last executing test programs: 24.307493411s ago: executing program 2 (id=1426): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120110010000000820100600000000000001090224000100002000090400000703000100092109002401222801090581032000100bfb13f88d861bf9dae0d12a167f3fb3f910837f2d938cb5e01a2e4c7d776c89a9b5799f1ecd2ed3978b91c8fbda9d"], 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0xa00, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)={0x0, 0x21, 0x28, {0x28, 0x11, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120110010000000820100600000000000001090224000100002000090400000703000100092109002401222801090581032000100bfb13f88d861bf9dae0d12a167f3fb3f910837f2d938cb5e01a2e4c7d776c89a9b5799f1ecd2ed3978b91c8fbda9d"], 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0xa00, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)={0x0, 0x21, 0x28, {0x28, 0x11, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 23.761237233s ago: executing program 2 (id=1434): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000e00)='./binderfs/binder-control\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x3ff, "a80e0d"}, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x8000000, @remote, 0xfffffffc}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x5}}}}, 0x108) 23.695497274s ago: executing program 2 (id=1435): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000008ac055402000000000001090224000100003001090400000b03000100092109800a01222c00090581032000100800e24ba9269fd4a6d8a8232c723311a303a19cf04d347f2dfaa236a10547cbfa61936104901493cf2f91bce6d6"], 0x0) syz_clone(0x20000000, &(0x7f0000000180)="b5721deac006acde9e262251a23bb2a61c7d0344c7f522e4eb0d276b4158558544470d89372d154cac1c71137c2b110260f39b6433f5826a45cf76a8d56e17fac87270a8c3064f67d9d3fcdbcb0217fb72a92184dbd234a887cfdac9f46c0210ca88c8a3f64804d127b15e4cad43a6eb37ba8dd234fc25b1be929975bcedbecc4120c2d272c0af3ddbe6955b5eedd4e2ef4401bea9b722470f1a8d5c27bc838740c0c145c1373b28b4123c34db425a1c072dd3d8953d10594565ee0c556d6e4218c0e4dadfca1d4cf843563f8313f2595262e923988a19c8af67c454", 0xdc, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="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") futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x0, 0x21, 0x2c, {0x2c, 0x25, "e7e6da6e41eaddfb0a8a34d2dd23ee248c364bf0cc12a1ac3369688a105a7e746fb1400590136b7103bd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 23.114339607s ago: executing program 2 (id=1448): unshare(0x60000600) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0xfa4a}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042402000000ff02000300000000", 0x1e5) 22.98775012s ago: executing program 2 (id=1452): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000100)=0x800, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="10", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="b4", 0x1}], 0x1}}], 0x2, 0x5081) 22.907377931s ago: executing program 2 (id=1453): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) (async) write(r1, &(0x7f0000000280)="240000001e005f0214fefffffffffff8074000001d00000004000000080009000d1b0000", 0x24) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x9, 0x4, 0x0, @multicast1, @empty}}}}) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {0xffff, 0x0, 0x4, 0x0, 0x4, 0x4000000000001000, 0xfffffffffffffffd}, {0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) unshare(0x10000080) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r6, r6, 0x0) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x4000, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xffff}) setsockopt$inet_tcp_int(r4, 0x6, 0x25, &(0x7f0000000040)=0xc, 0x4) (async) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) unshare(0x8010200) (async) recvmmsg(r3, &(0x7f0000000980), 0x0, 0x953559ba24788cf2, 0x0) (async) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="011000000000000005e7ff01c910fc00000000000000000000000000000112487547184f8366c4ce396972529b0055626b6258ba27a1675e32945209dcbdd1667e89106d7c8a0cb58f0ec4190e8ec7690bdb9b053f40972e037c00f10a1e81a19281e98795ee00f6000100c204ffffffa5c910ff02000000000000000000000000000105020000000100000000000000"], 0x90) 9.891956685s ago: executing program 0 (id=1489): r0 = socket(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 9.889458474s ago: executing program 1 (id=1490): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4c}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x408c0}, 0x60804) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0x6, 0xb, "227db2421edb633e3ec2f3"}, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$uac2(0x5, 0xed, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x3, 0x1, 0xa, 0x0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x8, 0x20, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x0, 0x10, 0x7}, [@multiply_unit={0x7, 0x24, 0xc, 0x2, 0x37, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x5, 0x1ff, 0xb, "0c3026300ac6"}, @as_header={0x10, 0x24, 0x1, 0x8, 0x7, 0x0, 0x2, 0x5, 0x1, 0x3}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xd75, 0x1ba, 0x5f}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x539, 0x4, 0xfe}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0x20, 0x4, {0x8, 0x25, 0x1, 0x80, 0x33, 0x4, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xfffc, 0x538, 0xd, "166bc497449f8f00"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x9, 0x5, "0d11906345"}, @as_header={0x10, 0x24, 0x1, 0x10, 0x8, 0x3, 0x4, 0x0, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x9, 0x5, 0x58}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x4, 0x1, {0x8, 0x25, 0x1, 0x80, 0x3, 0x5, 0x5}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x5, 0x9, 0x7, 0x18}, 0x8, &(0x7f00000002c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0xb4, &(0x7f0000000300)=@string={0xb4, 0x3, "ec1065b4bfbd627001371d1ee885908644ef3107ed9abfacd6f761996836651a11933b2981b6620df4f04dceb677fa75b672307a27d286d60b682835215dd41f5ba3f8bf7621c3666ca6c3ea4f7a4b97ae613ccd284ffa5a6c83e34472d4c399b34b662b7216867ba5c99f27925b444abf06e9beb5b8b60224d3f626b471fefeff27a0ca28c7abc0f395bdcb59ab9c2da16af762ff9ab69b88a8b6da7ef214c381482e581bd5d2b88ef9a9925cfa7c0d70d4"}}, {0x4d, &(0x7f0000000400)=@string={0x4d, 0x3, "5d63dfe08556b2eafd85821fde529acdf332d8f6c8d6ec3e32229507eadcb20d7786d7a373a6c9307643d52a6a5729955f4032977815c457699a2dd37ec5fe9bba21aaca9d206f5ce93f94"}}, {0x8f, &(0x7f0000000540)=@string={0x8f, 0x3, "a06041bfeb59753630442707fb6c76e6db44a3e288335e277d32aae6347c446ab0a77668f5777e0aa45f5a5183a858e4c42c6a06ee75bac353e5d6ca69b961a6fa98849513d422531bd133d641aa995b3963d56b90db5356c9fccdc971c09b65bd0735cefecd9cf120089ba1af92c0b1f293df20abdedef67c1b12ce6b392f1c8473854f5123f6c76a5ca755d3"}}, {0x83, &(0x7f0000000600)=@string={0x83, 0x3, "ebd975857d3c86f9490269a1361fd0075e3ab320e5cc4643895963114834e7136dd821243b6fd3e4c526cc43dad82f7564a3964a9005e467567a029d6651d76ea9d4888332519279db48f1cd9a44bb4d207184b572273fb332f2e04ed4aa05b65e20336a86375c2448eaa8e1396032e622079d393e7c01ffb2ecd6c89e4cd25d18"}}, {0x82, &(0x7f0000000700)=@string={0x82, 0x3, "90d15a7099deacccdba6f80884be540604ce0efcd3e11b1cebaaa8d9f9759dbd0c0f90be31b73159a2b8f83ed0d81c9651f906ed582f6a112391d4865ac0297d3294e64fbd443cf66957bda9650d88aec4d9e75041bcfb79ae352569de2d2f9836d3563b1a2eddd81377140087cf6e7a9555f0f2d284fee66001a25a7fee7787"}}]}) syz_usb_control_io$uac2(r2, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x3, 0xd5, {0xd5, 0x2, "d291f764a56f5f6eca61cabe976557a00adc3da4c93cba4a6d8f12a2c04cceca182e842db5028f91e67888778d714476e36555a1a3688f19832e9c6a464e8bfd2ea77cb3e8309adf71e9a81a3a90f0195477b33a0ea6f07fd76fed1adcfde331d931b8bf73fe1e61904a02e7238ff166fe84340bb41a3919c58ff171a9671acf037c05a0c9887fe91d7fe02732fbd0354451d1fd4b7345800ae80c91edb38164792aec0536f6573d7319e99b753c05aee24681a73d6f19c3f2154545199fb462d90d56b9b0b2dd459c618cee40e7d5410b9137"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)={0x0, 0x16, 0xa, "7e077545283ee83bc7bd"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000b80)={0x20, 0x81, 0x3, "61f9f5"}, &(0x7f0000000bc0)={0x20, 0x82, 0x2, 'oI'}, &(0x7f0000000c00)={0x20, 0x83, 0x2, "97b4"}, &(0x7f0000000c40)={0x20, 0x84, 0x1, '@'}, &(0x7f0000000c80)={0x20, 0x85, 0x3, "30c98c"}}) 9.888993315s ago: executing program 3 (id=1491): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) faccessat2(r0, &(0x7f0000000000)='\x00', 0x2, 0x1000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x48f82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r1, 0xe851000) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r5, @ANYBLOB="700003806c0003806800018061000200b9d2060864bd00ffa92bd20f95264dc4a17496423178a005b7d3251a1a00b236ed45a4ae5437f02ac98c3ca7bc6e77a41827f8ff8f56841aa8343b92d4dfce485197068f2a13e3a85bde91c28b04a1b92dc340ce65b146037fb1f55688000000"], 0x90}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000002f80)={'syztnl0\x00', &(0x7f0000002f00)={'syztnl2\x00', 0x0, 0x7800, 0x10, 0xc, 0x8, {{0xd, 0x4, 0x0, 0xe, 0x34, 0x68, 0x0, 0x6, 0x29, 0x0, @private=0xa010100, @private=0xa010102, {[@ssrr={0x89, 0x1f, 0x39, [@dev={0xac, 0x14, 0x14, 0x2c}, @remote, @private=0xa010100, @broadcast, @multicast1, @empty, @local]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000004280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000042c0)=0x14) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f0000000240)="09000000e70014000000d97bfbf7", 0xe, 0x200000c4, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0xc, 0x6, @broadcast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000004300)={'vxcan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000340)=""/63, 0x32c000, 0x0, 0x9, 0x1}, 0x20) r8 = syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000580)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) write$tun(r9, &(0x7f0000000400)=ANY=[@ANYBLOB="08000800000000001a000000000202005d11318464296b4fd168cd48a8f3524105d5aaa0"], 0x25) syz_usb_control_io$rtl8150(r8, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="400501b695f3e985b25fe7002f27ed15d97aaecf5b52890fe48a4f984b9035aab89103d593e19b65424b1cff2c1784d8fd01d9a8ddc375fb937ac576f86a17b398133b726a7cec755af512585607f7db32f7844d7997f605b8a8d3dd664647a361a2e05652a453be7243abe382dd631a9b39aaec8621ab76bb4906237791bfe9e04f899e0b762873462625a31aadba95f14163f9b5d06c7fc55b0804382d7a75a6a94d2db927a019c06b569f096febe3bb8d16e6f7f73f403bd5e51a443202d7d60e69ca8c423d5f"]}) syz_usb_control_io(r8, 0x0, 0x0) 8.144208772s ago: executing program 0 (id=1492): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x100000, 0x0, &(0x7f0000000000), 0x3000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x28}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) socket(0x22, 0x5, 0x3ff) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000c0a000/0x3000)=nil, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) fcntl$dupfd(r1, 0x0, r1) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0xa, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x20, 0x31, 0xc8, {0xc8, 0x30, "099189848262ec69a1fa47473ead142e0a9eedcd3a84270450adebce678852a3645cc6bc19727cc725c4bdbdd8d8c4340a0a79859c7b3f8015d4648138cc8e6183c8dd2b2ce62ead070fb9194670b05596cdbdaffc40d7852708b251a20230c123cceb8b3cf673eb6f62e17e2d00fada209a5673a8a2036d932de5aeba18313b4787bf5f73daf2301f4f45cf885b144555ee543adeafc38b1d9435661477f5797f00ec8e94c0f702593d5b99a6ace02303ed789dfbb767fe029e789f5643ddc5ca0efb51355a"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x44, &(0x7f0000000340)={0x20, 0x5, 0x4, "34c0ce86"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x7, 0x8, 0x7, 0x5, 0x20fa, 0x0, 0x2, 0x5, 0x800, 0x1, 0x8001, 0x564}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0x8}, &(0x7f00000004c0)={0x20, 0x83, 0x2}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0xf}, &(0x7f0000000540)={0x20, 0x89, 0x2, 0x1}}) dup(r2) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20100200"], 0x0, 0x0}) 8.143704483s ago: executing program 1 (id=1493): syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x200c, 0x1018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x80, 0xe0, 0x7, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x3, 0x26, 0xc5}, [@processing_unit={0x11, 0x24, 0x8, 0x6, 0x1, [0x0, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0x3]}, @output_terminal={0xc, 0x24, 0x3, 0xfd, 0x400, 0xa8, 0x3, 0x6, 0xfff9, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x81, 0x9, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x10, {0x8, 0x25, 0x1, 0x83, 0x0, 0xa, 0x2}}}}}}}}]}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, &(0x7f00000039c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x83, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000002900000037000000009f1b50"], 0x18}}], 0x2, 0x4004000) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)=""/238, 0xee}, {&(0x7f0000000280)=""/105, 0x69}, {&(0x7f0000000ec0)=""/166, 0xa6}, {&(0x7f0000001540)=""/4089, 0xff9}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}}], 0x2a, 0x0, 0x0) (async) sendmsg(r1, &(0x7f00000037c0)={&(0x7f0000000480)=@l2tp={0x2, 0x0, @empty, 0x2}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)="ab49697e9aaff4b6216760c2d44b2ea8b08b7e33eb12dd190df0dcce3e9fe78e7101cab8b6f390f4dfc41f5487f72fe937edd92c9f01f947b1428cee017d0f816c4f2b5d66a53575ed281df3014041bafda384", 0x53}, {&(0x7f0000000580)="719dbee93245fa53c96b7339d69ec53307763ab37460339133bdefb9e35121c048dd375d1c2f131e8dc08a3ed6bddd60b6156b04efc85d33c3662325676137bcacef8575389c40853b4ee4fb11762541de478579a8dc6da497ff153df4c1856eb0c1fb4e1f40a5eb375e2183d00a7adf5ffea16ec3e75162111b6a85454477fd33db3f17da321bffb4237b9051b64b882d015fad49c13eafc11785567b70688babacd21e30b0", 0xa6}], 0x2, &(0x7f0000002540)=[{0x100, 0x10b, 0x7ff, "a67bb26ace05671b0a5f98a2ccd30b746b31974a1412d14162cc0b27211fdc5bf140cc04c0f7f18876348840eacfc277b6655c03f116f8e14fa098c005053736bc1e549040a6f672c702f91d5de75be77960a29c8d53a48b4df6556a5c7f1a370293ee3468e45b10a31535565cd3c18c22be19203b1aa7f4e089080a4ac8e75c4362c4ff21ebf032d8fcd6f346b4fff846edf01f8ed6bfb61345956e451567aa1bfb5cb68001387bb98feee4f955e69410d6d762e8c6b51f99ee8e70467d261df3c5a2a212b3ebcbf7626afe23197e31919f177121dfe7ed380d59228e7cb9f5146a00fbcf55166b0851f8"}, {0xb0, 