last executing test programs: 1m12.491162166s ago: executing program 2 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x8, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc41) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0x1, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r1, r2, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, r0, {0x7, 0x26, 0x5, 0x61001838, 0x0, 0xfffc, 0x6, 0x592186cc, 0x0, 0x0, 0x4, 0x10001}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x10800, 0x1e1) creat(&(0x7f0000000000)='./file0/file0\x00', 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYRES8=r9], 0x30}], 0x1}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000440)=ANY=[@ANYRES64=r10, @ANYRES16=r4, @ANYRESDEC], 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000040)) ioprio_set$pid(0x2, 0x0, 0x0) 1m11.936484123s ago: executing program 2 (id=33): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) pwritev2(r1, 0x0, 0x0, 0xfffffffb, 0x3, 0x4) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x808081, 0x0) (async, rerun: 64) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) (rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109004d00108008002100", @ANYRES32=0x0, @ANYBLOB="428184a477201ac90f24d8c53168047aa01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db00000019cf736a8cfb8bd1009791c1772c1fa51a2585dd4375889ea7ea2408eb1fa3dac740c80293d148b2e87189156e04c10a5bc799d6309cc82a389dff329efa4ad163cf28d4df86c75485e8a038d0d80ada771b0b32d967ef63085ccc94d0dc28fa23b212d10ad9d93de73431badb229665295810d2575ac3c5aaa2ef9a20a7228e035a400c106220c2fac68acb2e0629791c1b6249478ca3145314dbae4959"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x804) syz_usb_connect$uac1(0x5, 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000406b1d01014000010203a338964cea2f6dc55ccecc49ddc10220050904000000010100000a240100001c000201020924060504010400ff0924030407ff05050c09040100000102000009040101010102000009050109ff03ba044a07250108ceffff09040200000102000009040201010122000009058209100001049707250100090400"], 0x0) 1m10.950567793s ago: executing program 2 (id=44): lsetxattr$system_posix_acl(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0xc9, 0x0, &(0x7f0000000000)) 1m10.950018333s ago: executing program 2 (id=45): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b0001000000000904"], 0x0) 1m9.697914402s ago: executing program 2 (id=49): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) utimes(0x0, &(0x7f0000000180)={{0x77359400}}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100), 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x2, "5200d5449be3db17653dd51e3acd65"}, 0x10, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)=0x100000001) 1m9.687491072s ago: executing program 2 (id=50): syz_usb_connect$uac3(0x0, 0xb4, &(0x7f0000000100)=ANY=[@ANYBLOB="0e01100100000040b4041e934000010203010902a200030101c010080b0001010130070904000000010130000a2b9c60b000070000000d240704030c0000000c00000014240203050203030500000009008b00d70195484c2403010101030504"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) close_range(r1, r1, 0x2) 54.667233713s ago: executing program 32 (id=50): syz_usb_connect$uac3(0x0, 0xb4, &(0x7f0000000100)=ANY=[@ANYBLOB="0e01100100000040b4041e934000010203010902a200030101c010080b0001010130070904000000010130000a2b9c60b000070000000d240704030c0000000c00000014240203050203030500000009008b00d70195484c2403010101030504"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) close_range(r1, r1, 0x2) 6.663255775s ago: executing program 4 (id=473): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x12a24000) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000100)=0xa) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000191000/0x400000)=nil) prctl$PR_GET_NAME(0x10, &(0x7f0000000cc0)=""/142) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0xa4000061) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) fadvise64(r0, 0x5, 0x4, 0x2) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) open(0x0, 0x143142, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f0000000040)=0x3) 6.550538289s ago: executing program 4 (id=474): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000500)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xffffffff, 0x0, 0x4}, 0x1c) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000000c0)={&(0x7f0000000280)={0x1d, r2}, 0x10, &(0x7f0000000380)={&(0x7f0000000040)=@can={{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "e3997e3df56fe25b"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x40) r3 = socket(0x28, 0x801, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x1, 0x7800, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x6, 0x4, 0x0, @remote, @loopback}}}}) connect$vsock_stream(r3, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) shutdown(r3, 0x2) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r5, &(0x7f0000000200)={0x20002010}) 5.358615625s ago: executing program 4 (id=485): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000001040)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffffe, 0x4008242, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x109881, 0x34) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='sysfs\x00', &(0x7f0000000480)='./mysys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mysys/class/net\x00', 0x80000, 0x0) getdents64(r3, &(0x7f0000000540)=""/1000, 0x3e8) ioctl$KVM_GET_PIT2(r2, 0x40806685, 0x0) 2.2808301s ago: executing program 4 (id=523): r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peekuser(0x3, r1, 0x388) rt_sigqueueinfo(r1, 0x13, &(0x7f0000000240)={0x3e, 0x8001, 0x1}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x5, 0x7, 0xe, 0x1f59}]}) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000001d40)=[{{&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000000300)="f5a7933a000000000100"/20, 0x14}], 0x1, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x20}}, {{&(0x7f0000001640)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x20}}], 0x2, 0x20044000) bind$inet(r4, &(0x7f0000000200)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0xfffe, @multicast1}, 0x10) sendmsg$802154_raw(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000380)={&(0x7f00000002c0)="0089665fef3735cca217fab28c4ddf3d6ac6272f104711b7ec3107ff67ca6287c3e24d3f05368738dcd37e253c976c47c4b84de73ae45e730ce6fd6ff71f2183e892f76b4093ce9eec2f619d6f3f0f48f2ab6024778dc31be6bf7e44ee6d8b747f413fe622a42973ee3bfe652d1ecb6ad6456ce49bba41f13c1f", 0x7a}, 0x1, 0x0, 0x0, 0x80}, 0x48854) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000000c0)={0x0, 0x1000, 0x8}) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 2.161669584s ago: executing program 4 (id=524): r0 = fsopen(&(0x7f00000001c0)='binfmt_misc\x00', 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x4, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x8, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0xb, 0xaf, 0x8, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0xe67b, 0xffffffff, 0x69a, 0x9}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.090262576s ago: executing program 4 (id=526): r0 = socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a00000000000001"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = getpgrp(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x140, 0xa3) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x140, 0xa3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r6, 0x0, 0xb) (async) write$binfmt_script(r6, 0x0, 0xb) write$binfmt_misc(r7, &(0x7f0000000980), 0xfdef) splice(r5, 0x0, r7, 0x0, 0xfffffffffffffff8, 0x2) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120110039eb11026ae1a080142860102030109021b00012304fecc7df20318bdfd7efc2a7a2ba060030904df6700d8f0cd090921ef000201223809"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) r8 = fsmount(0xffffffffffffffff, 0x0, 0x70) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r3, &(0x7f0000000340)="c46ee572f74ecfb9fe3ddc764eb07dd6a89f2387cb4093532ffc0a22ceee5f1bf5c894f733769c27745597222fe2aec6d50d91b7903090abe3fd9a52bb25000000d47ccb45a5fa65917a7c14b1536ef7ebc2c08b277ba1feaf6c3b8f11d68f16ec65739f904ba38d46fe3e232464a621ffac90010aaee68d0ffcf393afc31a38a5b2f8fc87b6ed6495bf9d73aa6ea340c709fd9d7be797fe82bfa625cc8cc848e854bf102061feb87974d16ac8557493db8eb3a5ac7ea8247e00552ecbd204bf2d2e88eb319c3c8f82a49b", 0xcb, 0x8040, 0x0, 0x0) sendmsg$AUDIT_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x2, 0x70bd2d, 0x25dfdbfb, {0xf, 0x1, 0x0, r2, 0x8, 0x7, 0x5, 0xb, 0x0, 0xffffffff, 0x10000}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40081}, 0x40800) (async) sendmsg$AUDIT_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x2, 0x70bd2d, 0x25dfdbfb, {0xf, 0x1, 0x0, r2, 0x8, 0x7, 0x5, 0xb, 0x0, 0xffffffff, 0x10000}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40081}, 0x40800) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x10, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f00000001c0)=@req={0x7, 0x7, 0x0, 0x5}, 0x10) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001070000090905", @ANYRES16], 0x0) getdents64(r8, &(0x7f0000000280)=""/17, 0x11) (async) getdents64(r8, &(0x7f0000000280)=""/17, 0x11) 2.030594488s ago: executing program 1 (id=528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) chdir(&(0x7f0000000100)='./file0\x00') ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0x3d1, 0x8e, 0x3, 0x3, 0x4002004c2, 0x1007ff, 0x9, 0x6, 0x400, 0x7f, 0x89, 0x0, 0x1, 0x6], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ptrace(0x10, r1) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x1ff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth1\x00', 0x200}) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) ioctl$sock_inet_SIOCSARP(r6, 0x8953, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x665}) ioctl$UFFDIO_MOVE(r7, 0xc028aa05, &(0x7f0000000240)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f000016c000/0x4000)=nil, 0x4000, 0x2}) lsm_set_self_attr(0x69, 0x0, 0x66ee0bd6, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) dup(r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.95028772s ago: executing program 1 (id=529): r0 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8c}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) r1 = getpid() (rerun: 32) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x80000000) (async) r2 = syz_usb_connect$cdc_ncm(0x0, 0x8c, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x3, 0x0, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "6c4128f4"}, {0x5, 0x24, 0x0, 0x14}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xffd, 0x6b9b, 0x9d}, {0x6, 0x24, 0x1a, 0x6, 0x5}, [@mbim={0xc, 0x24, 0x1b, 0xd, 0x0, 0x8, 0x9, 0x3, 0x5}, @country_functional={0xa, 0x24, 0x7, 0x8, 0x7, [0x8, 0x2]}, @acm={0x4, 0x24, 0x2, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x8, 0xe4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x10, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x43, 0x3, 0x9}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x81, 0x2, 0x6, 0x8, 0xc}, 0xf, &(0x7f00000002c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x2, 0x8}]}, 0x1, [{0x6c, &(0x7f0000000300)=@string={0x6c, 0x3, "867c7b6503bcf57c3f406be97726cf3976c554c252c3445260e171a6618744def10f8111d46a440fab18e79a9348393548e18b1438d17ade4cc53e8f2ca7335114f2d3e962a1ade0a3b1d469a90e321132c64f9445a40e644180c1fea87225e1906716e50fa3582519c4"}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000004c0)={0x14, &(0x7f00000003c0)={0x20, 0xf, 0xb0, {0xb0, 0x22, "09a48f392f00243b317bfd695174c6fb7d5e5e3a5b8d4af530d4e0688e2ba34654a1c806bc911c3c3b9241152a34fb74495cc36bc6acdf3c43fa6b5cffdfbf56d74b0840c36c1dffad79ed0e717ea468b6e53a8628f6205006f6f65b2561fa34d0c281e5addc899a6e41a72d1d27d0de25be0a283c9b51dbc6aa92f5aaaa84c403a9963f64caf8e219d23f5ca87a174e04b28e76625bd011e133cdc4e0aa4d7b182dcfefef109bb42b4dfd5d9cbf"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x44, &(0x7f0000000500)={0x20, 0x11, 0x9e, "0cc28103a072ec8222fb4ecd3d2c3d7979fc3500377b3ba4e3e61e32a0511f6c14b2a5087d5c513ef13a064e1915571b94e38c9e4abf1a0e137292ede5105721f8a62633e608a287b39ae58468144b9b1af73ea8e9cb10b2c9a3b04c0db9b761faabec33d9066515aa9ea9b61468dd6c51b60a8838a2e1f8871b6044fc19a2729749ba28a2f5a8be7aafb56e6c506dd8f228fe2825f283172829614ddf80"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000640)={0x20, 0x80, 0x1c, {0x9, 0x5ca, 0x2, 0x1, 0x8000, 0x1, 0xff, 0x3f90, 0xa2, 0x8001, 0x8, 0x2}}, &(0x7f0000000680)={0x20, 0x85, 0x4, 0x7fffffff}, &(0x7f00000006c0)={0x20, 0x83, 0x2}, &(0x7f0000000700)={0x20, 0x87, 0x2, 0x1ff}, &(0x7f0000000740)={0x20, 0x89, 0x2, 0x1}}) (async) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000140)=ANY=[@ANYBLOB="120101020000001065151800400001020301090269000301094000080b0001010420070904000000010120000924010700030900010904010000010220000904010101010220000905010910000809060840ea81f7cde2dfbd04020000050000000000000001010220000905820930007f0201082501000c81f502"], &(0x7f0000000080)={0x0, 0x0, 0x11, &(0x7f00000000c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0xffff, 0x0, 0xfffa}]}, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x441}}, {0x2b, &(0x7f0000000040)=@string={0x2b, 0x3, "aa3277d17fbd793b3f5ecdf8a736b51dfb9ef7bb2b4cb14a837e69800fec81388d81601587bf05b674"}}]}) 1.9494149s ago: executing program 1 (id=530): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0x10, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000000000000000c0000000c0000800800000000000000", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40892) 1.94887582s ago: executing program 1 (id=531): add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffb) (async) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e28, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000600)=""/46, &(0x7f0000000480)=0x2e) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) (async, rerun: 32) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c63616368013d667363616368652c616e616d653d2081"]) (async) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000040)='bridge0\x00', 0x0, r0) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) (async) r5 = socket(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c0021002dbd7000000000000700000005000000000002000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000f00)=0x1000000, 0x4) (async) sendmmsg$inet(r6, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.94483504s ago: executing program 1 (id=532): syz_usb_connect$midi(0x5, 0x43, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0x931b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31, 0x1, 0x1, 0x18, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x6, [@midi_out_jack={0x7, 0x24, 0x3, 0x3, 0x5, 0x0, [], 0xf}], [{{0x9, 0x5, 0x8e, 0xb, 0x20, 0xf, 0xd7, 0x2, {0xf, 0x25, 0x1, 0xb, "26cc9892f3a2007744ac05"}}}]}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) 1.584334571s ago: executing program 3 (id=533): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x88482) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000300)=0x7) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = dup(r2) write$FUSE_DIRENT(r3, &(0x7f0000000080)={0x50, 0xfffffffffffffffe, 0x0, [{0x0, 0x1, 0x5, 0x1, '::-::'}, {0x5, 0x3, 0x3, 0x5, '@@^'}]}, 0x50) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0603d0f, &(0x7f0000000040)) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/slabinfo\x00', 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, r2, 0x2) 1.454440485s ago: executing program 3 (id=534): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fchdir(r0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000040)={'bond_slave_0\x00', 0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x218, 0x18, 0x923, 0x0, 0xffffffff, {0x86}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x1}, @generic="79c70ebb836be8d95b7c700f15e94938891157b3a9906b6154f48f24912f6d4b699dad8606bec702a04c6938e6b2d8b94652bae4e1e4c334863b627ea59541f8f0ba50f6dc68e2abb5f187990d7c332593a2cda1a94d084989007bcf576ad5f625bfb78b669088323f644b7c77e853dc03b677607bd228b598722c0394e1e82db518ab8158c0ffe6178756dbb337421fa075a00140bfb84ef316120743717965a3451f23c7deee2894ab10699ebe7db0c348da769bb3ad9eea5aabde200f814664521c647d78d4e09fb4384da4f3d18770e29cc7cec24228a7a0ba5562607effb193fa42", @nested={0x49, 0xd7, 0x0, 0x1, [@generic="9dc7bb8db1f4c146a099cad66e35fd3c956004f09e7f453f7f212d487018baccea3afdf989cd563e46a0372339210ae563e1c44c018a0378cae7b371ced70e652dcefb2816"]}, @nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0xf5, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0xc, 0x95, 0x0, 0x0, @u64=0x4}, @generic="8549e9c397edfbc882c4e396e457219f436a8c675667e8b54a56296a02c7d23b843bf9cce64b2d5e9902ea3f3c33bf3a41f789d3955d8bce1aca6f307f1b1dea006ccd2d00cc71e2fcb8c2f556c96a334d69067cf7def20284c5763368d1ace6ed95f8f558e741f7db861479f66ae79a617667e45b7cd74b696a1f81372916f54dbb231b80f51e356e9c42c620403bb5f820239ffb80d66c6ea98732f37bd651c96ad0ca8b6d0368cded41fd118ff9a0269959"]}, 0x218}}, 0x20010000) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.454072895s ago: executing program 3 (id=535): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) setresgid(0xee00, 0x0, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r1, &(0x7f0000000000)=""/42, 0xffffffffffffff54, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) (async) unshare(0x64000600) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000180)={@val={0x0, 0x18}, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x31, 0x20, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {0x0, 