2.0.0 [ 102.990095][ T1535] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 103.013030][ T1535] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 103.133026][ T327] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 103.144485][ T327] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 103.385282][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 103.385298][ T36] audit: type=1400 audit(1780477411.819:498): avc: denied { setopt } for pid=1539 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.649759][ T45] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 103.789739][ T45] usb 3-1: device descriptor read/64, error -71 [ 104.029754][ T45] usb 3-1: device descriptor read/64, error -71 [ 104.269756][ T45] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 104.419741][ T45] usb 3-1: device descriptor read/64, error -71 [ 104.679727][ T45] usb 3-1: device descriptor read/64, error -71 [ 104.789850][ T45] usb usb3-port1: attempt power cycle [ 105.139756][ T45] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 105.160763][ T45] usb 3-1: device descriptor read/8, error -71 [ 105.197051][ T327] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 105.218296][ T327] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 105.255408][ T327] usb 4-1: USB disconnect, device number 59 [ 105.290848][ T45] usb 3-1: device descriptor read/8, error -71 [ 105.302931][ T311] usbhid 5-1:0.0: can't add hid device: -71 [ 105.309890][ C0] net_ratelimit: 66533 callbacks suppressed [ 105.309905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.320092][ T311] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 105.327863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:3d:8c:06:9c:07, vlan:0) [ 105.341279][ T311] usb 5-1: USB disconnect, device number 27 [ 105.347587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.365474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.377520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.389586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.401701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.413709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.425942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:3d:8c:06:9c:07, vlan:0) [ 105.438176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:3d:8c:06:9c:07, vlan:0) [ 105.523837][ T1550] netlink: 'syz.4.367': attribute type 27 has an invalid length. [ 105.531705][ T45] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 105.571678][ T45] usb 3-1: device descriptor read/8, error -71 [ 105.652617][ T36] audit: type=1400 audit(1780477414.089:499): avc: denied { write } for pid=1553 comm="syz.4.369" path="socket:[13491]" dev="sockfs" ino=13491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.676555][ T1554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 105.711403][ T45] usb 3-1: device descriptor read/8, error -71 [ 105.771689][ T1555] incfs: Can't find or create .index dir in ./cgroup [ 105.778532][ T1555] incfs: mount failed -22 [ 105.820874][ T45] usb usb3-port1: unable to enumerate USB device [ 105.827315][ T36] audit: type=1400 audit(1780477414.249:500): avc: denied { create } for pid=1556 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 106.621473][ T45] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 106.793040][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.803893][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.819974][ T45] usb 5-1: Product: syz [ 106.825317][ T45] usb 5-1: Manufacturer: syz [ 106.833240][ T45] usb 5-1: SerialNumber: syz [ 106.839725][ T311] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 106.990989][ T36] audit: type=1326 audit(1780477415.429:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1577 comm="syz.2.377" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e8259ce59 code=0x0 [ 107.017057][ T311] usb 4-1: too many endpoints for config 0 interface 0 altsetting 6: 253, using maximum allowed: 30 [ 107.030340][ T311] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.042194][ T311] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 107.056069][ T311] usb 4-1: config 0 interface 0 has no altsetting 0 [ 107.063151][ T311] usb 4-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 107.072566][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.083563][ T311] usb 4-1: config 0 descriptor?? [ 107.116069][ T1583] netlink: 152 bytes leftover after parsing attributes in process `syz.2.378'. [ 107.253767][ T293] ------------[ cut here ]------------ [ 107.259328][ T293] WARNING: CPU: 1 PID: 293 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 107.268686][ T293] Modules linked in: [ 107.272666][ T293] CPU: 1 UID: 0 PID: 293 Comm: syz-executor Not tainted