0x10c, 0xcf8, "e9a7273495c1d7bae36a855162c27ef01c761ac44bcdef5b4d12ee726180e0b2e50119a0efc8ed7da1a2f5ca8a872715db58913aad5e53081f374f3826bfda6249d5233f2ca57ab31aa3634feba6b182d6a5b9f8271627475e9cbda73c890f750d76f6b03ec4481ebbc48f4b4c19d1d7775fd36e774c5ce976a17b7ca669ae13c796a6293620f2151319ee025728f4d494e28250bc8d54d55dc172456b7116"}, {0x1010, 0x88, 0xbf3, "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"}, {0x98, 0x118, 0x1, "b57e98181a859d1a596afbc97ceaeb71a29afab9feb2d8f02d2b95f96e770a1bed59ddba6543a9290dd8d62a2764f581de7df1b8c9926fe330747e13a99f6ac68e726bbad01101a89e422d251ca5ef5fc8177b6f01e48c6bccf93241321e1df0af20081deabbcd6ac2a13a1e8240381f5b059199ed2a0a7a0dbc14fa694502ed4ebf"}], 0x1258}, 0x2) (async) ustat(0x1, &(0x7f0000000000)) (async) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x10b) (async) rmdir(&(0x7f0000000200)='./file0/file1\x00') 8.143345652s ago: executing program 3 (id=1494): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x408c0}, 0x60804) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x0, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0x7, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x3, 0x4, 0x16, 0x8, 0x40, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b397, 0x440080, 0x493d19c3, 0x96b, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0xffffffff, 0x1cb, 0x9, 0x80000000, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0xfa, 0x40002, 0xffff0000, 0x41, 0x6, 0x5, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0x8, 0x97f7, 0x23, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x20077, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x7, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0xd, 0xffffffff, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10001, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x7ff, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000051}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0x9e, 0x0, 0x7}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) keyctl$chown(0x4, 0x0, r9, r10) getgroups(0x6, &(0x7f0000000740)=[0x0, 0xee00, 0xffffffffffffffff, 0x0, 0xee00, 0xee00]) fsetxattr$system_posix_acl(r4, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x5}, [{}, {0x2, 0x2}, {0x2, 0x5}, {}], {0x4, 0x1}, [{0x8, 0x6}, {0x8, 0x0, r10}, {0x8, 0x1, r11}], {}, {0x20, 0x1}}, 0x5c, 0x7) r12 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000030101030000000000000000000340000020000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x40) 6.231312445s ago: executing program 0 (id=1495): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200001, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200001, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000180)={'erspan0\x00', @multicast}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000006c0)={{r6, 0x3, 0x4, 0x1, 0x59dcf223, 0x3, 0x7, 0x2d9, 0x0, 0x3, 0x3, 0x5, 0x1, 0xb0, 0x87}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}], 0x1) (async) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}], 0x1) 6.231019625s ago: executing program 1 (id=1496): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async) getsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r1 = userfaultfd(0x1) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) flock(0xffffffffffffffff, 0x8) (async, rerun: 64) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) (async, rerun: 64) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x181}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async, rerun: 64) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0xfffffffffffffffe, 0x3, 0x81, 0x404, 0x1, 0x0, 0x12, 0x12, 0x0, 0xfffffffffffffffd, 0xfffffffffffffff5, 0x4, 0x4, 0x7fffffff, 0xfa, 0x6], 0xffff1000, 0x239b02}) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 32) r5 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082) fallocate(r5, 0x40, 0x2, 0x1000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r6, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r7, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x79}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x75}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80050}, 0x0) (async) mincore(&(0x7f0000c0e000/0x4000)=nil, 0x4000, &(0x7f00000002c0)=""/235) (async) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) (rerun: 64) 6.230408054s ago: executing program 3 (id=1497): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x222a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xff, 0xf, 0xbe}}}}}]}}]}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f70000000000000020af88008300"}) r3 = syz_open_pts(r2, 0x141601) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) r4 = syz_open_pts(r2, 0x40) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000280)={0x5, 0x1ffffffe, 0x0, 0x3, 0x19, "682c1acfa4a5000000070000faffffff000800"}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@private=0xa010102, @in=@empty, 0x4e22, 0xf7fb, 0x4e21, 0x10, 0x0, 0x0, 0x20, 0x87, r5}, {0xc, 0x8, 0x6, 0xf, 0x2, 0x0, 0xd0e, 0x7a3ba55c}, {0x6, 0xd32b, 0x8, 0x40400}, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x33}, 0x2, @in=@broadcast, 0x3502, 0x3, 0x3, 0x8, 0x2, 0x4, 0x730373f}}, 0xe8) sendto$packet(r0, &(0x7f0000000080)="05031600d3fc140000004788031c09103c284e8d5da871fcfdbe485563ade18e6a34e2cf6d0400cfe101ac7c7c6d0c5f7167d58774023169a13497f5649a0eca13a099dc9d519268bc62b7e7fd4c435f6bdbfed3bc05fd7783869e56dde661482002ae84cd10b42e1c4c83b1", 0x6c, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.299937746s ago: executing program 0 (id=1498): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101a02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x5) write$cgroup_type(r4, &(0x7f0000000080), 0x9) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="0f0138c4e23d16ea66b8f3000f00d8b963080000b807000000ba000000000f303e660f104cb200c4e16dfb66d30f01c5dbeac4e17d2bbf070000000f01c5", 0x3e}], 0x1, 0x55, 0x0, 0x0) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008bd28031900000000000109022400010800800809041020090300020009210800080122280009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000004c0)={0x2c, &(0x7f0000000140)={0x0, 0x21, 0x2b, {0x2b, 0xd, "de2a2317a42d836374802f20356ec5f9dd2bd85bb92847450a27118ba852ed1fbe19c88a5015d6e64e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.299470226s ago: executing program 1 (id=1499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'veth1_to_hsr\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x2d6c, 0x8}}, 0x30) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) copy_file_range(r3, 0x0, r3, &(0x7f0000000100)=0x8800000, 0x2, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f8864", 0x12}], 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, 0x0, 0x0) mkdir(&(0x7f0000001040)='./file0\x00', 0xc0) getxattr(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='(&@#\x00', 0xfffffffffffffffe) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r1) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'veth1_to_hsr\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) (async) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x2d6c, 0x8}}, 0x30) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) copy_file_range(r3, 0x0, r3, &(0x7f0000000100)=0x8800000, 0x2, 0x0) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f8864", 0x12}], 0x1) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, 0x0, 0x0) (async) mkdir(&(0x7f0000001040)='./file0\x00', 0xc0) (async) getxattr(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0) (async) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='(&@#\x00', 0xfffffffffffffffe) (async) 4.299131176s ago: executing program 3 (id=1500): r0 = syz_usb_connect$hid(0x4, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x2, &(0x7f00000001c0)=@string={0x2}}]}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 2.199129482s ago: executing program 0 (id=1501): unshare(0x60000e00) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'netdevsim0\x00', 0x4}, 0x18) r0 = socket$inet6(0x10, 0x2, 0xd99) write(r0, &(0x7f0000000240)="bb0000001c000707000aab080102000000b8c371b09c66af5b0e93210001c0f0060848050000010000000000039815fa2c53c2864800000012b0f524a14afbc1000c00f0036cdf0db400600033d44000040060fc83ab7bd710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312075701b7f6fa36406888100000463ae4f5df1b394cfd6239ec19df694b61e60395e6bf757b64122a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd12a0058a10000c880ac8041e4af000049f0d4794eedfca92c09d755e7a9607c9fc0bf72cd77920ab79a6f00a1960548deac279c00"/259, 0x103) 2.151463713s ago: executing program 1 (id=1502): execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r2, 0x513, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040054) r3 = open(&(0x7f0000000380)='./file0\x00', 0xe6242, 0x4ebfac6bbaf7949) fcntl$lock(r3, 0xa, &(0x7f00000019c0)={0x1, 0x0, 0x2000000000000001, 0x2}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5a4, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x4, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x6, 0xe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000628"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.151226853s ago: executing program 3 (id=1503): syz_usb_connect$uac2(0x2, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000201e04203040000102030109028d00030104007f080b0101010a20020904000000010120000924810400061500b20c24037137db90faf5ad678009040100000102200009040101010102300008240203e60204fc102401148f00040000000505200000440905010910"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffffffffffff, 0x1781) r1 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x100000b, 0x12, r1, 0xffffc000) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000900)={{&(0x7f00001eb000/0x800000)=nil, 0x800000}, 0x1}) dup3(r2, r2, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000249000/0x2000)=nil, &(0x7f0000059000/0x4000)=nil, 0x2000}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xffffffff, 0x0, &(0x7f0000000300)={0x2, 0x1, 0x8, 0x1}, 0x8, 0x200, 0x1000000, 0x0, 0x1, 0x0, 0x0}) 603.189µs ago: executing program 0 (id=1504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x66ae82, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd5) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r3 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r3, 0x0, 0x0, 0x24004881, &(0x7f0000000000)=@file={0x0, './file1\x00'}, 0x6e) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) read$eventfd(r2, &(0x7f0000000080), 0x8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000240)={@private1, 0xb, 0x2, 0xff, 0x4, 0x9, 0xfff9}, 0x20) dup(r0) 311.089µs ago: executing program 1 (id=1505): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000bac"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000000600)={@val={0xa, 0xb3f0}, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x8, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, {[], @ndisc_rs}}}}}}, 0x42) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000180)={0x20, 0x11, 0xa, "a451f8247cb244f568fa"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000180)={0x20, 0x11, 0xa, "a451f8247cb244f568fa"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=1506): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) memfd_create(0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000000)=0x2) (async) r5 = dup(r1) syz_ublk_setup_queues(r5, r0, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) kernel console output (not intermixed with test programs): 60][ T31] usb 2-1: SerialNumber: syz [ 170.529723][ T31] usb 2-1: config 0 descriptor?? [ 170.537517][ T31] smsc75xx v1.0.0 [ 170.606719][ T1621] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 170.607038][ T710] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 170.764580][ T710] usb 4-1: Using ep0 maxpacket: 8 [ 170.772514][ T1621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 170.786768][ T710] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 170.796509][ T1621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.807206][ T710] usb 4-1: config 0 has no interface number 1 [ 170.815270][ T1621] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 170.826921][ T710] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 170.840119][ T1621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.848744][ T710] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 170.862889][ T710] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 170.875650][ T1621] usb 1-1: config 0 descriptor?? [ 170.881430][ T710] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 170.895639][ T710] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.912746][ T710] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 170.928835][ T710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 12336, setting to 1024 [ 170.944042][ T710] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 170.958633][ T710] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 170.968851][ T710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.978361][ T710] usb 4-1: Product: syz [ 170.982609][ T710] usb 4-1: Manufacturer: syz [ 170.987398][ T710] usb 4-1: SerialNumber: syz [ 170.994100][ T710] usb 4-1: config 0 descriptor?? [ 171.001532][ T2972] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 171.141899][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 171.153212][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 171.210549][ T2972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.219808][ T2972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.234376][ T2972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.245856][ T2972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.258285][ T2972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.275906][ T2972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.289893][ T454] usb 4-1: USB disconnect, device number 80 [ 171.310974][ T1621] isku 0003:1E7D:319C.