0x22eb, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x3de7ea73aeb2140b, @void}}}}}}}}, 0x32) (async) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) (async) setresuid(0xee01, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230000) (async) ioctl$TUNSETOFFLOAD(r6, 0x80047441, 0x17) (async) setfsuid(0x0) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x24) 1.426592726s ago: executing program 1 (id=536): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x2f, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) sendmmsg$inet6(r0, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0xc53, @private1={0xfc, 0x1, '\x00', 0x1}, 0x400}, 0x1c, 0x0}}, {{&(0x7f0000002e00)={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000005080)=[@tclass={{0x14, 0x29, 0x43, 0xb6c1000}}], 0x18}}], 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f000073a000/0x4000)=nil, 0x4000, 0x0, 0x28011, r3, 0x96c47000) (async) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000)=0x9, 0x4) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x86200, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000140)) (async) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000300)=0x208) (async) recvmmsg(r7, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000d40)=""/78, 0x4e}, {&(0x7f0000000dc0)=""/226, 0xe2}, {&(0x7f0000000ec0)=""/30, 0x1e}, {&(0x7f0000000f00)=""/28, 0x1c}, {&(0x7f0000000f40)=""/75, 0x4b}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x6}, 0x8}], 0x3, 0x20002140, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) readv(r9, &(0x7f0000003440)=[{&(0x7f0000002200)=""/75, 0x4b}], 0x1) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10) (async) sendto$inet(r6, &(0x7f0000000900)="8ffbfa8ef862c8929842941ef92ed621f64f4d9e63dc5773f91fc0461142bf19b8d21e0c8ecb685659210d76fe7a68568ff20aebf49795ed3153bafc8558ef41aee0257cdc4abc48659f16764664be4ac9dc9c3fd0eadb825a3b709f09668259bb2c83dbb79945310422289c62e0ae1c902ffdd7a8920c9730a5a586fd9fc77c90aec40b8c6960c19f9d", 0x8a, 0x4885, 0x0, 0x0) (async) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r10, 0x40087703, 0x10000fffffff3) mmap(&(0x7f000038e000/0x2000)=nil, 0x2000, 0x0, 0x12, r10, 0x1000) splice(r6, 0x0, r5, 0x0, 0x8a, 0xa) (async) syz_usb_connect$uac1(0x1, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000081e0442304000010203010902600003010920040904000000010100000a240103000a000201020904010000010200000904010101b6191bae090501094000070c8107250108041f0d090402000001020000090402010101020000ad2f8209df07070804072501000a0400"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x47, 0x0}, {0x0, 0x0}, {0x55, &(0x7f0000000480)=ANY=[@ANYBLOB="5503e0be84b02c8a4507507f80317f41f06041bd2d05ea983451dd4cc9d6b091219444d88db4ca20a0f3479397a59e7f2be54b4951e379e3d2232a23b6ab6eeaa9bc6a0cb2a41aecd54796bf86a96fdf8272"]}]}) 1.375611277s ago: executing program 3 (id=537): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001600010a1400026400ffffff0f000000"], 0x14}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0xc00, 0x0) r1 = epoll_create(0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/84, 0x54}], 0x1, 0x1000, 0x7e, 0x14) close(0x3) readv(r0, &(0x7f0000002500)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/249, 0xf9}, {&(0x7f0000001440)=""/65, 0x41}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/20, 0x14}], 0x5) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) setresgid(0xee00, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) r6 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f0000000140)='stack\x00') pread64(r7, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000002580)=ANY=[@ANYBLOB="1201100100000040f204211400000000000109022d00010000600c0904000f020300000009210400ff01222800090581030002b483fe0905020300020405000c8664fd835cf3d596bb4cc404856db89edce5db5d5e9efba9ad74debfd730eaa586e5db9d"], 0x0) 780.134355ms ago: executing program 0 (id=539): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x9, 0xffffffff}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000000c0)={0x4, {{0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x0, @local, 0xffffff08}}}, 0x108) (async) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000200)={0x45, 0x4, 0x10001, 0x9, 0x8, "8539eb11735e5254d73619cb3434046dd2c36b", 0x5, 0x1}) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000003c0)=0xe8) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, r3, &(0x7f0000000400)='./file0\x00') setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000440)={0x32, @rand_addr=0x64010100, 0x4e21, 0x2, 'rr\x00', 0x1, 0x2, 0xd}, 0x2c) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) userfaultfd(0x801) (async) fchmodat(r1, &(0x7f00000004c0)='./file0\x00', 0x80) bind$can_raw(r1, &(0x7f0000000500)={0x1d, r2}, 0x10) (async) r4 = socket(0x29, 0x5, 0x3) r5 = getpid() (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000540)=0x1) chdir(&(0x7f0000000580)='./file1\x00') (async, rerun: 32) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000005c0)=0x97e, &(0x7f0000000600)=0x2) (async, rerun: 32) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000640)={@remote, 0x8bb1, 0x2, 0x2, 0x9, 0x5, 0x8000}, &(0x7f0000000680)=0x20) (async) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000006c0)) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000700)) (async) getsockname(r4, &(0x7f0000000740)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000007c0)=0x80) (async) write$P9_RREADDIR(r1, &(0x7f0000000800)={0x10c, 0x29, 0x2, {0x1, [{{0x10, 0x2, 0x8}, 0x0, 0xff, 0x7, './file0'}, {{0x2, 0x0, 0x7}, 0x2, 0xfd, 0x7, './file1'}, {{0x4, 0x1, 0x5}, 0x8, 0xc, 0x7, './file1'}, {{0x40, 0x0, 0x8}, 0x8, 0x2, 0x10, './file0/../file0'}, {{0x40, 0x3, 0x2}, 0x5, 0x10, 0x7, './file0'}, {{0x1, 0x1, 0x6}, 0x8, 0x8, 0x7, './file0'}, {{0x1, 0x1, 0x2}, 0x1, 0x3, 0x7, './file0'}, {{0x40, 0x3, 0x7}, 0x4, 0x3, 0x7, './file0'}]}}, 0x10c) (async, rerun: 64) write$binfmt_register(r1, &(0x7f0000000940)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x200, 0x3a, 'y\x00', 0x3a, 'trusted.overlay.opaque\x00', 0x3a, './file1', 0x3a, [0x4f, 0x43, 0x43, 0x4f]}, 0x44) (rerun: 64) prlimit64(r5, 0x4, &(0x7f00000009c0)={0x2, 0x6}, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) (async) prlimit64(r5, 0xb, &(0x7f0000000a00)={0x5, 0x6}, 0x0) (async) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000a40)={0x7ff, 0x80000000, 0x9, 0xb7f0, 0x9, "426d11aca7eee6636cb5dce9f8c051451a1062", 0xa89, 0x10}) 749.624147ms ago: executing program 0 (id=540): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454ce, 0xa) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2710, 0xf09acdca262d7780, 0x3000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async, rerun: 32) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x22e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}]}) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x4c, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000000)={'sit0\x00', 0x0}) (async) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x20, 0x1e, 0x21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x7}]}, 0x20}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x2, 0x0, 0x25000, 0x2000, &(0x7f0000fef000/0x2000)=nil}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001070000090905", @ANYRES16], 0x0) 126.691346ms ago: executing program 0 (id=541): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d9000f32ba00e500000f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x59}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 123.772666ms ago: executing program 3 (id=542): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') r1 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'wg2\x00', &(0x7f0000000500)=@ethtool_gstrings={0x1b, 0x4, 0x3, "502eb3"}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = accept4$packet(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x14, 0x80000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) truncate(0x0, 0x1) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x34) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10b200, 0x2d) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) read(r3, &(0x7f0000000100)=""/62, 0x3e) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='15', 0x2}, {&(0x7f0000000400)='u;', 0x2}], 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) 113.058196ms ago: executing program 0 (id=543): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)={0x72002, 0x12, 0x10}, 0x18) mkdirat(r0, &(0x7f0000000000)='./sys\x00', 0x1b3) (async) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="0abb603600ff0700006300000000000012"], 0x0) (async) socketpair(0x28, 0x0, 0x0, &(0x7f0000000140)) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb}, 0xc) (async) getsockopt$inet6_int(r2, 0x29, 0x48, 0x0, &(0x7f00000000c0)) setxattr$system_posix_acl(&(0x7f0000000180)='./sys\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000"], 0x24, 0x0) io_setup(0x7f, &(0x7f0000000000)=0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0011022, 0xec000000, 0xcd}]}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r6, &(0x7f0000000100)={@val={0xa, 0x10}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x0, 0x2f, 0xff, @private0, @mcast2}}}}}, 0x3a) (async) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) (async) pwritev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="80fd0600c608", 0x6}], 0x1, 0x4, 0x40005) (async) io_submit(r4, 0x2000007b, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) write(r1, &(0x7f0000000140)='0000:00:01.0', 0xc) 88.776377ms ago: executing program 3 (id=544): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x81, 0xac, 0xd8, 0x40, 0xdf6, 0x56, 0xd24b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x39, 0x0, 0x2, 0x7a, 0xfa, 0x71, 0x2c, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x3, 0xc, 0x9}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x25000, 0x5, 0x0, 0x9, 0x0, [{0xfd, 0x64, 0x9, '\x00', 0x3b}, {0x5, 0x8, 0x5, '\x00', 0x1}, {0xaf, 0x81, 0x9a, '\x00', 0x9}, {0x90, 0x3d, 0x6, '\x00', 0xc3}, {0x80, 0x2, 0xfa, '\x00', 0x7}, {0x7, 0x2, 0x10, '\x00', 0xff}, {0x49, 0x7f, 0x2, '\x00', 0x5}, {0xf, 0xf7, 0xe1, '\x00', 0xfe}, {0xa, 0x6, 0x9, '\x00', 0x2}, {0xd8, 0x1, 0x6, '\x00', 0x80}, {0x9, 0xc, 0xc, '\x00', 0xd}, {0x11, 0x1, 0x40, '\x00', 0xf6}, {0x7, 0x2, 0x1, '\x00', 0x73}, {0x1, 0x5, 0x4, '\x00', 0x7}, {0x4, 0xff, 0x10, '\x00', 0xff}, {0x5, 0x9, 0x1, '\x00', 0xe3}, {0x9, 0x0, 0x6, '\x00', 0x6}, {0x5, 0x2, 0x4, '\x00', 0x4b}, {0x2, 0x6, 0xbc, '\x00', 0xa}, {0x80, 0xd, 0x3, '\x00', 0x5}, {0x5, 0x0, 0x8, '\x00', 0x9b}, {0x60, 0xb, 0x8, '\x00', 0x3}, {0x76, 0x9, 0x7, '\x00', 0x1}, {0x3, 0xc6, 0x23, '\x00', 0x27}]}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80182, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_SREGS2(r6, 0x4140aecd, &(0x7f00000001c0)={{0xb000, 0x3000, 0x4, 0x7, 0xfb, 0x27, 0x6, 0xb8, 0x1, 0x2c, 0x0, 0xc0}, {0x25000, 0x2000, 0xf, 0x2, 0x4, 0xad, 0x8, 0x0, 0x2d, 0x1, 0x8, 0x7}, {0x2, 0x7000, 0x8, 0x50, 0x3, 0x27, 0xf, 0x5, 0x4, 0xc7, 0x6, 0x1}, {0xdddd0000, 0x41000, 0xe, 0x4, 0x7, 0x6, 0x39, 0x5, 0xb, 0x5, 0x0, 0x4b}, {0xa000, 0x200000, 0x8, 0x7, 0x0, 0x1, 0xf1, 0x81, 0x4, 0x6, 0x0, 0xf}, {0x80a0000, 0xfec00000, 0x3, 0x6, 0x7, 0xed, 0x1, 0xf8, 0x8, 0x21, 0x5, 0x7}, {0x26000, 0x1, 0xa, 0x0, 0x0, 0x8, 0x8, 0x8, 0x0, 0x80, 0x9, 0x7}, {0x60000, 0x54000, 0x10, 0x4, 0x6, 0xc, 0x3, 0xe, 0x2, 0x2, 0x2, 0x9}, {0xc000, 0x1000}, {0x80a0000, 0x4}, 0x60000010, 0x0, 0xfec00000, 0x80, 0x9, 0x1, 0xeeee0000, 0x1, [0x5, 0x2, 0xe54, 0x3]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r9, 0x0, 0xb) splice(r11, 0x0, r9, 0x0, 0x1000, 0x0) splice(r8, 0x0, r12, 0x0, 0x80, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x10201, 0x0, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x13, 0x6, @random="00e5ec5725a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 42.652958ms ago: executing program 0 (id=545): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') read$FUSE(r0, &(0x7f0000002840)={0x2020, 0x0, 0x0}, 0x2020) statx(r0, &(0x7f0000004880)='./file0\x00', 0x6000, 0x20, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000004a00)={0xa0, 0x0, r1, {{0x3, 0x3, 0x3, 0x8001, 0x3, 0xffff, {0x6, 0x7, 0x7, 0x22, 0x5, 0x7, 0x13, 0x8e7, 0x2, 0x1000, 0x80000001, 0x0, 0x0, 0x1ff0000, 0x5}}, {0x0, 0x8}}}, 0xa0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x48) socket$inet_udplite(0x2, 0x2, 0x88) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xe8842, 0x4) fcntl$setstatus(r4, 0x4, 0x42000) close(r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x80a0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000ffe000/0x1000)=nil}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) 0s ago: executing program 0 (id=546): unshare(0x60000600) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @private0, 0x4ef}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0xff) kernel console output (not intermixed with test programs): tory [ 29.400703][ T36] audit: type=1400 audit(1785121512.729:161): avc: denied { map } for pid=411 comm="syz.3.34" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 29.449830][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 29.455993][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.466559][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 29.477725][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 29.488600][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 29.499598][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 29.508820][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.516841][ T9] usb 2-1: Product: syz [ 29.521478][ T9] usb 2-1: Manufacturer: syz [ 29.526073][ T9] usb 2-1: SerialNumber: syz [ 29.569791][ T388] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.722271][ T388] usb 3-1: unable to get BOS descriptor or descriptor too short [ 29.730048][ T388] usb 3-1: too many configurations: 163, using maximum allowed: 8 [ 29.733047][ T407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.739431][ T388] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 29.746669][ T407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.754796][ T388] usb 3-1: can't read configurations, error -71 [ 29.770746][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 29.781015][ T9] usb 2-1: USB disconnect, device number 7 [ 29.788390][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.898607][ T435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4113 sclass=netlink_route_socket pid=435 comm=syz.0.39 [ 29.925168][ T438] fuseblk: Unknown parameter 'dont_hash' [ 30.272591][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 30.419846][ T9] usb 1-1: device descriptor read/64, error -71 [ 30.529847][ T31] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 30.539854][ T328] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 30.599931][ T388] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.659814][ T31] usb 4-1: device descriptor read/64, error -71 [ 30.659814][ T9] usb 1-1: device descriptor read/64, error -71 [ 30.690963][ T328] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.701140][ T328] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.710741][ T328] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 30.719824][ T328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 30.727806][ T328] usb 2-1: SerialNumber: syz [ 30.759789][ T388] usb 3-1: Using ep0 maxpacket: 32 [ 30.766128][ T388] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.777795][ T388] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 30.786886][ T388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.794904][ T388] usb 3-1: Product: syz [ 30.799070][ T388] usb 3-1: Manufacturer: syz [ 30.803680][ T388] usb 3-1: SerialNumber: syz [ 30.808864][ T388] usb 3-1: config 0 descriptor?? [ 30.899798][ T31] usb 4-1: device descriptor read/64, error -71 [ 30.909799][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 30.945663][ T328] usb 2-1: 0:2 : does not exist [ 30.953231][ T328] usb 2-1: USB disconnect, device number 8 [ 31.020085][ T388] usb 3-1: USB disconnect, device number 4 [ 31.039882][ T9] usb 1-1: device descriptor read/64, error -71 [ 31.139876][ T31] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 31.269948][ T31] usb 4-1: device descriptor read/64, error -71 [ 31.279864][ T9] usb 1-1: device descriptor read/64, error -71 [ 31.389860][ T9] usb usb1-port1: attempt power cycle [ 31.509782][ T31] usb 4-1: device descriptor read/64, error -71 [ 31.619872][ T31] usb usb4-port1: attempt power cycle [ 31.729805][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 31.750766][ T9] usb 1-1: device descriptor read/8, error -71 [ 31.779789][ T328] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.829783][ T388] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 31.880791][ T9] usb 1-1: device descriptor read/8, error -71 [ 31.940872][ T328] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.951032][ T328] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.961291][ T328] usb 3-1: New USB device found, idVendor=04b4, idProduct=931e, bcdDevice= 0.40 [ 31.969878][ T31] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 31.970372][ T328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.985997][ T328] usb 3-1: Product: syz [ 31.990291][ T328] usb 3-1: Manufacturer: syz [ 31.994877][ T328] usb 3-1: SerialNumber: syz [ 32.000843][ T388] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 32.012592][ T31] usb 4-1: device descriptor read/8, error -71 [ 