last executing test programs: 4.713953588s ago: executing program 3 (id=1211): prctl$PR_SET_THP_DISABLE(0x29, 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x40c801) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000180)=0x7fff) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000100)=""/18) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000180)={{r3, &(0x7f0000000200)='^\xce\',+\\\x00\xd1_\xf1<\xae\x14,\xe8\xad\x00E\x8a\x15\xfe\x04\x15\xae\xe4\xbfCyk$fq\x90\xf2|Bt\x94\xe1{\xde\xcc\xc0\x11\xdb\xa5\xfe\x1b_PD0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in=@multicast2, 0x4e22, 0x6, 0x4e21, 0x4, 0x2, 0x0, 0x0, 0xff, 0x0, r3}, {0x7ff, 0x7, 0x0, 0x5, 0x7fffffff, 0x7fff, 0x3, 0xc}, {0xb, 0x400, 0x7, 0x7}, 0x9, 0x6e6bb9, 0x1, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x4d2, 0x6c}, 0x2, @in6=@local, 0x0, 0x4, 0x3, 0xa2, 0x7, 0x8000, 0x8000}}, 0xe8) 4.668792809s ago: executing program 3 (id=1213): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5005, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x7e, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc}}}}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x100000008, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x8, 0x37b7, 0xe9, 0x0, 0x6, 0x7, 0x2, 0x3ff, 0x45d], 0xeeef0000, 0x4fb40}) syz_usb_connect(0x3, 0x9ba, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x87, 0x3d, 0x33, 0x40, 0x71d, 0x1005, 0xfda2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a8, 0x3, 0x0, 0x1, 0x0, 0x18, "", [{{0x9, 0x4, 0xb, 0x1, 0xd, 0xf3, 0xb3, 0xa6, 0x14, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x32}, [@selector_unit={0x8, 0x24, 0x5, 0x5, 0x6, "dcd16b"}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x2, 0x3, [0x2, 0x1, 0x9]}, @feature_unit={0x13, 0x24, 0x6, 0x5, 0x3, 0x6, [0x6, 0x7, 0x4, 0x2, 0x5, 0x2], 0x81}]}, @uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x80, 0x2, 0x6, 0x7}]}], [{{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x1, 0x10, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x40}]}}, {{0x9, 0x5, 0x3, 0x8, 0x8, 0x0, 0xa2, 0x80, [@generic={0x96, 0x0, "8248b1761e8fa88ec00133b3e72632df4b6ac73984a406be1efda8f348e434bdb465faaa6085e12aa731142cf1f5a1ee3da2835babd365529f767cf1de33e51997e7a7ab26c5bf5f2808728c736de2a6d1750c1b9eb0d0bf496c979bf9050675ce987d874b046b44e777cfadcb4f83f9327c0562ad0624a733562d03a117ddabf608eb6e75d9cefb55abfc3b8c0edab7c18b6708"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0xa, 0x8}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0x8, 0x0, 0x70, [@generic={0xd2, 0x30, "e69d2502bb1f3694c746a7c7690b435c0550452c222a559575de1f8bcea3cbb527dccaccddebcc94e21e04658670d47a9285e37569ad449af97190688efd491c6c097607fac6b6b6f432b6367d99552e736b9a85e0cb422572e8cac34cb017353a649c387d532a8cfb7e2487364a92ea1ffd10a8e1e102dbfd46c4d2a93230858c48d54b08aa1402fa1f94a951a623be13d8d2dce299263bbb7df4914062caaf13aaee84761ef13c741420ea038e0b4ef8e60b67316974351aa70ecb7b2da5544c904a017912195c79cbea54e938bce5"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7f, 0x9}]}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0xf8, 0x9}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x0, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x9}, @generic={0xcd, 0x3, "6e1a4fc7391d8a156350dc161f50a0084ae5c62d0dc1ec3aa8b3129437fd99ff29c96ef9c9d3715df4f51f5a0ee69cbc307a5f689bf14444aee5dbd50aa8386f9211341364eeb34fe765568e7e8964c289df8772d0f2c80d832050bf2d1b09d77fbb923b34d96afe708a2bc7c4d1f6cf85d5e20b6f7832598cebc350913d521f98a20fe7dd6252c36e5e3adfb44a8582e32348a71b343ff57327536a13acb952740685873e209d5f6004d66cb5764d93b87face2faa356bac19a9a3ff910056f78c9186e38fdf980e91b1b"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0x7, 0x3, 0x5, [@generic={0xa6, 0x22, "cbe3aba1c4b46194c58d92d4444967786ce9b351eb33efab4a7be766a645af21e810d58f3130a65c733e5c39c6158e687b0068528c355d462396f13544cd02f9315cff541e605e353f719bdb69385225aa5413bfe68510d446ba7d12e8799a02b1d475165b5fa61631685439c0bce0e81461fecd6fce7a80e3605b560acd3cbdc8a323049d3672866deb10e897c6b99f335e56d79bc7fb54f33a3c7e0aa321fdb42d75d0"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x6}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0xca, 0x2, 0x7f}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x0, 0x3, 0x7e}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x2, 0x0, 0x9}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x7, 0xa, 0x78, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0xffff}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xf0, 0x0, 0x3, [@generic={0x33, 0x8, "73ba61a34cce0b2f3b5adf4804deb720c785cf1a8752fa2f9645387fea64e6782ca5ed9c08e2a7d692f91852d2ee648ec7"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x6, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf9, 0x6}]}}]}}, {{0x9, 0x4, 0x1d, 0x9e, 0xf, 0x1d, 0x13, 0x9e, 0x1, [@uac_as={[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9, 0x5418, 0x8, '3'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x753, 0xe, 0x6}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x40, 0x1, 0x7f, 0x1, "", "e91c"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1000, 0xa, 0x9, 0xc8}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "4d00a1"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xd, 0x0, 0x3}, [@mdlm_detail={0x7f, 0x24, 0x13, 0xd7, "6864fee82a001a04f86889be07fb4d52128ece4da228e10ef74bc06b3b2f930ef75745372b7e1fc15facf016312769f9690133d07fe61212f3a10163de651c125464a4de9108600d7bf04ca7b7e5d95e2a56a5a3b1e351b75d25bb3d6ff2506f4f1d4cd23bd1f558b3a386d26a5d4e2e2d14ac73f1e36f4bb29dcb"}, @acm={0x4}]}], [{{0x9, 0x5, 0xf, 0x10, 0x230, 0x2, 0x5, 0x10}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0xff, 0x5, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x1}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x4, 0xcf, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x4}]}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0x7, 0x8, 0xa}}, {{0x9, 0x5, 0x80, 0x9, 0x208, 0x8, 0x4, 0x2, [@generic={0xe1, 0x31, "d64367c32c7b2f89a85e5f342e2c3b4951c087f54776dc298d9ffb6557e6c00636fec78131d1972dc52813455f846e8a14c6085f4121f2ef76dbe9a71ef4929d03624ae18108011d4dcb2067eb2661df73a7cfbc9be937b3cdc0fb1fd9ab3309cb9fc6a0f60c771b1d9a0ce8caa7e3547bfcb6237dc9c02de98e00a62d241b71c95072c8f17cc105436d92d962109a61e403e2433e7c56e39a1528c71bf012b78fc9b274cb67c1e53b5a6e54ac38fc20120daa288882babed1f6b4aece285e88a7d4aa6666e111aa67252b4b88ac42e419bbac4cd966cb22aa08fdec16eede"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x8, 0x1, 0xa0, 0x10}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xf5, 0x9, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xabe}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x45, 0x2}]}}, {{0x9, 0x5, 0x4, 0x588b85b0f56e286a, 0x8, 0x9f, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0xef9d}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xdb, 0x1}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x81, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0xff}]}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x40, 0x1, 0x2}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0x1, 0x1, 0xff, [@generic={0xcc, 0x10, "b94160e2d39254f300fa9ae963de2792c38e600761c484a04decea77f238c75b485df5f2caa95b044cb9acd6852e1bdaa31cbbebcc7c406bfe6b6b02010c1422e35ebe61474e9eb67c5167d753b7927f39152c5a7a9f326c080b8de97d1d0b802389a74c61306e59de8c912e6d3e85a4c2d4043456282c2d8197cebe848b99b9f99346eb1393b2fa3b7e6d89fcc4cb9f1378e4273773e1e217847851cd53154dae8e4202cf43a49c2dce99b729c41763e7ea7cb906421113d7181c0883e25922ee9bcbadc75e92b8e608"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0x4}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0xf, 0x40, [@generic={0x43, 0x5, "775b3837eccbf397833696296d01d169aec7eb886a554d13c5f6af48b78b3daf399739c66e43d62f07731735ff9f7bab75040941cb31757eae55b799ed730c1e82"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x4, 0x1c, 0x37}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x6, 0x9, 0x80, [@generic={0xd1, 0xb, "5dbbb3155b2d3d7fd4b07b39c5521ec2757ea64a32b2ad00984fe37d5c7ac80323efda329dcae1a05b8d38c3f741a079d2ce270dab0285352bdf26f92f080a3608e62f45c1e136a5eea1587c8dc895d5e8122aa4d56c14feaf83a20888af8c7f062e13b79a282599cc5ed0b47fc7d8065cb550002ee551ee6f4f03dca7cc48c972030d3f3363ed9dc047852c8a528994611fab6bef43c160e7ea4be30126ddd4c74fc43e79cead72528195ffe25fa5ff2b2d5fde81c73ec1ea1724ae4c06cabbf552240e424b785b9ea4458b3d3585"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x0, 0x6, 0x40, [@generic={0x5b, 0x8, "fbf2c09090409e658920d14b00c5e6cf27afc927b61668415f62326edc8113f1d53fc6e67e9de9452c3aad7c3ef7fbac350c2f7cc3afbad661c3e435842527b0f9585f60567ae9882af8ffe45a50583537b79fb4eeca4d7aef"}]}}]}}, {{0x9, 0x4, 0x84, 0x5, 0x7, 0x8b, 0x73, 0x8e, 0x6a, [@generic={0x2a, 0x1, "6f978ba76584ee3d73475aa0d284c36b74332b4e0829f2fcb4d65accbde2eadd5ba08b1f16c316bd"}], [{{0x9, 0x5, 0x5, 0x4, 0x3ff, 0x61, 0xb, 0x3, [@generic={0x61, 0xd, "edbe8facfbf3e0c85b6617970c21acdf8a4e62e2bd10bad3fadd7c7708281d03ef4cd6a2591987eb12dfddaa686ca4ee6792d4391d0b448713bcbe6e6e80c92c950dbd3e9ded003d2364d1a6df6011aa4778297eb4aa840b8baa4fd4fdc35c"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x7, 0x3, 0x6}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x3, 0xa5, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x20, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x97, 0x7fff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0xa, 0xcc, 0x9}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x6, 0x4, 0xfc}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x8c, 0xfa, 0xce}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0x3, 0x6, 0x3}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x250, 0x80, 0x8, 0x5, 0x40}, 0x0, 0xfffffffffffffffe, 0x6, [{0xc8, &(0x7f0000000e80)=@string={0xc8, 0x3, "a9e0f6bd515886a480a81ebcbd33a20beea0f1ac5b113827a7e4af2f8a8876615019bf786da35c6f06b2870e040ebd34b933b85c1b21cb795d672e820ff73cc1898422b7f4364f9cac7ad47e7f339dc1f03d0be4da356dfe06c6537d370444bfc41d959ca3b2b3e293d921277856a453fb24d785f6be9b2e72e85a2d9a2969c07818cf35d55aae256133ff1955a741a64d77f71553b60b15cf4c4a9613c5f108eba54341e55917e072b1c0bdfb891af8c03b751ecf038d9883e0e72c138c1a51b44217f2f16a"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x414}}, {0xfa, &(0x7f0000001000)=@string={0xfa, 0x3, "b2168cd66ba7d6f56e99b51b208a785d26337e7968bdf81d7be0b231387785b1e34406cc8fefac77826c5e82fa0afd2fdf56c684a8ee884dce5e4f2692a3afc43031787ba1108cb7cc87b91950d514a822d2945b2f56c162c307f09621101a8abe13b853e3bbf81632dbb5b7ab827351baeef40b0ff346634bfaabca22a93ee53e07f5e0871991a710df1f9087898fdbc10046aec1618c7bfba8b87453dc49d0922f20c740b05c8e17423907daa3fac18975e948c118a3692687e788c1fcbf3137f4be1aeb4aa603d669d297e671a4684ecab5abd9154529e99f79df64c6089a45bc11f64f0719a67d46efb0fb87542f92cc05b389a31082"}}, {0xb0, &(0x7f0000001100)=@string={0xb0, 0x3, "46184abad1fe3d007a2110b0cd8aa5af33774d6ca483d1579cb6ec8bbf87a2901d75db8cf26b8d5c48928ccd68aa35f708d256b23d6b6e9b908c36b431c89a9b5ec4fea1174ba7872f2cbc4081045bc878330d8a4d441799b57f38ae58fa489dcd34ecc084a44533a0f117c6935cab0b182064b30e2a9fd83e3a7428df33659b5476b73962ec7a26b8d33c209c52316ea2515da2fc3a97ec75ba83536cf158b72f6e3f0a4c88bc0f117a4cf3684b"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x403}}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8c811}, 0x48054) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.358010116s ago: executing program 0 (id=1214): setgroups(0x2, &(0x7f0000000040)=[0x0, 0x0]) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000052000100000000000000b0e16d5378d400b11aaf84e899ae9000"], 0x1c}}, 0x0) 4.357621446s ago: executing program 0 (id=1215): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010400000000204f0453b640000102030109022d"], 0xfffffffffffffffc) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010400000000204f0453b640000102030109022d"], 0xfffffffffffffffc) (async) socket$inet6(0xa, 0x80002, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) (async) pipe2(0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r2) (async) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (async) 3.318944521s ago: executing program 0 (id=1226): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38010000100033062cbd7000000000007f0000010000000000000000000000000a010100000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd320000007f0000010000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000020100000000000002000000230000000000000048000200656362286369706865725f6e756c6c290000"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38010000100033062cbd7000000000007f0000010000000000000000000000000a010100000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd320000007f0000010000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000020100000000000002000000230000000000000048000200656362286369706865725f6e756c6c290000"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000c80)={&(0x7f0000000980)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}, 0x3}}, 0x10, 0x0}, 0x0) connect$tipc(r2, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x4}}, 0x10) (async) connect$tipc(r2, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x4}}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x3}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x70bd2f, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x2c}, {@in=@loopback, 0x4d4, 0x32}, @in6=@loopback, {0x0, 0x0, 0x1, 0x8000000000000001, 0xfffffffeffffffff, 0x10, 0x8003, 0xd43}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x70bd2f, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x2c}, {@in=@loopback, 0x4d4, 0x32}, @in6=@loopback, {0x0, 0x0, 0x1, 0x8000000000000001, 0xfffffffeffffffff, 0x10, 0x8003, 0xd43}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0xfffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0xfffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, 0x0, 0x0) syz_usb_connect(0x4, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e70009058810020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 2.985581419s ago: executing program 3 (id=1232): r0 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x8) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x7a4) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x1, 0x4e24, 0x8, 0x2, 0x0, 0x80, 0x2c, 0x0, r2}, {0x8, 0x0, 0xffffffffffffffdf, 0xfffffffffffffffb, 0xcdf4, 0x5, 0x9, 0x4}, {0xfffffffffffffffb, 0x7cc, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x4d6}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x0, 0x2, 0x1, 0x6, 0x27e89879, 0x4, 0x66}}, 0xe8) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000240)=0x16810, 0x4) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in=@broadcast}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000000380)=0xe8) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r3 = dup(r1) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f00000003c0)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x208000, 0x0) write$tun(r4, &(0x7f0000000440)={@val={0x0, 0x883e}, @void, @ipv4=@esp={{0x6, 0x4, 0x0, 0x11, 0x749, 0x64, 0x0, 0x2, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@ra={0x94, 0x4}]}}, {0x4d5, 0x3, @cc={0x1, 0x0, 0x8, 0x5, 0x0, 0xfff, 0x1, [@ipv4=@udp={{0x1a, 0x4, 0x2, 0xb, 0x102, 0x67, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x41, 0x7, "fc076fd652"}, @end, @ssrr={0x89, 0x3, 0x9b}, @timestamp_addr={0x44, 0x34, 0xea, 0x1, 0x1, [{@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x3}, {@remote, 0xa}, {@rand_addr=0x64010100, 0x2}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x20}, 0xfffffffb}]}, @ssrr={0x89, 0x7, 0x4e, [@dev={0xac, 0x14, 0x14, 0x30}]}, @generic={0x83, 0xb, "7b1ea2188833f7ead9"}]}}, {0x4e22, 0x4e22, 0x9a, 0x0, @opaque="b0be51933dbff721a9d7822a39cdcd76c60388579955460c7b73279e53147360489726448d29de444f4be68533496c73668ef42f5d8247572d3bfee5ef625a9e0a84010a545e30925f174e2668383e0a4faa55d1ed6f1ddfe3f44dfb0e0d53ebddd621a13766f144a1cd124269a443a892054cafedbcb4ab0066816c080f694bb7837661aa941b667630276e5ba20923d6ba"}}, @runt="8c370dfecc2a54d41384e1f259fdd958", @ipv6=@generic={0x5, 0x6, "aa2d85", 0x371, 0xf7, 0x1, @mcast1, @local, {[@dstopts={0x65, 0x11, '\x00', [@ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0xe2800000}, @generic={0x5, 0x48, "01cd4c10599fec8e046fd0ee8ab3b4ad0c6af89dd4adbec5577d2e475b639f592286496079e2beb7d295c11db03d6c22c0c2d0711801c1aae0403682dc22b3846fbe4fdea6591057"}, @calipso={0x7, 0x30, {0x0, 0xa, 0x9, 0x10, [0x3, 0x9, 0x6, 0x6, 0x1]}}, @pad1, @enc_lim={0x4, 0x1, 0x74}]}, @hopopts={0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}}, @enc_lim={0x4, 0x1, 0x80}]}, @routing={0x5c, 0xa, 0x0, 0xfc, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2]}, @dstopts={0x2c, 0xe, '\x00', [@generic={0x9, 0x55, "9b3493f1a6416a46d70197f3c6d679afec12ccf1eea90242db151b1a37f2579eadd1edb38e4cbd01c52e007dd6860ce0e0b9a62130071ce295acc59304350e290bba4780164b5089960f695228a55c3874450fa255"}, @jumbo, @hao={0xc9, 0x10, @mcast2}, @pad1]}, @fragment={0x87, 0x0, 0x7, 0x1, 0x0, 0x8, 0x65}, @dstopts={0x88, 0x19, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x7}}, @generic={0x5, 0x71, "d85c0f0d089cb5d08185b3fdc6f22c0aeee60f7da67e1cbdac7a029dade981932c95d4cc84f560f9183331a200e0932713d57782f374cf33443b788f81078adc52eb6adddf5c4e89b7ba59431a7e764b3b27f2618ff94b784bbaabccc33df58078f02775ca189b2b40fee6a6c7675601b1"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0x8, 0x1, [0x10]}}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x10, {0x2, 0x2, 0x6, 0x0, [0x3]}}]}, @fragment={0x21, 0x0, 0xc9, 0x0, 0x0, 0x6, 0x66}, @srh={0x2c, 0x12, 0x4, 0x9, 0x82, 0x20, 0x8dd8, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @local}, @remote, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty]}], "664c4e913747895f6536ef536e98b3db1a0b4255fd07ecce46a0413a4eb50ec5b46402e563b31ddc04ccecf5f05b794c8c096284d09358be998d418cf62fb83265743bb1e14b47457fd850b4e5df3db400227edad24d7e82afbe6f154bd882acc5"}}, @ipv6=@tipc_packet={0xc, 0x6, "334b93", 0x109, 0x6, 0x1, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x0, 0x8, 0x2, 0x4, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @private0]}, @routing={0x1d, 0xc, 0x2, 0xfa, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0xd}, @private0, @private2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x3a, 0x4, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x6, 0x2, [0x8, 0xe1e9, 0x6]}}]}], @payload_named={{{{{0x29, 0x0, 0x0, 0x1, 0x0, 0xa, 0x3, 0x2, 0x0, 0x0, 0x1, 0xb, 0x2, 0x2, 0x6, 0x8, 0x0, 0x4e20, 0x4e24}, 0x3}, 0x4, 0x2}}, [0x0]}}}, @ipv6=@dccp_packet={0x5, 0x6, "839efc", 0x106, 0x21, 0xff, @local, @mcast1, {[@routing={0x3c, 0x6, 0x2, 0x5, 0x0, [@loopback, @empty, @mcast2]}, @hopopts={0x3c, 0x6, '\x00', [@ra={0x5, 0x2, 0xe5c4}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x2, [0x7, 0x6, 0x5, 0x1000]}}]}], {{0x4e22, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x6, 0x2, "bc86d7", 0x0, "afba12"}, "8b4e4f8d616f18109dc0a54e0f386485a350e67cf0e9c429e627d1f80b734fdcf57e93852f5708c67959777e58697ba573908becf0cc9c6a8a10c484b22b1352b3dea129a5fd3bebb693839a0dd9b2b9779862577fb8bf934d555cf7ac019a694abe57fc528ff263695ea63177e94c1a9b6d181425e4255855b48dc642d3"}}}]}, "4853d53c1a", 0x5}}}, 0x74d) fcntl$setlease(r4, 0x400, 0x0) getpeername$packet(r1, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000c00)=0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000c40), &(0x7f0000000c80)=0x14) sendmsg$inet(r3, &(0x7f0000001080)={&(0x7f0000000cc0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000d00)="a443e666e6ccdf4ed460874dbd716675dee03a18764b1ec56938e7b80d86c08647d21ce1431ba851c27d770bcfe95dcc79f602287aecd1170ba153a62c97cbdbc2ad51ac5a5198eb601a59b64322f1983dce7cff3a3875a1156a3103a68a59009aa1a276c9073ba928010a30e872af1438107e1a49a8c2877b792da2e37c12e992c5cc8db588d8025d36600022c0c4350463cdba68fa9257afafc1a3ec225eeb66500c487153e34327fbc35e49201be02ba68a0c5d85fc20b402e100a46ab622fa6f165c64f2e4a498079cf131ab2c73", 0xd0}, {&(0x7f0000000e00)="3f3f5024fb53bcc50b51905ea95d689a5a7ab7da6cfde8a38c8c162021b6e42ccc5fb0baaf214377870b5f47a6f633a62139bf3fb328b3b3673ebba35e24c27c", 0x40}, {&(0x7f0000000e40)="58a0be1d26f9d1b6492af7fa25d447678c05f4dae59f6e608057e115fa657070f8c643bc8084ffe13151a10eecee3104d06e1d7d988d1bb1a7b39d48f970a9962cbdb7e3373772b459d7744f46e8c5c97c791cd2cf89f00ff9854ddcde58ca436ce1543ea5536147adb1dca6a66c5613c27e0e53931a871505d3264280de1433142652ea98cf18335d84da5272051eed9ee33d2ca0aa67150885bd5f5b80984e4862d7ad2b1b66109a7558a9fef38803f88caca1f2ae9c0ef4c7e77e22426fb6a6c246c1ad992d1d61c0f7657c19f1f9c7bd5eab3c7ecbe5ddb40555159cf5e30199c3fa3b327fef807ec8e8", 0xec}, {&(0x7f0000000f40)="7a4c27c736685bac63b4fb34bd757a35a97c8707fef0cd2c1d", 0x19}], 0x4, &(0x7f0000000fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2b0388e7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @multicast1}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x77, [@multicast1, @broadcast, @private=0xa010101, @private=0xa010101, @local]}, @rr={0x7, 0x13, 0xa5, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x95, 0x0, 0x5, [0x9, 0xe]}, @timestamp={0x44, 0x18, 0x69, 0x0, 0x1, [0x6, 0x2, 0x5, 0x10, 0x7]}]}}}], 0xb8}, 0x200400c6) sendmmsg$inet(r1, &(0x7f0000001b40)=[{{&(0x7f00000010c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000001100)="4404129e86efd9272995875884539ad0ab2452f5ba9b159b012aa8360dc56386ae6b4b1ada6c194e158fa3ef217859919d5be0c08189c88f9e5ec1c7f807c12ec6bbef4acdd32b2d9dfb0f89285c5c25a8141c2cbfad3bfd3e9a0c7a31f824736c59b134c3cc02494be9af197671d722a70d73e0e2cc942aa31e443802abf2032132dd84af25c0e983c097a4f83d9009765651cf2f926c39d8ebdf4f4a566f0fb53594ceff252a97484ab8ee147259078e0f7ae798715d6ad75778e314904be13feb993e1877bb0cac861df720562e4663", 