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 171.710985][ T454] usb 1-1: USB disconnect, device number 88 [ 171.840206][ T2986] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.872'. [ 172.188797][ T710] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 172.345159][ T710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.360865][ T710] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 172.366258][ T3022] batadv_slave_0: entered allmulticast mode [ 172.374032][ T710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.383179][ T3022] netlink: 148 bytes leftover after parsing attributes in process `syz.0.879'. [ 172.401802][ T710] usb 4-1: config 0 descriptor?? [ 172.421183][ T3022] batadv_slave_0 (unregistering): left allmulticast mode [ 172.448198][ T3025] netlink: 396 bytes leftover after parsing attributes in process `syz.2.880'. [ 172.531641][ T36] audit: type=1400 audit(1784643343.103:455): avc: denied { ioctl } for pid=3028 comm="syz.0.882" path="pid:[4026532293]" dev="nsfs" ino=4026532293 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 172.615526][ T710] usbhid 4-1:0.0: can't add hid device: -71 [ 172.621818][ T710] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 172.631134][ T710] usb 4-1: USB disconnect, device number 81 [ 173.066258][ T454] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 173.221588][ T454] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.234648][ T454] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 173.236094][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000304: -71 [ 173.261785][ T454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.273345][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX+4: -71 [ 173.285824][ T454] usb 4-1: config 0 descriptor?? [ 173.291249][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 173.301893][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 173.314834][ T31] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 173.325932][ T31] usb 2-1: USB disconnect, device number 94 [ 173.340913][ T36] audit: type=1400 audit(1784643343.893:456): avc: denied { audit_write } for pid=3031 comm="syz.2.883" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 173.360449][ T3032] netlink: 1 bytes leftover after parsing attributes in process `syz.2.883'. [ 173.427948][ T3041] netlink: 'syz.2.886': attribute type 4 has an invalid length. [ 173.438983][ T3041] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.886'. [ 174.060995][ T31] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 174.239175][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 174.255442][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 174.272796][ T31] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 174.286148][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.299076][ T31] usb 2-1: config 0 descriptor?? [ 174.307716][ T3047] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 174.483382][ T3061] netlink: 'syz.2.894': attribute type 5 has an invalid length. [ 174.743197][ T3047] random: crng reseeded on system resumption [ 174.777396][ T36] audit: type=1400 audit(1784643345.277:457): avc: denied { ioctl } for pid=3046 comm="syz.1.889" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 174.832757][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x1 [ 174.841454][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 174.849260][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 174.856890][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 174.864456][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 174.872140][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 174.879662][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 174.887172][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 174.894785][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 174.902275][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 174.910473][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 174.919821][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 174.929421][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 174.938453][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 174.946185][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 174.953802][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 174.961376][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 174.969043][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 174.976559][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 174.984264][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 174.991956][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 174.999433][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 175.007054][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 175.014580][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 175.022106][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 175.029612][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 175.038033][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 175.045560][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 175.053078][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 175.060618][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 175.068324][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 175.075940][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 175.083893][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 175.091596][ T454] usbhid 4-1:0.0: can't add hid device: -71 [ 175.098939][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 175.107956][ T454] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 175.117628][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 175.125374][ T454] usb 4-1: USB disconnect, device number 82 [ 175.132690][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 175.143058][ T31] steelseries 0003:1038:1410.0019: unknown main item tag 0x0 [ 175.152740][ T31] steelseries 0003:1038:1410.0019: not enough fields in HID_OUTPUT_REPORT 0 [ 175.188670][ T1621] usb 2-1: USB disconnect, device number 95 [ 175.517043][ T3071] netlink: 148 bytes leftover after parsing attributes in process `syz.3.896'. [ 175.895166][ T454] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 176.053869][ T383] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 176.064723][ T454] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 176.079539][ T454] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 176.092970][ T454] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 176.102193][ T454] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.111408][ T454] usb 4-1: Product: syz [ 176.116402][ T454] usb 4-1: Manufacturer: syz [ 176.121223][ T454] usb 4-1: SerialNumber: syz [ 176.127041][ T454] usb 4-1: config 0 descriptor?? [ 176.132553][ T3075] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 176.140702][ T3075] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 176.170305][ T31] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 176.223030][ T383] usb 1-1: Using ep0 maxpacket: 16 [ 176.229976][ T383] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 176.238416][ T383] usb 1-1: config 1 has no interface number 0 [ 176.245261][ T383] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 176.262133][ T383] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 176.276206][ T383] usb 1-1: config 1 interface 105 has no altsetting 0 [ 176.285324][ T383] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 176.294970][ T383] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 176.303424][ T383] usb 1-1: Product: syz [ 176.308082][ T383] usb 1-1: Manufacturer: syz [ 176.313301][ T383] usb 1-1: SerialNumber: syz [ 176.319649][ T3087] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 176.327484][ T3087] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 176.339478][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 176.346569][ T31] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 176.355062][ T31] usb 2-1: config 0 has no interface number 0 [ 176.362099][ T31] usb 2-1: config 0 interface 184 has no altsetting 0 [ 176.369374][ T3075] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3075 comm=syz.3.897 [ 176.370990][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 176.389302][ T3075] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3075 comm=syz.3.897 [ 176.394128][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.407668][ T3075] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2562 sclass=netlink_tcpdiag_socket pid=3075 comm=syz.3.897 [ 176.415835][ T31] usb 2-1: Product: syz [ 176.433927][ T3075] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2565 sclass=netlink_tcpdiag_socket pid=3075 comm=syz.3.897 [ 176.437493][ T31] usb 2-1: Manufacturer: syz [ 176.460529][ T3075] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2562 sclass=netlink_tcpdiag_socket pid=3075 comm=syz.3.897 [ 176.463338][ T31] usb 2-1: SerialNumber: syz [ 176.483895][ T3075] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=3075 comm=syz.3.897 [ 176.489812][ T3098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 176.514024][ T3098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 176.525687][ T31] usb 2-1: config 0 descriptor?? [ 176.534225][ T31] smsc75xx v1.0.0 [ 176.549486][ T383] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 176.564157][ T383] usb 1-1: USB disconnect, device number 89 [ 176.961075][ T454] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 177.103145][ T3100] syzkaller1: entered promiscuous mode [ 177.109274][ T3100] syzkaller1: entered allmulticast mode [ 177.183537][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 177.195368][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 177.199252][ T3102] netlink: 9 bytes leftover after parsing attributes in process `syz.0.906'. [ 177.216809][ T3102] gretap0: entered promiscuous mode [ 177.226608][ T3104] netlink: 9 bytes leftover after parsing attributes in process `syz.0.906'. [ 177.244080][ T454] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 177.271210][ T454] usb 4-1: USB disconnect, device number 83 [ 177.409613][ T36] audit: type=1400 audit(1784643347.764:458): avc: denied { unmount } for pid=3105 comm="syz.0.907" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 177.811837][ T454] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 177.978777][ T454] usb 1-1: Using ep0 maxpacket: 8 [ 177.985497][ T454] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.998418][ T454] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.006006][ T454] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 178.016259][ T454] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.027246][ T454] usb 1-1: config 0 descriptor?? [ 178.080900][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 178.093865][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 178.107242][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 178.108457][ T1621] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 178.118581][ T31] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 178.140236][ T31] usb 2-1: USB disconnect, device number 96 [ 178.249521][ T3111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.259855][ T3111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.288958][ T1621] usb 4-1: Using ep0 maxpacket: 8 [ 178.297248][ T1621] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 178.308734][ T1621] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.321442][ T1621] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.333437][ T1621] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 178.348675][ T1621] usb 4-1: config 1 interface 0 has no altsetting 0 [ 178.359704][ T1621] usb 4-1: string descriptor 0 read error: -22 [ 178.366248][ T1621] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 178.377498][ T1621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.487645][ T454] lua 0003:1E7D:2C2E.001A: invalid report_size 24941 [ 178.495503][ T454] lua 0003:1E7D:2C2E.001A: item 0 2 1 7 parsing failed [ 178.506173][ T454] lua 0003:1E7D:2C2E.001A: parse failed [ 178.512722][ T454] lua 0003:1E7D:2C2E.001A: probe with driver lua failed with error -22 [ 178.702894][ T325] usb 1-1: USB disconnect, device number 90 [ 178.704598][ T3128] syzkaller1: entered promiscuous mode [ 178.722846][ T3128] syzkaller1: entered allmulticast mode [ 178.822136][ T1621] hid-picolcd 0003:04D8:F002.001B: item fetching failed at offset 0/2 [ 178.835301][ T1621] hid-picolcd 0003:04D8:F002.001B: device report parse failed [ 178.846316][ T1621] hid-picolcd 0003:04D8:F002.001B: probe with driver hid-picolcd failed with error -22 [ 179.040003][ T3115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.049495][ T3115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.116117][ T3143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.127835][ T3143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.190530][ T3146] overlayfs: failed to clone lowerpath [ 179.703526][ T454] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 179.867634][ T454] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.897029][ T454] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 179.921060][ T454] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 179.941874][ T454] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.965378][ T454] usb 1-1: config 0 descriptor?? [ 180.088819][ T36] audit: type=1400 audit(1784643350.266:459): avc: denied { create } for pid=3180 comm="syz.2.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 180.092517][ T3181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.932'. [ 180.125302][ T3181] fuse: Bad value for 'user_id' [ 180.132759][ T3181] fuse: Bad value for 'user_id' [ 180.159639][ T3183] netlink: 96 bytes leftover after parsing attributes in process `syz.2.933'. [ 180.186375][ T36] audit: type=1400 audit(1784643350.359:460): avc: denied { ioctl } for pid=3184 comm="syz.2.934" path="/" dev="configfs" ino=2495 ioctlcmd=0x542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 180.273370][ T1621] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 180.413184][ T1621] usb 2-1: device descriptor read/64, error -71 [ 180.448849][ T454] savu 0003:1E7D:2D5A.