32.018765][ T388] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 32.029826][ T388] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 32.041756][ T388] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 32.050826][ T388] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 32.058817][ T388] usb 2-1: Manufacturer: syz [ 32.064417][ T467] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 32.129800][ T9] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 32.140824][ T31] usb 4-1: device descriptor read/8, error -71 [ 32.160750][ T9] usb 1-1: device descriptor read/8, error -71 [ 32.272457][ T388] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 32.280366][ T388] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input5 [ 32.290630][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 32.290644][ T36] audit: type=1400 audit(1785121515.709:175): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=464 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.292204][ T388] usb 2-1: USB disconnect, device number 9 [ 32.296796][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 32.296937][ T36] audit: type=1400 audit(1785121515.709:176): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=464 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.356468][ T36] audit: type=1400 audit(1785121515.709:177): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=464 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.381213][ T9] usb 1-1: device descriptor read/8, error -71 [ 32.389812][ T31] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 32.410752][ T31] usb 4-1: device descriptor read/8, error -71 [ 32.489896][ T9] usb usb1-port1: unable to enumerate USB device [ 32.540811][ T31] usb 4-1: device descriptor read/8, error -71 [ 32.649855][ T31] usb usb4-port1: unable to enumerate USB device [ 32.834526][ T487] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.863795][ T36] audit: type=1400 audit(1785121516.279:178): avc: denied { read write } for pid=509 comm="syz.1.54" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 32.887680][ T36] audit: type=1400 audit(1785121516.279:179): avc: denied { open } for pid=509 comm="syz.1.54" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 32.911612][ T36] audit: type=1400 audit(1785121516.279:180): avc: denied { ioctl } for pid=509 comm="syz.1.54" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf78 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 32.940152][ T36] audit: type=1400 audit(1785121516.359:181): avc: denied { create } for pid=521 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.959713][ T36] audit: type=1400 audit(1785121516.359:182): avc: denied { bind } for pid=521 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.983171][ T522] kvm: kvm [521]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x400003 [ 32.993895][ T36] audit: type=1400 audit(1785121516.409:183): avc: denied { listen } for pid=521 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.013749][ T36] audit: type=1400 audit(1785121516.409:184): avc: denied { setopt } for pid=521 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.118751][ T531] incfs: Options parsing error. -22 [ 33.124573][ T531] incfs: mount failed -22 [ 33.519780][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 33.669792][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 33.676078][ T31] usb 1-1: config 1 has an invalid descriptor of length 150, skipping remainder of the config [ 33.686418][ T31] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 33.695461][ T31] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 33.708516][ T391] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 33.717641][ T31] usb 1-1: New USB device found, idVendor=04fd, idProduct=0001, bcdDevice= 0.40 [ 33.726733][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.734773][ T31] usb 1-1: Product: syz [ 33.738925][ T31] usb 1-1: Manufacturer: syz [ 33.743569][ T31] usb 1-1: SerialNumber: syz [ 33.859770][ T391] usb 4-1: Using ep0 maxpacket: 16 [ 33.866081][ T391] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 33.879116][ T391] usb 4-1: config 0 interface 0 has no altsetting 0 [ 33.885754][ T391] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 33.894832][ T391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.903859][ T391] usb 4-1: config 0 descriptor?? [ 34.003502][ T31] usb 1-1: 0:2 : does not exist [ 34.010911][ T31] usb 1-1: USB disconnect, device number 12 [ 34.020592][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.116414][ T544] batadv_slave_1: entered promiscuous mode [ 34.361585][ T391] usbhid 4-1:0.0: can't add hid device: -71 [ 34.367648][ T391] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 34.376717][ T391] usb 4-1: USB disconnect, device number 11 [ 34.779792][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 34.930792][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.942102][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.952004][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 34.965038][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.974142][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.983007][ T31] usb 1-1: config 0 descriptor?? [ 35.082332][ T581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 35.091147][ T581] bridge_slave_1: left allmulticast mode [ 35.096816][ T581] bridge_slave_1: left promiscuous mode [ 35.102489][ T581] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.110161][ T581] bridge_slave_0: left allmulticast mode [ 35.115818][ T581] bridge_slave_0: left promiscuous mode [ 35.121613][ T581] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.133697][ T582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=582 comm=syz.1.75 [ 35.147446][ T582] overlay: Unknown parameter '/ebugfs' [ 35.154871][ T582] overlayfs: failed to clone lowerpath [ 35.160877][ T582] overlayfs: failed to clone lowerpath [ 35.167483][ T582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 35.189990][ T563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.198603][ T563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.410732][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 35.419262][ T31] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 35.429919][ T31] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 35.612455][ T31] usb 1-1: USB disconnect, device number 13 [ 36.129821][ T65] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 36.279767][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 36.285949][ T65] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 36.297609][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 36.308528][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 36.320966][ T65] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 36.330049][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.338025][ T65] usb 4-1: Product: syz [ 36.342205][ T65] usb 4-1: Manufacturer: syz [ 36.346807][ T65] usb 4-1: SerialNumber: syz [ 36.351989][ T65] usb 4-1: config 0 descriptor?? [ 36.357279][ T620] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 36.368619][ T65] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 36.467445][ T636] netlink: 'syz.1.91': attribute type 4 has an invalid length. [ 36.475122][ T636] netlink: 'syz.1.91': attribute type 2 has an invalid length. [ 36.559845][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 36.570674][ T65] usb 4-1: USB disconnect, device number 12 [ 36.711134][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 36.719489][ T31] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 983 [ 36.729363][ T31] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 36.742279][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 36.751014][ T31] usb 1-1: string descriptor 0 read error: -22 [ 36.757306][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.766416][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.775338][ T622] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 36.983583][ T622] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 36.994793][ T31] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -32 [ 37.003409][ T638] 9pnet_fd: Insufficient options for proto=fd [ 37.042919][ T328] usb 3-1: unit 5 not found! [ 37.093033][ T643] process 'syz.3.94' launched './file1' with NULL argv: empty string added [ 37.102087][ T645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.110715][ T645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.118823][ T643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.127520][ T643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.192488][ T65] usb 1-1: USB disconnect, device number 14 [ 37.329849][ T31] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 37.480851][ T31] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 37.488986][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.499131][ T31] usb 4-1: config 0 has no interface number 0 [ 37.506589][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 37.515658][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.523672][ T31] usb 4-1: Product: syz [ 37.527820][ T31] usb 4-1: Manufacturer: syz [ 37.532430][ T31] usb 4-1: SerialNumber: syz [ 37.537545][ T31] usb 4-1: config 0 descriptor?? [ 37.743322][ T644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.752636][ T644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.760771][ T644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.769590][ T644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.777808][ T644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.786623][ T644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.796373][ T311] usb 4-1: USB disconnect, device number 13 [ 37.959839][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 38.109775][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 38.115937][ T31] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 38.124251][ T31] usb 1-1: config 0 has no interface number 0 [ 38.130370][ T31] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 38.140387][ T31] usb 1-1: config 0 interface 196 has no altsetting 0 [ 38.148380][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 38.157437][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.165445][ T31] usb 1-1: Product: syz [ 38.169594][ T31] usb 1-1: Manufacturer: syz [ 38.174193][ T31] usb 1-1: SerialNumber: syz [ 38.179257][ T31] usb 1-1: config 0 descriptor?? [ 38.184518][ T647] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 38.331198][ T663] input: syz1 as /devices/virtual/input/input8 [ 38.527020][ T668] netlink: 16 bytes leftover after parsing attributes in process `syz.1.103'. [ 38.719799][ T311] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 38.794532][ T31] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 38.803206][ T31] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 38.818081][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 38.818097][ T36] audit: type=1400 audit(1785121522.229:227): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 38.849525][ T36] audit: type=1400 audit(1785121522.229:228): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.870841][ T36] audit: type=1400 audit(1785121522.229:229): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=937 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.892348][ T36] audit: type=1400 audit(1785121522.229:230): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=937 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.915129][ T36] audit: type=1400 audit(1785121522.229:231): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=937 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.938332][ T36] audit: type=1400 audit(1785121522.269:232): avc: denied { read } for pid=678 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.961312][ T36] audit: type=1400 audit(1785121522.269:233): avc: denied { open } for pid=678 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.962239][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 38.986511][ T36] audit: type=1400 audit(1785121522.269:234): avc: denied { getattr } for pid=678 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.994681][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.021450][ T36] audit: type=1400 audit(1785121522.309:235): avc: denied { write } for pid=677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.021520][ C0] ipheth 1-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 39.029208][ T311] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 39.061087][ T311] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 39.072521][ T36] audit: type=1400 audit(1785121522.309:236): avc: denied { add_name } for pid=677 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.081692][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.111665][ T311] usb 4-1: Product: syz [ 39.115905][ T311] usb 4-1: Manufacturer: 컮胋㻹䢟쯝紽觨绯ꝉ㾕떞Ꞩ陇㭕쁻ᎀ쫪 [ 39.124009][ T691] overlayfs: failed to clone upperpath [ 39.125949][ T311] usb 4-1: SerialNumber: syz [ 39.256399][ T391] usb 1-1: USB disconnect, device number 15 [ 39.286238][ T391] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 39.347894][ T311] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 39.358646][ T311] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 39.375148][ T311] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 39.385031][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 39.386625][ T311] usb 4-1: USB disconnect, device number 14 [ 39.961204][ T724] netlink: 9 bytes leftover after parsing attributes in process `syz.1.115'. [ 39.970510][ T724] gretap0: entered promiscuous mode [ 39.977255][ T724] netlink: 5 bytes leftover after parsing attributes in process `syz.1.115'. [ 39.986235][ T724] 0{X: renamed from gretap0 [ 39.993193][ T724] 0{X: left promiscuous mode [ 39.998219][ T724] 0{X: entered allmulticast mode [ 40.005295][ T724] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 40.079813][ T9] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 40.105554][ T738] netlink: 'syz.1.119': attribute type 4 has an invalid length. [ 40.127914][ T740] Zero length message leads to an empty skb [ 40.169802][ T328] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 40.229800][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 40.319891][ T328] usb 4-1: Using ep0 maxpacket: 16 [ 40.326147][ T328] usb 4-1: config index 0 descriptor too short (expected 37359, got 202) [ 40.334645][ T328] usb 4-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 40.343353][ T328] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 40.353525][ T328] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 40.362600][ T9] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 40.371416][ T328] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.380541][ T328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.388525][ T328] usb 4-1: Product: syz [ 40.392731][ T328] usb 4-1: Manufacturer: syz [ 40.397374][ T328] usb 4-1: SerialNumber: syz [ 40.519777][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 40.525230][ T9] usb usb1-port1: attempt power cycle [ 40.605425][ T328] usb 4-1: 0:2 : does not exist [ 40.612200][ T328] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 40.622879][ T328] usb 4-1: USB disconnect, device number 15 [ 40.633518][ T461] udevd[461]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:33.