0xd1}, {&(0x7f0000001200)="a068f4b54baf09353f5b3ac701782b431a5c5ec899c799f5cbeb30831ec90d92200bdf6e0bef9175da03b7762db897ca3dd2b2688da40dcab63ea9af8ea35f9236d4383bfed7c1a2bf95ed0f285522467dbd94a247a21c57d31cb92a6e2d8d8d899013dc94d73c3c1c3fda198802d7f9b27a5185ed499b3f92dde475341cd08c40b1d5c5f19836420818dcdaed9071314539fa63c47403672795ac20a72acf2b696d498a514ad97d459444c3c32850ac83751636255fc5bb", 0xb8}, {&(0x7f00000012c0)="45581186f9d471c5d356805cdde0fc2fbff9d5b7", 0x14}, {&(0x7f0000001300)="afc3cecb10782c16cb951ac7bfa09195485f93fa836e22d9f4a5fe12be5a2421575e8816896c8bedb98399ef535772fc06a1beb010f907d2eb709ecd3e272c13fd231416f97e73fd6f616ee1474c9d43872be8fbc059a61edcf80596b8e8c2cd2b53afb7916d67e4ce53c9840a4409d06166b5fcd454ff78554cd6ee78", 0x7d}, {&(0x7f0000001380)="cba99fe1b5d52fd6bac0", 0xa}], 0x5, &(0x7f0000001440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_retopts={{0xf0, 0x0, 0x7, {[@generic={0x88, 0xa, "37cac8f20d98c4e0"}, @noop, @lsrr={0x83, 0xb, 0xea, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0xf1, 0x3, 0x7, [{@rand_addr=0x64010102, 0x6}, {@broadcast, 0x40}, {@loopback, 0x7}, {@remote, 0x1}]}, @cipso={0x86, 0xa, 0x1, [{0x7, 0x4, "d7d4"}]}, @timestamp_prespec={0x44, 0x2c, 0x3d, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x14}, 0xe3}, {@local, 0x2}, {@broadcast, 0x8}]}, @ssrr={0x89, 0xb, 0xa4, [@loopback, @rand_addr=0x64010100]}, @timestamp={0x44, 0xc, 0x83, 0x0, 0x9, [0x9, 0x1000]}, @timestamp_addr={0x44, 0x14, 0x72, 0x1, 0x6, [{@rand_addr=0x64010102, 0xb}, {@remote, 0x10000}]}, @timestamp_addr={0x44, 0x44, 0xac, 0x1, 0xa, [{@local, 0x3}, {@rand_addr=0x64010100, 0x81}, {@loopback, 0xc5a8}, {@broadcast, 0x401}, {@rand_addr=0x64010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x5f19}, {@rand_addr=0x64010101, 0xf}, {@remote, 0x7ff}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}], 0x168}}, {{&(0x7f00000015c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001880)=[{&(0x7f0000001600)="a7139d1718", 0x5}, {&(0x7f0000001640)="4747b0f6ee3e6261426dd61c713262bef865f0b61e30de22c0598d23bdbfc4031f76163df0715a4288eb142bc349ec3c6f477442053c0abf3336056656d4387d3eedeb695b", 0x45}, {&(0x7f00000016c0)="6b915aa07727ec56a340ddb9276ecbf90e0cafc0a6247ec7daa372b17fbf19", 0x1f}, {&(0x7f0000001700)="92b7365ffd92bb351ec1669cbefcccfbc8959e5d850c04d22cec32d42d53278af2a0cc0c9d81", 0x26}, {&(0x7f0000001740)="4f6c79dd8f9bbed0bcac0ccac2ac76279b8bef0c98d41858dea14e430319212ef02654544254d7c758d7412a455ff3fbf75df4b98bf14b860b434810f78c68cc3269a63e849d460241286cabc17ed9a084c4358acf63c765cc10f6fa04b2abd21650c4ff96f5077549d14c32b12750b5dea11f0aecc13d", 0x77}, {&(0x7f00000017c0)="174eed7014a285f17cab0d7270f8f278fd25a76891e8ac143825181db6f8b304db62aed555c11af2855881004b48cb06c492488f3c4714a5d4a214446d73263d2be93af43a796557b9f6e861dbe2e5d866f4e8d910d4bd4d71b2dff3ed06ab5c5a967168015dbeacfc8c69c0aca48392ecd570953868054bc8f213050492a3f8654d2279be6a7ac241c89397fb6cffc5620f4dc87ea8521fe219c76567bef6", 0x9f}], 0x6, &(0x7f0000001900)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xf99}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffe}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@noop, @rr={0x7, 0x7, 0x4f, [@private=0xa010102]}, @timestamp_prespec={0x44, 0x44, 0xa1, 0x3, 0xf, [{@local, 0x1}, {@remote, 0x5}, {@private=0xa010102, 0x5}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x33}, 0xd}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffe}, {@multicast2, 0x7}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x128, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x58, 0x0, [{0x7, 0x10, "f0b5803a9bf31ab7fd9566e495de"}, {0x0, 0x8, "848c35a57030"}, {0x0, 0x2}, {0x2, 0x6, "24ec4dca"}, {0x0, 0xe, "8111c36b215eb5e77e3e4d30"}, {0x0, 0xd, "cc7e2845b80a7a6e415687"}, {0x0, 0xe, "e38c106528c69665613325f2"}, {0x5, 0x9, "a638d0c0ebdb28"}]}, @end, @rr={0x7, 0xf, 0x46, [@local, @dev={0xac, 0x14, 0x14, 0x1a}, @empty]}, @timestamp_prespec={0x44, 0x2c, 0x99, 0x3, 0x3, [{@rand_addr=0x64010102, 0x4}, {@remote, 0xfffffffb}, {@remote, 0x81}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0xeb}, 0x9}]}, @lsrr={0x83, 0x1b, 0xdc, [@empty, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010100, @multicast1, @broadcast]}, @timestamp_prespec={0x44, 0x4c, 0x60, 0x3, 0x3, [{@broadcast}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@multicast1, 0x40000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@rand_addr=0x64010101, 0x408}, {@private=0xa010100, 0x6}, {@empty, 0x9}, {@broadcast, 0x8fe6}]}, @timestamp={0x44, 0x18, 0xc5, 0x0, 0x3, [0x6, 0x8, 0x4, 0xfc2, 0x5]}]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xd3, 0x0, 0x5, [0x80000001]}, @end]}}}], 0x208}}], 0x2, 0x80) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001bc0)={0x7f, 0xe, "05fc7658d0a1c0c67288e441b2c7"}) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000001c00)=""/40, &(0x7f0000001c40)=0x28) sendto$packet(0xffffffffffffffff, &(0x7f0000001c80)="32b91a9e30a4ee0b3716b433620e3f8141d2025959189d4082502649e781bbfc9f19e51aa21831354a3fb09856b34a87dd8491f501cd1ac25c6432bfb0a1736e50c6168ea7eb1be36ca31a9069628cf65010bba42af668d42caf474800a2dc58833abbc5ccb10abf542c02fca87168e25731ba7e7325b969b40ab1e395fe71cd1954e83ca6218909c3db54b756dcc1c5ab4e600dc3c21d2d93af1849674d8492ec7df7f26e3a9bc7a4fb075ceeae6e08e75d8a5452b2d5e50350279d2ba51d670064a796746b52c075ff30d91f9a169a131120128b", 0xd5, 0xc080, 0x0, 0x0) r6 = syz_ublk_setup_io_uring(0x650a, &(0x7f0000001d80)={0x0, 0x71ab, 0x800, 0x1, 0x3d7, 0x0, r3}, &(0x7f0000001e00), &(0x7f0000001e40), &(0x7f0000001e80)) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001ec0), 0x100, 0x0) ioctl$BLKFLSBUF(r7, 0x1261, &(0x7f0000001f00)=0x9) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000001f40), r8) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000001f80), &(0x7f0000001fc0), 0x2, 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000003240)={0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/150, 0x96}, {&(0x7f00000030c0)=""/206, 0xce}], 0x3, &(0x7f0000003200)=[@cred={{0x1c}}], 0x20}, 0x0) fsetxattr$security_ima(r0, &(0x7f0000003280), &(0x7f00000032c0)=@md5={0x1, "86892e498bf0ebf678368d1593b2a834"}, 0x11, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000003300)) 2.985069959s ago: executing program 3 (id=1233): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000001c0), 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000080)={0x18, r2, 0x1, 0x70bd29, 0x25dfdc00, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4000000) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) 2.93910083s ago: executing program 3 (id=1234): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r0 = gettid() r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz1\x00', 0x103b}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) tkill(r0, 0x12) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000480)=0x1, 0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r0) fcntl$getownex(r5, 0x10, &(0x7f0000000080)={0x0, 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}], 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8932, &(0x7f0000000040)={'sit0\x00', @local}) write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6) pipe2(&(0x7f0000000380)={0xffffffffffffffff}, 0x880) connect$pppl2tp(r9, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x2, 0x2, 0x4, 0x3, {0xa, 0x4e23, 0x9, @mcast1, 0x2}}}, 0x3a) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, 0x0, 0xd0060) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r0], 0x178}, 0x1, 0x0, 0x0, 0x4c081}, 0x20000800) read(0xffffffffffffffff, &(0x7f0000000740)=""/377, 0x179) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r10, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) 2.749867285s ago: executing program 0 (id=1236): prlimit64(0x0, 0x0, 0x0, &(0x7f0000003000)) r0 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', 0x0}) syslog(0x4, &(0x7f0000000300)=""/4096, 0x1000) syslog(0x4, &(0x7f0000002b40)=""/69, 0x45) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb300, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x4}}}}}]}}]}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x40) write$binfmt_elf32(r2, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x8, 0xb, 0x2, 0x100, 0x2, 0x6, 0x80000000, 0x19d, 0x38, 0x2c5, 0x400, 0x100, 0x20, 0x0, 0x3, 0xc, 0xf6d}}, 0x38) close(r2) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) socket$inet6(0xa, 0x2, 0x0) 1.962602133s ago: executing program 2 (id=1251): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000700), 0xfffffffffffffffe, 0xc203) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r2, r2, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000001c0)={0x80, 0x1, 0x0, 0x0, 0x5995}, 0x10032, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f0000002380)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2400000022000106"], 0x24}], 0x1}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r7) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) ioctl$EVIOCRMFF(r7, 0x550c, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x1, 0x7800, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x6, 0x4, 0x0, @remote, @loopback}}}}) 1.577491352s ago: executing program 1 (id=1254): syz_io_uring_setup(0x6763, &(0x7f00000003c0)={0x0, 0x9621, 0x1000, 0x0, 0x204}, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001a40)="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", 0x559, r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r2}, &(0x7f0000000840)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="202706000000aec059aeb463649c6f12b830e405a0462f5db18f4ffe7df744d42ff7832bc89c254ffece3c410edbde049018f2a179c1b9bb403f2b6cb361f2e46912f60c5a0255344e79aa49a87e6abc4ee8e899d71d07487ed61fb882b9193592314dbec402c57457ad575571d1b37b1a0843542a905bb9d61bab3e9e603f3e87baf3afc5bd620b102d51dd46aa20a60893b784000000003ddf3963811408d3beed5ea38a906b4ede621c8efe1315597cfff0d5386cfd6fcfeef9c366bcd044c2077bc5ad1eb7291f08b7e4b118961fbbae0669a87af5517bf8b7fe779fee8c9d26aac785f39132a7929ae7172885715ec3fae038b08fc4a0eb3b6219d049c3cb"], 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000e00)={0x2c, &(0x7f0000000c80)={0x0, 0x3, 0x3, "149c33"}, 0x0, 0x0, 0x0, 0x0}) 1.25202226s ago: executing program 2 (id=1255): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001900010000000000fbdbdf650a0109001000128004001d8108001e000000fa"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x730, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xfc, 0x6, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000240)='binfmt_misc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x5c, 0x65a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) mount$overlay(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0), 0x84012, &(0x7f00000004c0)={[{@redirect_dir_off}, {@volatile}, {@nfs_export_on}, {@nfs_export_off}, {@workdir={'workdir', 0x3d, './binfmt/status'}}, {@default_permissions}], [{@obj_type={'obj_type', 0x3d, 'sysfs\x00'}}, {@obj_user={'obj_user', 0x3d, 'ethtool\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, '(+{!^'}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write$P9_RGETLOCK(r4, &(0x7f0000000140)={0x24, 0x37, 0x2, {0x0, 0x767b, 0xffff, 0x0, 0x6, 'sysfs\x00'}}, 0x24) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) 1.185328992s ago: executing program 0 (id=1256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x88440) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x7}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) prctl$PR_SET_KEEPCAPS(0x8, 0x1) pipe2(&(0x7f0000000040), 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000000000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYRES64=r1], 0x0) r5 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) write$cgroup_pid(r5, &(0x7f0000000d40), 0x12) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x903c00, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00009bd000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="0f01ba001000000f20d835080000000f22d8c40179eba90e000000f04681a9e5810000d8540000440f78be00000000440f2304430f3809fe0f79db66b883000f00d08fa83086910070000000", 0x4c}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000180)=0x2, 0x4) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r8, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)='\x00', 0x1}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r8, &(0x7f0000000340)="588ccb2f05aa0173398d34bdb16c728a36c6be351fa78a41f7ee00c1", 0x1c, 0x3b00, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.058007235s ago: executing program 1 (id=1257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x100, 0x8000) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r3 = dup3(r1, r2, 0x0) read$watch_queue(r3, &(0x7f0000000100)=""/107, 0x6b) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0xa0000014}) write$vga_arbiter(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r6, &(0x7f0000000180)=@unlock_all, 0xb) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc93e64f20f1f0030300f272d9d53bf0000c4b9e16dc30101220f01c3", 0x6b}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.057206485s ago: executing program 1 (id=1258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_usb_connect$uac3(0x3, 0xeb, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902d9000301008032080b0003010020000904000000010120000a2401003d00000000000c240a030300000000000000142402010102000300000000000000000000000013240302010300010300000000000000000000090401000001022000090401010101022000162401020000000001010000000000000002100000000624020102100905010900020100000a250100000000000000090402000001022000090402010101022000162401010000000001010000000000000002100000000624020102100905820900020100"], 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r1 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920010000030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x52, 0x0}) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) socket$inet(0x2, 0x3, 0x6) (async) r5 = socket$inet(0x2, 0x3, 0x4) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x34, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) (async) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) (async) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000080)={'gretap0\x00', 0x8c}) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) (async) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000200)={0x0, 0x200000}) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) (async, rerun: 32) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f00000001c0)={0x0, 0x200, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8000000000000000, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1, 0xffffffffffffffff, 0xffffbfffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdfffffffff, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0xfffffffffffffffb, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdffffffffe, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffbfffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffff6, 0x40, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}) (async) syz_usb_control_io$uac3(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) (async) syz_usb_control_io$uac3(r1, &(0x7f0000000100)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="000e06000000060a"], 0x0}, 0x0) (async, rerun: 64) syz_usb_control_io$uac3(r1, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000100)={'veth0_vlan\x00', 0x1}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 731.809783ms ago: executing program 2 (id=1259): r0 = socket(0x2, 0x2, 0x1) (async) get_robust_list(0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) (async) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a0000000202000000000000240009801c00000000000000140015"], 0x40}], 0x1}, 0x0) (async) keyctl$invalidate(0x15, r1) keyctl$read(0xb, r1, 0x0, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) getsockname$packet(r0, 0x0, &(0x7f00000001c0)) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) io_setup(0x1, &(0x7f0000000600)) 710.790543ms ago: executing program 2 (id=1260): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup3(r2, r1, 0x80000) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000013740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000104010200000000000000000c00000605000100"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x80) r4 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='utf8', &(0x7f00000001c0)='vfat\x00', 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12011001581c2908570b2a85396d0102030109021b08010001000b0904c8020103010203090504", @ANYBLOB="155b11753c7d51b8319d8d1925828efb8e84c2ece9a6cd85d108d33371e73628789edcf86f00efa8d676f9d036226857d66030c099691d0e16f39c14a4e5faf6841ebf332d", @ANYRESHEX=r0, @ANYRESOCT=r4, @ANYRES16=r0], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 513.952408ms ago: executing program 1 (id=1261): syz_usb_connect(0x3, 0x1b, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x1d, 0xf9, 0x1, 0x8, 0x10c4, 0x822b, 0xb0dc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x18, 0x6, 0x60, 0x40}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}}) 96.233708ms ago: executing program 2 (id=1262): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x20, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xffffffffffffffff) shutdown(r1, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000010000100000000000000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0c002b80080004"], 0x2c}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0x2, 0x4e24, 0x0, @local, 0x4}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) rmdir(&(0x7f00000005c0)='./cgroup/../file0/file0\x00') 62.767889ms ago: executing program 2 (id=1263): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1e8, r0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x5f}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xf6, 0xac, "8ed75473f1816224e538fb2f41b8fbea71e95d05f508671051373081eb81135d25205c9f4207ab14fd23e5344f5f45c95327dfcf19a0219de3dfe76b18b4f2fe28829339894dc120aa21d2ec93a44a82b8137d72a44e6886fbdf5b8b954a0cf1504fcc1f4b8c4cc193a8c4acf09fdfe77259e4cdce6bdbeb32645d327f7353e50919d6d6a49aac0f264e552f5e4e4b6024122362b167d4a3d01ff59dc45b98502617a967050d749698a3342b5680e34870f97a8e0433ce8a513e9a61e83882fa1d848da8db02f8839c0e2a1dfd3e90019a05eac8ab533a9809ea1a590c4f2e899d6b010d071cbb79bc2991607ead2c31d80c"}, @NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x89, 0xbe, "f727362ce2884812116965ec43ef876d78fd2cc379920118623b47cc64a759c59fa8ac0779f3ad5d799e2dcf7abfa201828e5a405963103740d7342dae5f0eacf5d648a19b63e4ea0815771d1a69e2fca618f3ac611655f668a548516a4b1428c307c7767fb7ab66d4af4bce07d17c797bf1b24ba23fb10b782943870ee8051d820f3f08be"}]}, 0x18}}, 0x61f3e4c6d2f7e8ae) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="b028", 0x2}], 0x1, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x841}}], 0x1, 0x11) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0x12, 0x8, 0x80, 0x2, 0x3, 0x2000000, 0x20000005, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffdf2d37, 0xfffffefd, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000e, 0x80000001, 0x0, 0xffffffff, 0xe661, 0x4, 0x0, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0xffff, 0x80000000, 0x0, 0xa071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x8003e, 0x87, 0x6, 0x6, 0xffffffff, 0x9, 0x4, 0x8, 0x3ff, 0x7fff, 0xfffffff9, 0x7, 0x7, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0xb, 0x8000012d, 0x4, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf8, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffa, 0x4, 0x7, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xfd, 0x10000, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0x4, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x9, 0x6, 0x8, 0xfffe, 0x202, 0x4, 0x9, 0x2000003, 0x3, 0x80000009, 0x1, 0xfffffff7, 0x3, 0xbc45, 0x4, 0x42, 0x3], [0x5, 0x404, 0x4, 0x5, 0xfffffffe, 0x100, 0x3, 0x9, 0x2, 0x7fff, 0xffffffff, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x96, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800001, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa5, 0xffffffff, 0xa9, 0x7, 0x6, 0xd, 0xbf, 0x4, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x3, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x9, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0xc6d, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0xb, 0xaf, 0x8, 0x7, 0x1, 0x2000005, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x100, 0x7, 0x3, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0x201002]}, 0x45c) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4218}, {0xffffffffffffffff, 0x5165}], 0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000478000/0x4000)=nil, 0x4000, 0x100000c, 0x810, r1, 0x24e95000) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r8, 0x80585414, &(0x7f0000000380)) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$BLKFRASET(r10, 0x1264, &(0x7f0000000000)=0x80000000) landlock_create_ruleset(&(0x7f00000002c0)={0x21e, 0x2, 0x2, 0xaa2b, 0x8, 0x2}, 0x30, 0x2) syz_ublk_setup_queues(r10, r9, &(0x7f0000000180)={0x0, 0x2d36, 0x1000, 0x4, 