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 180.658671][ T454] usb 1-1: USB disconnect, device number 91 [ 180.671336][ T1621] usb 2-1: device descriptor read/64, error -71 [ 180.929620][ T1621] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 181.091231][ T1621] usb 2-1: device descriptor read/64, error -71 [ 181.139163][ T454] usb 4-1: USB disconnect, device number 84 [ 181.230031][ T3198] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 181.243079][ T3198] SELinux: failed to load policy [ 181.349869][ T1621] usb 2-1: device descriptor read/64, error -71 [ 181.468546][ T1621] usb usb2-port1: attempt power cycle [ 181.522307][ T454] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 181.543849][ T710] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 181.683939][ T454] usb 4-1: Using ep0 maxpacket: 16 [ 181.689913][ T454] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 181.707375][ T454] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 181.717018][ T454] usb 4-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 181.725502][ T454] usb 4-1: Product: syz [ 181.732722][ T454] usb 4-1: Manufacturer: syz [ 181.739628][ T710] usb 1-1: unable to get BOS descriptor or descriptor too short [ 181.751316][ T710] usb 1-1: not running at top speed; connect to a high speed hub [ 181.751322][ T454] r8152-cfgselector 4-1: Unknown version 0x0000 [ 181.751354][ T454] r8152-cfgselector 4-1: config 0 descriptor?? [ 181.773616][ T710] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 181.789177][ T710] usb 1-1: config 0 has no interface number 0 [ 181.795641][ T710] usb 1-1: config 0 interface 175 has no altsetting 0 [ 181.804885][ T710] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.02 [ 181.815070][ T710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.823302][ T710] usb 1-1: Product: syz [ 181.827624][ T710] usb 1-1: Manufacturer: 珞䯏̶喆㷶鐎䵓䗈ᄠ訥롼鎪쒪귂༈礄嚥︼뒆屌碌頓 [ 181.839231][ T710] usb 1-1: SerialNumber: syz [ 181.844661][ T710] usb 1-1: config 0 descriptor?? [ 181.849751][ T1621] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 181.879162][ T1621] usb 2-1: device descriptor read/8, error -71 [ 182.002384][ T325] r8152-cfgselector 4-1: USB disconnect, device number 85 [ 182.019344][ T1621] usb 2-1: device descriptor read/8, error -71 [ 182.078187][ T710] usb 1-1: USB disconnect, device number 92 [ 182.277129][ T1621] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 182.300465][ T1621] usb 2-1: device descriptor read/8, error -71 [ 182.440381][ T1621] usb 2-1: device descriptor read/8, error -71 [ 182.560702][ T1621] usb usb2-port1: unable to enumerate USB device [ 182.591118][ T3217] netlink: 'syz.2.945': attribute type 6 has an invalid length. [ 182.616049][ T3219] overlayfs: failed to clone upperpath [ 182.704061][ T3226] syzkaller1: entered promiscuous mode [ 182.710160][ T3226] syzkaller1: entered allmulticast mode [ 182.717251][ T3230] IPv6: addrconf: prefix option has invalid lifetime [ 182.835755][ T36] audit: type=1326 audit(1784643352.819:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3234 comm="syz.3.953" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faeaad9de99 code=0x0 [ 182.989278][ T454] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 183.152766][ T454] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 183.168583][ T454] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.179920][ T454] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 183.199562][ T454] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 183.221740][ T454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.234341][ T454] usb 1-1: Product: syz [ 183.238982][ T454] usb 1-1: Manufacturer: syz [ 183.243855][ T454] usb 1-1: SerialNumber: syz [ 183.254964][ T454] usb 1-1: config 0 descriptor?? [ 183.274163][ T454] usb-storage 1-1:0.0: USB Mass Storage device detected [ 183.292778][ T454] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 183.482375][ T1621] usb 1-1: USB disconnect, device number 93 [ 184.097372][ T3250] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.145438][ T3257] netlink: 104 bytes leftover after parsing attributes in process `syz.3.961'. [ 184.201357][ T3260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.962'. [ 184.461156][ T3280] FAT-fs (rnullb0): bogus number of reserved sectors [ 184.468790][ T3280] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 184.491140][ T325] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 184.592098][ T3289] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 184.642391][ T3291] overlayfs: failed to clone upperpath [ 184.642465][ T325] usb 1-1: device descriptor read/64, error -71 [ 184.652853][ T3292] overlayfs: failed to clone upperpath [ 184.826309][ T1621] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 184.880402][ T31] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 184.923691][ T325] usb 1-1: device descriptor read/64, error -71 [ 185.001001][ T1621] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.011978][ T1621] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.028021][ T1621] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.039775][ T1621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.049066][ T1621] usb 2-1: Product: syz [ 185.055301][ T1621] usb 2-1: Manufacturer: syz [ 185.055853][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 185.062056][ T1621] usb 2-1: SerialNumber: syz [ 185.076659][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 185.076670][ T1621] cdc_mbim 2-1:1.0: skipping garbage [ 185.078870][ T31] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 185.088883][ T1621] usb 2-1: selecting invalid altsetting 1 [ 185.095120][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.120391][ T31] usb 4-1: Product: syz [ 185.125567][ T31] usb 4-1: Manufacturer: syz [ 185.131587][ T31] usb 4-1: SerialNumber: syz [ 185.194296][ T325] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 185.307655][ T3305] overlayfs: failed to clone upperpath [ 185.345407][ T325] usb 1-1: device descriptor read/64, error -71 [ 185.359777][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 185.371587][ T31] usb 4-1: USB disconnect, device number 86 [ 185.510004][ T1621] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 185.514798][ T3287] 9pnet_fd: Insufficient options for proto=fd [ 185.516634][ T1621] cdc_mbim 2-1:1.0: bind() failure [ 185.533401][ T1621] usb 2-1: USB disconnect, device number 101 [ 185.605019][ T325] usb 1-1: device descriptor read/64, error -71 [ 185.724156][ T325] usb usb1-port1: attempt power cycle [ 186.086168][ T36] audit: type=1400 audit(1784643355.825:462): avc: denied { ioctl } for pid=3315 comm="syz.1.981" path="socket:[24735]" dev="sockfs" ino=24735 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.111265][ T325] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 186.136650][ T325] usb 1-1: device descriptor read/8, error -71 [ 186.178349][ T1621] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 186.277480][ T325] usb 1-1: device descriptor read/8, error -71 [ 186.340663][ T1621] usb 4-1: Using ep0 maxpacket: 32 [ 186.349215][ T1621] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.361881][ T1621] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 186.372121][ T1621] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 186.384175][ T1621] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 186.398668][ T1621] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.408367][ T1621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 186.416711][ T1621] usb 4-1: SerialNumber: syz [ 186.422314][ T3314] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 186.429663][ T3314] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 186.437674][ T1621] hub 4-1:1.0: bad descriptor, ignoring hub [ 186.443702][ T1621] hub 4-1:1.0: probe with driver hub failed with error -5 [ 186.451279][ T1621] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 186.472961][ T36] audit: type=1400 audit(1784643356.186:463): avc: denied { execute } for pid=3323 comm="syz.2.984" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 186.535560][ T325] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 186.558517][ T325] usb 1-1: device descriptor read/8, error -71 [ 186.657868][ T1621] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 186.687428][ T1621] usb 4-1: USB disconnect, device number 87 [ 186.699003][ T325] usb 1-1: device descriptor read/8, error -71 [ 186.817177][ T325] usb usb1-port1: unable to enumerate USB device [ 187.098482][ T454] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 187.272855][ T454] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.284947][ T454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 187.296971][ T454] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 187.307064][ T454] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.330743][ T454] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 187.344816][ T454] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.355026][ T454] usb 2-1: Product: syz [ 187.361052][ T454] usb 2-1: Manufacturer: syz [ 187.366045][ T454] usb 2-1: SerialNumber: syz [ 187.372508][ T454] usb 2-1: config 0 descriptor?? [ 187.487964][ T1621] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 187.602354][ T3331] 9pnet_fd: p9_fd_create_unix (3331): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 187.650319][ T1621] usb 4-1: Using ep0 maxpacket: 8 [ 187.764006][ T1621] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 187.780623][ T1621] usb 4-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 187.790643][ T1621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.800940][ T1621] usb 4-1: config 0 descriptor?? [ 188.017947][ T3369] netlink: 'syz.2.1002': attribute type 13 has an invalid length. [ 188.146470][ T3373] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 188.204678][ T454] usb 2-1: USB disconnect, device number 102 [ 188.223547][ T36] audit: type=1400 audit(1784643357.793:464): avc: denied { connect } for pid=3374 comm="syz.1.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.244278][ T36] audit: type=1400 audit(1784643357.793:465): avc: denied { accept } for pid=3374 comm="syz.1.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.270871][ T1621] usbhid 4-1:0.0: can't add hid device: -71 [ 188.278528][ T1621] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 188.294251][ T1621] usb 4-1: USB disconnect, device number 88 [ 188.559984][ T383] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 188.646579][ T454] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 188.735187][ T383] usb 1-1: config 0 interface 0 altsetting 123 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.750059][ T383] usb 1-1: config 0 interface 0 has no altsetting 0 [ 188.758115][ T383] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 188.769522][ T383] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.781092][ T383] usb 1-1: config 0 descriptor?? [ 188.808932][ T454] usb 2-1: Using ep0 maxpacket: 32 [ 188.820863][ T454] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 188.838120][ T454] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.851096][ T454] usb 2-1: config 0 has no interface number 0 [ 188.857351][ T454] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 188.879508][ T454] usb 2-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.894771][ T454] usb 2-1: config 0 interface 196 has no altsetting 0 [ 188.905876][ T454] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 188.918213][ T36] audit: type=1400 audit(1784643358.449:466): avc: denied { connect } for pid=3384 comm="syz.3.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 188.928735][ T454] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.962808][ T3386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=3386 comm=syz.2.1010 [ 188.977024][ T454] usb 2-1: Product: syz [ 188.981948][ T454] usb 2-1: Manufacturer: syz [ 189.003672][ T454] usb 2-1: SerialNumber: syz [ 189.010795][ T3379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.015413][ T3389] netlink: 'syz.3.1009': attribute type 63 has an invalid length. [ 189.027707][ T454] usb 2-1: config 0 descriptor?? [ 189.032886][ T3379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.043486][ T3389] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1009'. [ 189.064737][ T3386] sit0: entered promiscuous mode [ 189.072858][ T3386] netlink: 'syz.2.1010': attribute type 1 has an invalid length. [ 189.099678][ T3386] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1010'. [ 189.262829][ T454] ipheth 2-1:0.196: Unable to find endpoints [ 189.276186][ T36] audit: type=1400 audit(1784643358.781:467): avc: denied { read } for pid=3377 comm="syz.0.1006" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 189.287612][ T3379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1006'. [ 189.312561][ T454] usb 2-1: USB disconnect, device number 103 [ 189.670126][ T383] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 189.688904][ T383] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001D/input/input22 [ 189.793963][ T383] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.81 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 189.903047][ T3379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.912131][ T3379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.934729][ T36] audit: type=1400 audit(1784643359.372:468): avc: denied { ioctl } for pid=3403 comm="syz.2.1015" path="socket:[28153]" dev="sockfs" ino=28153 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 189.963743][ T325] usb 1-1: USB disconnect, device number 98 [ 190.130254][ T1621] usb 2-1: new low-speed USB device number 104 using dummy_hcd [ 190.281880][ T383] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 190.294592][ T1621] usb 