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 40.657746][ T744] process '/newroot/58/file0' started with executable stack [ 40.869782][ T9] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 40.890144][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 41.019786][ T9] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 41.040148][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 41.045531][ T9] usb usb1-port1: unable to enumerate USB device [ 41.182670][ T751] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.257126][ T754] cgroup: fork rejected by pids controller in /syz3 [ 42.019259][ T805] netlink: 'syz.1.130': attribute type 2 has an invalid length. [ 42.579830][ T332] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 42.594846][ T814] SELinux: Context system_u:object_r:usbmon_device_t:s0 is not valid (left unmapped). [ 42.729783][ T332] usb 4-1: Using ep0 maxpacket: 16 [ 42.736047][ T332] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.746187][ T332] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.755747][ T332] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 42.764838][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 42.772947][ T332] usb 4-1: SerialNumber: syz [ 42.779167][ T332] usb 4-1: 0:2 : does not exist [ 42.870067][ T821] netlink: 'syz.0.136': attribute type 4 has an invalid length. [ 42.877750][ T821] netlink: 17 bytes leftover after parsing attributes in process `syz.0.136'. [ 42.902216][ T821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=821 comm=syz.0.136 [ 42.915360][ T821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=821 comm=syz.0.136 [ 42.938728][ T823] SELinux: syz.0.137 (823) set checkreqprot to 1. This is no longer supported. [ 43.008427][ T834] SELinux: failed to load policy [ 43.401097][ T842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=842 comm=syz.1.142 [ 43.580088][ T850] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 43.798034][ T332] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 43.807333][ T332] usb 4-1: USB disconnect, device number 16 [ 43.859836][ T328] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 43.962970][ T860] capability: warning: `syz.1.150' uses deprecated v2 capabilities in a way that may be insecure [ 44.011826][ T328] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.022859][ T328] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.032629][ T328] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.045572][ T328] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.054624][ T328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.063169][ T328] usb 1-1: config 0 descriptor?? [ 44.498925][ T870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.154'. [ 44.517598][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 44.517628][ T36] audit: type=1400 audit(1785121527.929:268): avc: denied { mount } for pid=871 comm="syz.1.155" name="/" dev="ramfs" ino=6568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 44.599804][ T391] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 44.675909][ T36] audit: type=1400 audit(1785121528.089:269): avc: denied { read } for pid=851 comm="syz.0.146" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 44.698930][ T36] audit: type=1400 audit(1785121528.089:270): avc: denied { open } for pid=851 comm="syz.0.146" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 44.750935][ T391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.761909][ T391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.771704][ T391] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.782663][ T328] usbhid 1-1:0.0: can't add hid device: -71 [ 44.784742][ T391] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.791364][ T328] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 44.799925][ T391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.811226][ T328] usb 1-1: USB disconnect, device number 20 [ 44.818927][ T391] usb 4-1: config 0 descriptor?? [ 45.167441][ T36] audit: type=1400 audit(1785121528.579:271): avc: denied { bind } for pid=895 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.186647][ T36] audit: type=1400 audit(1785121528.599:272): avc: denied { connect } for pid=895 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.190705][ T896] netlink: 100 bytes leftover after parsing attributes in process `syz.1.160'. [ 45.549792][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 45.699772][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 45.706251][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 45.714612][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.724766][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.735109][ T9] usb 1-1: New USB device found, idVendor=1235, idProduct=8217, bcdDevice= 0.40 [ 45.744251][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.744507][ T905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=905 comm=syz.1.164 [ 45.752512][ T9] usb 1-1: Product: syz [ 45.768816][ T9] usb 1-1: Manufacturer: syz [ 45.773464][ T9] usb 1-1: SerialNumber: syz [ 45.984476][ T9] usb 1-1: 0:1 : does not exist [ 45.989656][ T9] usb 1-1: Focusrite Vocaster Mixer Driver enabled (pid=0x8217); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 46.004698][ T9] usb 1-1: Error initialising Vocaster Mixer Driver: -22 [ 46.013330][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 46.025268][ T9] usb 1-1: USB disconnect, device number 21 [ 46.034136][ T461] udevd[461]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 46.614724][ T36] audit: type=1400 audit(1785121530.029:273): avc: denied { mounton } for pid=918 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.655723][ T918] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.663620][ T918] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.670776][ T918] bridge_slave_0: entered allmulticast mode [ 46.677015][ T918] bridge_slave_0: entered promiscuous mode [ 46.683591][ T918] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.690655][ T918] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.697754][ T918] bridge_slave_1: entered allmulticast mode [ 46.704073][ T918] bridge_slave_1: entered promiscuous mode [ 46.749445][ T918] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.756618][ T918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.763963][ T918] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.771015][ T918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.792898][ T494] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.800582][ T494] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.812723][ T484] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.819816][ T484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.829338][ T494] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.836420][ T494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.860349][ T388] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 46.870098][ T918] veth0_vlan: entered promiscuous mode [ 46.882505][ T918] veth1_macvtap: entered promiscuous mode [ 46.901243][ T36] audit: type=1400 audit(1785121530.319:274): avc: denied { mounton } for pid=918 comm="syz-executor" path="/root/syzkaller.xVX5aW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 46.928765][ T36] audit: type=1400 audit(1785121530.319:275): avc: denied { unmount } for pid=918 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.039875][ T388] usb 1-1: Using ep0 maxpacket: 16 [ 47.047409][ T388] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 47.056724][ T388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.064970][ T388] usb 1-1: Product: syz [ 47.069158][ T388] usb 1-1: Manufacturer: syz [ 47.073820][ T388] usb 1-1: SerialNumber: syz [ 47.081060][ T388] r8152-cfgselector 1-1: Unknown version 0x0000 [ 47.087326][ T388] r8152-cfgselector 1-1: config 0 descriptor?? [ 47.377430][ T391] usbhid 4-1:0.0: can't add hid device: -71 [ 47.389308][ T391] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 47.401639][ T932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.403868][ T391] usb 4-1: USB disconnect, device number 17 [ 47.420437][ T36] audit: type=1400 audit(1785121530.839:276): avc: denied { checkpoint_restore } for pid=931 comm="syz.3.172" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.455915][ T36] audit: type=1400 audit(1785121530.869:277): avc: denied { search } for pid=933 comm="syz.3.173" name="/" dev="configfs" ino=2364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 47.463907][ T934] UDC core: g1: couldn't find an available UDC or it's busy [ 47.819804][ T391] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 47.969603][ T956] fuse: Bad value for 'fd' [ 47.970813][ T391] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 47.985666][ T391] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1015, setting to 64 [ 47.999570][ T391] usb 4-1: config 0 interface 0 has no altsetting 0 [ 48.007398][ T391] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 48.016832][ T391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.025653][ T391] usb 4-1: config 0 descriptor?? [ 48.030931][ T934] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 48.440204][ T391] kye 0003:0458:501A.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 48.450930][ T391] kye 0003:0458:501A.0002: unknown main item tag 0x0 [ 48.457637][ T391] kye 0003:0458:501A.0002: unknown main item tag 0x0 [ 48.464421][ T391] kye 0003:0458:501A.0002: unknown main item tag 0x0 [ 48.471150][ T391] kye 0003:0458:501A.0002: unknown main item tag 0x0 [ 48.477854][ T391] kye 0003:0458:501A.0002: unknown main item tag 0x0 [ 48.484671][ T391] kye 0003:0458:501A.0002: unknown main item tag 0x0 [ 48.491580][ T391] kye 0003:0458:501A.0002: unknown main item tag 0x0 [ 48.498276][ T391] kye 0003:0458:501A.0002: unknown main item tag 0x0 [ 48.505051][ T391] kye 0003:0458:501A.0002: unknown main item tag 0x0 [ 48.511797][ T391] kye 0003:0458:501A.0002: unknown main item tag 0x0 [ 48.518739][ T391] kye 0003:0458:501A.0002: unknown main item tag 0x0 [ 48.525901][ T391] kye 0003:0458:501A.0002: unknown main item tag 0x0 [ 48.533228][ T391] kye 0003:0458:501A.0002: unknown main item tag 0x0 [ 48.540128][ T391] kye 0003:0458:501A.0002: unknown main item tag 0x0 [ 48.547669][ T391] kye 0003:0458:501A.0002: hidraw0: USB HID v80.00 Device [HID 0458:501a] on usb-dummy_hcd.3-1/input0 [ 48.558697][ T391] kye 0003:0458:501A.0002: tablet-enabling feature report not found [ 48.567599][ T391] kye 0003:0458:501A.0002: tablet enabling failed [ 48.646441][ T9] usb 4-1: USB disconnect, device number 18 [ 49.195924][ T976] mmap: syz.3.184 (976): VmData 29192192 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 49.489793][ T9] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 49.529291][ T388] r8152-cfgselector 1-1: USB disconnect, device number 22 [ 49.641059][ T9] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 49.652696][ T9] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 49.663851][ T9] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 49.673714][ T9] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 49.682766][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.879791][ T388] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 49.894618][ T9] usb 4-1: string descriptor 0 read error: -71 [ 49.901413][ T9] hub 4-1:32.0: USB hub found [ 49.906622][ T9] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 49.930206][ T9] usb 4-1: USB disconnect, device number 19 [ 50.040854][ T388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.051825][ T388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.061589][ T388] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 50.070654][ T388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.079121][ T388] usb 1-1: config 0 descriptor?? [ 50.125199][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 50.125217][ T36] audit: type=1400 audit(1785121533.539:287): avc: denied { getopt } for pid=984 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.168136][ T990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=990 comm=syz.1.190 [ 50.414257][ T36] audit: type=1400 audit(1785121533.829:288): avc: denied { sqpoll } for pid=1004 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 50.490250][ T388] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 50.499811][ T388] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 50.506789][ T388] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 50.526298][ T388] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 50.544403][ T388] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 50.551569][ T388] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 50.558517][ T388] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 50.566251][ T388] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 50.687416][ T388] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00 [ 50.799786][ T391] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 50.871823][ T1028] input: syz1 as /devices/virtual/input/input9 [ 50.937641][ T1035] netlink: 'syz.1.202': attribute type 27 has an invalid length. [ 50.955690][ T1035] 0{X: left allmulticast mode [ 50.973867][ T391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.992942][ T391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.992974][ T1039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.202'. [ 51.003219][ T391] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 51.036846][ T391] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.057815][ T391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.067578][ T391] usb 4-1: config 0 descriptor?? [ 51.097164][ T1039] netlink: 'syz.1.202': attribute type 27 has an invalid length. [ 51.163047][ T1039] veth0_vlan: left promiscuous mode [ 51.169308][ T1039] veth0_vlan: entered promiscuous mode [ 51.176999][ T1039] veth1_macvtap: left promiscuous mode [ 51.182614][ T1042] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 51.190884][ T1039] veth1_macvtap: entered promiscuous mode [ 51.278871][ T391] usbhid 4-1:0.0: can't add hid device: -71 [ 51.285396][ T391] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 51.297329][ T391] usb 4-1: USB disconnect, device number 20 [ 51.310253][ T36] audit: type=1400 audit(1785121534.729:289): avc: denied { map } for pid=1057 comm="syz.3.204" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.370038][ T1042] usb 5-1: Invalid ep0 maxpacket: 64 [ 51.461520][ T36] audit: type=1400 audit(1785121534.879:290): avc: denied { name_bind } for pid=1061 comm="syz.3.206" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 51.482746][ T36] audit: type=1400 audit(1785121534.879:291): avc: denied { map } for pid=1061 comm="syz.3.206" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.509006][ T9] usb 1-1: USB disconnect, device number 23 [ 51.520186][ T1042] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 51.679835][ T1042] usb 5-1: Invalid ep0 maxpacket: 64 [ 51.685553][ T1042] usb usb5-port1: attempt power cycle [ 51.713049][ T1064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1064 comm=syz.3.207 [ 51.737191][ T485] Bluetooth: hci0: Frame reassembly failed (-84) [ 52.022918][ T36] audit: type=1400 audit(1785121535.439:292): avc: denied { ioctl } for pid=1072 comm="syz.0.209" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 52.029889][ T1042] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 52.067911][ T36] audit: type=1400 audit(1785121535.479:293): avc: denied { setopt } for pid=1076 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.082648][ T1042] usb 5-1: Invalid ep0 maxpacket: 64 [ 52.094294][ T36] audit: type=1400 audit(1785121535.479:294): avc: denied { bind } for pid=1076 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.116361][ T36] audit: type=1400 audit(1785121535.479:295): avc: denied { read append } for pid=1076 comm="syz.0.211" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 52.140447][ T36] audit: type=1400 audit(1785121535.479:296): avc: denied { open } for pid=1076 comm="syz.0.211" path="/dev/usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 52.219851][ T1042] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 52.241508][ T1042] usb 5-1: Invalid ep0 maxpacket: 64 [ 52.254265][ T1042] usb usb5-port1: unable to enumerate USB device [ 52.309805][ T45] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 52.480865][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.492059][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.502223][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 52.515332][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.524464][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.536635][ T45] usb 1-1: config 0 descriptor?? [ 52.907047][ T1136] 9pnet_fd: Insufficient options for proto=fd [ 52.944822][ T45] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 52.956168][ T45] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 53.350930][ T1077] wg0: entered allmulticast mode [ 53.356957][ T1047] usb 1-1: USB disconnect, device number 24 [ 53.759851][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 53.759859][ T1070] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.796176][ T1151] netlink: 'syz.3.228': attribute type 16 has an invalid length. [ 53.847208][ T1153] kvm: kvm [1152]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0xe000012d [ 53.856346][ T1153] kvm: kvm [1152]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0xe000012d [ 53.867168][ T1153] kvm: kvm [1152]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0xe000012d [ 53.878282][ T1153] kvm: kvm [1152]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0xe000012d [ 53.887412][ T1153] kvm: kvm [1152]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0xe000012d [ 53.979084][ T1170] SELinux: Context ϧ is not valid (left unmapped). [ 53.986743][ T1170] netlink: 84 bytes leftover after parsing attributes in process `syz.0.235'. [ 54.135593][ T1188] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 54.217204][ T1195] netlink: 'syz.3.242': attribute type 27 has an invalid length. [ 54.232628][ T1195] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.239868][ T1195] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.259290][ T1195] batadv_slave_1: left promiscuous mode [ 54.272990][ T1196] netlink: 'syz.3.242': attribute type 27 has an invalid length. [ 54.291320][ T1196] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.298405][ T1196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.307551][ T1196] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.314607][ T1196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.332914][ T1196] veth0_vlan: left promiscuous mode [ 54.338507][ T1196] veth0_vlan: entered promiscuous mode [ 54.344121][ T1042] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 54.351593][ T1196] veth1_macvtap: left promiscuous mode [ 54.352630][ T1196] veth1_macvtap: entered promiscuous mode [ 54.389790][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 54.492065][ T1203] fuse: Bad value for 'fd' [ 54.501247][ T1042] usb 5-1: unable to get BOS descriptor or descriptor too short [ 54.514340][ T1042] usb 5-1: not running at top speed; connect to a high speed hub [ 54.522886][ T1042] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.533150][ T1042] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.543340][ T1042] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 54.552446][ T1042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.559781][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 54.561457][ T1042] usb 5-1: Product: syz [ 