0x40375}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9efd, 0x40000, 0x2103, 0x10000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4011e0, 0x4000, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x91fd, 0x20, 0x0, 0x34a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2000, 0x3, 0x250}}], 0x1, 0x0, 0x0) 538.77µs ago: executing program 1 (id=1264): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) mount$bind(0x0, &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x8, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x10000000, @remote}}}, 0x108) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x4001}) (async) write$tun(r1, &(0x7f0000000380)={@val={0xa, 0x6003}, @val={0x3, 0x3, 0x6, 0x9, 0x4, 0x3}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@llc={0x4, {@llc={0xfc, 0xfc, "ea"}}}}}}, 0x1f) 240.57µs ago: executing program 0 (id=1265): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./config/usb_gadget/g1\x00', &(0x7f0000000080)={0x0, 0x0, 0x20}, 0x18) (async) rmdir(&(0x7f0000000600)='./config/usb_gadget/g1\x00') (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) (async) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) (async) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x220000, 0x20, 0x4}, 0x18) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) (async) openat$rfkill(0xffffffffffffff9c, 0x0, 0x28001, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x2000007, 0x80010, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x6) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x6) (async) r5 = open(&(0x7f0000000280)='./file0\x00', 0x8002, 0x1) mount_setattr(r2, &(0x7f0000000180)='./file0\x00', 0x100, &(0x7f00000002c0)={0x82, 0x8, 0x120000, {r5}}, 0x20) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24000000ad8e30e07b86dcc58afcfdf956ec9df745f20955b3d2a1ef44b5b3e9f4484b6aca088135e6d2366cafc394e368a012cebdfd14f43e45311ebbc481d6517216250187788b621f7673eda05b5194d980dd12a8013b0cee8e411efafb6dc41fea25", @ANYRES16=r6, @ANYBLOB="00082cbd7000fbdbdf25810000000c009900090000000900000004006700"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4818) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) (async) listen(r3, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000227bd7000ffdbdf413e00000008000300b01a", @ANYRES32=r7, @ANYBLOB="0c009900090000006a000000"], 0x28}, 0x1, 0x0, 0x0, 0xc4}, 0x4000) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) (async) socket$inet6(0xa, 0x2, 0x0) accept$inet(r3, 0x0, 0x0) syz_usb_connect$midi(0x0, 0x31, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100300000020e8096200400001020301090103300609050302400006038304250100"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=1266): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005c3f6b200304a4bc2302010203010902120001000000000904"], 0x0) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000600)=0xdfa, 0x4) syz_usb_connect$cdc_ecm(0x3, 0xe1, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf, 0x1, 0x1, 0x2, 0x80, 0x5, "", [{{0x9, 0x4, 0x0, 0xa9, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x6, 0x24, 0x6, 0x0, 0x0, "f9"}, {0x5, 0x24, 0x0, 0xfff2}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x2, 0x8, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x5}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x24}, @mdlm_detail={0x17, 0x24, 0x13, 0x0, "281be3f18b3875bbbb8f7060c07bfe5bbb0c93"}, @mdlm_detail={0x68, 0x24, 0x13, 0x1, "e3de52273e1afa1e6c880db382ed4525a26a93d7fd1458027a7b8fee6735d3bee785907513f0e53805cb1b779ca63adb2d90209560ca86ec85d90a82f73c8f9660ab51139981c2dacb58b35b72f9245befe7e522610a86f9211f68aa006ce073aafbf828"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb8, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0x16, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xeb, 0x6, 0x9}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0xff, 0x9, 0xff, 0x40, 0x2}, 0x49, &(0x7f00000001c0)={0x5, 0xf, 0x49, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x9, 0x101}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "66690cc651e245700f412dc8c996f342"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "908acb9be683768f1c0fc0cc4ab331ca"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x7f, 0x4, 0x7fff}, @wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x9, 0xd4, 0x8, 0x8}]}, 0x3, [{0x92, &(0x7f0000000240)=@string={0x92, 0x3, "327532cec7fe92247f7d51eeb0270ee84d25af5aee76903afc4f12d07d85d11fd1627bcbaf5a45ddc92d53996e4db2f7688314c7c2163d1aa5dfda4759e073e5fb564833ab7f11df6f6472247686e3b6d4a23be56cd614c61730cb7cd5243b22bef7587968368131d10a70db30bb139528915274df0a57fb21b56d9b1afd4471c7d56c29d5d0c2ff5e8753d7d6dcd4d6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x80a}}]}) kernel console output (not intermixed with test programs): dummy_hcd [ 126.791020][ T2993] 9pnet_fd: Insufficient options for proto=fd [ 126.809856][ T2996] bridge0: port 3(syz_tun) entered blocking state [ 126.816466][ T2996] bridge0: port 3(syz_tun) entered disabled state [ 126.823215][ T2996] syz_tun: entered allmulticast mode [ 126.828977][ T2996] syz_tun: entered promiscuous mode [ 126.834455][ T2996] bridge0: port 3(syz_tun) entered blocking state [ 126.840891][ T2996] bridge0: port 3(syz_tun) entered forwarding state [ 126.863437][ T36] audit: type=1400 audit(1804912643.468:457): avc: denied { append } for pid=2997 comm="syz.0.712" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.894491][ T310] usb 2-1: device descriptor read/64, error -71 [ 126.894493][ T358] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 127.045860][ T358] usb 4-1: unable to get BOS descriptor or descriptor too short [ 127.054966][ T358] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.066663][ T358] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 127.076033][ T358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.084118][ T358] usb 4-1: Product: syz [ 127.088429][ T358] usb 4-1: Manufacturer: syz [ 127.093191][ T358] usb 4-1: SerialNumber: syz [ 127.154498][ T310] usb 2-1: device descriptor read/64, error -71 [ 127.299926][ T2991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.308508][ T2991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.316688][ T2991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.325258][ T2991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.333343][ T2991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.341960][ T2991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.350286][ T2991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.358934][ T2991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.367125][ T2991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.375740][ T2991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.386806][ T358] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 127.397409][ T358] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 127.405983][ T310] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 127.413606][ T358] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 127.430352][ T358] usb 4-1: USB disconnect, device number 68 [ 127.433468][ T403] udevd[403]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 127.564508][ T310] usb 2-1: device descriptor read/64, error -71 [ 127.664505][ T2274] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 127.804527][ T310] usb 2-1: device descriptor read/64, error -71 [ 127.814506][ T2274] usb 1-1: Using ep0 maxpacket: 32 [ 127.820690][ T2274] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.832913][ T2274] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.842023][ T2274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.850052][ T2274] usb 1-1: Product: syz [ 127.854214][ T2274] usb 1-1: Manufacturer: syz [ 127.858909][ T2274] usb 1-1: SerialNumber: syz [ 127.912107][ T3006] IPv6: syztnl0: Disabled Multicast RS [ 127.917802][ T310] usb usb2-port1: attempt power cycle [ 128.184474][ T358] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 128.254477][ T310] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 128.268722][ T3008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.275457][ T310] usb 2-1: device descriptor read/8, error -71 [ 128.277447][ T3008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.296383][ T2274] cdc_ncm 1-1:1.0: failed to get mac address [ 128.302846][ T2274] cdc_ncm 1-1:1.0: bind() failure [ 128.311766][ T2274] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 128.318732][ T2274] cdc_ncm 1-1:1.1: bind() failure [ 128.345566][ T358] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 128.353779][ T358] usb 4-1: config 0 has no interface number 0 [ 128.360020][ T358] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 128.371002][ T358] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 128.382101][ T358] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 128.392960][ T358] usb 4-1: config 0 interface 2 has no altsetting 0 [ 128.400884][ T358] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 128.405523][ T310] usb 2-1: device descriptor read/8, error -71 [ 128.409999][ T358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.424141][ T358] usb 4-1: Product: syz [ 128.428347][ T358] usb 4-1: Manufacturer: syz [ 128.432940][ T358] usb 4-1: SerialNumber: syz [ 128.438163][ T358] usb 4-1: config 0 descriptor?? [ 128.443405][ T3006] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 128.450592][ T3006] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 128.654500][ T310] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 128.675493][ T310] usb 2-1: device descriptor read/8, error -71 [ 128.805536][ T310] usb 2-1: device descriptor read/8, error -71 [ 128.914597][ T310] usb usb2-port1: unable to enumerate USB device [ 129.171445][ T358] usb 4-1: USB disconnect, device number 69 [ 129.464513][ T358] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 129.635487][ T358] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 129.643797][ T358] usb 4-1: config 0 has no interface number 0 [ 129.651308][ T358] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 129.660490][ T358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.662461][ T36] audit: type=1400 audit(1804912646.268:458): avc: denied { sqpoll } for pid=3021 comm="syz.2.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 129.668625][ T358] usb 4-1: Product: syz [ 129.668642][ T358] usb 4-1: Manufacturer: syz [ 129.668658][ T358] usb 4-1: SerialNumber: syz [ 129.689747][ T3024] ./dev/sda1: Can't lookup blockdev [ 129.692584][ T358] usb 4-1: config 0 descriptor?? [ 129.701461][ T3028] ./dev/sda1: Can't lookup blockdev [ 130.008245][ T3043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3043 comm=syz.1.724 [ 130.081793][ T3045] netlink: 'syz.1.725': attribute type 4 has an invalid length. [ 130.091688][ T3045] netlink: 'syz.1.725': attribute type 4 has an invalid length. [ 130.136792][ T36] audit: type=1326 audit(1804912646.748:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3051 comm="syz.1.728" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa29a79e159 code=0x0 [ 130.355472][ T358] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 130.365728][ T358] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 130.378070][ T358] asix 4-1:0.251: probe with driver asix failed with error -71 [ 130.390014][ T358] usb 4-1: USB disconnect, device number 70 [ 130.422138][ T354] usb 1-1: USB disconnect, device number 76 [ 130.804489][ T354] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 130.955624][ T354] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.969309][ T354] usb 1-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=30.00 [ 130.980241][ T354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.988457][ T354] usb 1-1: Product: syz [ 130.992755][ T354] usb 1-1: Manufacturer: syz [ 130.995970][ T3072] syz.2.735 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 130.997612][ T354] usb 1-1: SerialNumber: syz [ 131.006909][ T3072] CPU: 0 UID: 0 PID: 3072 Comm: syz.2.735 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 131.006939][ T3072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.006952][ T3072] Call Trace: [ 131.006958][ T3072] [ 131.006970][ T3072] __dump_stack+0x21/0x30 [ 131.007000][ T3072] dump_stack_lvl+0x140/0x1c0 [ 131.007024][ T3072] ? __cfi_dump_stack_lvl+0x10/0x10 [ 131.007048][ T3072] ? ___ratelimit+0x41c/0x5c0 [ 131.007067][ T3072] ? __kasan_check_write+0x18/0x20 [ 131.007086][ T3072] dump_stack+0x19/0x20 [ 131.007107][ T3072] dump_header+0xd9/0x460 [ 131.007130][ T3072] oom_kill_process+0x35d/0x640 [ 131.007152][ T3072] out_of_memory+0x5d1/0xa20 [ 131.007173][ T3072] ? __cfi_out_of_memory+0x10/0x10 [ 131.007192][ T3072] ? mutex_lock_killable+0x97/0x1d0 [ 131.007212][ T3072] ? __cfi_mutex_lock_killable+0x10/0x10 [ 131.007234][ T3072] mem_cgroup_out_of_memory+0x2c5/0x390 [ 131.007255][ T3072] ? css_next_descendant_pre+0x1ec/0x210 [ 131.007277][ T3072] ? __kasan_check_write+0x18/0x20 [ 131.007294][ T3072] ? drain_obj_stock+0xec0/0xec0 [ 131.007314][ T3072] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 131.007333][ T3072] try_charge_memcg+0x925/0xe10 [ 131.007357][ T3072] ? static_key_count+0x45/0x70 [ 131.007380][ T3072] ? __cfi_gfp_zone+0x1/0x10 [ 131.007399][ T3072] ? __cfi_try_charge_memcg+0x10/0x10 [ 131.007423][ T3072] ? __alloc_pages_noprof+0x35a/0x7e0 [ 131.007448][ T3072] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 131.007473][ T3072] __mem_cgroup_charge+0xfc/0x420 [ 131.007490][ T3072] ? _raw_spin_trylock+0xb5/0x140 [ 131.007514][ T3072] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 131.007533][ T3072] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 131.007556][ T3072] ? shmem_replace_folio+0x9b0/0x9b0 [ 131.007584][ T3072] ? shmem_huge_global_enabled+0x2da/0x360 [ 131.007605][ T3072] ? shmem_allowable_huge_orders+0x405/0x430 [ 131.007625][ T3072] shmem_get_folio_gfp+0x5cd/0x12e0 [ 131.007648][ T3072] ? shmem_get_folio+0xc0/0xc0 [ 131.007667][ T3072] ? __cfi_filemap_map_pages+0x10/0x10 [ 131.007690][ T3072] shmem_fault+0x17d/0x350 [ 131.007711][ T3072] do_pte_missing+0x3649/0x4440 [ 131.007735][ T3072] ? shmem_alloc_and_add_folio+0xd84/0x10b0 [ 131.007757][ T3072] ? pte_marker_clear+0x1b0/0x1b0 [ 131.007780][ T3072] ? shmem_replace_folio+0x9b0/0x9b0 [ 131.007801][ T3072] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 131.007819][ T3072] handle_mm_fault+0x1189/0x1ba0 [ 131.007840][ T3072] ? __kasan_check_write+0x18/0x20 [ 131.007861][ T3072] ? __cfi_handle_mm_fault+0x10/0x10 [ 131.007882][ T3072] ? follow_page_pte+0x2c0/0xba0 [ 131.007906][ T3072] ? gup_must_unshare+0x1e0/0x1e0 [ 131.007929][ T3072] ? vma_is_secretmem+0x11/0x50 [ 131.007954][ T3072] ? check_vma_flags+0x337/0x3a0 [ 131.007978][ T3072] __get_user_pages+0x114b/0x22d0 [ 131.008000][ T3072] ? __kasan_check_write+0x18/0x20 [ 131.008021][ T3072] ? populate_vma_page_range+0x220/0x220 [ 131.008044][ T3072] ? __kernel_write_iter+0x709/0x900 [ 131.008064][ T3072] get_dump_page+0x10c/0x220 [ 131.008086][ T3072] ? __cfi_get_dump_page+0x10/0x10 [ 131.008108][ T3072] ? __asan_memset+0x39/0x50 [ 131.008127][ T3072] dump_user_range+0x18b/0xe60 [ 131.008148][ T3072] ? __cfi_dump_user_range+0x10/0x10 [ 131.008167][ T3072] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 131.008194][ T3072] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 131.008219][ T3072] ? elf_core_dump+0x23cf/0x3840 [ 131.008243][ T3072] elf_core_dump+0x2d61/0x3840 [ 131.008267][ T3072] ? __cfi_elf_core_dump+0x10/0x10 [ 131.008289][ T3072] ? mas_next_slot+0xf01/0xfd0 [ 131.008318][ T3072] ? dump_interrupted+0xf0/0xf0 [ 131.008337][ T3072] ? filp_open+0x199/0x1f0 [ 131.008360][ T3072] ? 0xffffffffff600000 [ 131.008376][ T3072] do_coredump+0x20d2/0x3050 [ 131.008396][ T3072] ? __cfi_do_coredump+0x10/0x10 [ 131.008414][ T3072] ? asm_exc_page_fault+0x2b/0x30 [ 131.008440][ T3072] ? __kasan_slab_free+0x6a/0x80 [ 131.008465][ T3072] ? get_signal+0xa2a/0x1490 [ 131.008489][ T3072] get_signal+0x11bf/0x1490 [ 131.008514][ T3072] arch_do_signal_or_restart+0xbc/0x700 [ 131.008532][ T3072] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 131.008552][ T3072] ? __kasan_check_read+0x15/0x20 [ 131.008570][ T3072] irqentry_exit_to_user_mode+0x4d/0xb0 [ 131.008599][ T3072] irqentry_exit+0x16/0x60 [ 131.008619][ T3072] exc_page_fault+0x65/0xc0 [ 131.008639][ T3072] asm_exc_page_fault+0x2b/0x30 [ 131.008657][ T3072] RIP: 0033:0x7f55d9653bd0 [ 131.008677][ T3072] Code: Unable to access opcode bytes at 0x7f55d9653ba6. [ 131.008687][ T3072] RSP: 002b:00000000000002f8 EFLAGS: 00010206 [ 131.008703][ T3072] RAX: 0000000000000000 RBX: 00007f55d9a25fa0 RCX: 00007f55d979e159 [ 131.008717][ T3072] RDX: 0000000000000300 RSI: 0000000000000430 RDI: 000000000000000b [ 131.008729][ T3072] RBP: 00007f55d9835024 R08: 0000000000000000 R09: 0000000000000000 [ 131.008741][ T3072] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 131.008753][ T3072] R13: 00007f55d9a26038 R14: 00007f55d9a25fa0 R15: 00007ffd9fccd428 [ 131.008769][ T3072] [ 131.008777][ T3072] memory: usage 307200kB, limit 307200kB, failcnt 2211 [ 131.020282][ T354] r8152-cfgselector 1-1: Unknown version 0x0000 [ 131.023087][ T3072] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 131.088880][ T3085] netlink: 51 bytes leftover after parsing attributes in process `syz.1.740'. [ 131.092542][ T3072] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 131.184456][ T358] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 131.189312][ T3072] Memory cgroup stats for [ 131.206436][ T3089] netlink: 'syz.1.740': attribute type 12 has an invalid length. [ 131.210398][ T3072] /syz2 [ 131.249177][ T3074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.251780][ T3072] : [ 131.259149][ T3074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.261844][ T3072] cache 308154368 [ 131.269823][ T3074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.271665][ T3072] rss 6418432 [ 131.278097][ T3074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.282878][ T3092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.287254][ T3072] rss_huge 0 [ 131.293842][ T3092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.298108][ T3072] shmem 244752384 [ 131.617292][ T3072] mapped_file 71966720 [ 131.619226][ T354] r8152-cfgselector 1-1: Unknown version 0x0000 [ 131.621427][ T3072] dirty 0 [ 131.630987][ T3072] writeback 0 [ 131.632028][ T354] r8152-cfgselector 1-1: USB disconnect, device number 77 [ 131.634338][ T3072] workingset_refault_anon 0 [ 131.641440][ T358] usb 4-1: Using ep0 maxpacket: 8 [ 131.646357][ T3072] workingset_refault_file 32 [ 131.655476][ T358] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.655883][ T3072] swap 0 [ 131.666610][ T358] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.669730][ T3072] swapcached 0 [ 131.685872][ T3072] pgpgin 167306 [ 131.686727][ T358] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.689419][ T3072] pgpgout 91017 [ 131.696006][ T358] usb 4-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 131.699910][ T3072] pgfault 101391 [ 131.708488][ T358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.712385][ T3072] pgmajfault 5 [ 131.723665][ T358] usb 4-1: config 0 descriptor?? [ 131.723675][ T3072] inactive_anon 8617984 [ 131.723685][ T3072] active_anon 242552832 [ 131.723692][ T3072] inactive_file 4096 [ 131.740844][ T3072] active_file 0 [ 131.744295][ T3072] unevictable 63397888 [ 131.748461][ T3072] hierarchical_memory_limit 314572800 [ 131.754175][ T3072] hierarchical_memsw_limit 9223372036854771712 [ 131.760364][ T3072] total_cache 308154368 [ 131.764556][ T3072] total_rss 6418432 [ 131.768364][ T3072] total_rss_huge 0 [ 131.772082][ T3072] total_shmem 244752384 [ 131.776265][ T3072] total_mapped_file 71966720 [ 131.780843][ T3072] total_dirty 0 [ 131.784280][ T3072] total_writeback 0 [ 131.788120][ T3072] total_workingset_refault_anon 0 [ 131.793135][ T3072] total_workingset_refault_file 32 [ 131.798283][ T3072] total_swap 0 [ 131.801650][ T3072] total_swapcached 0 [ 131.805565][ T3072] total_pgpgin 167306 [ 131.809557][ T3072] total_pgpgout 91017 [ 131.813543][ T3072] total_pgfault 101391 [ 131.817656][ T3072] total_pgmajfault 5 [ 131.821560][ T3072] total_inactive_anon 8617984 [ 131.827495][ T3072] total_active_anon 242552832 [ 131.832197][ T3072] total_inactive_file 4096 [ 131.836808][ T3072] total_active_file 0 [ 131.841036][ T3072] total_unevictable 63397888 [ 131.845776][ T3072] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.735,pid=3072,uid=0 [ 131.860833][ T3072] Memory cgroup out of memory: Killed process 3072 (syz.2.735) total-vm:184184kB, anon-rss:0kB, file-rss:0kB, shmem-rss:70144kB, UID:0 pgtables:160kB oom_score_adj:0 [ 132.011205][ T3101] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 132.020985][ T3101] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 132.030422][ T3101] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 132.049212][ T358] usbhid 4-1:0.0: can't add hid device: -71 [ 132.059429][ T358] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 132.071891][ T358] usb 4-1: USB disconnect, device number 71 [ 132.114490][ T354] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 132.264842][ T354] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 132.273619][ T354] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 132.281356][ T354] usb 1-1: can't read configurations, error -61 [ 132.414510][ T354] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 132.564924][ T354] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 132.573792][ T354] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 132.583271][ T354] usb 1-1: can't read configurations, error -61 [ 132.594488][ T354] usb usb1-port1: attempt power cycle [ 132.600084][ T3108] netlink: 20 bytes leftover after parsing attributes in process `syz.3.747'. [ 132.616838][ T3108] kvm: kvm [3107]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 132.635254][ T3115] netlink: 20 bytes leftover after parsing attributes in process `syz.3.747'. [ 132.806086][ T3124] netlink: 'syz.1.750': attribute type 12 has an invalid length. [ 132.944483][ T354] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 132.966229][ T3131] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 132.981612][ T354] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 132.990587][ T354] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 132.998395][ T354] usb 1-1: can't read configurations, error -61 [ 133.014614][ T358] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 133.134525][ T354] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 133.155191][ T354] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 133.164818][ T354] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 133.172870][ T354] usb 1-1: can't read configurations, error -61 [ 133.179886][ T354] usb usb1-port1: unable to enumerate USB device [ 133.186426][ T358] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 133.194484][ T358] usb 4-1: config 1 has no interface number 0 [ 133.200555][ T358] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1023 [ 133.211058][ T358] usb 4-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 133.221810][ T358] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x7 has an invalid bInterval 128, changing to 11 [ 133.234118][ T358] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 133.243199][ T358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.251232][ T358] usb 4-1: Product: syz [ 133.255417][ T358] usb 4-1: Manufacturer: syz [ 133.260013][ T358] usb 4-1: SerialNumber: syz [ 133.265600][ T3121] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 133.272812][ T3121] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 133.424648][ T310] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 133.501410][ T3142] netlink: 104 bytes leftover after parsing attributes in process `syz.2.755'. [ 133.519540][ T3144] ./dev/sda1: Can't lookup blockdev [ 133.575639][ T310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.588568][ T310] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 133.597634][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.606222][ T310] usb 2-1: config 0 descriptor?? [ 133.833130][ T3147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.841731][ T3147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.851199][ T3147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.859743][ T3147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.017250][ T310] input: HID 0458:5005 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5005.0013/input/input22 [ 134.033155][ T310] input: HID 0458:5005 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5005.0013/input/input23 [ 134.054807][ T310] kye 0003:0458:5005.0013: input,hiddev96,hidraw0: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.1-1/input0 [ 134.080786][ T3152] netlink: 'syz.2.759': attribute type 22 has an invalid length. [ 134.216612][ T310] usb 2-1: USB disconnect, device number 75 [ 134.880817][ T36] audit: type=1400 audit(1804912651.488:460): avc: denied { shutdown } for pid=3165 comm="syz.1.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 135.264518][ T358] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 135.394480][ T358] usb 1-1: device descriptor read/64, error -71 [ 135.644491][ T358] usb 1-1: device descriptor read/64, error -71 [ 135.784964][ T9] usb 4-1: USB disconnect, device number 72 [ 135.884506][ T358] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 136.014526][ T358] usb 1-1: device descriptor read/64, error -71 [ 136.044491][ T310] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 136.124533][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 136.194501][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 136.200711][ T310] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.212208][ T310] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 136.221304][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.229325][ T310] usb 2-1: Product: syz [ 136.233489][ T310] usb 2-1: Manufacturer: syz [ 136.238131][ T310] usb 2-1: SerialNumber: syz [ 136.243330][ T310] usb 2-1: config 0 descriptor?? [ 136.249116][ T310] sr9700 2-1:0.0: probe with driver sr9700 failed with error -22 [ 136.264477][ T358] usb 1-1: device descriptor read/64, error -71 [ 136.274478][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 136.280741][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 209, changing to 7 [ 136.293177][ T9] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 136.302308][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.310343][ T9] usb 4-1: Product: syz [ 136.314573][ T9] usb 4-1: Manufacturer: syz [ 136.319158][ T9] usb 4-1: SerialNumber: syz [ 136.374615][ T358] usb usb1-port1: attempt power cycle [ 136.450498][ T310] usb 2-1: USB disconnect, device number 76 [ 136.527827][ T3186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.773'. [ 136.537896][ T3186] tipc: Started in network mode [ 136.542806][ T3186] tipc: Node identity be0fc4e58acb, cluster identity 4711 [ 136.550221][ T3186] tipc: Enabled bearer , priority 10 [ 136.558103][ T3184] tipc: Resetting bearer [ 136.565596][ T3184] tipc: Disabling bearer [ 136.601846][ T9] usb 4-1: USB disconnect, device number 73 [ 136.612990][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 136.724556][ T358] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 136.745818][ T358] usb 1-1: device descriptor read/8, error -71 [ 136.885618][ T358] usb 1-1: device descriptor read/8, error -71 [ 137.124493][ T358] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 137.145525][ T358] usb 1-1: device descriptor read/8, error -71 [ 137.204481][ T354] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 137.285536][ T358] usb 1-1: device descriptor read/8, error -71 [ 137.364497][ T9] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 137.365654][ T354] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.383029][ T354] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.395982][ T358] usb usb1-port1: unable to enumerate USB device [ 137.402375][ T354] usb 2-1: config 0 interface 0 has no altsetting 0 [ 137.409399][ T354] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 137.418474][ T354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.427342][ T354] usb 2-1: config 0 descriptor?? [ 137.525820][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 137.534241][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 137.547206][ T9] usb 4-1: string descriptor 0 read error: -22 [ 137.553415][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 137.562578][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.573951][ T9] usb 4-1: unit 4 not found! [ 137.578638][ T9] usb 4-1: unit 0 not found! [ 137.774594][ T3207] netlink: 'syz.3.780': attribute type 5 has an invalid length. [ 137.782349][ T3207] netlink: 'syz.3.780': attribute type 32 has an invalid length. [ 137.791066][ T9] usb 4-1: USB disconnect, device number 74 [ 137.934738][ T36] audit: type=1400 audit(1804912654.548:461): avc: denied { create } for pid=3208 comm="syz.0.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 137.935500][ T3209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.781'. [ 138.314494][ T353] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 138.436396][ T354] sony 0003:054C:0268.0014: can't set operational mode: step 3, ignoring [ 138.445410][ T354] input: HID 054c:0268 Motion Sensors as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0268.0014/input/input25 [ 138.466204][ T353] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.477321][ T353] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 138.488309][ T353] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 138.502193][ T353] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.511376][ T353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 138.519408][ T353] usb 1-1: SerialNumber: syz [ 138.527781][ T354] input: HID 054c:0268 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0268.0014/input/input24 [ 138.527900][ T3209] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.546607][ T9] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 138.551853][ T354] sony 0003:054C:0268.0014: input,hiddev96,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 138.554780][ T353] hub 1-1:1.0: bad descriptor, ignoring hub [ 138.573011][ T353] hub 1-1:1.0: probe with driver hub failed with error -5 [ 138.642986][ T3203] netlink: 'syz.1.778': attribute type 27 has an invalid length. [ 138.651504][ T64] usb 2-1: USB disconnect, device number 77 [ 138.735441][ T9] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 138.746357][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.757537][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64 [ 138.761247][ T3209] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.768541][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 138.789339][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.798662][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 138.806727][ T9] usb 4-1: SerialNumber: syz [ 138.813323][ T3212] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 139.023908][ T9] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 139.031700][ T9] usb 4-1: USB disconnect, device number 75 [ 139.193847][ T353] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 139.736352][ T3240] overlayfs: failed to clone upperpath [ 139.864457][ T36] audit: type=1400 audit(1804912656.468:462): avc: denied { create } for pid=3243 comm="syz.3.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 140.126452][ T3254] futex_wake_op: syz.1.790 tries to shift op by 144; fix this program [ 140.484494][ T353] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 140.635871][ T353] usb 2-1: unable to get BOS descriptor or descriptor too short [ 140.644203][ T353] usb 2-1: not running at top speed; connect to a high speed hub [ 140.652780][ T353] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 140.665122][ T353] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 140.674173][ T353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.682289][ T353] usb 2-1: Product: syz [ 140.686486][ T353] usb 2-1: Manufacturer: syz [ 140.691068][ T353] usb 2-1: SerialNumber: syz [ 142.516088][ T64] usb 1-1: USB disconnect, device number 86 [ 142.522805][ T64] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 142.610849][ T353] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 142.627713][ T353] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 142.644329][ T353] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 142.662531][ T353] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 142.680138][ T353] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 142.694006][ T353] usb 2-1: USB disconnect, device number 78 [ 142.914514][ T64] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 143.065661][ T64] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.076802][ T64] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.087005][ T64] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 143.096288][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.534488][ T354] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 143.568678][ T64] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0015/input/input26 [ 143.583992][ T64] hid-picolcd 0003:04D8:C002.0015: No report with id 0x92 found [ 143.592433][ T64] hid-picolcd 0003:04D8:C002.0015: No report with id 0x94 found [ 143.600260][ T64] hid-picolcd 0003:04D8:C002.0015: failed to configure display [ 143.685500][ T354] usb 2-1: config 1 has an invalid interface number: 1 but max is 0 [ 143.693541][ T354] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.703796][ T354] usb 2-1: config 1 has no interface number 0 [ 143.710039][ T354] usb 2-1: config 1 interface 1 altsetting 0 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 143.714219][ T353] usb 1-1: USB disconnect, device number 87 [ 143.725836][ T354] usb 2-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 143.736542][ T354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.744586][ T354] usb 2-1: Product: syz [ 143.748744][ T354] usb 2-1: Manufacturer: syz [ 143.753319][ T354] usb 2-1: SerialNumber: syz [ 144.238323][ T36] audit: type=1400 audit(1804912660.848:463): avc: denied { shutdown } for pid=3322 comm="syz.0.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 144.469098][ T354] usb 2-1: MIDIStreaming interface descriptor not found [ 144.481353][ T354] usb 2-1: USB disconnect, device number 79 [ 144.546009][ T3332] syz.1.811 (3332): attempted to duplicate a private mapping with mremap. This is not supported. [ 144.564549][ T358] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 144.614475][ T353] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 144.725566][ T358] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 144.734661][ T358] usb 1-1: config 1 has no interface number 0 [ 144.740820][ T358] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 144.750452][ T358] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7 [ 144.763032][ T358] usb 1-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 144.772357][ T358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.774456][ T353] usb 4-1: Using ep0 maxpacket: 8 [ 144.780620][ T358] usb 1-1: Product: syz [ 144.789786][ T358] usb 1-1: Manufacturer: syz [ 144.794565][ T358] usb 1-1: SerialNumber: syz [ 144.796622][ T353] usb 4-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 144.813625][ T353] usb 4-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 144.823023][ T353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.831205][ T353] usb 4-1: Product: syz [ 144.835688][ T353] usb 4-1: Manufacturer: syz [ 144.840350][ T353] usb 4-1: SerialNumber: syz [ 144.874477][ T354] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 145.024478][ T354] usb 2-1: Using ep0 maxpacket: 32 [ 145.030707][ T354] usb 2-1: config 0 has an invalid descriptor of length 246, skipping remainder of the config [ 145.041311][ T354] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 145.057665][ T354] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 145.066962][ T354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.084737][ T354] usb 2-1: config 0 descriptor?? [ 145.093817][ T354] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 145.469134][ T3345] syz.2.814 uses obsolete (PF_INET,SOCK_PACKET) [ 145.521147][ T358] usb 1-1: 1:0 : does not exist [ 145.540087][ T358] usb 1-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 145.551602][ T358] usb 1-1: incorrect wMaxPacketSize 0x40 for BADD profile [ 145.554405][ T3357] netlink: 'syz.2.819': attribute type 4 has an invalid length. [ 145.566946][ T3357] netlink: 'syz.2.819': attribute type 32 has an invalid length. [ 145.576280][ T358] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 145.581670][ T353] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 145.601339][ T353] usb 4-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 145.606952][ T358] usb 1-1: USB disconnect, device number 88 [ 145.620285][ T353] usb 4-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 145.647812][ T1149] udevd[1149]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 145.673537][ T353] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 145.685273][ T353] usb 4-1: USB disconnect, device number 76 [ 145.694275][ T1149] udevd[1149]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 145.954509][ T358] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 145.974495][ T353] usb 4-1: new low-speed USB device number 77 using dummy_hcd [ 145.997231][ T3368] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=258 sclass=netlink_xfrm_socket pid=3368 comm=syz.1.811 [ 146.010712][ T3368] EXT4-fs warning (device sda1): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled. [ 146.094531][ T358] usb 1-1: device descriptor read/64, error -71 [ 146.134500][ T353] usb 4-1: Invalid ep0 maxpacket: 64 [ 146.191089][ T36] audit: type=1400 audit(1804912662.798:464): avc: denied { setattr } for pid=3369 comm="syz.2.824" path="socket:[28333]" dev="sockfs" ino=28333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.274489][ T353] usb 4-1: new low-speed USB device number 78 using dummy_hcd [ 146.334498][ T358] usb 1-1: device descriptor read/64, error -71 [ 146.434472][ T353] usb 4-1: Invalid ep0 maxpacket: 64 [ 146.439939][ T353] usb usb4-port1: attempt power cycle [ 146.584483][ T358] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 146.714493][ T358] usb 1-1: device descriptor read/64, error -71 [ 146.794513][ T353] usb 4-1: new low-speed USB device number 79 using dummy_hcd [ 146.814824][ T353] usb 4-1: Invalid ep0 maxpacket: 64 [ 146.944562][ T353] usb 4-1: new low-speed USB device number 80 using dummy_hcd [ 146.964495][ T358] usb 1-1: device descriptor read/64, error -71 [ 146.964859][ T353] usb 4-1: Invalid ep0 maxpacket: 64 [ 146.976209][ T353] usb usb4-port1: unable to enumerate USB device [ 147.074582][ T358] usb usb1-port1: attempt power cycle [ 147.424653][ T358] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 147.445410][ T358] usb 1-1: device descriptor read/8, error -71 [ 147.551179][ T353] usb 2-1: USB disconnect, device number 80 [ 147.575522][ T358] usb 1-1: device descriptor read/8, error -71 [ 147.814497][ T358] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 147.835585][ T358] usb 1-1: device descriptor read/8, error -71 [ 147.965585][ T358] usb 1-1: device descriptor read/8, error -71 [ 148.074662][ T358] usb usb1-port1: unable to enumerate USB device [ 148.744522][ T358] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 148.874505][ T358] usb 2-1: device descriptor read/64, error -71 [ 148.984523][ T354] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 149.054492][ T9] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 149.114504][ T358] usb 2-1: device descriptor read/64, error -71 [ 149.134496][ T354] usb 4-1: Using ep0 maxpacket: 16 [ 149.140738][ T354] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 149.151063][ T354] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 149.160177][ T354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.168195][ T354] usb 4-1: Product: syz [ 149.172361][ T354] usb 4-1: Manufacturer: syz [ 149.177005][ T354] usb 4-1: SerialNumber: syz [ 149.182237][ T354] usb 4-1: config 0 descriptor?? [ 149.215625][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.225829][ T9] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 149.234891][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.243367][ T9] usb 1-1: config 0 descriptor?? [ 149.249141][ T9] usb 1-1: bad CDC descriptors [ 149.354498][ T358] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 149.449771][ T9] usb 1-1: USB disconnect, device number 93 [ 149.484552][ T358] usb 2-1: device descriptor read/64, error -71 [ 149.636385][ T9] usb 4-1: USB disconnect, device number 81 [ 149.734501][ T358] usb 2-1: device descriptor read/64, error -71 [ 149.844618][ T358] usb usb2-port1: attempt power cycle [ 150.184504][ T358] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 150.205462][ T358] usb 2-1: device descriptor read/8, error -71 [ 150.294173][ T3421] 8021q: VLANs not supported on gre0 [ 150.335756][ T358] usb 2-1: device descriptor read/8, error -71 [ 150.384495][ T354] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 150.535479][ T354] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.545781][ T354] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 150.559505][ T354] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.568611][ T354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 150.576657][ T358] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 150.584261][ T354] usb 4-1: SerialNumber: syz [ 150.605488][ T358] usb 2-1: device descriptor read/8, error -71 [ 150.735608][ T358] usb 2-1: device descriptor read/8, error -71 [ 150.794545][ T354] usb 4-1: bad CDC descriptors [ 150.802606][ T354] usb 4-1: USB disconnect, device number 82 [ 150.844611][ T358] usb usb2-port1: unable to enumerate USB device [ 150.912613][ T3442] overlayfs: missing 'lowerdir' [ 151.544363][ T3460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3460 comm=syz.1.854 [ 151.599056][ T3466] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 151.784485][ T9] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 151.934473][ T354] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 151.935575][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.952239][ T9] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 151.961325][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.973152][ T9] uvcvideo 4-1:1.1: Unknown video format 00805559-aa00-3800-9b71-100100000000 [ 151.982408][ T9] usb 4-1: Found UVC 1.00 device (0000:0000) [ 151.989509][ T9] uvcvideo 4-1:1.1: No supported video formats found. [ 151.996521][ T9] uvcvideo 4-1:1.1: Failed to initialize the device (-22). [ 152.094498][ T354] usb 2-1: Using ep0 maxpacket: 16 [ 152.100729][ T354] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 152.108976][ T354] usb 2-1: config 1 has no interface number 0 [ 152.115100][ T354] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 152.125020][ T354] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 152.135024][ T354] usb 2-1: config 1 interface 105 has no altsetting 0 [ 152.143146][ T354] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 152.152244][ T354] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 152.160394][ T354] usb 2-1: Product: syz [ 152.164596][ T354] usb 2-1: Manufacturer: syz [ 152.169194][ T354] usb 2-1: SerialNumber: syz [ 152.179444][ T3464] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 152.186714][ T3464] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 152.235896][ T358] usb 4-1: USB disconnect, device number 83 [ 152.397969][ T354] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 152.407683][ T354] usb 2-1: USB disconnect, device number 85 [ 152.664494][ T358] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 152.814516][ T358] usb 1-1: Using ep0 maxpacket: 16 [ 152.820793][ T358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.839875][ T358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.850827][ T358] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 152.868704][ T358] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 152.879316][ T358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.891040][ T358] usb 1-1: config 0 descriptor?? [ 153.098585][ T358] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 153.108015][ T358] microsoft 0003:045E:07DA.0016: unsupported Resolution Multiplier 0 [ 153.117340][ T358] microsoft 0003:045E:07DA.0016: implement() called with n (152) > 32! (kworker/1:5) [ 153.127298][ T358] microsoft 0003:045E:07DA.0016: unsupported Resolution Multiplier 0 [ 153.135728][ T358] microsoft 0003:045E:07DA.0016: No inputs registered, leaving [ 153.144324][ T358] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 153.155792][ T358] microsoft 0003:045E:07DA.0016: no inputs found [ 153.162141][ T358] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 153.184562][ T353] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 153.335534][ T353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.346574][ T353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.356343][ T353] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.369384][ T353] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.378465][ T353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.387569][ T353] usb 2-1: config 0 descriptor?? [ 153.551876][ T36] audit: type=1400 audit(1804912670.158:465): avc: denied { rename } for pid=3513 comm="syz.3.870" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 153.552442][ T3514] netlink: 9 bytes leftover after parsing attributes in process `syz.3.870'. [ 153.583020][ T3514] gretap0: entered promiscuous mode [ 153.591492][ T3534] netlink: 9 bytes leftover after parsing attributes in process `syz.3.870'. [ 153.802873][ T353] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 153.810403][ T353] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 153.817853][ T353] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 153.825283][ T353] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 153.832683][ T353] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 153.840096][ T353] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 153.847515][ T353] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 153.854925][ T353] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 153.862320][ T353] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 153.869910][ T353] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 153.878760][ T353] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 154.005164][ T3510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.013783][ T3510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.075096][ T347] usb 2-1: USB disconnect, device number 86 [ 154.954511][ T353] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 155.115601][ T353] usb 2-1: config 1 has an invalid interface number: 189 but max is 0 [ 155.123863][ T353] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 155.134069][ T353] usb 2-1: config 1 has no interface number 0 [ 155.140201][ T353] usb 2-1: config 1 interface 189 has no altsetting 0 [ 155.148441][ T353] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 155.157571][ T353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.165605][ T353] usb 2-1: Product: syz [ 155.169769][ T353] usb 2-1: Manufacturer: syz [ 155.174355][ T353] usb 2-1: SerialNumber: syz [ 155.180693][ T353] hub 2-1:1.189: bad descriptor, ignoring hub [ 155.186845][ T353] hub 2-1:1.189: probe with driver hub failed with error -5 [ 155.433784][ T358] usb 1-1: USB disconnect, device number 94 [ 155.484650][ T353] usb 2-1: USB disconnect, device number 87 [ 155.523151][ T3554] FAULT_INJECTION: forcing a failure. [ 155.523151][ T3554] name failslab, interval 1, probability 0, space 0, times 0 [ 155.535805][ T3554] CPU: 0 UID: 0 PID: 3554 Comm: syz.0.879 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 155.535826][ T3554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.535834][ T3554] Call Trace: [ 155.535839][ T3554] [ 155.535844][ T3554] __dump_stack+0x21/0x30 [ 155.535865][ T3554] dump_stack_lvl+0x140/0x1c0 [ 155.535879][ T3554] ? __cfi_dump_stack_lvl+0x10/0x10 [ 155.535895][ T3554] dump_stack+0x19/0x20 [ 155.535908][ T3554] should_fail_ex+0x3c2/0x510 [ 155.535921][ T3554] should_failslab+0xac/0x100 [ 155.535935][ T3554] kmem_cache_alloc_noprof+0x42/0x410 [ 155.535947][ T3554] ? alloc_empty_file+0xbf/0x270 [ 155.535961][ T3554] ? _raw_spin_unlock+0x45/0x60 [ 155.535977][ T3554] alloc_empty_file+0xbf/0x270 [ 155.535990][ T3554] ? _raw_spin_unlock+0x45/0x60 [ 155.536005][ T3554] alloc_file_pseudo+0x142/0x1f0 [ 155.536018][ T3554] ? security_inode_init_security_anon+0x3e/0x110 [ 155.536033][ T3554] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 155.536047][ T3554] ? anon_inode_make_secure_inode+0xf5/0x150 [ 155.536062][ T3554] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 155.536077][ T3554] __anon_inode_getfile+0x12e/0x200 [ 155.536101][ T3554] anon_inode_create_getfile+0x3f/0x50 [ 155.536131][ T3554] new_userfaultfd+0x1f6/0x410 [ 155.536146][ T3554] __x64_sys_userfaultfd+0x89/0xb0 [ 155.536157][ T3554] x64_sys_call+0x2950/0x2ee0 [ 155.536167][ T3554] do_syscall_64+0x57/0xf0 [ 155.536182][ T3554] ? clear_bhb_loop+0x50/0xa0 [ 155.536194][ T3554] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 155.536206][ T3554] RIP: 0033:0x7f486179e159 [ 155.536216][ T3554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.536227][ T3554] RSP: 002b:00007f48626c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 155.536248][ T3554] RAX: ffffffffffffffda RBX: 00007f4861a25fa0 RCX: 00007f486179e159 [ 155.536262][ T3554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000801 [ 155.536274][ T3554] RBP: 00007f4861835024 R08: 0000000000000000 R09: 0000000000000000 [ 155.536285][ T3554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.536291][ T3554] R13: 00007f4861a26038 R14: 00007f4861a25fa0 R15: 00007ffee64dac78 [ 155.536300][ T3554] [ 156.034568][ T358] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 156.174489][ T358] usb 1-1: device descriptor read/64, error -71 [ 156.314505][ T353] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 156.414479][ T358] usb 1-1: device descriptor read/64, error -71 [ 156.444486][ T353] usb 2-1: device descriptor read/64, error -71 [ 156.654518][ T358] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 156.749140][ T353] usb 2-1: device descriptor read/64, error -71 [ 156.784737][ T358] usb 1-1: device descriptor read/64, error -71 [ 156.994519][ T353] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 157.024533][ T358] usb 1-1: device descriptor read/64, error -71 [ 157.124485][ T353] usb 2-1: device descriptor read/64, error -71 [ 157.134653][ T358] usb usb1-port1: attempt power cycle [ 157.280890][ T3567] netlink: 'syz.2.883': attribute type 46 has an invalid length. [ 157.374487][ T353] usb 2-1: device descriptor read/64, error -71 [ 157.484519][ T358] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 157.486609][ T353] usb usb2-port1: attempt power cycle [ 157.515633][ T358] usb 1-1: device descriptor read/8, error -71 [ 157.644600][ T347] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 157.653094][ T358] usb 1-1: device descriptor read/8, error -71 [ 157.795846][ T347] usb 4-1: unable to get BOS descriptor or descriptor too short [ 157.804296][ T347] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.814531][ T347] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 157.825775][ T347] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 157.834986][ T347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.842966][ T347] usb 4-1: Product: syz [ 157.844476][ T353] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 157.847280][ T347] usb 4-1: Manufacturer: syz [ 157.859339][ T347] usb 4-1: SerialNumber: syz [ 157.875530][ T353] usb 2-1: device descriptor read/8, error -71 [ 157.904969][ T358] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 157.925441][ T358] usb 1-1: device descriptor read/8, error -71 [ 158.005862][ T353] usb 2-1: device descriptor read/8, error -71 [ 158.068402][ T347] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 158.078736][ T358] usb 1-1: device descriptor read/8, error -71 [ 158.085097][ T347] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 158.097084][ T347] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 158.107505][ T347] usb 4-1: USB disconnect, device number 85 [ 158.116844][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 158.204660][ T358] usb usb1-port1: unable to enumerate USB device [ 158.244545][ T353] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 158.265455][ T353] usb 2-1: device descriptor read/8, error -71 [ 158.395550][ T353] usb 2-1: device descriptor read/8, error -71 [ 158.498605][ T36] audit: type=1400 audit(1804912675.108:466): avc: denied { ioctl } for pid=3594 comm="syz.2.893" path="socket:[31346]" dev="sockfs" ino=31346 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.523331][ T353] usb usb2-port1: unable to enumerate USB device [ 158.523509][ T36] audit: type=1400 audit(1804912675.108:467): avc: denied { sys_module } for pid=3594 comm="syz.2.893" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 158.588966][ T36] audit: type=1400 audit(1804912675.198:468): avc: denied { read } for pid=3606 comm="syz.3.898" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 158.648362][ T3616] tipc: New replicast peer: 255.255.255.255 [ 158.654573][ T3616] tipc: Enabled bearer , priority 10 [ 158.661215][ T3616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.901'. [ 158.811512][ T3620] netlink: 17 bytes leftover after parsing attributes in process `syz.0.903'. [ 158.822363][ T3620] netlink: 'syz.0.903': attribute type 4 has an invalid length. [ 158.914501][ T353] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 159.074516][ T353] usb 4-1: Invalid ep0 maxpacket: 16 [ 159.100329][ T3639] tipc: New replicast peer: 255.255.255.255 [ 159.106498][ T3639] tipc: Enabled bearer , priority 10 [ 159.114293][ T3644] tipc: Enabling of bearer rejected, already enabled [ 159.132702][ T3648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.909'. [ 159.143096][ T3648] overlayfs: failed to clone upperpath [ 159.204670][ T353] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 159.354513][ T353] usb 4-1: Invalid ep0 maxpacket: 16 [ 159.360030][ T353] usb usb4-port1: attempt power cycle [ 159.471201][ T36] audit: type=1400 audit(1804912676.078:469): avc: denied { read append } for pid=3653 comm="syz.0.912" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.494505][ T358] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 159.502293][ T36] audit: type=1400 audit(1804912676.078:470): avc: denied { open } for pid=3653 comm="syz.0.912" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.526682][ T36] audit: type=1400 audit(1804912676.078:471): avc: denied { map } for pid=3653 comm="syz.0.912" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.549650][ T36] audit: type=1400 audit(1804912676.078:472): avc: denied { execute } for pid=3653 comm="syz.0.912" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.573050][ T36] audit: type=1400 audit(1804912676.158:473): avc: denied { mount } for pid=3653 comm="syz.0.912" name="/" dev="pstore" ino=2413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 159.603006][ T36] audit: type=1400 audit(1804912676.208:474): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 159.655509][ T358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.666525][ T358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.676317][ T358] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 159.685465][ T358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.694964][ T358] usb 2-1: config 0 descriptor?? [ 159.705448][ T353] usb 4-1: new low-speed USB device number 88 using dummy_hcd [ 159.725094][ T353] usb 4-1: Invalid ep0 maxpacket: 16 [ 159.764503][ T9] tipc: Node number set to 885310693 [ 159.778428][ T3668] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 159.788578][ T36] audit: type=1400 audit(1804912676.398:475): avc: denied { relabelto } for pid=3667 comm="syz.2.917" name="file0" dev="tmpfs" ino=1977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 159.815511][ T36] audit: type=1400 audit(1804912676.398:476): avc: denied { associate } for pid=3667 comm="syz.2.917" name="file0" dev="tmpfs" ino=1977 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 159.854481][ T353] usb 4-1: new low-speed USB device number 89 using dummy_hcd [ 159.874833][ T353] usb 4-1: Invalid ep0 maxpacket: 16 [ 159.880259][ T353] usb usb4-port1: unable to enumerate USB device [ 159.964483][ T354] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 160.102404][ T358] usbhid 2-1:0.0: can't add hid device: -71 [ 160.108548][ T358] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 160.116359][ T354] usb 1-1: Using ep0 maxpacket: 32 [ 160.122480][ T358] usb 2-1: USB disconnect, device number 92 [ 160.129606][ T354] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 160.138183][ T354] usb 1-1: config 0 has no interface number 0 [ 160.145589][ T354] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 160.154659][ T354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.162647][ T354] usb 1-1: Product: syz [ 160.166850][ T354] usb 1-1: Manufacturer: syz [ 160.171452][ T354] usb 1-1: SerialNumber: syz [ 160.176789][ T354] usb 1-1: config 0 descriptor?? [ 160.182524][ T354] smsc95xx v2.0.0 [ 160.294671][ T36] audit: type=1400 audit(1804912676.908:477): avc: denied { rmdir } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=1977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 160.371341][ T3683] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 161.034199][ T3712] tipc: Enabling of bearer rejected, failed to enable media [ 161.042621][ T3713] tipc: Enabling of bearer rejected, failed to enable media [ 161.078150][ T3722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.933'. [ 161.087144][ T3722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'. [ 161.254487][ T353] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 161.384481][ T353] usb 2-1: device descriptor read/64, error -71 [ 161.586971][ T354] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 161.597801][ T354] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 161.607099][ T354] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 161.617986][ T354] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 161.627221][ T354] usb 1-1: USB disconnect, device number 99 [ 161.634745][ T353] usb 2-1: device descriptor read/64, error -71 [ 161.874496][ T353] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 162.004501][ T353] usb 2-1: device descriptor read/64, error -71 [ 162.244479][ T353] usb 2-1: device descriptor read/64, error -71 [ 162.334549][ T354] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 162.364561][ T353] usb usb2-port1: attempt power cycle [ 162.485562][ T354] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 162.496186][ T354] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 162.507267][ T354] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 162.516415][ T354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.524399][ T354] usb 1-1: Product: syz [ 162.528619][ T354] usb 1-1: Manufacturer: syz [ 162.533259][ T354] usb 1-1: SerialNumber: syz [ 162.704516][ T353] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 162.725508][ T353] usb 2-1: device descriptor read/8, error -71 [ 162.739962][ T354] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 100 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 162.855501][ T353] usb 2-1: device descriptor read/8, error -71 [ 162.864502][ T358] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 163.014460][ T358] usb 4-1: Using ep0 maxpacket: 8 [ 163.020615][ T358] usb 4-1: config 3 has an invalid interface number: 45 but max is 0 [ 163.028787][ T358] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 163.037501][ T358] usb 4-1: config 3 has no interface number 0 [ 163.043588][ T358] usb 4-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.056599][ T358] usb 4-1: config 3 interface 45 has no altsetting 0 [ 163.064725][ T358] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 163.073778][ T358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.081822][ T358] usb 4-1: Product: syz [ 163.085999][ T358] usb 4-1: Manufacturer: syz [ 163.090587][ T358] usb 4-1: SerialNumber: syz [ 163.104486][ T353] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 163.125441][ T353] usb 2-1: device descriptor read/8, error -71 [ 163.255529][ T353] usb 2-1: device descriptor read/8, error -71 [ 163.276364][ T3749] overlayfs: failed to clone upperpath [ 163.293400][ T3750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.303384][ T3750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.364607][ T353] usb usb2-port1: unable to enumerate USB device [ 164.424481][ T353] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 164.574468][ T353] usb 2-1: Using ep0 maxpacket: 32 [ 164.581033][ T353] usb 2-1: unable to get BOS descriptor or descriptor too short [ 164.589455][ T353] usb 2-1: config 5 has an invalid interface number: 18 but max is 0 [ 164.597690][ T353] usb 2-1: config 5 has no interface number 0 [ 164.603795][ T353] usb 2-1: config 5 interface 18 has no altsetting 0 [ 164.611960][ T353] usb 2-1: New USB device found, idVendor=2357, idProduct=0601, bcdDevice=3f.aa [ 164.621104][ T353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.629138][ T353] usb 2-1: Product: syz [ 164.633316][ T353] usb 2-1: Manufacturer: syz [ 164.637950][ T353] usb 2-1: SerialNumber: syz [ 164.645357][ T353] r8152-cfgselector 2-1: Unknown version 0x0000 [ 164.853196][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 164.853213][ T36] audit: type=1400 audit(1804912681.458:486): avc: denied { bpf } for pid=3767 comm="syz.1.947" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 165.107950][ T310] usb 1-1: USB disconnect, device number 100 [ 165.116341][ T3770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.948'. [ 165.121968][ T310] usblp0: removed [ 165.359051][ T353] r8152 2-1:5.18: Expected endpoints are not found [ 165.367873][ T353] r8152-cfgselector 2-1: USB disconnect, device number 97 [ 165.454556][ T310] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 165.585099][ T310] usb 1-1: device descriptor read/64, error -71 [ 165.588459][ T358] usb 4-1: USB disconnect, device number 90 [ 165.603533][ T1149] udevd[1149]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 165.664472][ T353] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 165.825934][ T353] usb 2-1: unable to get BOS descriptor or descriptor too short [ 165.834315][ T353] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.844478][ T353] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 165.853442][ T353] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 165.864260][ T310] usb 1-1: device descriptor read/64, error -71 [ 165.871933][ T353] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 165.881025][ T353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.889134][ T353] usb 2-1: Product: syz [ 165.893348][ T353] usb 2-1: Manufacturer: syz [ 165.897955][ T353] usb 2-1: SerialNumber: syz [ 166.004473][ T358] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 166.104485][ T310] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 166.107380][ T36] audit: type=1400 audit(1804912682.718:487): avc: denied { write } for pid=3774 comm="syz.1.950" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 166.115686][ T353] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 166.144462][ T358] usb 4-1: device descriptor read/64, error -71 [ 166.152088][ T353] usb 2-1: USB disconnect, device number 98 [ 166.264485][ T310] usb 