syzkaller #0 cd47f8e0083a5f781c340422d7a309d6c8dfd054 [ 107.284345][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 107.294535][ T293] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 107.300205][ T293] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 fe 50 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 7a 61 03 cc e8 d6 ae 3e ff <0f> 0b e9 3e ff ff ff e8 ca ae 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 107.319959][ T293] RSP: 0018:ffffc9000b6efb48 EFLAGS: 00010293 [ 107.326055][ T293] RAX: ffffffff8249195a RBX: 0000000000000000 RCX: ffff88810434b900 [ 107.334065][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.342125][ T293] RBP: ffffc9000b6efb70 R08: ffff8881337f7abf R09: 1ffff110266fef57 [ 107.350169][ T293] R10: dffffc0000000000 R11: ffffed10266fef58 R12: 0000000000000000 [ 107.358180][ T293] R13: dffffc0000000000 R14: ffff8881337f7a20 R15: ffff888113280110 [ 107.366189][ T293] FS: 0000555568843500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 107.375201][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.381821][ T293] CR2: 000055556886e998 CR3: 0000000128222000 CR4: 00000000003526b0 [ 107.389828][ T293] Call Trace: [ 107.393120][ T293] [ 107.396063][ T293] ovl_do_remove+0x81b/0xda0 [ 107.400718][ T293] ? ovl_set_redirect+0x780/0x780 [ 107.405774][ T293] ? down_write+0xee/0x2b0 [ 107.410240][ T293] ? __cfi_down_write+0x10/0x10 [ 107.415124][ T293] ovl_rmdir+0x1e/0x30 [ 107.419215][ T293] vfs_rmdir+0x3e0/0x560 [ 107.423492][ T293] incfs_kill_sb+0x109/0x230 [ 107.428100][ T293] deactivate_locked_super+0xd8/0x2a0 [ 107.433574][ T293] deactivate_super+0xb8/0xe0 [ 107.438280][ T293] cleanup_mnt+0x406/0x4a0 [ 107.442736][ T293] __cleanup_mnt+0x1d/0x40 [ 107.447173][ T293] task_work_run+0x1e5/0x260 [ 107.451801][ T293] ? __cfi_task_work_run+0x10/0x10 [ 107.456935][ T293] ? __x64_sys_umount+0x12e/0x180 [ 107.462000][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 107.467398][ T293] ? __kasan_check_read+0x15/0x20 [ 107.472451][ T293] resume_user_mode_work+0x35/0x50 [ 107.477579][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 107.483073][ T293] do_syscall_64+0x63/0xf0 [ 107.487504][ T293] ? clear_bhb_loop+0x50/0xa0 [ 107.492215][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 107.498135][ T293] RIP: 0033:0x7f99f139e097 [ 107.502595][ T293] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 107.522298][ T293] RSP: 002b:00007ffc6408a018 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 107.530752][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f99f139e097 [ 107.538747][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6408a0d0 [ 107.546753][ T293] RBP: 00007ffc6408a0d0 R08: 00007ffc6408b0d0 R09: 00000000ffffffff [ 107.554802][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6408b160 [ 107.562808][ T293] R13: 00007f99f14321ca R14: 000000000001a2e8 R15: 00007ffc6408b1a0 [ 107.570824][ T293] [ 107.573872][ T293] ---[ end trace 0000000000000000 ]--- [ 107.587896][ T293] ------------[ cut here ]------------ [ 107.593479][ T293] WARNING: CPU: 1 PID: 293 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 107.602847][ T293] Modules linked in: [ 107.606784][ T293] CPU: 1 UID: 0 PID: 293 Comm: syz-executor Tainted: G W syzkaller #0 cd47f8e0083a5f781c340422d7a309d6c8dfd054 [ 107.619959][ T293] Tainted: [W]=WARN [ 107.623779][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 107.633865][ T293] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 107.639624][ T293] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 fe 50 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 7a 61 03 cc e8 d6 ae 3e ff <0f> 0b e9 3e ff ff ff e8 ca ae 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 107.659300][ T293] RSP: 0018:ffffc9000b6efb48 EFLAGS: 00010293 [ 107.665406][ T293] RAX: ffffffff8249195a RBX: 0000000000000000 RCX: ffff88810434b900 [ 107.673516][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.681545][ T293] RBP: ffffc9000b6efb70 R08: ffff8881337f7abf R09: 1ffff110266fef57 [ 107.689543][ T293] R10: dffffc0000000000 R11: ffffed10266fef58 R12: 0000000000000000 [ 107.697555][ T293] R13: dffffc0000000000 R14: ffff8881337f7a20 R15: ffff888113280110 [ 107.705561][ T293] FS: 0000555568843500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 107.714536][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.721155][ T293] CR2: 00007fc20adf2ff8 CR3: 0000000128222000 CR4: 00000000003526b0 [ 107.729158][ T293] Call Trace: [ 107.732466][ T293] [ 107.735410][ T293] ovl_do_remove+0x81b/0xda0 [ 107.740052][ T293] ? ovl_set_redirect+0x780/0x780 [ 107.745540][ T293] ? down_write+0xee/0x2b0 [ 107.750030][ T293] ? __cfi_down_write+0x10/0x10 [ 107.754913][ T293] ovl_rmdir+0x1e/0x30 [ 107.759014][ T293] vfs_rmdir+0x3e0/0x560 [ 107.763293][ T293] incfs_kill_sb+0x1a0/0x230 [ 107.767902][ T293] deactivate_locked_super+0xd8/0x2a0 [ 107.773324][ T293] deactivate_super+0xb8/0xe0 [ 107.778028][ T293] cleanup_mnt+0x406/0x4a0 [ 107.782740][ T293] __cleanup_mnt+0x1d/0x40 [ 107.787198][ T293] task_work_run+0x1e5/0x260 [ 107.791827][ T293] ? __cfi_task_work_run+0x10/0x10 [ 107.796967][ T293] ? __x64_sys_umount+0x12e/0x180 [ 107.802032][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 107.807526][ T293] ? __kasan_check_read+0x15/0x20 [ 107.812585][ T293] resume_user_mode_work+0x35/0x50 [ 107.817716][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 107.823293][ T293] do_syscall_64+0x63/0xf0 [ 107.827726][ T293] ? clear_bhb_loop+0x50/0xa0 [ 107.832612][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 107.838533][ T293] RIP: 0033:0x7f99f139e097 [ 107.842973][ T293] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 107.862628][ T293] RSP: 002b:00007ffc6408a018 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 107.871081][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f99f139e097 [ 107.879162][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6408a0d0 [ 107.887176][ T293] RBP: 00007ffc6408a0d0 R08: 00007ffc6408b0d0 R09: 00000000ffffffff [ 107.895186][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6408b160 [ 107.903190][ T293] R13: 00007f99f14321ca R14: 000000000001a2e8 R15: 00007ffc6408b1a0 [ 107.911191][ T293] [ 107.914243][ T293] ---[ end trace 0000000000000000 ]--- [ 107.925142][ T31] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 108.038636][ T36] audit: type=1400 audit(1780477416.469:502): avc: denied { getopt } for pid=1589 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.101152][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.111797][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 108.124855][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 108.144174][ T311] usbhid 4-1:0.0: can't add hid device: -71 [ 108.150446][ T311] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 108.159741][ T311] usb 4-1: USB disconnect, device number 60 [ 108.168973][ T31] usb 3-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 108.182635][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.191422][ T31] usb 3-1: Product: syz [ 108.195705][ T31] usb 3-1: Manufacturer: syz [ 108.200590][ T31] usb 3-1: SerialNumber: syz [ 108.395094][ T45] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 108.401754][ T45] cdc_ncm 5-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 108.422002][ T45] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 108.429310][ T31] usb 3-1: Can't get UAC3 power state for id 10 [ 108.453160][ T31] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 108.491725][ T31] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 108.562366][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 108.578966][ T31] usb 3-1: USB disconnect, device number 61 [ 108.592892][ T614] udevd[614]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.666041][ T45] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 109.683994][ T45] usb 5-1: USB disconnect, device number 28 [ 109.705609][ T45] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 110.319724][ C0] net_ratelimit: 75397 callbacks suppressed [ 110.319738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.338148][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.350189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:3d:8c:06:9c:07, vlan:0) [ 110.362293][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.374381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.386408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.398483][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.410509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.422524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.434537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:3d:8c:06:9c:07, vlan:0) [ 115.329725][ C0] net_ratelimit: 119405 callbacks suppressed [ 115.329740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.347794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.359822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.371887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 115.383905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 115.395894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.407947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:3d:8c:06:9c:07, vlan:0) [ 115.420098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:3d:8c:06:9c:07, vlan:0) [ 115.432248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.444306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)