54.566790][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 140, changing to 7 [ 54.569696][ T1042] usb 5-1: Manufacturer: syz [ 54.583113][ T9] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 54.585529][ T1042] usb 5-1: SerialNumber: syz [ 54.594737][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.607604][ T9] usb 1-1: Product: syz [ 54.611831][ T9] usb 1-1: Manufacturer: syz [ 54.616426][ T9] usb 1-1: SerialNumber: syz [ 54.769804][ T1047] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 54.805802][ T1042] usb 5-1: unit 3 not found! [ 54.816193][ T1042] usb 5-1: USB disconnect, device number 6 [ 54.833948][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 54.844329][ T461] udevd[461]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 54.850704][ T9] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 54.880564][ T9] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 54.901218][ T9] usb 1-1: USB disconnect, device number 25 [ 54.930880][ T1047] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 54.941986][ T1047] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 54.955006][ T1047] usb 4-1: config 0 interface 0 has no altsetting 0 [ 54.961817][ T1047] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 54.970991][ T1047] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.982869][ T1047] usb 4-1: config 0 descriptor?? [ 54.988196][ T1203] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 55.398038][ T1047] elecom 0003:056E:00FC.0005: unknown main item tag 0x5 [ 55.405425][ T1047] elecom 0003:056E:00FC.0005: unknown main item tag 0x3 [ 55.412443][ T1047] elecom 0003:056E:00FC.0005: unknown main item tag 0x5 [ 55.419525][ T1047] elecom 0003:056E:00FC.0005: item fetching failed at offset 27/40 [ 55.427632][ T1047] elecom 0003:056E:00FC.0005: probe with driver elecom failed with error -22 [ 55.569806][ T1047] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 55.601738][ T45] usb 4-1: USB disconnect, device number 21 [ 55.740921][ T1047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.751901][ T1047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.761675][ T1047] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 55.769884][ T1042] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 55.774806][ T1047] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.791391][ T1047] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.799955][ T1047] usb 5-1: config 0 descriptor?? [ 55.930846][ T1042] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 55.941953][ T1042] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.951736][ T1042] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 55.964605][ T1042] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 55.973675][ T1042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.982287][ T1042] usb 1-1: config 0 descriptor?? [ 56.150568][ T1253] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 56.161024][ T1253] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 56.170507][ T1253] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 56.183668][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 56.183682][ T36] audit: type=1400 audit(1785121539.599:314): avc: denied { mount } for pid=1252 comm="syz.3.260" name="/" dev="overlay" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.213203][ T1047] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 56.224348][ T1047] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 56.238354][ T1255] overlay: ./file1 is not a directory [ 56.254435][ T36] audit: type=1400 audit(1785121539.659:315): avc: denied { remount } for pid=1254 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.280897][ T1259] netlink: 13 bytes leftover after parsing attributes in process `syz.3.262'. [ 56.390019][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.401146][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.408847][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.419600][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.427612][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.435323][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.443045][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.450760][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.458416][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.466102][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.473824][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.481838][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.489514][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.497284][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.506159][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.513936][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.521662][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.529333][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.537271][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.539799][ T1047] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 56.544968][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.560339][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.567981][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.575654][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.583579][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.591676][ T36] audit: type=1326 audit(1785121540.009:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1208 comm="syz.4.247" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d6ef9de99 code=0x0 [ 56.591799][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.624681][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.632394][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.641265][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.648946][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.656824][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.664763][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.672491][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.680225][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.688103][ T1042] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 56.689800][ T1047] usb 4-1: device descriptor read/64, error -71 [ 56.696871][ T1042] hid-multitouch 0003:0457:07DA.0007: hidraw1: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 56.717368][ T1042] usb 1-1: USB disconnect, device number 26 [ 56.730992][ T1266] fido_id[1266]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 56.939795][ T1047] usb 4-1: device descriptor read/64, error -71 [ 57.157835][ T36] audit: type=1400 audit(1785121540.569:317): avc: denied { write } for pid=1270 comm="syz.0.265" name="/" dev="incremental-fs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.180514][ T1047] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 57.185432][ T36] audit: type=1400 audit(1785121540.569:318): avc: denied { add_name } for pid=1270 comm="syz.0.265" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.209179][ T36] audit: type=1400 audit(1785121540.569:319): avc: denied { create } for pid=1270 comm="syz.0.265" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.234473][ T36] audit: type=1400 audit(1785121540.569:320): avc: denied { associate } for pid=1270 comm="syz.0.265" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 57.257240][ T1278] netlink: 'syz.1.267': attribute type 32 has an invalid length. [ 57.266284][ T36] audit: type=1400 audit(1785121540.679:321): avc: denied { bind } for pid=1277 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.329796][ T1047] usb 4-1: device descriptor read/64, error -71 [ 57.419806][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 57.530166][ T1209] usb 5-1: string descriptor 0 read error: -71 [ 57.549803][ T9] usb 1-1: device descriptor read/64, error -71 [ 57.569820][ T1047] usb 4-1: device descriptor read/64, error -71 [ 57.659819][ T332] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 57.679918][ T1047] usb usb4-port1: attempt power cycle [ 57.789822][ T332] usb 5-1: device descriptor read/64, error -32 [ 57.796133][ T9] usb 1-1: device descriptor read/64, error -71 [ 58.019792][ T1047] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 58.029888][ T332] usb 5-1: device descriptor read/64, error -32 [ 58.039909][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 58.048410][ T1047] usb 4-1: device descriptor read/8, error -71 [ 58.179825][ T9] usb 1-1: device descriptor read/64, error -71 [ 58.186995][ T1047] usb 4-1: device descriptor read/8, error -71 [ 58.269794][ T332] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 58.409791][ T332] usb 5-1: device descriptor read/64, error -32 [ 58.420207][ T9] usb 1-1: device descriptor read/64, error -71 [ 58.429811][ T1047] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 58.456288][ T1290] netlink: 'syz.1.271': attribute type 27 has an invalid length. [ 58.460837][ T1047] usb 4-1: device descriptor read/8, error -71 [ 58.530208][ T9] usb usb1-port1: attempt power cycle [ 58.601933][ T1047] usb 4-1: device descriptor read/8, error -71 [ 58.619089][ T36] audit: type=1400 audit(1785121542.029:322): avc: denied { execute } for pid=1291 comm="syz.4.272" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 58.652375][ T332] usb 5-1: device descriptor read/64, error -32 [ 58.688557][ T1292] syzkaller1: entered promiscuous mode [ 58.694084][ T1292] syzkaller1: entered allmulticast mode [ 58.709983][ T1047] usb usb4-port1: unable to enumerate USB device [ 58.814050][ T1294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.273'. [ 58.869814][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 58.890810][ T9] usb 1-1: device descriptor read/8, error -71 [ 59.020774][ T9] usb 1-1: device descriptor read/8, error -71 [ 59.099859][ T332] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 59.120372][ T332] usb 5-1: device reset changed ep0 maxpacket size! [ 59.127168][ T65] usb 5-1: USB disconnect, device number 7 [ 59.259841][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 59.267490][ T65] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 59.286405][ T36] audit: type=1400 audit(1785121542.699:323): avc: denied { getopt } for pid=1295 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.290802][ T9] usb 1-1: device descriptor read/8, error -71 [ 59.419803][ T65] usb 5-1: Using ep0 maxpacket: 16 [ 59.426802][ T65] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.439412][ T65] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 59.448906][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.457306][ T65] usb 5-1: Product: syz [ 59.462133][ T65] usb 5-1: Manufacturer: syz [ 59.466837][ T9] usb 1-1: device descriptor read/8, error -71 [ 59.473456][ T65] usb 5-1: SerialNumber: syz [ 59.480011][ T65] usb 5-1: config 0 descriptor?? [ 59.589919][ T9] usb usb1-port1: unable to enumerate USB device [ 59.690440][ T65] usb 5-1: USB disconnect, device number 8 [ 60.183915][ T1307] binder: Bad value for 'max' [ 60.212960][ T1311] netlink: 180 bytes leftover after parsing attributes in process `syz.4.279'. [ 60.227113][ T1311] rust_binder: 1310:1311 transaction to 0 failed: ENOENT [ 60.569787][ T65] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 60.730944][ T65] usb 1-1: No LPM exit latency info found, disabling LPM. [ 60.740917][ T65] usb 1-1: string descriptor 0 read error: -22 [ 60.747171][ T65] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 60.756363][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.766163][ T65] usb 1-1: MIDIStreaming interface descriptor not found [ 60.966074][ T1309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.974629][ T1309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.984068][ T388] usb 1-1: USB disconnect, device number 31 [ 61.309789][ T1042] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 61.329793][ T45] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 61.460773][ T1042] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.471776][ T1042] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.481600][ T1042] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.494756][ T1042] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.501502][ T1330] syz.0.287 (1330): attempted to duplicate a private mapping with mremap. This is not supported. [ 61.504114][ T1042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.523209][ T45] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 61.534950][ T1042] usb 4-1: config 0 descriptor?? [ 61.539667][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 61.539684][ T36] audit: type=1400 audit(1785121544.959:330): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.560475][ T45] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 61.578372][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.586453][ T45] usb 5-1: Product: syz [ 61.590650][ T45] usb 5-1: Manufacturer: syz [ 61.595244][ T45] usb 5-1: SerialNumber: syz [ 61.806938][ T45] usb 5-1: Can't get UAC3 power state for id 10 [ 61.813835][ T45] usb 5-1: BAAD HEADPHONE p_chmask mismatch [ 61.821953][ T45] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 61.832835][ T45] usb 5-1: USB disconnect, device number 9 [ 61.841119][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 61.943766][ T1042] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 61.954562][ T1042] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 61.962267][ T1042] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 61.969705][ T1042] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 61.977287][ T1042] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 61.984869][ T1042] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 61.992510][ T1042] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 61.999992][ T1042] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 62.007408][ T1042] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 62.015012][ T1042] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 62.022509][ T1042] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 62.029934][ T1042] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 62.037326][ T1042] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 62.044741][ T1042] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 62.052287][ T1042] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 62.060937][ T1042] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 62.150485][ T36] audit: type=1400 audit(1785121545.569:331): avc: denied { append } for pid=1319 comm="syz.3.282" name="hiddev0" dev="devtmpfs" ino=582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 62.261766][ T36] audit: type=1400 audit(1785121545.679:332): avc: denied { mount } for pid=1319 comm="syz.3.282" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 62.262292][ T1349] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 62.284096][ T36] audit: type=1400 audit(1785121545.679:333): avc: denied { mounton } for pid=1319 comm="syz.3.282" path="/62/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 62.314263][ T36] audit: type=1400 audit(1785121545.709:334): avc: denied { write } for pid=1319 comm="syz.3.282" name="functions" dev="configfs" ino=3433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.342865][ T36] audit: type=1400 audit(1785121545.709:335): avc: denied { add_name } for pid=1319 comm="syz.3.282" name="SourceSink.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.363990][ T36] audit: type=1400 audit(1785121545.709:336): avc: denied { remove_name } for pid=1319 comm="syz.3.282" name="SourceSink.0" dev="configfs" ino=8857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.387413][ T36] audit: type=1400 audit(1785121545.709:337): avc: denied { rmdir } for pid=1319 comm="syz.3.282" name="SourceSink.0" dev="configfs" ino=8857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.387469][ T1042] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 62.410325][ T36] audit: type=1400 audit(1785121545.769:338): avc: denied { create } for pid=1350 comm="syz.4.