1-1: device descriptor read/64, error -71 [ 166.394523][ T358] usb 4-1: device descriptor read/64, error -71 [ 166.514480][ T310] usb 1-1: device descriptor read/64, error -71 [ 166.625423][ T310] usb usb1-port1: attempt power cycle [ 166.644502][ T358] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 166.784475][ T358] usb 4-1: device descriptor read/64, error -71 [ 166.964599][ T310] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 166.985502][ T310] usb 1-1: device descriptor read/8, error -71 [ 167.024666][ T358] usb 4-1: device descriptor read/64, error -71 [ 167.116752][ T310] usb 1-1: device descriptor read/8, error -71 [ 167.134570][ T358] usb usb4-port1: attempt power cycle [ 167.354510][ T310] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 167.375569][ T310] usb 1-1: device descriptor read/8, error -71 [ 167.424007][ T3822] netlink: 72 bytes leftover after parsing attributes in process `syz.2.967'. [ 167.442645][ T3824] netlink: 32 bytes leftover after parsing attributes in process `syz.2.968'. [ 167.504487][ T358] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 167.505783][ T310] usb 1-1: device descriptor read/8, error -71 [ 167.525475][ T358] usb 4-1: device descriptor read/8, error -71 [ 167.624616][ T310] usb usb1-port1: unable to enumerate USB device [ 167.666025][ T358] usb 4-1: device descriptor read/8, error -71 [ 167.844504][ T347] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 167.914484][ T358] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 167.935494][ T358] usb 4-1: device descriptor read/8, error -71 [ 167.994490][ T347] usb 2-1: Using ep0 maxpacket: 8 [ 168.000622][ T347] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 79, changing to 10 [ 168.011757][ T347] usb 2-1: config 1 interface 0 has no altsetting 0 [ 168.019808][ T347] usb 2-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.40 [ 168.029079][ T347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.037111][ T347] usb 2-1: Product: syz [ 168.041265][ T347] usb 2-1: Manufacturer: 쎟救驊鼃嫶ꓱ䥜䯅ꒀ昘♖뼚㵹ᒢ痐硱ًⳅ枧ゔ鋦㫵欄䓄ㅓᲉⰍꖜᕺ낣詥ꆩᚤ揹縐鮮짇表鍦罋攦ᴇ㷱퇈⼪ب썋쌪❐臔ᱝ卸ᵄ诳詏ࣷ䑘侅풸魝屝碟鲨ﶲಜ穞⍒䈷⃺욾촪ꙫ秧줋艘ཾᣌ錊颥홮淃핕䤈┠瑦 [ 168.070007][ T347] usb 2-1: SerialNumber: syz [ 168.085594][ T358] usb 4-1: device descriptor read/8, error -71 [ 168.194563][ T358] usb usb4-port1: unable to enumerate USB device [ 168.279228][ T347] usbhid 2-1:1.0: can't add hid device: -71 [ 168.285260][ T347] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 168.294093][ T347] usb 2-1: USB disconnect, device number 99 [ 168.564525][ T64] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 168.715611][ T64] usb 1-1: config index 0 descriptor too short (expected 2340, got 36) [ 168.723913][ T64] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.734008][ T64] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 4 [ 168.742986][ T64] usb 1-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 168.752035][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.760551][ T64] usb 1-1: config 0 descriptor?? [ 168.787567][ T685] Bluetooth: hci0: Frame reassembly failed (-84) [ 168.817642][ T36] audit: type=1326 audit(1804912685.428:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.2.972" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d979e159 code=0x7fc00000 [ 169.094480][ T347] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 169.245446][ T347] usb 4-1: config 1 has an invalid interface number: 161 but max is 0 [ 169.253662][ T347] usb 4-1: config 1 has no interface number 0 [ 169.259785][ T347] usb 4-1: config 1 interface 161 has no altsetting 0 [ 169.268059][ T347] usb 4-1: New USB device found, idVendor=0411, idProduct=003d, bcdDevice=bb.be [ 169.277162][ T347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.285173][ T347] usb 4-1: Product: syz [ 169.289364][ T347] usb 4-1: Manufacturer: syz [ 169.293947][ T347] usb 4-1: SerialNumber: syz [ 169.505279][ T347] asix 4-1:1.161: probe with driver asix failed with error -22 [ 169.515564][ T347] usb 4-1: Found UVC 15.ff device syz (0411:003d) [ 169.522080][ T347] usb 4-1: No valid video chain found. [ 169.528728][ T347] usb 4-1: USB disconnect, device number 95 [ 169.696255][ T36] audit: type=1400 audit(1804912686.308:489): avc: denied { rename } for pid=3863 comm="syz.2.981" name="file0" dev="tmpfs" ino=2193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 170.026737][ T3872] futex_wake_op: syz.3.984 tries to shift op by 144; fix this program [ 170.270546][ T3884] netlink: 48 bytes leftover after parsing attributes in process `syz.2.988'. [ 170.334189][ T3884] overlayfs: failed to clone upperpath [ 170.864497][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 170.870685][ T431] Bluetooth: hci0: command 0x1003 tx timeout [ 170.875219][ T36] audit: type=1400 audit(1804912687.478:490): avc: denied { mount } for pid=3891 comm="syz.2.990" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 170.908908][ T36] audit: type=1400 audit(1804912687.488:491): avc: denied { unmount } for pid=3894 comm="syz.1.991" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 171.032372][ T3909] netlink: 288 bytes leftover after parsing attributes in process `syz.1.994'. [ 171.089314][ T36] audit: type=1400 audit(1804912687.698:492): avc: denied { append } for pid=3911 comm="syz.3.995" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 171.112548][ T3912] rust_binder: Write failure EINVAL in pid:693 [ 171.113219][ T3912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.120229][ T3912] rust_binder: 3911:3912 got transaction to invalid handle 1 [ 171.143793][ T3912] rust_binder: 3911:3912 transaction call to 0:0 failed ENOENT, code 0 size 72-24 [ 171.191717][ T353] usb 1-1: USB disconnect, device number 105 [ 171.394504][ T347] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 171.524506][ T347] usb 4-1: device descriptor read/64, error -71 [ 171.534783][ T3916] veth1_macvtap: left promiscuous mode [ 171.540355][ T3916] macsec0: entered allmulticast mode [ 171.547121][ T3916] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 171.554478][ T353] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 171.563703][ T3917] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 171.600170][ T3927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=3927 comm=syz.2.1000 [ 171.686188][ T3932] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 171.715540][ T353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.726733][ T353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.736508][ T353] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.749332][ T353] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 171.758543][ T353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.767406][ T353] usb 1-1: config 0 descriptor?? [ 171.774532][ T347] usb 4-1: device descriptor read/64, error -71 [ 171.811660][ T3939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'. [ 172.014479][ T347] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 172.144482][ T347] usb 4-1: device descriptor read/64, error -71 [ 172.175547][ T353] playstation 0003:054C:09CC.0018: unknown main item tag 0x0 [ 172.183017][ T353] playstation 0003:054C:09CC.0018: unknown main item tag 0x0 [ 172.190502][ T353] playstation 0003:054C:09CC.0018: unknown main item tag 0x0 [ 172.198378][ T353] playstation 0003:054C:09CC.0018: unknown main item tag 0x0 [ 172.205826][ T353] playstation 0003:054C:09CC.0018: unknown main item tag 0x0 [ 172.213228][ T353] playstation 0003:054C:09CC.0018: unknown main item tag 0x0 [ 172.221362][ T353] playstation 0003:054C:09CC.0018: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.0-1/input0 [ 172.374860][ T3914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.384567][ T347] usb 4-1: device descriptor read/64, error -71 [ 172.385509][ T3914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.401406][ T353] playstation 0003:054C:09CC.0018: Failed to retrieve feature with reportID 18: -71 [ 172.410895][ T353] playstation 0003:054C:09CC.0018: Failed to retrieve DualShock4 pairing info: -71 [ 172.420655][ T353] playstation 0003:054C:09CC.0018: Failed to get MAC address from DualShock4 [ 172.429975][ T353] playstation 0003:054C:09CC.0018: Failed to create dualshock4. [ 172.438703][ T353] playstation 0003:054C:09CC.0018: probe with driver playstation failed with error -71 [ 172.450236][ T353] usb 1-1: USB disconnect, device number 106 [ 172.494579][ T347] usb usb4-port1: attempt power cycle [ 172.575905][ T36] audit: type=1400 audit(1804912689.188:493): avc: denied { getopt } for pid=3959 comm="syz.1.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 172.827390][ T36] audit: type=1400 audit(1804912689.438:494): avc: denied { setopt } for pid=3966 comm="syz.2.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 172.847585][ T347] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 172.875673][ T347] usb 4-1: device descriptor read/8, error -71 [ 172.923012][ T36] audit: type=1400 audit(1804912689.528:495): avc: denied { read } for pid=3968 comm="syz.0.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.972088][ T36] audit: type=1400 audit(1804912689.578:496): avc: denied { ioctl } for pid=3979 comm="syz.0.1019" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 173.018479][ T347] usb 4-1: device descriptor read/8, error -71 [ 173.254514][ T353] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 173.264604][ T347] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 173.285655][ T347] usb 4-1: device descriptor read/8, error -71 [ 173.405485][ T353] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 173.415190][ T353] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 173.415582][ T347] usb 4-1: device descriptor read/8, error -71 [ 173.427065][ T353] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 173.440441][ T353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.448645][ T353] usb 1-1: Product: syz [ 173.452813][ T353] usb 1-1: Manufacturer: syz [ 173.457486][ T353] usb 1-1: SerialNumber: syz [ 173.464154][ T353] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 173.471758][ T353] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 173.471758][ T353] Please send a copy of this message to and [ 173.534583][ T347] usb usb4-port1: unable to enumerate USB device [ 173.868456][ T3984] 9pnet_fd: p9_fd_create_tcp (3984): problem connecting socket to 127.0.0.1 [ 173.878158][ T3984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.886737][ T3984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.895138][ T353] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -32 [ 174.093631][ T353] rust_binder: 3911: undelivered TRANSACTION_ERROR: 29201 [ 174.494482][ T353] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 174.644532][ T353] usb 4-1: Using ep0 maxpacket: 16 [ 174.651933][ T353] usb 4-1: unable to get BOS descriptor or descriptor too short [ 174.660750][ T353] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.671108][ T353] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 174.681942][ T353] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.694363][ T353] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 174.704031][ T353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.712379][ T353] usb 4-1: Product: syz [ 174.716791][ T353] usb 4-1: Manufacturer: syz [ 174.721754][ T353] usb 4-1: SerialNumber: syz [ 174.928882][ T353] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 174.937161][ T353] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 175.129117][ T4001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.137689][ T4001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.353781][ T353] usb 4-1: USB disconnect, device number 100 [ 175.680354][ T4030] x_tables: duplicate entry at hook 2 [ 175.693862][ T4032] No source specified [ 175.765053][ T4037] overlayfs: missing 'workdir' [ 175.771154][ T4037] overlayfs: failed to resolve './file1:/': -2 [ 176.065564][ T64] usb 1-1: USB disconnect, device number 107 [ 176.164518][ T347] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 176.314497][ T347] usb 4-1: Using ep0 maxpacket: 8 [ 176.320950][ T347] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.329715][ T347] usb 4-1: config index 0 descriptor too short (expected 31, got 26) [ 176.337859][ T347] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 176.348095][ T347] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.362543][ T347] usb 4-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 176.371625][ T347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.379647][ T347] usb 4-1: Product: syz [ 176.383800][ T347] usb 4-1: Manufacturer: syz [ 176.388435][ T347] usb 4-1: SerialNumber: syz [ 176.402588][ T4051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1047'. [ 176.597248][ T347] usb 4-1: MIDIStreaming interface descriptor not found [ 176.606339][ T347] usb 4-1: USB disconnect, device number 101 [ 177.174481][ T347] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 177.314511][ T347] usb 1-1: device descriptor read/64, error -71 [ 177.344633][ T310] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 177.494472][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 177.500786][ T310] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 177.511135][ T310] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 177.521480][ T310] usb 4-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 177.530580][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.538715][ T310] usb 4-1: Product: syz [ 177.542884][ T310] usb 4-1: Manufacturer: syz [ 177.547495][ T310] usb 4-1: SerialNumber: syz [ 177.564503][ T347] usb 1-1: device descriptor read/64, error -71 [ 177.757611][ T310] usb 4-1: unit 8 not found! [ 177.764361][ T310] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 177.774484][ T310] usb 4-1: USB disconnect, device number 102 [ 177.804482][ T347] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 177.934498][ T347] usb 1-1: device descriptor read/64, error -71 [ 178.174475][ T347] usb 1-1: device descriptor read/64, error -71 [ 178.266635][ T36] audit: type=1400 audit(1804912694.878:497): avc: denied { getopt } for pid=4107 comm="syz.3.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 178.286978][ T347] usb usb1-port1: attempt power cycle [ 178.367390][ T4117] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.374779][ T4117] netlink: 'syz.2.1068': attribute type 1 has an invalid length. [ 178.382551][ T4117] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1068'. [ 178.634525][ T347] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 178.665569][ T347] usb 1-1: device descriptor read/8, error -71 [ 178.796111][ T347] usb 1-1: device descriptor read/8, error -71 [ 178.866992][ T4140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65523 sclass=netlink_route_socket pid=4140 comm=syz.3.1075 [ 179.034514][ T347] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 179.055462][ T347] usb 1-1: device descriptor read/8, error -71 [ 179.185840][ T347] usb 1-1: device descriptor read/8, error -71 [ 179.294632][ T347] usb usb1-port1: unable to enumerate USB device [ 179.943051][ T36] audit: type=1400 audit(1804912696.548:498): avc: denied { read write } for pid=4174 comm="syz.0.1084" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 179.945648][ T353] hid-generic 0003:046E:C082.0019: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 179.969021][ T347] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 179.977520][ T36] audit: type=1400 audit(1804912696.548:499): avc: denied { open } for pid=4174 comm="syz.0.1084" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 179.999138][ T4177] fido_id[4177]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 180.164507][ T347] usb 4-1: Using ep0 maxpacket: 32 [ 180.170975][ T347] usb 4-1: unable to get BOS descriptor or descriptor too short [ 180.179367][ T347] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2015, setting to 1024 [ 180.191836][ T347] usb 4-1: New USB device found, idVendor=046d, idProduct=08f5, bcdDevice= 0.40 [ 180.200932][ T347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.208975][ T347] usb 4-1: Product: syz [ 180.213125][ T347] usb 4-1: Manufacturer: syz [ 180.217761][ T347] usb 4-1: SerialNumber: syz [ 180.431037][ T347] usb 4-1: USB disconnect, device number 103 [ 180.448006][ T1149] udevd[1149]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 180.975455][ T4215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.984134][ T4215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.124551][ T347] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 181.214487][ T353] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 181.275606][ T347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.286601][ T347] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 181.295698][ T347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.304489][ T347] usb 1-1: config 0 descriptor?? [ 181.344479][ T353] usb 4-1: device descriptor read/64, error -71 [ 181.513143][ T347] usbhid 1-1:0.0: can't add hid device: -71 [ 181.517941][ T4224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1098'. [ 181.519262][ T347] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 181.541851][ T347] usb 1-1: USB disconnect, device number 112 [ 181.584510][ T353] usb 4-1: device descriptor read/64, error -71 [ 181.824512][ T353] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 181.954495][ T353] usb 4-1: device descriptor read/64, error -71 [ 181.974489][ T347] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 182.125548][ T347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.136548][ T347] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 182.145630][ T347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.154149][ T347] usb 1-1: config 0 descriptor?? [ 182.194471][ T353] usb 4-1: device descriptor read/64, error -71 [ 182.304587][ T353] usb usb4-port1: attempt power cycle [ 182.644519][ T353] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 182.665477][ T353] usb 4-1: device descriptor read/8, error -71 [ 182.726513][ T4251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1107'. [ 182.795657][ T353] usb 4-1: device descriptor read/8, error -71 [ 182.964831][ T347] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 182.973008][ T347] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input27 [ 183.044494][ T353] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 183.065467][ T353] usb 4-1: device descriptor read/8, error -71 [ 183.195521][ T353] usb 4-1: device descriptor read/8, error -71 [ 183.267443][ T4196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.276214][ T4196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.284870][ T4196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.293390][ T4196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.301825][ T347] usb 1-1: USB disconnect, device number 113 [ 183.301837][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 183.314627][ T353] usb usb4-port1: unable to enumerate USB device [ 183.788474][ T36] audit: type=1400 audit(1804912700.398:500): avc: denied { relabelto } for pid=4256 comm="syz.2.1110" name="file0" dev="tmpfs" ino=2365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 184.104513][ T347] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 184.264526][ T347] usb 1-1: Using ep0 maxpacket: 32 [ 184.270806][ T347] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.281751][ T347] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.292612][ T347] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 184.301732][ T347] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 184.310125][ T36] audit: type=1400 audit(1804912700.908:501): avc: denied { unlink } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=2365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 184.337433][ T347] usb 1-1: Product: syz [ 184.341615][ T347] usb 1-1: Manufacturer: syz [ 184.348404][ T347] hub 1-1:4.0: USB hub found [ 184.394631][ T353] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 184.545553][ T353] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 184.556497][ T353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.557720][ T347] hub 1-1:4.0: 9 ports detected [ 184.567574][ T353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.572579][ T347] hub 1-1:4.0: insufficient power available to use all downstream ports [ 184.582270][ T353] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 184.604100][ T353] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 184.613190][ T353] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 184.621281][ T353] usb 4-1: Manufacturer: syz [ 184.626778][ T353] usb 4-1: config 0 descriptor?? [ 184.773516][ T4271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.782219][ T4271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.791004][ T347] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 184.797678][ T347] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 184.834264][ T353] appleir 0003:05AC:8243.001A: item fetching failed at offset 0/1 [ 184.835000][ T347] usb 1-1: USB disconnect, device number 114 [ 184.842467][ T353] appleir 0003:05AC:8243.001A: parse failed [ 184.854214][ T353] appleir 0003:05AC:8243.001A: probe with driver appleir failed with error -22 [ 185.038175][ T353] usb 4-1: USB disconnect, device number 108 [ 185.558537][ T36] audit: type=1400 audit(1804912702.168:502): avc: denied { nlmsg_write } for pid=4309 comm="syz.3.