2-1: unable to get BOS descriptor or descriptor too short [ 190.307290][ T1621] usb 2-1: config 35 has an invalid interface number: 223 but max is 0 [ 190.317232][ T1621] usb 2-1: config 35 has no interface number 0 [ 190.324022][ T1621] usb 2-1: config 35 interface 223 has no altsetting 0 [ 190.335675][ T1621] usb 2-1: string descriptor 0 read error: -22 [ 190.344504][ T1621] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=86.42 [ 190.354578][ T1621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.367782][ T1621] usb_ehset_test 2-1:35.223: probe with driver usb_ehset_test failed with error -32 [ 190.444352][ T383] usb 4-1: Using ep0 maxpacket: 8 [ 190.452173][ T383] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 190.467995][ T383] usb 4-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 190.478828][ T383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.489796][ T383] usb 4-1: config 0 descriptor?? [ 190.601193][ T3402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.616670][ T3402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.640784][ T454] usb 2-1: USB disconnect, device number 104 [ 190.932234][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 190.941881][ T383] usbhid 4-1:0.0: can't add hid device: -71 [ 190.948979][ T383] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 190.962327][ T383] usb 4-1: USB disconnect, device number 89 [ 191.215275][ T3427] overlayfs: failed to clone upperpath [ 191.300135][ T454] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 191.462586][ T454] usb 1-1: Using ep0 maxpacket: 8 [ 191.468434][ T454] usb 1-1: too many configurations: 148, using maximum allowed: 8 [ 191.480332][ T454] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 191.492756][ T454] usb 1-1: can't read configurations, error -61 [ 191.509670][ T1621] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 191.636012][ T454] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 191.679352][ T1621] usb 2-1: Using ep0 maxpacket: 8 [ 191.686348][ T1621] usb 2-1: unable to get BOS descriptor or descriptor too short [ 191.696732][ T1621] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 191.708885][ T1621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.718731][ T1621] usb 2-1: Product: syz [ 191.724121][ T1621] usb 2-1: Manufacturer: syz [ 191.731812][ T1621] usb 2-1: SerialNumber: syz [ 191.788541][ T325] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 191.798417][ T454] usb 1-1: Using ep0 maxpacket: 8 [ 191.806214][ T454] usb 1-1: too many configurations: 148, using maximum allowed: 8 [ 191.821255][ T454] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 191.831770][ T454] usb 1-1: can't read configurations, error -61 [ 191.841749][ T454] usb usb1-port1: attempt power cycle [ 191.862373][ T3441] fuse: Unknown parameter 'fx' [ 191.869041][ T3441] tmpfs: Invalid uid '0x00000000ffffffff' [ 191.877806][ T3441] fuse: Unknown parameter '0x0000000000000005' [ 191.888196][ T3441] fuse: Unknown parameter 'H1zMV:7ubm"(' [ 191.961039][ T325] usb 4-1: Using ep0 maxpacket: 32 [ 191.977421][ T325] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.997409][ T325] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 192.010202][ T3431] rust_binder: Failure in copy_transaction_data: EINVAL [ 192.010241][ T325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.010256][ T3431] rust_binder: 3430:3431 transaction to 3430 failed: EINVAL [ 192.028995][ T325] usb 4-1: config 0 descriptor?? [ 192.217819][ T454] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 192.243048][ T454] usb 1-1: Using ep0 maxpacket: 8 [ 192.253517][ T454] usb 1-1: too many configurations: 148, using maximum allowed: 8 [ 192.276653][ T454] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 192.284842][ T454] usb 1-1: can't read configurations, error -61 [ 192.427061][ T454] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 192.459701][ T454] usb 1-1: Using ep0 maxpacket: 8 [ 192.471859][ T454] usb 1-1: too many configurations: 148, using maximum allowed: 8 [ 192.493219][ T454] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 192.504766][ T454] usb 1-1: can't read configurations, error -61 [ 192.513800][ T454] usb usb1-port1: unable to enumerate USB device [ 192.662176][ T1621] usb 2-1: selecting invalid altsetting 1 [ 192.691661][ T1621] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 192.710389][ T1621] usb 2-1: USB disconnect, device number 105 [ 192.722277][ T325] usbhid 4-1:0.0: can't add hid device: -71 [ 192.740542][ T430] udevd[430]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 192.743422][ T325] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 192.785939][ T325] usb 4-1: USB disconnect, device number 90 [ 193.163688][ T1621] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 193.304453][ T1621] usb 2-1: device descriptor read/64, error -71 [ 193.500321][ T36] audit: type=1400 audit(1784643362.677:469): avc: denied { mounton } for pid=3463 comm="syz.2.1037" path="/456/file0" dev="tmpfs" ino=2473 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 193.564502][ T1621] usb 2-1: device descriptor read/64, error -71 [ 193.581678][ T36] audit: type=1326 audit(1784643362.750:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3467 comm="syz.2.1039" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f0279de99 code=0x0 [ 193.629523][ T454] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 193.770379][ T454] usb 4-1: device descriptor read/64, error -71 [ 193.824579][ T1621] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 193.976270][ T1621] usb 2-1: device descriptor read/64, error -71 [ 194.030418][ T454] usb 4-1: device descriptor read/64, error -71 [ 194.236301][ T1621] usb 2-1: device descriptor read/64, error -71 [ 194.301406][ T454] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 194.355649][ T1621] usb usb2-port1: attempt power cycle [ 194.445264][ T454] usb 4-1: device descriptor read/64, error -71 [ 194.713203][ T454] usb 4-1: device descriptor read/64, error -71 [ 194.734776][ T1621] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 194.758406][ T1621] usb 2-1: device descriptor read/8, error -71 [ 194.810597][ T31] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 194.832383][ T454] usb usb4-port1: attempt power cycle [ 194.898545][ T1621] usb 2-1: device descriptor read/8, error -71 [ 194.973585][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 194.981088][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.995426][ T31] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 195.005141][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.014289][ T31] usb 1-1: config 0 descriptor?? [ 195.168202][ T1621] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 195.191271][ T1621] usb 2-1: device descriptor read/8, error -71 [ 195.200724][ T454] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 195.223383][ T454] usb 4-1: device descriptor read/8, error -71 [ 195.332373][ T1621] usb 2-1: device descriptor read/8, error -71 [ 195.364277][ T454] usb 4-1: device descriptor read/8, error -71 [ 195.450021][ T1621] usb usb2-port1: unable to enumerate USB device [ 195.623323][ T454] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 195.646203][ T454] usb 4-1: device descriptor read/8, error -71 [ 195.679916][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 195.686546][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 195.696879][ T31] usb 1-1: USB disconnect, device number 103 [ 195.787785][ T454] usb 4-1: device descriptor read/8, error -71 [ 195.916178][ T454] usb usb4-port1: unable to enumerate USB device [ 196.295212][ T325] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 196.459645][ T325] usb 2-1: unable to get BOS descriptor or descriptor too short [ 196.472806][ T325] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 196.483157][ T325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.493007][ T1621] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 196.501471][ T325] usb 2-1: Product: syz [ 196.506414][ T325] usb 2-1: Manufacturer: syz [ 196.512485][ T325] usb 2-1: SerialNumber: syz [ 196.678784][ T1621] usb 1-1: unable to get BOS descriptor or descriptor too short [ 196.695360][ T1621] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.711146][ T1621] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 196.721415][ T1621] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 196.735334][ T1621] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 196.744819][ T1621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.753999][ T1621] usb 1-1: Product: syz [ 196.758237][ T1621] usb 1-1: Manufacturer: syz [ 196.763571][ T1621] usb 1-1: SerialNumber: syz [ 196.770575][ T1703] Bluetooth: hci0: Frame reassembly failed (-84) [ 196.781925][ T3496] input: syz1 as /devices/virtual/input/input23 [ 196.804847][ T3496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.814458][ T3496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.184069][ T3498] cgroup: fork rejected by pids controller in /syz0 [ 197.433041][ T31] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 197.486449][ T36] audit: type=1400 audit(1784643366.349:471): avc: denied { accept } for pid=3551 comm="syz.2.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 197.596861][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.609255][ T31] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 197.619653][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.629264][ T31] usb 4-1: config 0 descriptor?? [ 197.857733][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 197.867069][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 197.877104][ T31] usb 4-1: USB disconnect, device number 95 [ 198.067067][ T1621] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 198.107234][ T1621] usb 1-1: USB disconnect, device number 104 [ 198.139369][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 198.188440][ T3563] kvm: emulating exchange as write [ 198.273784][ T3566] input: syz0 as /devices/virtual/input/input24 [ 198.332510][ T710] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 198.496258][ T710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.510316][ T710] usb 4-1: New USB device found, idVendor=0958, idProduct=3333, bcdDevice= 0.40 [ 198.522024][ T710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.532390][ T710] usb 4-1: config 0 descriptor?? [ 198.614294][ T31] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 198.776796][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 198.785707][ T31] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 198.795237][ T31] usb 1-1: config 0 has no interface number 0 [ 198.801536][ T31] usb 1-1: config 0 interface 184 has no altsetting 0 [ 198.810821][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 198.820241][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.828474][ T31] usb 1-1: Product: syz [ 198.833756][ T31] usb 1-1: Manufacturer: syz [ 198.839357][ T31] usb 1-1: SerialNumber: syz [ 198.845824][ T31] usb 1-1: config 0 descriptor?? [ 198.853884][ T31] smsc75xx v1.0.0 [ 198.971872][ T580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 198.971880][ T583] Bluetooth: hci0: command 0x1003 tx timeout [ 198.998169][ T325] usb 2-1: USB disconnect, device number 110 [ 199.023839][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 199.080848][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 199.096506][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 199.117065][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 199.129523][ T3585] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1070'. [ 199.140031][ T31] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 199.168393][ T31] usb 1-1: USB disconnect, device number 105 [ 199.210465][ T3580] futex_wake_op: syz.2.1069 tries to shift op by -1; fix this program [ 199.251334][ T3590] FAULT_INJECTION: forcing a failure. [ 199.251334][ T3590] name failslab, interval 1, probability 0, space 0, times 0 [ 199.273464][ T3590] CPU: 1 UID: 0 PID: 3590 Comm: syz.0.1072 Not tainted syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 199.273658][ T3590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 199.273693][ T3590] Call Trace: [ 199.273782][ T3590] [ 199.273797][ T3590] __dump_stack+0x21/0x30 [ 199.273874][ T3590] dump_stack_lvl+0x140/0x1c0 [ 199.273905][ T3590] ? __cfi_dump_stack_lvl+0x10/0x10 [ 199.273937][ T3590] dump_stack+0x19/0x20 [ 199.273966][ T3590] should_fail_ex+0x3c2/0x510 [ 199.273989][ T3590] should_failslab+0xac/0x100 [ 199.274062][ T3590] kmem_cache_alloc_node_noprof+0x45/0x420 [ 199.274089][ T3590] ? selinux_socket_getpeersec_dgram+0x25b/0x370 [ 199.274115][ T3590] ? __alloc_skb+0x10c/0x360 [ 199.274137][ T3590] __alloc_skb+0x10c/0x360 [ 199.274176][ T3590] netlink_alloc_large_skb+0xf7/0x1b0 [ 199.274206][ T3590] netlink_sendmsg+0x576/0xad0 [ 199.274229][ T3590] ? __cfi_netlink_sendmsg+0x10/0x10 [ 199.274262][ T3590] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 199.274288][ T3590] ? security_socket_sendmsg+0x3d/0x100 [ 199.274331][ T3590] ____sys_sendmsg+0x9a1/0xa00 [ 199.274354][ T3590] ? __import_iovec+0x5b9/0x7d0 [ 199.274388][ T3590] ? __sys_sendmsg_sock+0x50/0x50 [ 199.274405][ T3590] ? import_iovec+0x80/0xb0 [ 199.274427][ T3590] ___sys_sendmsg+0x2a6/0x370 [ 199.274443][ T3590] ? __sys_sendmsg+0x2a0/0x2a0 [ 199.274476][ T3590] ? proc_fail_nth_write+0x184/0x220 [ 199.274647][ T3590] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 199.274689][ T3590] ? __fget_files+0x2bc/0x330 [ 199.274722][ T3590] __x64_sys_sendmsg+0x206/0x2e0 [ 199.274739][ T3590] ? fput+0x1a4/0x230 [ 199.274761][ T3590] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 199.274792][ T3590] ? ksys_write+0x1f3/0x260 [ 199.274821][ T3590] ? __kasan_check_read+0x15/0x20 [ 199.274845][ T3590] x64_sys_call+0x2a4c/0x2ee0 [ 199.274872][ T3590] do_syscall_64+0x57/0xf0 [ 199.274890][ T3590] ? clear_bhb_loop+0x50/0xa0 [ 199.274913][ T3590] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 