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 62.589787][ T1042] usb 1-1: Using ep0 maxpacket: 16 [ 62.597133][ T1042] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 62.606327][ T1042] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.614373][ T1042] usb 1-1: Product: syz [ 62.618560][ T1042] usb 1-1: Manufacturer: syz [ 62.623195][ T1042] usb 1-1: SerialNumber: syz [ 62.834298][ T1042] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 62.844229][ T1042] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 62.856605][ T1042] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 62.868248][ T1042] usb 1-1: USB disconnect, device number 32 [ 62.880170][ T461] udevd[461]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 62.939813][ T65] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 63.089770][ T65] usb 5-1: Using ep0 maxpacket: 16 [ 63.097336][ T65] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 63.106470][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.114496][ T65] usb 5-1: Product: syz [ 63.118669][ T65] usb 5-1: Manufacturer: syz [ 63.123299][ T65] usb 5-1: SerialNumber: syz [ 63.128571][ T65] usb 5-1: config 0 descriptor?? [ 63.134527][ T65] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 63.142366][ T65] usb 5-1: Detected FT-X [ 63.334678][ T1358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.343270][ T1358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.356255][ T65] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 63.365153][ T65] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 63.372389][ T65] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 63.382607][ T65] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 63.393240][ T65] usb 5-1: USB disconnect, device number 10 [ 63.400354][ T65] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 63.410349][ T65] ftdi_sio 5-1:0.0: device disconnected [ 63.449463][ T1370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.301'. [ 63.522217][ T1371] overlayfs: failed to resolve './bus': -2 [ 63.762438][ T36] audit: type=1400 audit(1785121547.179:339): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 63.973418][ T1394] netlink: 'syz.1.309': attribute type 27 has an invalid length. [ 64.052308][ T1395] netlink: 'syz.1.309': attribute type 27 has an invalid length. [ 64.098872][ T1395] veth0_vlan: left promiscuous mode [ 64.099802][ T391] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 64.104512][ T1395] veth0_vlan: entered promiscuous mode [ 64.119003][ T1395] veth1_macvtap: left promiscuous mode [ 64.125626][ T1395] veth1_macvtap: entered promiscuous mode [ 64.259789][ T391] usb 5-1: device descriptor read/64, error -71 [ 64.299785][ T1042] usb 4-1: reset high-speed USB device number 26 using dummy_hcd [ 64.307892][ T1042] usb 4-1: device reset changed ep0 maxpacket size! [ 64.315096][ T332] usb 4-1: USB disconnect, device number 26 [ 64.449811][ T332] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 64.510250][ T391] usb 5-1: device descriptor read/64, error -71 [ 64.599816][ T332] usb 4-1: Using ep0 maxpacket: 16 [ 64.608752][ T332] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.621507][ T332] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.633511][ T332] usb 4-1: config 0 interface 0 has no altsetting 0 [ 64.641583][ T332] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 64.659844][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.668996][ T332] usb 4-1: config 0 descriptor?? [ 64.759802][ T391] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 64.889921][ T391] usb 5-1: device descriptor read/64, error -71 [ 65.099801][ T1042] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 65.129830][ T391] usb 5-1: device descriptor read/64, error -71 [ 65.199333][ T1435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 65.240562][ T391] usb usb5-port1: attempt power cycle [ 65.247072][ T1441] /dev/sr0: Can't lookup blockdev [ 65.250851][ T1042] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.262295][ T1042] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.272473][ T1042] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 65.281828][ T1042] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.289932][ T1042] usb 1-1: Product: syz [ 65.294106][ T1042] usb 1-1: Manufacturer: syz [ 65.298716][ T1042] usb 1-1: SerialNumber: syz [ 65.511000][ T1042] usb 1-1: 0:1 : does not exist [ 65.515887][ T1042] usb 1-1: BAAD SPEAKER p_chmask mismatch [ 65.523509][ T1042] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 65.534785][ T1042] usb 1-1: USB disconnect, device number 33 [ 65.543641][ T461] udevd[461]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 65.579834][ T391] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 65.601040][ T391] usb 5-1: device descriptor read/8, error -71 [ 65.731101][ T391] usb 5-1: device descriptor read/8, error -71 [ 65.804689][ T332] usbhid 4-1:0.0: can't add hid device: -71 [ 65.816465][ T332] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 65.825507][ T332] usb 4-1: USB disconnect, device number 27 [ 65.969903][ T391] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 66.000974][ T391] usb 5-1: device descriptor read/8, error -71 [ 66.119832][ T332] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 66.130930][ T391] usb 5-1: device descriptor read/8, error -71 [ 66.240117][ T391] usb usb5-port1: unable to enumerate USB device [ 66.259795][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 66.279775][ T332] usb 4-1: Using ep0 maxpacket: 32 [ 66.291248][ T332] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 66.299432][ T332] usb 4-1: config 0 has no interface number 0 [ 66.305954][ T332] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 66.318394][ T332] usb 4-1: config 0 interface 196 has no altsetting 0 [ 66.320448][ T1461] overlayfs: failed to clone upperpath [ 66.326997][ T332] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 66.340828][ T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.341373][ T1461] overlayfs: failed to clone upperpath [ 66.348833][ T332] usb 4-1: Product: syz [ 66.358552][ T332] usb 4-1: Manufacturer: syz [ 66.363217][ T332] usb 4-1: SerialNumber: syz [ 66.370865][ T332] usb 4-1: config 0 descriptor?? [ 66.376128][ T1452] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 66.386829][ T1466] overlayfs: failed to clone upperpath [ 66.420865][ T9] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 66.432731][ T9] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.440214][ T1474] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.332'. [ 66.445672][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 66.461686][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=2193, bcdDevice= 0.00 [ 66.470802][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.481955][ T9] usb 1-1: config 0 descriptor?? [ 66.997081][ T1454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.006479][ T1454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.042528][ T1483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.051684][ T1483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.061493][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 67.067562][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 67.069879][ T1483] netlink: 'syz.3.325': attribute type 6 has an invalid length. [ 67.077526][ T9] usb 1-1: USB disconnect, device number 34 [ 67.289793][ T391] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 67.289878][ T332] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 67.306074][ T332] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 67.439773][ T391] usb 5-1: Using ep0 maxpacket: 32 [ 67.446187][ T391] usb 5-1: unable to get BOS descriptor or descriptor too short [ 67.455964][ T391] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 67.465213][ T391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.473336][ T391] usb 5-1: Product: syz [ 67.477542][ T391] usb 5-1: Manufacturer: syz [ 67.482150][ T391] usb 5-1: SerialNumber: syz [ 67.678268][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 67.678284][ T36] audit: type=1400 audit(1785121551.089:347): avc: denied { mounton } for pid=1502 comm="syz.0.338" path="/70/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 67.694123][ T391] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 67.707854][ T36] audit: type=1400 audit(1785121551.089:348): avc: denied { remount } for pid=1502 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.721139][ T391] usb 5-1: 2:1 : no UAC_FORMAT_TYPE desc [ 67.743878][ T391] usb 5-1: USB disconnect, device number 15 [ 67.754360][ T461] udevd[461]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 68.089829][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 68.111253][ T36] audit: type=1400 audit(1785121551.529:349): avc: denied { getopt } for pid=1523 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.249788][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 68.256459][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 68.266294][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0047, bcdDevice= 0.40 [ 68.275393][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.283416][ T9] usb 1-1: Product: syz [ 68.287583][ T9] usb 1-1: Manufacturer: 쇹ᢤ珊ᄢ彷⿲愞앧ᙖ᫃꾈靆ଢ鑓㎠濃䎔뱟櫩Ꮳᭃ㼙猜ᩴ젨쥉캨傅 [ 68.300030][ T9] usb 1-1: SerialNumber: syz [ 68.333952][ T36] audit: type=1400 audit(1785121551.749:350): avc: denied { call } for pid=1530 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 68.353709][ T36] audit: type=1400 audit(1785121551.749:351): avc: denied { transfer } for pid=1530 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 68.406725][ T36] audit: type=1400 audit(1785121551.819:352): avc: denied { append } for pid=1535 comm="syz.4.349" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.436185][ T36] audit: type=1400 audit(1785121551.819:353): avc: denied { open } for pid=1535 comm="syz.4.349" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.511811][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 68.518944][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 68.534230][ T9] usb 1-1: USB disconnect, device number 35 [ 68.553426][ T461] udevd[461]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 68.558687][ T1543] overlay: filesystem on ./bus not supported as upperdir [ 68.691386][ T1548] 9pnet_fd: Insufficient options for proto=fd [ 68.788837][ T1552] netlink: 'syz.1.355': attribute type 6 has an invalid length. [ 68.797872][ T36] audit: type=1400 audit(1785121552.219:354): avc: denied { map } for pid=1551 comm="syz.1.355" path="socket:[9823]" dev="sockfs" ino=9823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 68.825482][ T9] usb 4-1: USB disconnect, device number 28 [ 68.859843][ T1047] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 68.882114][ T9] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 69.021096][ T1047] usb 5-1: unable to get BOS descriptor or descriptor too short [ 69.037713][ T1047] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.048121][ T1047] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.058495][ T1047] usb 5-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 69.068031][ T1047] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.076146][ T1047] usb 5-1: Product: syz [ 69.080372][ T1047] usb 5-1: Manufacturer: syz [ 69.084974][ T1047] usb 5-1: SerialNumber: syz [ 69.189789][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 69.211863][ T1577] tmpfs: Unknown parameter 'nr_kN{4' [ 69.296109][ T1047] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 69.311423][ T1047] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 69.320575][ T1047] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 69.332067][ T1047] usb 5-1: USB disconnect, device number 16 [ 69.337997][ T461] udevd[461]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 69.339821][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 69.361024][ T9] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 69.369273][ T9] usb 4-1: config 0 has no interface number 0 [ 69.376867][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 69.386275][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.394383][ T9] usb 4-1: Product: syz [ 69.398601][ T9] usb 4-1: Manufacturer: syz [ 69.403251][ T9] usb 4-1: SerialNumber: syz [ 69.408387][ T9] usb 4-1: config 0 descriptor?? [ 69.479791][ T391] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 69.609804][ T391] usb 1-1: device descriptor read/64, error -71 [ 69.616931][ T9] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 69.623643][ T9] usb 4-1: No valid video chain found. [ 69.630856][ T9] usb 4-1: USB disconnect, device number 29 [ 69.693953][ T36] audit: type=1400 audit(1785121553.109:355): avc: denied { create } for pid=1580 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.728405][ T36] audit: type=1400 audit(1785121553.139:356): avc: denied { name_bind } for pid=1585 comm="syz.1.362" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 69.849800][ T391] usb 1-1: device descriptor read/64, error -71 [ 69.869494][ T1591] mmap: syz.4.363 (1591) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 70.089783][ T391] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 70.240000][ T391] usb 1-1: device descriptor read/64, error -71 [ 70.306939][ T1602] netlink: 'syz.1.366': attribute type 27 has an invalid length. [ 70.449814][ T1047] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 70.489836][ T391] usb 1-1: device descriptor read/64, error -71 [ 70.609938][ T391] usb usb1-port1: attempt power cycle [ 70.619785][ T1047] usb 4-1: Using ep0 maxpacket: 32 [ 70.630308][ T1047] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 70.649208][ T1047] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 70.659300][ T1047] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.682218][ T1604] loop7: detected capacity change from 0 to 16384 [ 70.689092][ T1047] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 70.709822][ T1047] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.710724][ T1604] loop7: detected capacity change from 16384 to 16383 [ 70.719502][ T1047] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 70.719548][ T1047] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 70.749175][ T1047] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.758178][ T1047] usb 4-1: config 0 descriptor?? [ 70.972947][ T1609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.980970][ T391] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 70.981992][ T1608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.998517][ T1609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.007313][ T1608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.016074][ T391] usb 1-1: device descriptor read/8, error -71 [ 71.025112][ T332] usb 4-1: USB disconnect, device number 30 [ 71.039842][ T1047] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 71.160760][ T391] usb 1-1: device descriptor read/8, error -71 [ 71.201101][ T1047] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 71.209145][ T1047] usb 5-1: config 0 has no interface number 0 [ 71.215648][ T1047] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.226852][ T1047] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.236965][ T1047] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 71.246208][ T1047] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.258213][ T1047] usb 5-1: config 0 descriptor?? [ 71.409794][ T391] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 71.440883][ T391] usb 1-1: device descriptor read/8, error -71 [ 71.572749][ T391] usb 1-1: device descriptor read/8, error -71 [ 71.689826][ T391] usb usb1-port1: unable to enumerate USB device [ 72.243024][ T1630] overlayfs: failed to clone upperpath [ 72.716300][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 72.716317][ T36] audit: type=1400 audit(1785124134.126:364): avc: denied { write } for pid=1664 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.741896][ T36] audit: type=1400 audit(1785124134.126:365): avc: denied { mounton } for pid=1664 comm="syz.1.384" path="/187/file0" dev="tmpfs" ino=1055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.920134][ T36] audit: type=1400 audit(1785124134.336:366): avc: denied { relabelfrom } for pid=1667 comm="syz.3.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 72.940515][ T36] audit: type=1400 audit(1785124134.336:367): avc: denied { relabelto } for pid=1667 comm="syz.3.