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 185.593079][ T4318] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1126'. [ 185.644522][ T353] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 185.794515][ T353] usb 1-1: Using ep0 maxpacket: 16 [ 185.800686][ T353] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 185.808954][ T353] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.819098][ T353] usb 1-1: config 0 has no interface number 0 [ 185.826599][ T353] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 185.835753][ T353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.843744][ T353] usb 1-1: Product: syz [ 185.847933][ T353] usb 1-1: Manufacturer: syz [ 185.852568][ T353] usb 1-1: SerialNumber: syz [ 185.857768][ T353] usb 1-1: config 0 descriptor?? [ 185.863604][ T353] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 185.869991][ T353] usb 1-1: No valid video chain found. [ 185.894494][ T347] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 186.045472][ T347] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.055749][ T347] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 186.067488][ T347] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 186.076614][ T347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.084652][ T347] usb 4-1: Product: નs㫶旣賸┧ծ쯴뗣㧐ꉢ៪嫦෺䘯♢阉卬쳘帄菦⬐毿ꩩ鿭캦ǍT듞⭲㺟뛺錿呶䅮ਨ재ǁ亨㺃埕Ⰺ⦲넨㤍셤왪␊ɘ枢⅔쨯㪽㶉˻㤔㔛⅜뛠渺鹄Ạᎅ눐쿉栖馩섆矤ƕ飐ᦺﹲ︇椣挩Ƅᅓ઩蹈⌎樝뀄愖째깦름섟嚜欅褭鉶₞䀾 [ 186.114492][ T347] usb 4-1: Manufacturer: 뇣쬗攞쬡ퟵ쭏裵䣦뽣࿣貨砋螳솙䙱१ꂈ冴쥔ᎏDZ跭Ს锢擦甦뙏⫟琚鿊֢땗꼊沮䉀맆듁᝟堎Ⴏ蹚眷ᙘᩒ귓⵫嗂Ⴐ쫴鲦叛ڃↀ샃傤鹋ꚦ云㝖紤梀ﹼ簤⋅澋㡴菹羖᭣⸖쳬慷奈䰯Ķ⯓姣斎ᶩợﱘ鈷㞻㺂荷䬬偉⹳㕁킺閨౜쟹 [ 186.145674][ T347] usb 4-1: SerialNumber: Џ [ 186.189677][ T353] usb 1-1: USB disconnect, device number 115 [ 186.356604][ T347] usb 4-1: USB disconnect, device number 109 [ 186.586094][ T4334] netlink: 'syz.1.1129': attribute type 4 has an invalid length. [ 186.594090][ T4334] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1129'. [ 186.890190][ T36] audit: type=1400 audit(1804912703.498:503): avc: denied { accept } for pid=4354 comm="syz.1.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 186.943318][ T36] audit: type=1400 audit(1804912703.548:504): avc: denied { read } for pid=4358 comm="syz.1.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 187.129084][ T36] audit: type=1400 audit(1804912703.738:505): avc: denied { lock } for pid=4365 comm="syz.0.1141" path="socket:[37091]" dev="sockfs" ino=37091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 187.244535][ T347] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 187.348424][ T4375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1144'. [ 187.416034][ T347] usb 4-1: unable to get BOS descriptor or descriptor too short [ 187.424574][ T347] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.434745][ T347] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.445019][ T347] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 187.454077][ T347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.462173][ T347] usb 4-1: Product: syz [ 187.464476][ T353] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 187.466542][ T347] usb 4-1: Manufacturer: syz [ 187.478854][ T347] usb 4-1: SerialNumber: syz [ 187.485813][ T347] usb 4-1: selecting invalid altsetting 1 [ 187.491987][ T347] usb 4-1: unit 6 not found! [ 187.594494][ T353] usb 1-1: device descriptor read/64, error -71 [ 187.686849][ T347] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 187.695319][ T4364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.705218][ T4364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.716766][ T347] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 187.734657][ T1149] udevd[1149]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 187.844485][ T353] usb 1-1: device descriptor read/64, error -71 [ 187.910773][ T725] tipc: Subscription rejected, illegal request [ 187.919745][ T4364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.928418][ T4364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.938078][ T4364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.946672][ T4364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.965888][ T4382] ./dev/sda1: Can't lookup blockdev [ 188.084486][ T353] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 188.155856][ T347] usb 4-1: USB disconnect, device number 110 [ 188.214513][ T353] usb 1-1: device descriptor read/64, error -71 [ 188.454485][ T353] usb 1-1: device descriptor read/64, error -71 [ 188.564572][ T353] usb usb1-port1: attempt power cycle [ 188.904512][ T353] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 188.912235][ T9] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 188.935558][ T353] usb 1-1: device descriptor read/8, error -71 [ 189.064533][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 189.070593][ T353] usb 1-1: device descriptor read/8, error -71 [ 189.076916][ T9] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 189.089904][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 189.096538][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 189.105592][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.114104][ T9] usb 4-1: config 0 descriptor?? [ 189.314478][ T353] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 189.345444][ T353] usb 1-1: device descriptor read/8, error -71 [ 189.475448][ T353] usb 1-1: device descriptor read/8, error -71 [ 189.524603][ T9] logitech-djreceiver 0003:046D:C53F.001B: ignoring exceeding usage max [ 189.533712][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x6 [ 189.541846][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.549952][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.558059][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.566171][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.574247][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.582354][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.590603][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.598757][ T353] usb usb1-port1: unable to enumerate USB device [ 189.605167][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.613242][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.622000][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.630121][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.638232][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.646346][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.654466][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.662556][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.670662][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.678776][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.686911][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.695027][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.703097][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.711207][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.719326][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.724769][ T4396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.727569][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.736293][ T4396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.743849][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.759692][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 189.767794][ T9] logitech-djreceiver 0003:046D:C53F.001B: unknown main item tag 0x0 [ 190.538389][ T36] audit: type=1326 audit(1804912707.148:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.1.1154" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa29a79e159 code=0x0 [ 190.634527][ T358] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 191.549633][ T36] audit: type=1400 audit(1804912708.158:507): avc: denied { setattr } for pid=4432 comm="syz.2.1163" name="NETLINK" dev="sockfs" ino=36571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.683718][ T310] usb 4-1: USB disconnect, device number 111 [ 191.696267][ T4437] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 191.731349][ T4442] netlink: 'syz.0.1167': attribute type 4 has an invalid length. [ 191.739420][ T4442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 191.833249][ T4447] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1169'. [ 192.084497][ T310] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 192.207582][ T4457] overlayfs: conflicting options: nfs_export=on,index=off [ 192.235566][ T310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.245867][ T310] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 192.260419][ T310] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 192.269518][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.277534][ T310] usb 4-1: Product: syz [ 192.281712][ T310] usb 4-1: Manufacturer: syz [ 192.286321][ T310] usb 4-1: SerialNumber: syz [ 192.293393][ T310] usb-storage 4-1:1.0: USB Mass Storage device detected [ 192.301123][ T310] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 192.309316][ T310] scsi host1: usb-storage 4-1:1.0 [ 192.464499][ T347] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 192.494446][ T358] usb 4-1: USB disconnect, device number 112 [ 192.614480][ T347] usb 1-1: Using ep0 maxpacket: 16 [ 192.620828][ T347] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.631172][ T347] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.642085][ T347] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.653426][ T347] usb 1-1: string descriptor 0 read error: -71 [ 192.659854][ T347] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.668942][ T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 192.677755][ T347] usb 1-1: can't set config #1, error -71 [ 192.684168][ T347] usb 1-1: USB disconnect, device number 121 [ 192.954966][ T36] audit: type=1400 audit(1804912709.568:508): avc: denied { create } for pid=4464 comm="syz.2.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 193.083030][ T4471] tipc: Enabling of bearer rejected, already enabled [ 193.091325][ T4473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1178'. [ 193.100422][ T4473] tipc: Disabling bearer [ 193.106018][ T4472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1178'. [ 193.117239][ T4472] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.126711][ T4472] bridge_slave_0 (unregistering): left allmulticast mode [ 193.133920][ T4472] bridge_slave_0 (unregistering): left promiscuous mode [ 193.141174][ T4472] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.404510][ T347] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 193.524497][ T358] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 193.538402][ T4489] batadv_slave_0: entered promiscuous mode [ 193.545161][ T4488] batadv_slave_0: left promiscuous mode [ 193.554671][ T347] usb 1-1: Using ep0 maxpacket: 8 [ 193.561118][ T347] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 209, changing to 7 [ 193.574400][ T347] usb 1-1: New USB device found, idVendor=0499, idProduct=1043, bcdDevice= 0.40 [ 193.575854][ T4496] tipc: Started in network mode [ 193.584187][ T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.588507][ T4496] tipc: Node identity ac14142f, cluster identity 4711 [ 193.597024][ T347] usb 1-1: Product: syz [ 193.603336][ T4496] tipc: Enabling of bearer rejected, failed to enable media [ 193.615237][ T347] usb 1-1: Manufacturer: syz [ 193.620372][ T347] usb 1-1: SerialNumber: syz [ 193.651616][ T4501] netlink: 'syz.2.1188': attribute type 16 has an invalid length. [ 193.685451][ T358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.696457][ T358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.706337][ T358] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 193.715452][ T358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.723958][ T358] usb 4-1: config 0 descriptor?? [ 193.829300][ T347] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 193.839252][ T347] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 193.850537][ T347] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 193.861010][ T347] usb 1-1: USB disconnect, device number 122 [ 193.870017][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 194.332402][ T4477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.341018][ T4477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.353749][ T358] playstation 0003:054C:0DF2.001C: unknown main item tag 0x0 [ 194.361259][ T358] playstation 0003:054C:0DF2.001C: unknown main item tag 0x0 [ 194.368712][ T358] playstation 0003:054C:0DF2.001C: unknown main item tag 0x0 [ 194.376128][ T358] playstation 0003:054C:0DF2.001C: unknown main item tag 0x0 [ 194.383507][ T358] playstation 0003:054C:0DF2.001C: unknown main item tag 0x0 [ 194.391496][ T358] playstation 0003:054C:0DF2.001C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 194.454930][ T358] playstation 0003:054C:0DF2.001C: Invalid reportID received, expected 9 got 140 [ 194.464166][ T358] playstation 0003:054C:0DF2.001C: Failed to retrieve DualSense pairing info: -22 [ 194.473466][ T358] playstation 0003:054C:0DF2.001C: Failed to get MAC address from DualSense [ 194.482235][ T358] playstation 0003:054C:0DF2.001C: Failed to create dualsense. [ 194.490331][ T358] playstation 0003:054C:0DF2.001C: probe with driver playstation failed with error -22 [ 194.584493][ T310] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 194.734470][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 194.740715][ T310] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 194.749011][ T310] usb 1-1: config 0 has no interface number 0 [ 194.755231][ T310] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 194.765261][ T310] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 194.776514][ T310] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 194.785595][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.793581][ T310] usb 1-1: Product: syz [ 194.797764][ T310] usb 1-1: Manufacturer: syz [ 194.802367][ T310] usb 1-1: SerialNumber: syz [ 194.809243][ T310] usb 1-1: config 0 descriptor?? [ 194.814586][ T4524] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 194.821926][ T4524] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 194.888624][ T4532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1198'. [ 194.897722][ T4532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1198'. [ 195.030468][ T4524] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 195.037831][ T4524] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 195.246861][ T310] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 195.448897][ T310] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 195.459008][ T310] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 195.469332][ T310] asix 1-1:0.34: probe with driver asix failed with error -71 [ 195.477789][ T310] usb 1-1: USB disconnect, device number 123 [ 196.186107][ T310] usb 4-1: USB disconnect, device number 113 [ 196.298972][ T4560] fuse: Bad value for 'user_id' [ 196.303977][ T4560] fuse: Bad value for 'user_id' [ 196.304100][ T36] audit: type=1400 audit(1804912712.908:509): avc: denied { setattr } for pid=4556 comm="syz.3.1208" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 196.309366][ T4560] fuse: Bad value for 'user_id' [ 196.335699][ T4560] fuse: Bad value for 'user_id' [ 196.340685][ T4560] fuse: Bad value for 'user_id' [ 196.345583][ T4560] fuse: Bad value for 'user_id' [ 196.350564][ T4560] fuse: Bad value for 'user_id' [ 196.355486][ T4560] fuse: Bad value for 'user_id' [ 196.360803][ T4560] fuse: Bad value for 'user_id' [ 196.365716][ T4560] fuse: Bad value for 'user_id' [ 196.370668][ T4560] fuse: Bad value for 'user_id' [ 196.375562][ T4560] fuse: Bad value for 'user_id' [ 196.380489][ T4560] fuse: Bad value for 'user_id' [ 196.385556][ T4560] fuse: Bad value for 'user_id' [ 196.390602][ T4560] fuse: Bad value for 'user_id' [ 196.395674][ T4560] fuse: Bad value for 'user_id' [ 196.400741][ T4560] fuse: Bad value for 'user_id' [ 196.405645][ T4560] fuse: Bad value for 'user_id' [ 196.410671][ T4560] fuse: Bad value for 'user_id' [ 196.415549][ T4560] fuse: Bad value for 'user_id' [ 196.420548][ T4560] fuse: Bad value for 'user_id' [ 196.425678][ T4560] fuse: Bad value for 'user_id' [ 196.430871][ T4560] fuse: Bad value for 'user_id' [ 196.436040][ T4560] fuse: Bad value for 'user_id' [ 196.441093][ T4560] fuse: Bad value for 'user_id' [ 196.441258][ T4565] netlink: 'syz.3.1210': attribute type 46 has an invalid length. [ 196.446317][ T4560] fuse: Bad value for 'user_id' [ 196.459010][ T4560] fuse: Bad value for 'user_id' [ 196.463985][ T4560] fuse: Bad value for 'user_id' [ 196.469340][ T4560] fuse: Bad value for 'user_id' [ 196.474291][ T4560] fuse: Bad value for 'user_id' [ 196.479613][ T4560] fuse: Bad value for 'user_id' [ 196.484754][ T4560] fuse: Bad value for 'user_id' [ 196.490321][ T4560] fuse: Bad value for 'user_id' [ 196.495495][ T4560] fuse: Bad value for 'user_id' [ 196.500595][ T4560] fuse: Bad value for 'user_id' [ 196.505717][ T4560] fuse: Bad value for 'user_id' [ 196.510847][ T4560] fuse: Bad value for 'user_id' [ 196.516039][ T4560] fuse: Bad value for 'user_id' [ 196.521136][ T4560] fuse: Bad value for 'user_id' [ 196.526296][ T4560] fuse: Bad value for 'user_id' [ 196.531392][ T4560] fuse: Bad value for 'user_id' [ 196.536551][ T4560] fuse: Bad value for 'user_id' [ 196.541633][ T4560] fuse: Bad value for 'user_id' [ 196.546798][ T4560] fuse: Bad value for 'user_id' [ 196.551919][ T4560] fuse: Bad value for 'user_id' [ 196.557092][ T4560] fuse: Bad value for 'user_id' [ 196.562178][ T4560] fuse: Bad value for 'user_id' [ 196.567132][ T4560] fuse: Bad value for 'user_id' [ 196.572182][ T4560] fuse: Bad value for 'user_id' [ 196.577109][ T4560] fuse: Bad value for 'user_id' [ 196.582067][ T4560] fuse: Bad value for 'user_id' [ 196.587031][ T4560] fuse: Bad value for 'user_id' [ 196.591993][ T4560] fuse: Bad value for 'user_id' [ 196.596873][ T4560] fuse: Bad value for 'user_id' [ 196.601857][ T4560] fuse: Bad value for 'user_id' [ 196.606741][ T4560] fuse: Bad value for 'user_id' [ 196.611673][ T4560] fuse: Bad value for 'user_id' [ 196.616552][ T4560] fuse: Bad value for 'user_id' [ 196.621481][ T4560] fuse: Bad value for 'user_id' [ 196.626349][ T4560] fuse: Bad value for 'user_id' [ 196.631283][ T4560] fuse: Bad value for 'user_id' [ 196.636190][ T4560] fuse: Bad value for 'user_id' [ 196.641151][ T4560] fuse: Bad value for 'user_id' [ 196.646034][ T4560] fuse: Bad value for 'user_id' [ 196.650957][ T4560] fuse: Bad value for 'user_id' [ 196.655836][ T4560] fuse: Bad value for 'user_id' [ 196.660780][ T4560] fuse: Bad value for 'user_id' [ 196.665890][ T4560] fuse: Bad value for 'user_id' [ 196.670954][ T4560] fuse: Bad value for 'user_id' [ 196.675867][ T4560] fuse: Bad value for 'user_id' [ 196.680795][ T4560] fuse: Bad value for 'user_id' [ 196.685700][ T4560] fuse: Bad value for 'user_id' [ 196.690667][ T4560] fuse: Bad value for 'user_id' [ 196.695549][ T4560] fuse: Bad value for 'user_id' [ 196.700476][ T4560] fuse: Bad value for 'user_id' [ 196.705348][ T4560] fuse: Bad value for 'user_id' [ 196.710269][ T4560] fuse: Bad value for 'user_id' [ 196.715136][ T4560] fuse: Bad value for 'user_id' [ 196.720061][ T4560] fuse: Bad value for 'user_id' [ 196.724984][ T4560] fuse: Bad value for 'user_id' [ 196.729917][ T4560] fuse: Bad value for 'user_id' [ 196.734946][ T4560] fuse: Bad value for 'user_id' [ 196.740000][ T4560] fuse: Bad value for 'user_id' [ 196.744896][ T4560] fuse: Bad value for 'user_id' [ 196.749820][ T4560] fuse: Bad value for 'user_id' [ 196.754687][ T4560] fuse: Bad value for 'user_id' [ 196.759614][ T4560] fuse: Bad value for 'user_id' [ 196.764504][ T4560] fuse: Bad value for 'user_id' [ 196.769462][ T4560] fuse: Bad value for 'user_id' [ 196.774298][ T4560] fuse: Bad value for 'user_id' [ 196.779275][ T4560] fuse: Bad value for 'user_id' [ 196.784131][ T4560] fuse: Bad value for 'user_id' [ 196.789101][ T4560] fuse: Bad value for 'user_id' [ 196.793987][ T4560] fuse: Bad value for 'user_id' [ 196.798881][ T310] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 196.799215][ T4560] fuse: Bad value for 'user_id' [ 196.811445][ T4560] fuse: Bad value for 'user_id' [ 196.816460][ T4560] fuse: Bad value for 'user_id' [ 196.821442][ T4560] fuse: Bad value for 'user_id' [ 196.826464][ T4560] fuse: Bad value for 'user_id' [ 196.831347][ T4560] fuse: Bad value for 'user_id' [ 196.955475][ T310] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.968543][ T310] usb 4-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 196.977634][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.986151][ T310] usb 4-1: config 0 descriptor?? [ 197.094471][ T353] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 197.196617][ T4573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.205599][ T4573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.229159][ T4584] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=4584 comm=syz.2.1217 [ 197.244476][ T353] usb 1-1: Using ep0 maxpacket: 32 [ 197.250649][ T353] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.260846][ T353] usb 1-1: config 0 has no interfaces? [ 197.280573][ T4587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.293044][ T4587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.304291][ T353] usb 1-1: string descriptor 0 read error: -71 [ 197.310627][ T353] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 