199.274952][ T3590] RIP: 0033:0x7f15cdf9de99 [ 199.274985][ T3590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.275005][ T3590] RSP: 002b:00007f15ceed6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.275028][ T3590] RAX: ffffffffffffffda RBX: 00007f15ce225fa0 RCX: 00007f15cdf9de99 [ 199.275044][ T3590] RDX: 0000000020000010 RSI: 0000200000000440 RDI: 0000000000000004 [ 199.275058][ T3590] RBP: 00007f15ceed6090 R08: 0000000000000000 R09: 0000000000000000 [ 199.275075][ T3590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.275101][ T3590] R13: 00007f15ce226038 R14: 00007f15ce225fa0 R15: 00007ffdd54742a8 [ 199.275123][ T3590] [ 199.878337][ T3594] x_tables: duplicate underflow at hook 2 [ 199.958066][ T31] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 200.074248][ T3598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 200.130577][ T3607] netlink: 'syz.2.1079': attribute type 16 has an invalid length. [ 200.139443][ T3607] netlink: 51802 bytes leftover after parsing attributes in process `syz.2.1079'. [ 200.151168][ T31] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 200.159619][ T31] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 200.164086][ T325] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 200.171388][ T31] usb 1-1: config 220 has no interface number 2 [ 200.187982][ T31] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 200.201759][ T31] usb 1-1: config 220 interface 0 has no altsetting 0 [ 200.208693][ T31] usb 1-1: config 220 interface 76 has no altsetting 0 [ 200.217360][ T31] usb 1-1: config 220 interface 1 has no altsetting 0 [ 200.226984][ T31] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 200.236365][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.244716][ T31] usb 1-1: Product: syz [ 200.249116][ T31] usb 1-1: Manufacturer: syz [ 200.253977][ T31] usb 1-1: SerialNumber: syz [ 200.348216][ T325] usb 2-1: Using ep0 maxpacket: 16 [ 200.355534][ T325] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.367202][ T325] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.379278][ T325] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.388792][ T325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.399546][ T325] usb 2-1: Product: syz [ 200.405400][ T325] usb 2-1: Manufacturer: syz [ 200.411808][ T325] usb 2-1: SerialNumber: syz [ 200.425818][ T710] usbhid 4-1:0.0: can't add hid device: -71 [ 200.436270][ T710] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 200.449026][ T710] usb 4-1: USB disconnect, device number 96 [ 200.489700][ T31] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 200.498803][ T31] usb 1-1: No valid video chain found. [ 200.504663][ T31] usb 1-1: selecting invalid altsetting 0 [ 200.518084][ T31] usb 1-1: USB disconnect, device number 106 [ 200.689029][ T325] usb 2-1: 0:2 : does not exist [ 200.696815][ T325] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 200.709493][ T325] usb 2-1: USB disconnect, device number 111 [ 200.735474][ T430] udevd[430]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 200.944319][ T710] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 201.096044][ T710] usb 4-1: device descriptor read/64, error -71 [ 201.334442][ T325] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 201.356159][ T710] usb 4-1: device descriptor read/64, error -71 [ 201.498453][ T325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.509691][ T325] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 201.518930][ T31] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 201.520282][ T325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.540866][ T325] usb 1-1: config 0 descriptor?? [ 201.616204][ T710] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 201.683723][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 201.692899][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.704317][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.715095][ T31] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 201.724611][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.733259][ T31] usb 2-1: Product: syz [ 201.738445][ T31] usb 2-1: Manufacturer: syz [ 201.743185][ T31] usb 2-1: SerialNumber: syz [ 201.751562][ T31] usb 2-1: selecting invalid altsetting 1 [ 201.758120][ T31] usb 2-1: unit 6 not found! [ 201.765133][ T325] usbhid 1-1:0.0: can't add hid device: -71 [ 201.772687][ T710] usb 4-1: device descriptor read/64, error -71 [ 201.780323][ T325] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 201.792525][ T325] usb 1-1: USB disconnect, device number 107 [ 202.038958][ T710] usb 4-1: device descriptor read/64, error -71 [ 202.158317][ T710] usb usb4-port1: attempt power cycle [ 202.234280][ T325] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 202.409139][ T325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.424034][ T325] usb 1-1: New USB device found, idVendor=0458, idProduct=3303, bcdDevice= 0.40 [ 202.434762][ T325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.446095][ T325] usb 1-1: config 0 descriptor?? [ 202.526633][ T710] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 202.561042][ T710] usb 4-1: device descriptor read/8, error -71 [ 202.701217][ T710] usb 4-1: device descriptor read/8, error -71 [ 202.847172][ T31] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 202.864192][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 202.876649][ T31] usb 2-1: USB disconnect, device number 112 [ 202.894471][ T430] udevd[430]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 202.918212][ T3646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.927599][ T3646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.937015][ T3646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.946932][ T3646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.981735][ T710] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 203.004684][ T710] usb 4-1: device descriptor read/8, error -71 [ 203.145714][ T710] usb 4-1: device descriptor read/8, error -71 [ 203.252826][ T31] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 203.274665][ T710] usb usb4-port1: unable to enumerate USB device [ 203.415384][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 203.423567][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.437782][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.449547][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 203.463416][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 203.473469][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.482997][ T31] usb 2-1: config 0 descriptor?? [ 203.707793][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 203.714060][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 203.724725][ T31] usb 2-1: USB disconnect, device number 113 [ 204.293372][ T31] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 204.337476][ T325] usbhid 1-1:0.0: can't add hid device: -71 [ 204.346392][ T325] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 204.356579][ T325] usb 1-1: USB disconnect, device number 108 [ 204.397960][ T36] audit: type=1400 audit(1784643372.726:472): avc: denied { shutdown } for pid=3659 comm="syz.0.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.466557][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 204.474226][ T31] usb 4-1: config 5 has an invalid interface number: 88 but max is 0 [ 204.483762][ T31] usb 4-1: config 5 has no interface number 0 [ 204.491126][ T31] usb 4-1: config 5 interface 88 has no altsetting 0 [ 204.500461][ T31] usb 4-1: New USB device found, idVendor=19d2, idProduct=0136, bcdDevice=1a.c1 [ 204.511213][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.520742][ T31] usb 4-1: Product: syz [ 204.525324][ T31] usb 4-1: Manufacturer: syz [ 204.530164][ T31] usb 4-1: SerialNumber: syz [ 204.694152][ T1621] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 204.726784][ T325] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 204.814947][ T36] audit: type=1400 audit(1784643373.113:473): avc: denied { remount } for pid=3668 comm="syz.2.1101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 204.857974][ T1621] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.869727][ T1621] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.880530][ T1621] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.896621][ T1621] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.907354][ T1621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.917358][ T325] usb 1-1: unable to get BOS descriptor or descriptor too short [ 204.927884][ T325] usb 1-1: not running at top speed; connect to a high speed hub [ 204.937333][ T1621] usb 2-1: config 0 descriptor?? [ 204.945381][ T325] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 204.956598][ T325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.965759][ T325] usb 1-1: Product: syz [ 204.972030][ T325] usb 1-1: Manufacturer: syz [ 204.978248][ T325] usb 1-1: SerialNumber: syz [ 205.310928][ T31] usb 4-1: bad CDC descriptors [ 205.325324][ T31] usb 4-1: USB disconnect, device number 101 [ 205.383100][ T3658] netlink: 'syz.1.1097': attribute type 9 has an invalid length. [ 205.398711][ T1621] usbhid 2-1:0.0: can't add hid device: -71 [ 205.406384][ T1621] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 205.420865][ T1621] usb 2-1: USB disconnect, device number 114 [ 205.669623][ T31] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 205.765051][ T325] usb 1-1: 1:1 : bogus bTerminalLink 3 [ 205.771447][ T325] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 205.784118][ T325] usb 1-1: USB disconnect, device number 109 [ 205.813590][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 205.834622][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 205.856113][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 205.870744][ T31] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 205.881177][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.892515][ T31] usb 4-1: config 0 descriptor?? [ 205.900579][ T3672] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.127911][ T3672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.138456][ T3672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.222257][ T311] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 206.319699][ T325] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 206.377043][ T3672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.385715][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 206.389583][ T3672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.393728][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 206.409883][ T31] pantherlord 0003:0810:0002.001E: unknown main item tag 0x0 [ 206.417479][ T31] pantherlord 0003:0810:0002.001E: unknown main item tag 0xd [ 206.425867][ T31] pantherlord 0003:0810:0002.001E: unknown main item tag 0x1 [ 206.433965][ T31] pantherlord 0003:0810:0002.001E: unknown main item tag 0x3 [ 206.443097][ T31] pantherlord 0003:0810:0002.001E: unknown main item tag 0x4 [ 206.451535][ T31] pantherlord 0003:0810:0002.001E: item fetching failed at offset 42/44 [ 206.460908][ T31] pantherlord 0003:0810:0002.001E: parse failed [ 206.467825][ T31] pantherlord 0003:0810:0002.001E: probe with driver pantherlord failed with error -22 [ 206.478818][ T311] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 206.489411][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.495111][ T325] usb 1-1: unable to get BOS descriptor or descriptor too short [ 206.497718][ T311] usb 2-1: Product: ᠁ [ 206.511233][ T311] usb 2-1: Manufacturer: 丛䱶঑伷雂㜩裬試蘒贈ꥄ篟讗廯ᨩ厢阁Ừ닦驝㳷禣Ț呣롺ꗲ虘㥂੯珁鞦敢뮔딚悴멢誷ꮼ邽㳙䦶괌죧썿睾莙 [ 206.512825][ T325] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.531241][ T311] usb 2-1: SerialNumber: 읃䖛妁鯡灜杣尴쑚烁诳겭魿寅啳ᦌ㣆ꝿ觎얉ฉ㳔奖衜Მ⢴傝羵쪶娶ᐍ펶퓭悩滳穂䒸䰟잫劈覱龎蓅嚶桑ゆ騠急䝯咂耰榽㺾坕좂橧ꌖ젌לּ㹬嵑㷳㲨ώ䋨ሬ뻇멩ݼ㓨蟺某ⷀ␛䂡⓲j㚂㻍눓哃틵࡞劔ᳳ̐Ｓ䎜ꊧ履絡唥潟ᐲﰽ [ 206.542367][ T325] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 206.589268][ T325] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 206.601709][ T325] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 206.616194][ T325] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 206.635641][ T325] usb 1-1: config 1 interface 1 has no altsetting 0 [ 206.647749][ T325] usb 1-1: string descriptor 0 read error: -22 [ 206.658750][ T325] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 206.668583][ T325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.680016][ T1621] usb 4-1: USB disconnect, device number 102 [ 207.533620][ T383] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 207.579147][ T311] usb 2-1: Unsupported UAC3 BADD profile [ 207.595294][ T311] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 207.612540][ T311] usb 2-1: USB disconnect, device number 115 [ 207.627011][ T430] udevd[430]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 207.674446][ T383] usb 4-1: device descriptor read/64, error -71 [ 207.796288][ T31] usb 1-1: USB disconnect, device number 110 [ 207.934676][ T311] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 207.945361][ T383] usb 4-1: device descriptor read/64, error -71 [ 208.097081][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 208.104066][ T311] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 208.114912][ T3733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1124'. [ 208.122604][ T311] usb 2-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 208.144596][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.153971][ T311] usb 2-1: config 0 descriptor?? [ 208.216320][ T383] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 208.233246][ T3735] SELinux: Context ϧ is not valid (left unmapped). [ 208.260924][ T3740] overlayfs: failed to clone upperpath [ 208.375705][ T383] usb 4-1: device descriptor read/64, error -71 [ 208.392166][ T3742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=3742 comm=syz.0.1127 [ 208.431171][ T36] audit: type=1400 audit(1784643376.444:474): avc: denied { name_bind } for pid=3743 comm="syz.0.1128" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 208.639277][ T383] usb 4-1: device descriptor read/64, error -71 [ 208.758772][ T383] usb usb4-port1: attempt power cycle [ 208.846824][ T311] usbhid 2-1:0.0: can't add hid device: -71 [ 208.856009][ T311] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 208.869360][ T311] usb 2-1: USB disconnect, device number 116 [ 208.879316][ T36] audit: type=1400 audit(1784643376.868:475): avc: denied { create } for pid=3758 comm="syz.2.