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 73.822063][ T1047] usbhid 5-1:0.1: can't add hid device: -71 [ 73.828041][ T1047] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 73.838894][ T1047] usb 5-1: USB disconnect, device number 17 [ 83.421413][ T36] audit: type=1400 audit(1785124144.836:368): avc: denied { watch } for pid=1681 comm="syz.3.390" path="/79/file1" dev="tmpfs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.669786][ T1046] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 83.719796][ T1047] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 83.819791][ T1046] usb 5-1: device descriptor read/64, error -71 [ 83.870923][ T1047] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 83.882132][ T1047] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 83.893377][ T1047] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 83.906207][ T1047] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.915628][ T1047] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.924463][ T1047] usb 4-1: Product: syz [ 83.928817][ T1047] usb 4-1: Manufacturer: syz [ 83.936390][ T1047] usb 4-1: SerialNumber: syz [ 83.959133][ T1689] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 84.059818][ T1046] usb 5-1: device descriptor read/64, error -71 [ 84.167947][ T1689] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 84.299835][ T1046] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 84.429789][ T1046] usb 5-1: device descriptor read/64, error -71 [ 84.499785][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 84.612879][ T36] audit: type=1400 audit(1785124146.026:369): avc: denied { execute } for pid=1737 comm="syz.1.398" name="file0" dev="tmpfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.635427][ T36] audit: type=1400 audit(1785124146.026:370): avc: denied { execute_no_trans } for pid=1737 comm="syz.1.398" path="/193/file0" dev="tmpfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.658978][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 84.660005][ T9] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 84.672601][ T9] usb 1-1: config 0 has no interface number 0 [ 84.678737][ T9] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.679810][ T1046] usb 5-1: device descriptor read/64, error -71 [ 84.689829][ T9] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.697569][ T1742] overlayfs: failed to resolve './file1': -2 [ 84.706444][ T9] usb 1-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.728361][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 84.737912][ T9] usb 1-1: New USB device strings: Mfr=20, Product=0, SerialNumber=0 [ 84.746053][ T9] usb 1-1: Manufacturer: syz [ 84.751275][ T9] usb 1-1: config 0 descriptor?? [ 84.777690][ T1689] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 84.819911][ T1046] usb usb5-port1: attempt power cycle [ 84.963231][ T9] usbhid 1-1:0.16: can't add hid device: -71 [ 84.969883][ T9] usbhid 1-1:0.16: probe with driver usbhid failed with error -71 [ 84.981016][ T9] usb 1-1: USB disconnect, device number 40 [ 84.987323][ T1047] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 84.994877][ T1047] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 85.002330][ T1047] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 85.159781][ T1046] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 85.180759][ T1046] usb 5-1: device descriptor read/8, error -71 [ 85.190077][ T1047] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 85.202918][ T1047] usb 4-1: USB disconnect, device number 31 [ 85.210093][ T1047] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 85.310841][ T1046] usb 5-1: device descriptor read/8, error -71 [ 85.393409][ T1783] netlink: 'syz.1.403': attribute type 46 has an invalid length. [ 85.559831][ T1046] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 85.580785][ T1046] usb 5-1: device descriptor read/8, error -71 [ 85.710950][ T1046] usb 5-1: device descriptor read/8, error -71 [ 85.718806][ T36] audit: type=1400 audit(1785124147.126:371): avc: denied { write } for pid=1791 comm="syz.3.406" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.820027][ T1046] usb usb5-port1: unable to enumerate USB device [ 85.856953][ T1799] netlink: 'syz.0.409': attribute type 63 has an invalid length. [ 85.864850][ T1799] netlink: 5 bytes leftover after parsing attributes in process `syz.0.409'. [ 85.873681][ T1799] gretap0: entered allmulticast mode [ 85.879028][ T1799] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 85.956276][ T1806] netlink: 'syz.1.411': attribute type 9 has an invalid length. [ 85.989800][ T1396] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 86.158731][ T1396] usb 4-1: unable to get BOS descriptor or descriptor too short [ 86.180428][ T1396] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 86.189137][ T1396] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 86.199508][ T1396] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 86.210166][ T1396] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice=98.40 [ 86.219305][ T1396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.229775][ T1396] usb 4-1: Product: syz [ 86.234039][ T1396] usb 4-1: Manufacturer: syz [ 86.238659][ T1396] usb 4-1: SerialNumber: syz [ 86.388375][ T36] audit: type=1400 audit(1785124147.796:372): avc: denied { mount } for pid=1832 comm="syz.1.416" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.449881][ T1396] usb 4-1: USB disconnect, device number 32 [ 86.537256][ T1839] 9pnet_fd: p9_fd_create_tcp (1839): problem connecting socket to 127.0.0.1 [ 86.772436][ T36] audit: type=1400 audit(1785124148.186:373): avc: denied { read } for pid=1853 comm="syz.4.424" name="bMatrixCoefficients" dev="configfs" ino=11643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 86.789797][ T1047] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 86.796179][ T36] audit: type=1400 audit(1785124148.196:374): avc: denied { accept } for pid=1853 comm="syz.4.424" laddr=fe80::13 lport=60 faddr=fe80::9 fport=259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.893128][ T1858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.426'. [ 86.918029][ T1861] capability: warning: `syz.4.427' uses 32-bit capabilities (legacy support in use) [ 86.949775][ T1047] usb 1-1: Using ep0 maxpacket: 16 [ 86.959939][ T1047] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 86.976343][ T1867] syz.3.429 uses obsolete (PF_INET,SOCK_PACKET) [ 86.982650][ T1047] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.991562][ T1047] usb 1-1: config 0 descriptor?? [ 86.998157][ T1047] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 87.247101][ T328] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 87.400778][ T328] usb 5-1: config 0 interface 0 altsetting 126 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.419768][ T328] usb 5-1: config 0 interface 0 altsetting 126 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.430111][ T328] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.436781][ T328] usb 5-1: New USB device found, idVendor=056a, idProduct=0716, bcdDevice= 0.00 [ 87.446105][ T328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.455061][ T328] usb 5-1: config 0 descriptor?? [ 87.670473][ T1884] netlink: 'syz.1.434': attribute type 16 has an invalid length. [ 87.678264][ T1884] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.434'. [ 87.689257][ T1884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1884 comm=syz.1.434 [ 87.864962][ T328] wacom 0003:056A:0716.0009: unknown main item tag 0x1 [ 87.871993][ T328] wacom 0003:056A:0716.0009: unknown main item tag 0x5 [ 87.878897][ T328] wacom 0003:056A:0716.0009: unknown main item tag 0x6 [ 87.885900][ T328] wacom 0003:056A:0716.0009: unknown main item tag 0x0 [ 87.892830][ T328] wacom 0003:056A:0716.0009: unbalanced collection at end of report description [ 87.902103][ T328] wacom 0003:056A:0716.0009: parse failed [ 87.907990][ T328] wacom 0003:056A:0716.0009: probe with driver wacom failed with error -22 [ 87.909790][ T1396] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 88.049804][ T1396] usb 4-1: device descriptor read/64, error -71 [ 88.289843][ T1396] usb 4-1: device descriptor read/64, error -71 [ 88.529824][ T1396] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 88.659791][ T1396] usb 4-1: device descriptor read/64, error -71 [ 88.762411][ T36] audit: type=1400 audit(1785124150.176:375): avc: denied { create } for pid=1895 comm="syz.1.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 88.909787][ T1396] usb 4-1: device descriptor read/64, error -71 [ 89.019955][ T1396] usb usb4-port1: attempt power cycle [ 89.369794][ T1396] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 89.400796][ T1396] usb 4-1: device descriptor read/8, error -71 [ 89.530846][ T1396] usb 4-1: device descriptor read/8, error -71 [ 89.561487][ T1047] usb 1-1: Detected FT232A [ 89.566538][ T1047] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 89.576681][ T1047] usb 1-1: USB disconnect, device number 41 [ 89.583768][ T1047] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 89.593450][ T1047] ftdi_sio 1-1:0.0: device disconnected [ 89.769813][ T1396] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 89.790796][ T1396] usb 4-1: device descriptor read/8, error -71 [ 89.930818][ T1396] usb 4-1: device descriptor read/8, error -71 [ 89.983512][ T1046] usb 5-1: USB disconnect, device number 22 [ 90.021592][ T1913] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.039962][ T1396] usb usb4-port1: unable to enumerate USB device [ 90.085686][ T1916] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=1916 comm=syz.0.444 [ 90.123650][ T1923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.446'. [ 90.133255][ T1923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.446'. [ 90.329822][ T1396] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 90.449824][ T1046] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 90.479789][ T1396] usb 1-1: Using ep0 maxpacket: 32 [ 90.485985][ T1396] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 90.494268][ T1396] usb 1-1: config 0 has no interface number 0 [ 90.500385][ T1396] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 90.511376][ T1396] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 90.522563][ T1396] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 90.531641][ T1396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.539623][ T1396] usb 1-1: Product: syz [ 90.543832][ T1396] usb 1-1: Manufacturer: syz [ 90.548422][ T1396] usb 1-1: SerialNumber: syz [ 90.553594][ T1396] usb 1-1: config 0 descriptor?? [ 90.600802][ T1046] usb 5-1: config 0 has an invalid interface number: 15 but max is 0 [ 90.608926][ T1046] usb 5-1: config 0 has no interface number 0 [ 90.615048][ T1046] usb 5-1: config 0 interface 15 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 90.626105][ T1046] usb 5-1: config 0 interface 15 altsetting 8 endpoint 0x81 has invalid maxpacket 247, setting to 64 [ 90.636982][ T1046] usb 5-1: config 0 interface 15 has no altsetting 0 [ 90.643710][ T1046] usb 5-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 90.652770][ T1046] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.661319][ T1046] usb 5-1: config 0 descriptor?? [ 90.666550][ T1926] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 90.677265][ T1046] usbhid 5-1:0.15: fixing wrong optional hid class descriptors count [ 90.839925][ T1916] input: syz1 as /devices/virtual/input/input11 [ 90.875821][ T1046] kye 0003:0458:501B.000A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 90.887196][ T1046] kye 0003:0458:501B.000A: unknown main item tag 0x3 [ 90.894173][ T1046] kye 0003:0458:501B.000A: item 0 0 0 8 parsing failed [ 90.901489][ T1046] kye 0003:0458:501B.000A: parse failed [ 90.907190][ T1046] kye 0003:0458:501B.000A: probe with driver kye failed with error -22 [ 90.916438][ T1396] usb 1-1: USB disconnect, device number 42 [ 91.089817][ T391] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 91.240807][ T391] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 91.251933][ T391] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 91.261070][ T391] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.269060][ T391] usb 4-1: Product: syz [ 91.273302][ T391] usb 4-1: Manufacturer: syz [ 91.277892][ T391] usb 4-1: SerialNumber: syz [ 91.452909][ T1936] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 91.463165][ T36] audit: type=1400 audit(1785124152.876:376): avc: denied { relabelto } for pid=1935 comm="syz.0.451" name="file0" dev="tmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 91.490345][ T391] usb 4-1: MIDIStreaming interface descriptor not found [ 91.491102][ T36] audit: type=1400 audit(1785124152.876:377): avc: denied { associate } for pid=1935 comm="syz.0.451" name="file0" dev="tmpfs" ino=526 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 91.505970][ T391] usb 4-1: too many endpoints [ 91.526765][ T36] audit: type=1400 audit(1785124152.886:378): avc: denied { unlink } for pid=295 comm="syz-executor" name="file0" dev="tmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 91.559402][ T391] usb 4-1: USB disconnect, device number 37 [ 91.569063][ T1939] udevd[1939]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 91.729789][ T1046] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 91.879783][ T1046] usb 1-1: Using ep0 maxpacket: 8 [ 91.886128][ T1046] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.894587][ T1046] usb 1-1: config 1 has an invalid interface number: 6 but max is 0 [ 91.902639][ T1046] usb 1-1: config 1 has no interface number 0 [ 91.908780][ T1046] usb 1-1: config 1 interface 6 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 91.919604][ T1046] usb 1-1: config 1 interface 6 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 91.931198][ T1046] usb 1-1: config 1 interface 6 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 1024 [ 91.942454][ T1046] usb 1-1: config 1 interface 6 altsetting 15 bulk endpoint 0x81 has invalid maxpacket 1024 [ 91.952545][ T1046] usb 1-1: config 1 interface 6 altsetting 15 bulk endpoint 0x3 has invalid maxpacket 8 [ 91.962283][ T1046] usb 1-1: config 1 interface 6 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.975244][ T1046] usb 1-1: config 1 interface 6 has no altsetting 0 [ 91.983785][ T1046] usb 1-1: string descriptor 0 read error: -22 [ 91.990019][ T1046] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 91.999033][ T1046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.009902][ T1938] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.017735][ T1938] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.025465][ T1046] ums-karma 1-1:1.6: USB Mass Storage device detected [ 92.070312][ T1046] ums-karma 1-1:1.6: probe with driver ums-karma failed with error -5 [ 92.239859][ T1046] usb 1-1: USB disconnect, device number 43 [ 92.279841][ T391] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 92.429830][ T391] usb 4-1: Using ep0 maxpacket: 16 [ 92.436463][ T391] usb 4-1: unable to get BOS descriptor or descriptor too short [ 92.444828][ T391] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 92.455477][ T391] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 92.466200][ T391] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1023 [ 92.477712][ T391] usb 4-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice= 0.40 [ 92.486807][ T391] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.494836][ T391] usb 4-1: Product: 鍊᭽﷼ﲳ泡㓐嬔杤껁ꋧ丗ѹ䬬洙狮烘槫﹥륐⎳渶폖閟椙੥绗訋䩔䱂䟅웝甓沛ℝ뫷敺㚼ឱ蕸뎳ӄぇ넆蹍糞鍄ব㿒㚆뙢⧡뤮醇愫鲦쫁ꢌ҄檌࿢틞㰘妊曧꿁溁␤㷎眺⣪㢢卨頙⊢㹓咻騢쇵탈矡큎쾣맸맧봈ᯈᝄ䪳㵠䏒구ຑ执 [ 92.524576][ T391] usb 4-1: Manufacturer: у [ 92.529083][ T391] usb 4-1: SerialNumber: syz [ 92.535645][ T1943] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 92.542988][ T1943] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 92.753177][ T391] usb 4-1: MIDIStreaming interface descriptor not found [ 92.762611][ T391] usb 4-1: USB disconnect, device number 38 [ 92.775271][ T1939] udevd[1939]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 92.808891][ T36] audit: type=1400 audit(1785124154.216:379): avc: denied { create } for pid=1944 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 92.828338][ T36] audit: type=1400 audit(1785124154.226:380): avc: denied { read } for pid=1944 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.897543][ T36] audit: type=1400 audit(1785124154.306:381): avc: denied { watch watch_reads } for pid=1950 comm="syz.0.456" path="/95/file0" dev="tmpfs" ino=548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.139832][ T1396] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 93.158524][ T9] usb 5-1: USB disconnect, device number 23 [ 93.262354][ T36] audit: type=1326 audit(1785124154.676:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.3.458" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f538439de99 code=0x0 [ 93.300865][ T1396] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 93.310575][ T1396] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 93.313815][ T36] audit: type=1326 audit(1785124154.736:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.3.458" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538439de99 code=0x7ffc0000 [ 93.324428][ T1396] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.358237][ T1396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 93.361985][ T36] audit: type=1326 audit(1785124154.736:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.3.458" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538439de99 code=0x7ffc0000 [ 93.368172][ T1396] usb 1-1: SerialNumber: syz [ 93.398554][ T1951] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 93.523512][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 93.535483][ T1971] netlink: 'syz.1.462': attribute type 16 has an invalid length. [ 93.543372][ T1971] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.462'. [ 93.610956][ T1396] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 93.625310][ T1396] usb 1-1: USB disconnect, device number 44 [ 93.691073][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.701449][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 93.710564][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 93.723264][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.732604][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.740704][ T9] usb 5-1: Product: syz [ 93.745123][ T9] usb 5-1: Manufacturer: syz [ 93.749922][ T9] usb 5-1: SerialNumber: syz [ 93.770365][ T36] kauditd_printk_skb: 267 callbacks suppressed [ 93.770382][ T36] audit: type=1326 audit(1785124155.186:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.3.458" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f538435e6ce code=0x7ffc0000 [ 93.801978][ T36] audit: type=1326 audit(1785124155.216:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.3.458" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f538435e6ce code=0x7ffc0000 [ 93.827403][ T36] audit: type=1326 audit(1785124155.236:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.3.458" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f538435e6ce code=0x7ffc0000 [ 93.853553][ T36] audit: type=1326 audit(1785124155.266:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.3.458" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f538435e6ce code=0x7ffc0000 [ 93.878878][ T36] audit: type=1326 audit(1785124155.286:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.3.458" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f538435e6ce code=0x7ffc0000 [ 93.904374][ T36] audit: type=1326 audit(1785124155.316:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.3.458" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f538435e6ce code=0x7ffc0000 [ 93.929677][ T36] audit: type=1326 audit(1785124155.336:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.3.458" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f538435e6ce code=0x7ffc0000 [ 93.954996][ T36] audit: type=1326 