197.319738][ T353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.328336][ T353] usb 1-1: config 0 descriptor?? [ 197.333539][ T353] usb 1-1: can't set config #0, error -71 [ 197.340108][ T353] usb 1-1: USB disconnect, device number 124 [ 197.370754][ T4595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4595 comm=syz.1.1219 [ 197.383293][ T4595] netlink: 'syz.1.1219': attribute type 28 has an invalid length. [ 197.423361][ T310] input: HID 0458:5005 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5005.001D/input/input28 [ 197.436121][ T310] input: HID 0458:5005 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5005.001D/input/input29 [ 197.449526][ T310] kye 0003:0458:5005.001D: input,hiddev96,hidraw0: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.3-1/input0 [ 197.617809][ T353] usb 4-1: USB disconnect, device number 114 [ 197.775854][ T4608] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 197.785741][ T36] audit: type=1400 audit(1804912714.398:510): avc: denied { relabelto } for pid=4607 comm="syz.2.1224" name="456" dev="tmpfs" ino=2571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 197.819165][ T36] audit: type=1400 audit(1804912714.398:511): avc: denied { associate } for pid=4607 comm="syz.2.1224" name="456" dev="tmpfs" ino=2571 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 197.851827][ T36] audit: type=1400 audit(1804912714.398:512): avc: denied { write } for pid=4607 comm="syz.2.1224" name="456" dev="tmpfs" ino=2571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 197.879591][ T36] audit: type=1400 audit(1804912714.398:513): avc: denied { add_name } for pid=4607 comm="syz.2.1224" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 197.912267][ T36] audit: type=1400 audit(1804912714.398:514): avc: denied { create } for pid=4607 comm="syz.2.1224" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 197.932723][ T36] audit: type=1400 audit(1804912714.398:515): avc: denied { associate } for pid=4607 comm="syz.2.1224" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 197.954070][ T36] audit: type=1400 audit(1804912714.398:516): avc: denied { read open } for pid=4607 comm="syz.2.1224" path="/456/file0" dev="tmpfs" ino=2576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 197.977734][ T36] audit: type=1400 audit(1804912714.398:517): avc: denied { remove_name } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=2576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 198.004701][ T36] audit: type=1400 audit(1804912714.398:518): avc: denied { unlink } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=2576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 198.290471][ T4656] input input30: cannot allocate more than FF_MAX_EFFECTS effects [ 198.544589][ T353] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 198.674529][ T353] usb 4-1: device descriptor read/64, error -71 [ 198.694527][ T347] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 198.838763][ T4671] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1240'. [ 198.844499][ T347] usb 1-1: Using ep0 maxpacket: 16 [ 198.848304][ T4671] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1240'. [ 198.854158][ T347] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.871907][ T347] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.875475][ T4675] overlayfs: failed to clone upperpath [ 198.884838][ T347] usb 1-1: config 0 interface 0 has no altsetting 0 [ 198.897362][ T347] usb 1-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 198.906455][ T347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.917995][ T347] usb 1-1: config 0 descriptor?? [ 198.924878][ T353] usb 4-1: device descriptor read/64, error -71 [ 199.168376][ T353] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 199.304572][ T353] usb 4-1: device descriptor read/64, error -71 [ 199.328350][ T347] input: HID 044f:b300 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:044F:B300.001E/input/input31 [ 199.340857][ T347] thrustmaster 0003:044F:B300.001E: input,hidraw0: USB HID v0.00 Joystick [HID 044f:b300] on usb-dummy_hcd.0-1/input0 [ 199.353634][ T347] thrustmaster 0003:044F:B300.001E: can't find FF field in output reports [ 199.531644][ T310] usb 1-1: USB disconnect, device number 125 [ 199.544529][ T353] usb 4-1: device descriptor read/64, error -71 [ 199.591130][ T5032] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1252'. [ 199.655361][ T353] usb usb4-port1: attempt power cycle [ 199.975463][ T5038] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1255'. [ 199.994533][ T353] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 200.015567][ T353] usb 4-1: device descriptor read/8, error -71 [ 200.148604][ T5044] raw_sendmsg: syz.1.1258 forgot to set AF_INET. Fix it! [ 200.156765][ T353] usb 4-1: device descriptor read/8, error -71 [ 200.284550][ T310] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 200.394480][ T353] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 200.415483][ T353] usb 4-1: device descriptor read/8, error -71 [ 200.435442][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.445602][ T310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.455228][ T310] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 200.464268][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 200.472363][ T310] usb 1-1: SerialNumber: syz [ 200.496561][ T5053] IPv6: NLM_F_CREATE should be specified when creating new route [ 200.546341][ T353] usb 4-1: device descriptor read/8, error -71 [ 200.598225][ T5057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1260'. [ 200.654581][ T353] usb usb4-port1: unable to enumerate USB device [ 200.681318][ T310] usb 1-1: 0:2 : does not exist [ 200.687455][ T310] usb 1-1: unit 5 not found! [ 200.693543][ T310] usb 1-1: USB disconnect, device number 126 [ 200.701985][ T1149] udevd[1149]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 201.147028][ T5061] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 201.210105][ T5069] BUG: scheduling while atomic: syz.0.1265/5069/0x00000002 [ 201.217396][ T5069] Modules linked in: [ 201.221433][ T5069] CPU: 0 UID: 0 PID: 5069 Comm: syz.0.1265 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 201.221466][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.221479][ T5069] Call Trace: [ 201.221487][ T5069] [ 201.221495][ T5069] __dump_stack+0x21/0x30 [ 201.221544][ T5069] dump_stack_lvl+0x140/0x1c0 [ 201.221569][ T5069] ? __cfi_dump_stack_lvl+0x10/0x10 [ 201.221595][ T5069] dump_stack+0x19/0x20 [ 201.221614][ T5069] __schedule_bug+0x12b/0x200 [ 201.221632][ T5069] ? find_proxy_task+0x2460/0x2460 [ 201.221649][ T5069] ? __kasan_check_read+0x15/0x20 [ 201.221667][ T5069] ? psi_group_change+0xab6/0x10a0 [ 201.221690][ T5069] __schedule+0xb85/0x20b0 [ 201.221708][ T5069] ? update_curr+0xf1/0x9c0 [ 201.221726][ T5069] ? __sched_text_start+0x10/0x10 [ 201.221745][ T5069] ? __kasan_check_read+0x15/0x20 [ 201.221762][ T5069] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 201.221791][ T5069] ? __kasan_check_write+0x18/0x20 [ 201.221810][ T5069] ? _raw_spin_lock_irq+0x93/0x120 [ 201.221837][ T5069] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 201.221863][ T5069] schedule+0xc5/0x240 [ 201.221880][ T5069] schedule_preempt_disabled+0x14/0x30 [ 201.221899][ T5069] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 201.221921][ T5069] ? activate_task+0x43b/0x480 [ 201.221939][ T5069] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 201.221958][ T5069] ? try_to_wake_up+0x111a/0x1fd0 [ 201.221981][ T5069] ? __kasan_check_write+0x18/0x20 [ 201.222001][ T5069] ? wake_q_add_safe+0x29/0x100 [ 201.222019][ T5069] ? __cfi_try_to_wake_up+0x10/0x10 [ 201.222040][ T5069] ? rwsem_mark_wake+0x507/0x770 [ 201.222068][ T5069] ? rwsem_read_trylock+0x275/0x5a0 [ 201.222093][ T5069] ? wake_up_q+0x10a/0x1c0 [ 201.222108][ T5069] ? downgrade_write+0x470/0x470 [ 201.222130][ T5069] down_write+0x163/0x2b0 [ 201.222149][ T5069] ? __cfi_down_write+0x10/0x10 [ 201.222169][ T5069] ? down_read+0x7f/0xe0 [ 201.222188][ T5069] ? __cfi_down_read+0x10/0x10 [ 201.222211][ T5069] kernfs_remove_by_name_ns+0x8c/0x180 [ 201.222254][ T5069] sysfs_unmerge_group+0xd7/0x130 [ 201.222276][ T5069] dpm_sysfs_remove+0x7b/0xd0 [ 201.222300][ T5069] device_del+0x241/0xcf0 [ 201.222327][ T5069] ? __cfi_class_find_device+0x10/0x10 [ 201.222348][ T5069] ? __cfi_device_del+0x10/0x10 [ 201.222370][ T5069] ? __kasan_check_write+0x18/0x20 [ 201.222388][ T5069] ? kobject_put+0x1cc/0x2a0 [ 201.222412][ T5069] device_destroy+0xb0/0x100 [ 201.222461][ T5069] ? __cfi_device_destroy+0x10/0x10 [ 201.222479][ T5069] ? __kasan_check_write+0x18/0x20 [ 201.222500][ T5069] android_device_destroy+0x118/0x180 [ 201.222525][ T5069] gadgets_drop+0x1d/0x30 [ 201.222541][ T5069] ? __cfi_gadgets_drop+0x10/0x10 [ 201.222558][ T5069] configfs_rmdir+0x8b7/0x9b0 [ 201.222579][ T5069] vfs_rmdir+0x3db/0x560 [ 201.222602][ T5069] do_rmdir+0x29a/0x590 [ 201.222625][ T5069] ? __cfi_do_rmdir+0x10/0x10 [ 201.222649][ T5069] ? __kasan_check_write+0x18/0x20 [ 201.222668][ T5069] __x64_sys_rmdir+0x4b/0x60 [ 201.222692][ T5069] x64_sys_call+0xaf7/0x2ee0 [ 201.222709][ T5069] do_syscall_64+0x57/0xf0 [ 201.222731][ T5069] ? clear_bhb_loop+0x50/0xa0 [ 201.222751][ T5069] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 201.222769][ T5069] RIP: 0033:0x7f486179e159 [ 201.222796][ T5069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.222812][ T5069] RSP: 002b:00007f48626c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 201.222833][ T5069] RAX: ffffffffffffffda RBX: 00007f4861a25fa0 RCX: 00007f486179e159 [ 201.222846][ T5069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 201.222859][ T5069] RBP: 00007f4861835024 R08: 0000000000000000 R09: 0000000000000000 [ 201.222871][ T5069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.222882][ T5069] R13: 00007f4861a26038 R14: 00007f4861a25fa0 R15: 00007ffee64dac78 [ 201.222897][ T5069] [ 201.224876][ T5069] ------------[ cut here ]------------ [ 201.309515][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 201.309534][ T36] audit: type=1400 audit(1804912717.918:530): avc: denied { map } for pid=5062 comm="syz.2.1263" path="socket:[38083]" dev="sockfs" ino=38083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 201.316646][ T5069] WARNING: CPU: 1 PID: 5069 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800 [ 201.564470][ T310] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 201.570664][ T5069] Modules linked in: [ 201.662120][ T5069] CPU: 1 UID: 0 PID: 5069 Comm: syz.0.1265 Tainted: G W syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 201.675181][ T5069] Tainted: [W]=WARN [ 201.678982][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.689064][ T5069] RIP: 0010:stack_depot_save_flags+0x266/0x800 [ 201.695262][ T5069] Code: 48 83 3d b4 f0 db 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 cc 51 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7 [ 201.714923][ T5069] RSP: 0018:ffffc9000f8df980 EFLAGS: 00010206 [ 201.721002][ T5069] RAX: 000000007fffffff RBX: ffff8881f5b990d0 RCX: 00000000009990d0 [ 201.729024][ T5069] RDX: ffff8881f5b990d0 RSI: 0000000000000001 RDI: 000000003eed3649 [ 201.737023][ T5069] RBP: ffffc9000f8df9e0 R08: 00000000c14480d6 R09: 00000000d5c0b1a9 [ 201.744460][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 201.745027][ T5069] R10: 000000000000000d R11: ffffffff81759fc0 R12: 000000006d79990d [ 201.755953][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 201.758095][ T5069] R13: 0000000000000000 R14: ffffc9000f8df9f0 R15: 000000000000000d [ 201.769355][ T310] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 201.773695][ T5069] FS: 00007f48626c76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 201.773720][ T5069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.781769][ T310] usb 1-1: can't read configurations, error -61 [ 201.790347][ T5069] CR2: 00007f4862685d58 CR3: 0000000137e6c000 CR4: 00000000003526b0 [ 201.811144][ T5069] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 201.819149][ T5069] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 201.827167][ T5069] Call Trace: [ 201.830442][ T5069] [ 201.833389][ T5069] ? do_syscall_64+0x57/0xf0 [ 201.838033][ T5069] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 201.844111][ T5069] kasan_save_track+0x4f/0x80 [ 201.848809][ T5069] ? kasan_save_track+0x3e/0x80 [ 201.853665][ T5069] ? kasan_save_free_info+0x44/0x50 [ 201.858923][ T5069] ? __kasan_slab_free+0x5f/0x80 [ 201.863869][ T5069] ? kfree+0x158/0x440 [ 201.867968][ T5069] ? gadget_info_attr_release+0xcb/0x130 [ 201.873603][ T5069] ? config_item_put+0x178/0x240 [ 201.878562][ T5069] ? configfs_rmdir+0x8e8/0x9b0 [ 201.883432][ T5069] ? vfs_rmdir+0x3db/0x560 [ 201.887877][ T5069] ? do_rmdir+0x29a/0x590 [ 201.892216][ T5069] ? __x64_sys_rmdir+0x4b/0x60 [ 201.897017][ T5069] ? x64_sys_call+0xaf7/0x2ee0 [ 201.901807][ T5069] ? do_syscall_64+0x57/0xf0 [ 201.906479][ T5069] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 201.912567][ T5069] kasan_save_free_info+0x44/0x50 [ 201.917646][ T5069] __kasan_slab_free+0x5f/0x80 [ 201.922425][ T5069] kfree+0x158/0x440 [ 201.926395][ T5069] ? gadget_info_attr_release+0xcb/0x130 [ 201.932041][ T5069] ? __cfi_gadget_info_attr_release+0x10/0x10 [ 201.934488][ T310] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 201.938154][ T5069] gadget_info_attr_release+0xcb/0x130 [ 201.951052][ T5069] config_item_put+0x178/0x240 [ 201.955872][ T5069] ? __cfi_gadgets_drop+0x10/0x10 [ 201.960893][ T5069] configfs_rmdir+0x8e8/0x9b0 [ 201.965607][ T5069] vfs_rmdir+0x3db/0x560 [ 201.969868][ T5069] do_rmdir+0x29a/0x590 [ 201.974020][ T5069] ? __cfi_do_rmdir+0x10/0x10 [ 201.978718][ T5069] ? __kasan_check_write+0x18/0x20 [ 201.983835][ T5069] __x64_sys_rmdir+0x4b/0x60 [ 201.988470][ T5069] x64_sys_call+0xaf7/0x2ee0 [ 201.993067][ T5069] do_syscall_64+0x57/0xf0 [ 201.997555][ T5069] ? clear_bhb_loop+0x50/0xa0 [ 202.002245][ T5069] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 202.008212][ T5069] RIP: 0033:0x7f486179e159 [ 202.012632][ T5069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.032306][ T5069] RSP: 002b:00007f48626c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 202.040754][ T5069] RAX: ffffffffffffffda RBX: 00007f4861a25fa0 RCX: 00007f486179e159 [ 202.048772][ T5069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 202.056776][ T5069] RBP: 00007f4861835024 R08: 0000000000000000 R09: 0000000000000000 [ 202.064770][ T5069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.072746][ T5069] R13: 00007f4861a26038 R14: 00007f4861a25fa0 R15: 00007ffee64dac78 [ 202.080773][ T5069] [ 202.083797][ T5069] ---[ end trace 0000000000000000 ]--- [ 202.089656][ T5069] BUG: scheduling while atomic: syz.0.1265/5069/0x00000000 [ 202.096954][ T5069] Modules linked in: [ 202.100889][ T5069] CPU: 1 UID: 0 PID: 5069 Comm: syz.0.1265 Tainted: G W syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 202.100920][ T5069] Tainted: [W]=WARN [ 202.100927][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.100938][ T5069] Call Trace: [ 202.100944][ T5069] [ 202.100955][ T5069] __dump_stack+0x21/0x30 [ 202.100981][ T5069] dump_stack_lvl+0x140/0x1c0 [ 202.100996][ T5069] ? __cfi_dump_stack_lvl+0x10/0x10 [ 202.101011][ T5069] dump_stack+0x19/0x20 [ 202.101024][ T5069] __schedule_bug+0x12b/0x200 [ 202.101037][ T5069] ? find_proxy_task+0x2460/0x2460 [ 202.101048][ T5069] ? update_load_avg+0x4f3/0x1980 [ 202.101061][ T5069] __schedule+0xb85/0x20b0 [ 202.101072][ T5069] ? __kasan_check_read+0x15/0x20 [ 202.101083][ T5069] ? plist_check_list+0x2a1/0x2c0 [ 202.101100][ T5069] ? __sched_text_start+0x10/0x10 [ 202.101109][ T5069] ? plist_add+0x4d4/0x570 [ 202.101123][ T5069] ? __futex_queue+0x19f/0x350 [ 202.101139][ T5069] ? __cfi___futex_queue+0x10/0x10 [ 202.101152][ T5069] schedule+0xc5/0x240 [ 202.101162][ T5069] futex_wait_queue+0xfc/0x240 [ 202.101171][ T5069] __futex_wait+0x15b/0x3d0 [ 202.101181][ T5069] ? __cfi___futex_wait+0x10/0x10 [ 202.101191][ T5069] ? __cfi_futex_wake_mark+0x10/0x10 [ 202.101201][ T5069] ? __kasan_check_read+0x15/0x20 [ 202.101211][ T5069] ? futex_wake+0x627/0x950 [ 202.101221][ T5069] futex_wait+0x128/0x7c0 [ 202.101230][ T5069] ? __cfi_futex_wait+0x10/0x10 [ 202.101241][ T5069] do_futex+0x32a/0x510 [ 202.101254][ T5069] ? __cfi_do_futex+0x10/0x10 [ 202.101267][ T5069] ? __kasan_slab_free+0x6a/0x80 [ 202.101279][ T5069] ? kmem_cache_free+0x1bd/0x4f0 [ 202.101292][ T5069] __se_sys_futex+0x13c/0x320 [ 202.101305][ T5069] ? putname+0x113/0x150 [ 202.101318][ T5069] ? __x64_sys_futex+0x110/0x110 [ 202.101332][ T5069] __x64_sys_futex+0xe9/0x110 [ 202.101345][ T5069] x64_sys_call+0x227f/0x2ee0 [ 202.101355][ T5069] do_syscall_64+0x57/0xf0 [ 202.101369][ T5069] ? clear_bhb_loop+0x50/0xa0 [ 202.101382][ T5069] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 202.101393][ T5069] RIP: 0033:0x7f486179e159 [ 202.101404][ T5069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.101413][ T5069] RSP: 002b:00007f48626c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 202.101425][ T5069] RAX: ffffffffffffffda RBX: 00007f4861a25fa8 RCX: 00007f486179e159 [ 202.101433][ T5069] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4861a25fa8 [ 202.101440][ T5069] RBP: 00007f4861a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 202.101447][ T5069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.101454][ T5069] R13: 00007f4861a26038 R14: 00007ffee64dab90 R15: 00007ffee64dac78 [ 202.101462][ T5069] [ 202.101520][ T0] Oops: general protection fault, probably for non-canonical address 0xdfff8481f6e50680: 0000 [#1] PREEMPT SMP KASAN PTI [ 202.387755][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 202.400413][ T0] Tainted: [W]=WARN [ 202.404197][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.414231][ T0] RIP: 0010:__schedule+0x149e/0x20b0 [ 202.419501][ T0] Code: e8 17 b6 3a fc 4c 8b 74 24 18 49 c7 06 00 00 00 00 48 8b 1c 24 48 89 df 48 8b 74 24 08 e8 9a 02 64 fb 48 89 c7 e8 12 11 b7 fb <43> c6 44 2c 10 f8 43 c6 44 2c 0c f8 48 c7 84 24 c0 00 00 00 0e 36 [ 202.439107][ T0] RSP: 0018:ffffffff87407be0 EFLAGS: 00010046 [ 202.445158][ T0] RAX: ffff88811cd62600 RBX: ffffffff87415c90 RCX: ffffffff874156c0 [ 202.453113][ T0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.461066][ T0] RBP: ffffffff87407da8 R08: ffffffff874156c7 R09: 1ffffffff0e82ad8 [ 202.469047][ T0] R10: dffffc0000000000 R11: fffffbfff0e82ad9 R12: ffff8881f6e50670 [ 202.477019][ T0] R13: dffffc0000000000 R14: 1ffffffff0e80f94 R15: ffffffff874156c0 [ 202.484985][ T0] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 202.493897][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.500564][ T0] CR2: 00007f4862685d58 CR3: 0000000137e6c000 CR4: 00000000003526b0 [ 202.508518][ T0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 202.516475][ T0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 202.524430][ T0] Call Trace: [ 202.527690][ T0] [ 202.530604][ T0] ? __kasan_check_read+0x15/0x20 [ 202.535624][ T0] ? ct_nmi_enter+0x9a/0xe0 [ 202.540128][ T0] ? ct_irq_enter+0xd/0x20 [ 202.544533][ T0] ? irqentry_enter+0x2c/0x40 [ 202.549201][ T0] ? sysvec_apic_timer_interrupt+0x13/0x90 [ 202.554997][ T0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 202.561134][ T0] ? ct_kernel_exit+0x7d/0xb0 [ 202.565798][ T0] ? pv_native_safe_halt+0x13/0x20 [ 202.570893][ T0] ? default_idle+0x17/0x30 [ 202.575403][ T0] ? arch_cpu_idle+0xd/0x20 [ 202.579889][ T0] ? default_idle_call+0x3e/0x80 [ 202.584809][ T0] ? do_idle+0x2fc/0x570 [ 202.589060][ T0] ? idle_inject_timer_fn+0x80/0x80 [ 202.594265][ T0] ? do_idle+0x543/0x570 [ 202.598492][ T0] ? cpu_startup_entry+0x47/0x60 [ 202.603411][ T0] ? rest_init+0x10b/0x130 [ 202.607818][ T0] ? __cfi_x86_late_time_init+0x10/0x10 [ 202.613351][ T0] ? start_kernel+0x462/0x4bb [ 202.618006][ T0] ? x86_64_start_reservations+0x2e/0x30 [ 202.623623][ T0] ? x86_64_start_kernel+0x6a/0x7b [ 202.628719][ T0] ? common_startup_64+0x13b/0x157 [ 202.633917][ T0] [ 202.637013][ T0] Modules linked in: [ 202.640904][ T0] ---[ end trace 0000000000000000 ]--- [ 202.646364][ T0] RIP: 0010:__schedule+0x149e/0x20b0 [ 202.651637][ T0] Code: e8 17 b6 3a fc 4c 8b 74 24 18 49 c7 06 00 00 00 00 48 8b 1c 24 48 89 df 48 8b 74 24 08 e8 9a 02 64 fb 48 89 c7 e8 12 11 b7 fb <43> c6 44 2c 10 f8 43 c6 44 2c 0c f8 48 c7 84 24 c0 00 00 00 0e 36 [ 202.671319][ T0] RSP: 0018:ffffffff87407be0 EFLAGS: 00010046 [ 202.677464][ T0] RAX: ffff88811cd62600 RBX: ffffffff87415c90 RCX: ffffffff874156c0 [ 202.685420][ T0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.693398][ T0] RBP: ffffffff87407da8 R08: ffffffff874156c7 R09: 1ffffffff0e82ad8 [ 202.701351][ T0] R10: dffffc0000000000 R11: fffffbfff0e82ad9 R12: ffff8881f6e50670 [ 202.709304][ T0] R13: dffffc0000000000 R14: 1ffffffff0e80f94 R15: ffffffff874156c0 [ 202.717281][ T0] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 202.726202][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.732787][ T0] CR2: 00007f4862685d58 CR3: 0000000137e6c000 CR4: 00000000003526b0 [ 202.740790][ T0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 202.748770][ T0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 202.756764][ T0] Kernel panic - not syncing: Fatal exception [ 203.826787][ T0] Shutting down cpus with NMI [ 203.831832][ T0] Kernel Offset: disabled [ 203.836147][ T0] Rebooting in 86400 seconds..