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 209.007639][ T1621] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 209.126692][ T383] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 209.149892][ T383] usb 4-1: device descriptor read/8, error -71 [ 209.171672][ T1621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 209.186761][ T1621] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 209.203837][ T1621] usb 1-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 209.216954][ T1621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.228556][ T1621] usb 1-1: config 0 descriptor?? [ 209.234107][ T3753] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 209.302115][ T383] usb 4-1: device descriptor read/8, error -71 [ 209.581990][ T383] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 209.605006][ T383] usb 4-1: device descriptor read/8, error -71 [ 209.668686][ T311] usb 2-1: new low-speed USB device number 117 using dummy_hcd [ 209.689003][ T1621] pantherlord 0003:0810:0002.001F: unknown main item tag 0x0 [ 209.698762][ T1621] pantherlord 0003:0810:0002.001F: unknown main item tag 0xd [ 209.708682][ T1621] pantherlord 0003:0810:0002.001F: unknown main item tag 0x1 [ 209.718916][ T1621] pantherlord 0003:0810:0002.001F: unknown main item tag 0x3 [ 209.730249][ T1621] pantherlord 0003:0810:0002.001F: unknown main item tag 0x1 [ 209.744472][ T1621] pantherlord 0003:0810:0002.001F: hidraw0: USB HID v80.09 Device [HID 0810:0002] on usb-dummy_hcd.0-1/input0 [ 209.760005][ T1621] pantherlord 0003:0810:0002.001F: no output reports found [ 209.770397][ T383] usb 4-1: device descriptor read/8, error -71 [ 209.834038][ T311] usb 2-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 209.849615][ T311] usb 2-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.869108][ T311] usb 2-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 209.890966][ T311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 209.900843][ T311] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 209.913094][ T383] usb usb4-port1: unable to enumerate USB device [ 209.923855][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.935695][ T311] usb 2-1: config 0 descriptor?? [ 209.943564][ T1621] usb 1-1: USB disconnect, device number 111 [ 210.024960][ T36] audit: type=1400 audit(1784643377.920:476): avc: denied { execute } for pid=3785 comm="syz.2.1142" name="file0" dev="tmpfs" ino=2743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 210.080381][ T36] audit: type=1400 audit(1784643377.920:477): avc: denied { execute_no_trans } for pid=3785 comm="syz.2.1142" path="/508/file0" dev="tmpfs" ino=2743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 210.136616][ T36] audit: type=1400 audit(1784643378.031:478): avc: denied { nlmsg_read } for pid=3787 comm="syz.2.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 210.386491][ T36] audit: type=1400 audit(1784643378.253:479): avc: denied { remount } for pid=3767 comm="syz.1.1136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 210.409102][ T311] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 210.420664][ T311] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 210.429267][ T311] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 210.439432][ T311] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 210.447196][ T311] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 210.455376][ T311] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 210.464538][ T311] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 210.473284][ T311] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x1 [ 210.482368][ T311] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 210.496810][ T311] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 210.506544][ T311] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 210.514366][ T311] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 210.522778][ T311] gt683r_led 0003:1770:FF00.0020: unknown global tag 0xe [ 210.530792][ T311] gt683r_led 0003:1770:FF00.0020: item 0 0 1 14 parsing failed [ 210.541575][ T311] gt683r_led 0003:1770:FF00.0020: hid parsing failed [ 210.549075][ T311] gt683r_led 0003:1770:FF00.0020: probe with driver gt683r_led failed with error -22 [ 210.576800][ T311] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 210.597442][ T311] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 210.629799][ T1621] usb 2-1: USB disconnect, device number 117 [ 210.867903][ T3807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 210.879667][ T3807] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 210.948121][ T3811] kvm: pic: single mode not supported [ 211.049481][ T3811] kvm: pic: level sensitive irq not supported [ 211.058632][ T3811] kvm: pic: non byte write [ 211.071992][ T3811] kvm: pic: non byte write [ 211.079879][ T3811] kvm: pic: non byte read [ 211.085695][ T3811] kvm: pic: non byte write [ 211.196665][ T36] audit: type=1326 audit(1784643379.000:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3818 comm="syz.0.1154" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15cdf9de99 code=0x0 [ 211.305121][ T1621] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 211.407313][ T36] audit: type=1400 audit(1784643379.194:481): avc: denied { checkpoint_restore } for pid=3828 comm="syz.2.1158" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 211.468376][ T1621] usb 4-1: no configurations [ 211.474269][ T1621] usb 4-1: can't read configurations, error -22 [ 211.495145][ T36] audit: type=1400 audit(1784643379.277:482): avc: denied { shutdown } for pid=3838 comm="syz.2.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.519009][ T311] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 211.619426][ T1621] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 211.630256][ T383] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 211.684377][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 211.691070][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.702240][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.712341][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 211.729553][ T311] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 211.741764][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.750671][ T311] usb 1-1: config 0 descriptor?? [ 211.793252][ T1621] usb 4-1: no configurations [ 211.799083][ T1621] usb 4-1: can't read configurations, error -22 [ 211.805620][ T1621] usb usb4-port1: attempt power cycle [ 211.814444][ T383] usb 2-1: Using ep0 maxpacket: 16 [ 211.821123][ T383] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.834899][ T383] usb 2-1: config 0 interface 0 has no altsetting 0 [ 211.842246][ T383] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 211.851989][ T383] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.861000][ T383] usb 2-1: config 0 descriptor?? [ 212.060818][ T36] audit: type=1400 audit(1784643379.793:483): avc: denied { setattr } for pid=3840 comm="syz.2.1163" name="KEY" dev="sockfs" ino=30212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 212.172143][ T1621] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 212.196663][ T1621] usb 4-1: no configurations [ 212.200750][ T311] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0022/input/input26 [ 212.205375][ T1621] usb 4-1: can't read configurations, error -22 [ 212.220876][ T311] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 212.323292][ T383] logitech 0003:046D:CA03.0023: collection stack underflow [ 212.331123][ T383] logitech 0003:046D:CA03.0023: item 0 2 0 12 parsing failed [ 212.339108][ T383] logitech 0003:046D:CA03.0023: parse failed [ 212.345661][ T383] logitech 0003:046D:CA03.0023: probe with driver logitech failed with error -22 [ 212.378057][ T1621] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 212.401343][ T1621] usb 4-1: no configurations [ 212.406659][ T1621] usb 4-1: can't read configurations, error -22 [ 212.413988][ T1621] usb usb4-port1: unable to enumerate USB device [ 212.540811][ T36] audit: type=1400 audit(1784643380.246:484): avc: denied { execute } for pid=3823 comm="syz.1.1156" path="/selinux/load" dev="selinuxfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 212.566814][ T3824] SELinux: policydb magic number 0x10002 does not match expected magic number 0xf97cff8c [ 212.579030][ T3824] SELinux: failed to load policy [ 212.640139][ T1621] usb 2-1: USB disconnect, device number 118 [ 212.698833][ T3853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1166'. [ 212.710798][ T3853] netlink: 'syz.2.1166': attribute type 13 has an invalid length. [ 212.719678][ T3853] erspan0: refused to change device tx_queue_len [ 213.302415][ T3862] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1170'. [ 213.319616][ T3862] netlink: 'syz.2.1170': attribute type 4 has an invalid length. [ 213.732738][ T383] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 213.895274][ T383] usb 2-1: Using ep0 maxpacket: 16 [ 213.902946][ T383] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 213.913044][ T383] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 213.922524][ T383] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 213.935686][ T383] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 213.949186][ T383] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.962987][ T383] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.973624][ T383] usb 2-1: Product: syz [ 213.978221][ T383] usb 2-1: Manufacturer: syz [ 213.985210][ T383] usb 2-1: SerialNumber: syz [ 214.210030][ T3866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.222922][ T3866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.237846][ T383] usb 2-1: 0:2 : does not exist [ 214.247842][ T383] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 214.264294][ T383] usb 2-1: USB disconnect, device number 119 [ 214.281686][ T430] udevd[430]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 214.375808][ T36] audit: type=1400 audit(1784643381.934:485): avc: denied { execstack } for pid=3876 comm="syz.2.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 214.452474][ T1621] usb 1-1: USB disconnect, device number 112 [ 214.567252][ T710] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 214.729798][ T710] usb 4-1: Using ep0 maxpacket: 8 [ 214.736275][ T710] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 214.746853][ T710] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.760273][ T710] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 214.769940][ T710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.780195][ T710] usb 4-1: Product: syz [ 214.786736][ T710] usb 4-1: Manufacturer: syz [ 214.791914][ T710] usb 4-1: SerialNumber: syz [ 214.892623][ T1621] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 215.025674][ T710] usb 4-1: invalid UAC_HEADER (v1) [ 215.034661][ T710] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 215.047276][ T710] usb 4-1: USB disconnect, device number 111 [ 215.055580][ T1621] usb 1-1: Using ep0 maxpacket: 32 [ 215.065649][ T430] udevd[430]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 215.077315][ T329] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 215.094631][ T1621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.107600][ T1621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.119451][ T1621] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 215.130653][ T1621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.145831][ T1621] usb 1-1: config 0 descriptor?? [ 215.153637][ T1621] hub 1-1:0.0: USB hub found [ 215.252096][ T329] usb 2-1: config 2 has an invalid interface number: 185 but max is 1 [ 215.262890][ T329] usb 2-1: config 2 has an invalid interface number: 193 but max is 1 [ 215.272246][ T329] usb 2-1: config 2 has no interface number 0 [ 215.278860][ T329] usb 2-1: config 2 has no interface number 1 [ 215.285643][ T329] usb 2-1: config 2 interface 185 has no altsetting 0 [ 215.293318][ T329] usb 2-1: config 2 interface 193 has no altsetting 0 [ 215.303131][ T329] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0141, bcdDevice=5b.aa [ 215.314419][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.323516][ T329] usb 2-1: Product: Ј [ 215.328595][ T329] usb 2-1: Manufacturer: 濟麟酯킅ꔠ᥅篽︕⁡܅⃈댰枑šꎮผ礔䅅ꕷ嫤뢊ㄏ⇏殼Ỗ㘒炣쯾鷍⥙ [ 215.346292][ T329] usb 2-1: SerialNumber: syz [ 215.370307][ T3886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.380418][ T3886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.394504][ T1621] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 215.405989][ T1621] usbhid 1-1:0.0: can't add hid device: -71 [ 215.413656][ T1621] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 215.445640][ T1621] usb 1-1: USB disconnect, device number 113 [ 215.605109][ T36] audit: type=1400 audit(1784643383.069:486): avc: denied { mount } for pid=3908 comm="syz.3.1187" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 216.236368][ T311] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 216.399990][ T311] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 216.416336][ T311] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.429491][ T311] usb 1-1: config 2 interface 0 has no altsetting 0 [ 216.437360][ T311] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 216.450202][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.682712][ T36] audit: type=1400 audit(1784643384.066:487): avc: denied { write } for pid=3923 comm="syz.0.1192" path="socket:[29394]" dev="sockfs" ino=29394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 216.924770][ T311] elo 0003:04E7:0009.0024: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.0-1/input0 [ 217.168338][ T1621] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 217.180675][ T311] usb 1-1: USB disconnect, device number 114 [ 217.341672][ T1621] usb 4-1: Using ep0 maxpacket: 32 [ 217.348077][ T1621] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 254, changing to 7 [ 217.361519][ T1621] usb 4-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 217.370726][ T1621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.378841][ T1621] usb 4-1: Product: syz [ 217.383093][ T1621] usb 4-1: Manufacturer: syz [ 217.387795][ T1621] usb 4-1: SerialNumber: syz [ 217.621843][ T1621] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 217.630742][ T1621] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 217.650188][ T1621] usb 4-1: USB disconnect, device number 112 [ 217.750906][ T36] audit: type=1400 audit(1784643385.044:488): avc: denied { write } for pid=3950 comm="syz.0.