audit(1785124155.366:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.3.458" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f538435e6ce code=0x7ffc0000 [ 93.969801][ T1396] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 93.984671][ T9] usb 5-1: 1:1 : invalid UAC_AS_GENERAL desc [ 93.994193][ T36] audit: type=1326 audit(1785124155.406:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.3.458" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f538435e6ce code=0x7ffc0000 [ 94.019929][ T9] usb 5-1: 0:2 : does not exist [ 94.031714][ T9] usb 5-1: USB disconnect, device number 24 [ 94.041746][ T36] audit: type=1326 audit(1785124155.406:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.3.458" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f538435e6ce code=0x7ffc0000 [ 94.042644][ T1840] udevd[1840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 94.159779][ T1396] usb 1-1: Using ep0 maxpacket: 8 [ 94.169059][ T1396] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.177748][ T1396] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 94.187115][ T1396] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 94.197531][ T1396] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 94.206597][ T1396] usb 1-1: config 1 has no interface number 1 [ 94.212917][ T1396] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 94.225814][ T1396] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.248105][ T1396] usb 1-1: config 1 interface 2 has no altsetting 0 [ 94.256526][ T1396] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.276050][ T1396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.289003][ T1396] usb 1-1: Product: syz [ 94.293525][ T1396] usb 1-1: Manufacturer: syz [ 94.298320][ T1396] usb 1-1: SerialNumber: syz [ 94.520347][ T1396] usb 1-1: USB disconnect, device number 45 [ 94.537565][ T1840] udevd[1840]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 94.574058][ T2011] overlayfs: failed to resolve './bus': -2 [ 94.880147][ T328] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 95.030556][ T328] usb 5-1: not running at top speed; connect to a high speed hub [ 95.039102][ T328] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 95.057994][ T328] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 95.072159][ T328] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 95.081372][ T328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.089406][ T328] usb 5-1: Product: syz [ 95.093802][ T328] usb 5-1: Manufacturer: syz [ 95.098761][ T328] usb 5-1: SerialNumber: syz [ 95.289913][ T1396] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 95.306923][ T1046] usb 5-1: USB disconnect, device number 25 [ 95.349853][ T391] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 95.439824][ T1396] usb 1-1: Using ep0 maxpacket: 8 [ 95.445926][ T1396] usb 1-1: config 0 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.459037][ T1396] usb 1-1: config 0 interface 0 has no altsetting 0 [ 95.465687][ T1396] usb 1-1: New USB device found, idVendor=0eef, idProduct=7224, bcdDevice= 0.00 [ 95.474808][ T1396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.483524][ T1396] usb 1-1: config 0 descriptor?? [ 95.500830][ T391] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 95.511694][ T391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 95.522995][ T391] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 95.536010][ T391] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 95.545089][ T391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.553953][ T391] usb 4-1: config 0 descriptor?? [ 95.559198][ T2034] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 95.690546][ T2026] file system registered [ 96.025958][ T391] hid (null): usage index exceeded [ 96.033465][ T391] uclogic 0003:28BD:0075.000B: interface is invalid, ignoring [ 96.220032][ T2063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'. [ 96.236667][ T328] usb 4-1: USB disconnect, device number 39 [ 96.266093][ T2071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.275577][ T2071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.286278][ T2071] netlink: 17 bytes leftover after parsing attributes in process `syz.0.491'. [ 96.298803][ T2071] netlink: 'syz.0.491': attribute type 4 has an invalid length. [ 96.696197][ T2073] tipc: Enabling of bearer rejected, failed to enable media [ 96.730111][ T2083] bridge_slave_0: entered promiscuous mode [ 96.871829][ T2108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.881384][ T2108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.927470][ T2118] netlink: 188 bytes leftover after parsing attributes in process `syz.3.505'. [ 97.289803][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 97.405443][ T2126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.414032][ T2126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.440018][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 97.446370][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 97.455085][ T9] usb 4-1: config 0 has no interface number 0 [ 97.461988][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 97.470152][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 97.479204][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.487270][ T9] usb 4-1: Product: syz [ 97.491524][ T9] usb 4-1: Manufacturer: syz [ 97.492596][ T2123] overlayfs: failed to clone upperpath [ 97.496128][ T9] usb 4-1: SerialNumber: syz [ 97.506718][ T9] usb 4-1: config 0 descriptor?? [ 97.513911][ T9] smsc75xx v1.0.0 [ 97.947109][ T2130] overlayfs: unescaped trailing colons in lowerdir mount option. [ 98.013090][ T2135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.022306][ T2135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.552814][ T2148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.562084][ T2148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.063537][ T2169] netlink: 'syz.4.524': attribute type 5 has an invalid length. [ 99.071352][ T2169] netlink: 'syz.4.524': attribute type 32 has an invalid length. [ 99.098343][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 99.098361][ T36] audit: type=1400 audit(1785124160.506:699): avc: denied { setopt } for pid=2170 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.120086][ T2173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.526'. [ 99.133969][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 99.144914][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 99.154346][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 99.172231][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 99.185799][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 99.197337][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 99.208439][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 99.220750][ T9] usb 4-1: USB disconnect, device number 40 [ 99.247785][ T36] audit: type=1400 audit(1785124160.656:700): avc: denied { write } for pid=2191 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 99.399799][ T391] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 99.529796][ T391] usb 5-1: device descriptor read/64, error -71 [ 99.639269][ T36] audit: type=1400 audit(1785124161.046:701): avc: denied { append } for pid=2198 comm="syz.3.533" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 99.662728][ T36] audit: type=1400 audit(1785124161.076:702): avc: denied { read } for pid=2198 comm="syz.3.533" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.686032][ T36] audit: type=1400 audit(1785124161.076:703): avc: denied { ioctl } for pid=2198 comm="syz.3.533" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.727040][ T2202] input: syz1 as /devices/virtual/input/input12 [ 99.733431][ T2202] input: failed to attach handler leds to device input12, error: -6 [ 99.769837][ T391] usb 5-1: device descriptor read/64, error -71 [ 100.009791][ T391] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 100.109779][ T1042] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 100.139806][ T391] usb 5-1: device descriptor read/64, error -71 [ 100.260789][ T1042] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 100.271839][ T1042] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 100.282656][ T1042] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.289299][ T1042] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 100.298371][ T1042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.306983][ T1042] usb 4-1: config 0 descriptor?? [ 100.312280][ T2213] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 100.319477][ T2213] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 100.379799][ T391] usb 5-1: device descriptor read/64, error -71 [ 100.441148][ T36] audit: type=1400 audit(1785124161.856:704): avc: denied { setattr } for pid=2220 comm="syz.0.539" name="" dev="pipefs" ino=14344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 100.483327][ T2226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.492101][ T2226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.499933][ T391] usb usb5-port1: attempt power cycle [ 100.529367][ T1042] usbhid 4-1:0.0: can't add hid device: -71 [ 100.536044][ T1042] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 100.546040][ T1042] usb 4-1: USB disconnect, device number 41 [ 100.570708][ T1396] usbhid 1-1:0.0: can't add hid device: -32 [ 100.576695][ T1396] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 100.839793][ T391] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 100.870749][ T391] usb 5-1: device descriptor read/8, error -71 [ 101.000761][ T391] usb 5-1: device descriptor read/8, error -71 [ 101.110125][ T2237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.118727][ T2237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.211809][ T295] ------------[ cut here ]------------ [ 101.217426][ T295] WARNING: CPU: 1 PID: 295 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 101.226796][ T295] Modules linked in: [ 101.230893][ T295] CPU: 1 UID: 0 PID: 295 Comm: syz-executor Not tainted syzkaller #0 a4a563d0c71b2f3eba821a1af94cbf4bdc8174ca [ 101.242582][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 101.252691][ T295] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 101.258343][ T295] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 9e 83 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 86 c3 3e ff <0f> 0b e9 3e ff ff ff e8 7a c3 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 101.278022][ T295] RSP: 0018:ffffc9000b64fb88 EFLAGS: 00010293 [ 101.284254][ T295] RAX: ffffffff8248ae3a RBX: 0000000000000000 RCX: ffff888108ee0000 [ 101.292316][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.300321][ T295] RBP: ffffc9000b64fbb0 R08: ffff88812e4b289f R09: 1ffff11025c96513 [ 101.308300][ T295] R10: dffffc0000000000 R11: ffffed1025c96514 R12: 0000000000000000 [ 101.316300][ T295] R13: dffffc0000000000 R14: ffff88812e4b2800 R15: ffff88811151faa0 [ 101.324313][ T295] FS: 0000555595061500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 101.333372][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.340030][ T295] CR2: 000055559508c998 CR3: 000000012e130000 CR4: 00000000003526b0 [ 101.348009][ T295] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 101.356001][ T295] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 101.364004][ T295] Call Trace: [ 101.367284][ T295] [ 101.370243][ T295] ovl_do_remove+0x824/0xd10 [ 101.374853][ T295] ? ovl_set_redirect+0x780/0x780 [ 101.379825][ T328] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 101.379913][ T295] ? __cfi_down_write+0x10/0x10 [ 101.392294][ T295] ovl_rmdir+0x1e/0x30 [ 101.396362][ T295] vfs_rmdir+0x3db/0x560 [ 101.400643][ T295] incfs_kill_sb+0x102/0x220 [ 101.405240][ T295] deactivate_locked_super+0xd2/0x270 [ 101.410646][ T295] deactivate_super+0xb8/0xe0 [ 101.415371][ T295] cleanup_mnt+0x438/0x4d0 [ 101.419811][ T295] __cleanup_mnt+0x1d/0x40 [ 101.424243][ T295] task_work_run+0x1e8/0x260 [ 101.428849][ T295] ? __cfi_task_work_run+0x10/0x10 [ 101.433993][ T295] ? __x64_sys_umount+0x12e/0x180 [ 101.439026][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 101.444430][ T295] ? __kasan_check_read+0x15/0x20 [ 101.449466][ T295] resume_user_mode_work+0x35/0x50 [ 101.454614][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 101.460112][ T295] do_syscall_64+0x63/0xf0 [ 101.464537][ T295] ? clear_bhb_loop+0x50/0xa0 [ 101.469211][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.475133][ T295] RIP: 0033:0x7f571e39f0d7 [ 101.479594][ T295] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 101.499224][ T295] RSP: 002b:00007fffffcbd698 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 101.507679][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f571e39f0d7 [ 101.515798][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffffcbd750 [ 101.523805][ T295] RBP: 00007fffffcbd750 R08: 00007fffffcbe750 R09: 00000000ffffffff [ 101.531901][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffffcbe7e0 [ 101.539911][ T295] R13: 00007f571e43330a R14: 0000000000018b1a R15: 00007fffffcbe820 [ 101.540985][ T328] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 101.547883][ T295] [ 101.547896][ T295] ---[ end trace 0000000000000000 ]--- [ 101.547989][ T391] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 101.556569][ T295] ------------[ cut here ]------------ [ 101.571115][ T391] usb 5-1: device descriptor read/8, error -71 [ 101.572189][ T295] WARNING: CPU: 0 PID: 295 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 101.593058][ T295] Modules linked in: [ 101.596970][ T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Tainted: G W syzkaller #0 a4a563d0c71b2f3eba821a1af94cbf4bdc8174ca [ 101.610111][ T295] Tainted: [W]=WARN [ 101.613917][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 101.623997][ T295] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 101.629639][ T295] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 9e 83 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 86 c3 3e ff <0f> 0b e9 3e ff ff ff e8 7a c3 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 101.649307][ T295] RSP: 0018:ffffc9000b64fb88 EFLAGS: 00010293 [ 101.655445][ T295] RAX: ffffffff8248ae3a RBX: 0000000000000000 RCX: ffff888108ee0000 [ 101.663454][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.671463][ T295] RBP: ffffc9000b64fbb0 R08: ffff88812e4b289f R09: 1ffff11025c96513 [ 101.679438][ T295] R10: dffffc0000000000 R11: ffffed1025c96514 R12: 0000000000000000 [ 101.687541][ T295] R13: dffffc0000000000 R14: ffff88812e4b2800 R15: ffff88811151faa0 [ 101.695640][ T295] FS: 0000555595061500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 101.704711][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.710850][ T391] usb 5-1: device descriptor read/8, error -71 [ 101.711331][ T295] CR2: 000020000000c380 CR3: 000000012e130000 CR4: 00000000003526b0 [ 101.725487][ T295] Call Trace: [ 101.728790][ T295] [ 101.731751][ T295] ovl_do_remove+0x824/0xd10 [ 101.736362][ T295] ? ovl_set_redirect+0x780/0x780 [ 101.741416][ T295] ? __cfi_down_write+0x10/0x10 [ 101.746281][ T295] ovl_rmdir+0x1e/0x30 [ 101.750414][ T295] vfs_rmdir+0x3db/0x560 [ 101.754685][ T295] incfs_kill_sb+0x197/0x220 [ 101.759270][ T295] deactivate_locked_super+0xd2/0x270 [ 101.764724][ T295] deactivate_super+0xb8/0xe0 [ 101.769449][ T295] cleanup_mnt+0x438/0x4d0 [ 101.773887][ T295] __cleanup_mnt+0x1d/0x40 [ 101.778354][ T295] task_work_run+0x1e8/0x260 [ 101.782999][ T295] ? __cfi_task_work_run+0x10/0x10 [ 101.788123][ T295] ? __x64_sys_umount+0x12e/0x180 [ 101.793208][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 101.798705][ T295] ? __kasan_check_read+0x15/0x20 [ 101.803750][ T295] resume_user_mode_work+0x35/0x50 [ 101.808864][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 101.814351][ T295] do_syscall_64+0x63/0xf0 [ 101.818817][ T295] ? clear_bhb_loop+0x50/0xa0 [ 101.823530][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.829430][ T295] RIP: 0033:0x7f571e39f0d7 [ 101.829902][ T391] usb usb5-port1: unable to enumerate USB device [ 101.833877][ T295] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 101.859837][ T295] RSP: 002b:00007fffffcbd698 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 101.868262][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f571e39f0d7 [ 101.876390][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffffcbd750 [ 101.884403][ T295] RBP: 00007fffffcbd750 R08: 00007fffffcbe750 R09: 00000000ffffffff [ 101.892407][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffffcbe7e0 [ 101.900441][ T295] R13: 00007f571e43330a R14: 0000000000018b1a R15: 00007fffffcbe820 [ 101.908460][ T295] [ 101.911501][ T295] ---[ end trace 0000000000000000 ]--- [ 101.917297][ T328] usb 4-1: config 127 has no interface number 0 [ 101.923884][ T328] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 101.936532][ T328] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 101.945769][ T328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.953956][ T328] usb 4-1: Product: syz [ 101.958285][ T328] usb 4-1: Manufacturer: syz [ 101.962999][ T328] usb 4-1: SerialNumber: syz [ 101.970323][ T2241] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 102.508130][ T2248] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 104.201401][ T328] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 104.211852][ T328] asix 4-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 104.222365][ T328] asix 4-1:127.57: probe with driver asix failed with error -71 [ 104.233162][ T328] usb 4-1: USB disconnect, device number 42