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 218.035323][ T311] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 218.087567][ T329] ftdi_sio 2-1:2.185: FTDI USB Serial Device converter detected [ 218.096291][ T329] ftdi_sio ttyUSB0: unknown device type: 0x5baa [ 218.104508][ T329] ftdi_sio 2-1:2.193: FTDI USB Serial Device converter detected [ 218.113880][ T329] ftdi_sio ttyUSB1: unknown device type: 0x5baa [ 218.125702][ T329] usb 2-1: USB disconnect, device number 120 [ 218.134627][ T329] ftdi_sio 2-1:2.185: device disconnected [ 218.142550][ T329] ftdi_sio 2-1:2.193: device disconnected [ 218.210811][ T311] usb 1-1: not running at top speed; connect to a high speed hub [ 218.224684][ T311] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 218.237703][ T311] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 218.247800][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.258356][ T311] usb 1-1: Product: syz [ 218.271647][ T311] usb 1-1: Manufacturer: syz [ 218.280028][ T311] usb 1-1: SerialNumber: syz [ 218.447160][ T1621] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 218.524716][ T311] usb 1-1: USB disconnect, device number 115 [ 218.541367][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 218.620728][ T1621] usb 4-1: Using ep0 maxpacket: 8 [ 218.627973][ T710] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 218.640475][ T1621] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 218.649282][ T1621] usb 4-1: config 0 has no interface number 0 [ 218.657831][ T1621] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 218.667129][ T1621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.675395][ T1621] usb 4-1: Product: syz [ 218.679569][ T1621] usb 4-1: Manufacturer: syz [ 218.685061][ T1621] usb 4-1: SerialNumber: syz [ 218.691145][ T1621] usb 4-1: config 0 descriptor?? [ 218.820611][ T710] usb 2-1: unable to get BOS descriptor or descriptor too short [ 218.844990][ T710] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 218.856186][ T710] usb 2-1: can't read configurations, error -71 [ 218.916222][ T1621] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 218.922959][ T1621] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 218.935121][ T1621] usb 4-1: USB disconnect, device number 113 [ 219.218525][ T3988] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 219.253183][ T710] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 219.422562][ T710] usb 2-1: Using ep0 maxpacket: 8 [ 219.429830][ T710] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 219.441294][ T710] usb 2-1: too many endpoints for config 1 interface 2 altsetting 66: 61, using maximum allowed: 30 [ 219.453392][ T710] usb 2-1: config 1 interface 2 altsetting 66 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 219.467841][ T710] usb 2-1: config 1 interface 2 has no altsetting 0 [ 219.478090][ T710] usb 2-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 219.489231][ T710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.499195][ T710] usb 2-1: Product: syz [ 219.504057][ T710] usb 2-1: Manufacturer: syz [ 219.509875][ T710] usb 2-1: SerialNumber: syz [ 219.585134][ T329] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 219.748919][ T329] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 219.767494][ T329] usb 1-1: New USB device found, idVendor=0499, idProduct=1718, bcdDevice= 0.40 [ 219.780174][ T1621] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 219.789393][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.800429][ T329] usb 1-1: Product: syz [ 219.806894][ T329] usb 1-1: Manufacturer: syz [ 219.812200][ T329] usb 1-1: SerialNumber: syz [ 219.836364][ T710] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 219.849486][ T710] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 219.866172][ T710] usb 2-1: USB disconnect, device number 122 [ 219.879508][ T430] udevd[430]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 219.953656][ T1621] usb 4-1: Using ep0 maxpacket: 8 [ 219.961563][ T1621] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 219.975340][ T1621] usb 4-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 219.987364][ T1621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.999938][ T1621] usb 4-1: config 0 descriptor?? [ 220.041457][ T329] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 220.049426][ T329] usb 1-1: 2:1 : no cluster descriptor [ 220.060469][ T329] usb 1-1: USB disconnect, device number 116 [ 220.078589][ T430] udevd[430]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 220.618947][ T4014] syzkaller0: entered promiscuous mode [ 220.625632][ T4014] syzkaller0: entered allmulticast mode [ 220.670956][ T1621] usbhid 4-1:0.0: can't add hid device: -71 [ 220.679166][ T1621] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 220.695423][ T1621] usb 4-1: USB disconnect, device number 114 [ 220.756763][ T329] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 220.952685][ T329] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.966198][ T329] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.979141][ T329] usb 2-1: New USB device found, idVendor=04b4, idProduct=931e, bcdDevice= 0.40 [ 220.990643][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.002143][ T329] usb 2-1: Product: syz [ 221.007725][ T329] usb 2-1: Manufacturer: syz [ 221.014199][ T329] usb 2-1: SerialNumber: syz [ 221.240854][ T329] usb 2-1: unit 5 not found! [ 221.278730][ T329] usb 2-1: USB disconnect, device number 123 [ 221.300749][ T430] udevd[430]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 221.538359][ T4033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1231'. [ 221.776589][ T36] audit: type=1400 audit(1784643388.762:489): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 221.801955][ T329] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 221.973684][ T329] usb 4-1: unable to get BOS descriptor or descriptor too short [ 221.985838][ T329] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.000619][ T329] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 222.016843][ T329] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 222.029226][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.040502][ T329] usb 4-1: Product: syz [ 222.046174][ T329] usb 4-1: Manufacturer: syz [ 222.052896][ T329] usb 4-1: SerialNumber: syz [ 222.088636][ T1621] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 222.253927][ T1621] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 222.265518][ T1621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.276025][ T1621] usb 1-1: Product: syz [ 222.283791][ T4034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.294567][ T1621] usb 1-1: Manufacturer: syz [ 222.302651][ T1621] usb 1-1: SerialNumber: syz [ 222.309475][ T4034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.334660][ T329] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 222.346818][ T329] usb 4-1: USB disconnect, device number 115 [ 222.365700][ T430] udevd[430]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 222.565742][ T1621] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 222.591568][ T1621] usb 1-1: 1:1 : sample bitwidth 9 in over sample bytes 1 [ 222.603298][ T1621] usb 1-1: found format II with max.bitrate = 44931, frame size=8 [ 222.613758][ T1621] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 222.632114][ T1621] usb 1-1: USB disconnect, device number 117 [ 222.661075][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 222.785871][ T4091] fuse: Unknown parameter 'fd0x0000000000000003' [ 222.793969][ T4091] fuse: Unknown parameter 'fd0x0000000000000003' [ 222.821090][ T4096] bridge_slave_1: entered promiscuous mode [ 222.832545][ T4096] netlink: 'syz.2.1253': attribute type 1 has an invalid length. [ 222.844578][ T4096] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1253'. [ 222.858396][ T4096] netlink: 'syz.2.1253': attribute type 16 has an invalid length. [ 222.866585][ T4096] netlink: 64122 bytes leftover after parsing attributes in process `syz.2.1253'. [ 222.903494][ T4100] netlink: 'syz.3.1255': attribute type 2 has an invalid length. [ 222.914303][ T36] audit: type=1400 audit(1784643389.814:490): avc: denied { append } for pid=4098 comm="syz.3.1255" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 223.085691][ T66] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 223.204983][ T1621] usb 4-1: new low-speed USB device number 116 using dummy_hcd [ 223.260219][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 223.272798][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.293755][ T66] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 223.325872][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.346778][ T66] usb 2-1: config 0 descriptor?? [ 223.356627][ T1621] usb 4-1: device descriptor read/64, error -71 [ 223.649275][ T1621] usb 4-1: device descriptor read/64, error -71 [ 223.728021][ T4112] netlink: 'syz.0.1259': attribute type 39 has an invalid length. [ 224.025264][ T66] usbhid 2-1:0.0: can't add hid device: -71 [ 224.033798][ T66] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 224.046814][ T66] usb 2-1: USB disconnect, device number 124 [ 224.087450][ T36] audit: type=1404 audit(1784643390.894:491): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 224.110730][ T36] audit: type=1400 audit(1784643390.921:492): avc: denied { ioctl } for pid=4140 comm="syz.0.1267" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 224.145566][ T36] audit: type=1400 audit(1784643390.921:493): avc: denied { ioctl } for pid=4140 comm="syz.0.1267" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 224.177523][ T36] audit: type=1400 audit(1784643390.921:494): avc: denied { ioctl } for pid=4140 comm="syz.0.1267" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 224.210127][ T36] audit: type=1400 audit(1784643390.986:495): avc: denied { read write } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 224.239765][ T36] audit: type=1400 audit(1784643390.986:496): avc: denied { read write } for pid=4143 comm="syz.0.1268" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 224.267873][ T36] audit: type=1400 audit(1784643390.986:497): avc: denied { read } for pid=4143 comm="syz.0.1268" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 224.296605][ T36] audit: type=1400 audit(1784643390.986:498): avc: denied { read write } for pid=4143 comm="syz.0.1268" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 224.782875][ T4157] can0: slcan on ttyS3. [ 224.833968][ T4156] can0 (unregistered): slcan off ttyS3. [ 224.894664][ T4170] 2N: renamed from vcan0 (while UP) [ 225.214517][ T4196] netlink: 'syz.3.1286': attribute type 4 has an invalid length. [ 225.223633][ T4196] netlink: 'syz.3.1286': attribute type 5 has an invalid length. [ 225.232417][ T4196] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1286'. [ 226.725505][ T4243] tun0: tun_chr_ioctl cmd 1074025675 [ 226.733043][ T4243] tun0: persist enabled [ 226.738664][ T4242] tun0: tun_chr_ioctl cmd 1074025675 [ 226.745866][ T4242] tun0: persist enabled [ 227.204063][ T36] kauditd_printk_skb: 16825 callbacks suppressed [ 227.204084][ T36] audit: type=1400 audit(1784643393.772:17324): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 227.229253][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 227.239039][ T36] audit: type=1400 audit(1784643393.772:17325): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 227.246030][ T149] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 227.270089][ T36] audit: type=1400 audit(1784643393.772:17326): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 227.278402][ T149] audit: backlog limit exceeded [ 227.303472][ T36] audit: type=1400 audit(1784643393.772:17327): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 227.311970][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 227.333514][ T36] audit: type=1400 audit(1784643393.772:17328): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 227.342077][ T149] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 227.751139][ T4274] netlink: 679 bytes leftover after parsing attributes in process `syz.0.1315'. [ 228.002442][ T4294] netlink: 'syz.0.1324': attribute type 27 has an invalid length. [ 228.017938][ T4294] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 228.098761][ T4296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4296 comm=syz.0.1325 [ 231.443345][ T4384] netlink: 'syz.3.1358': attribute type 10 has an invalid length. [ 231.454067][ T4384] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1358'. [ 231.468392][ T4384] veth1: entered promiscuous mode [ 232.633763][ T36] kauditd_printk_skb: 36784 callbacks suppressed [ 232.633799][ T36] audit: type=1400 audit(1784643654.782:54067): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 232.663830][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 232.685641][ T294] audit: audit_backlog=65 > audit_backlog_limit=64 [ 232.688030][ T149] audit: audit_lost=18 audit_rate_limit=0 audit_backlog_limit=64 [ 232.695686][ T36] audit: type=1400 audit(1784643654.782:54068): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 232.720538][ T149] audit: backlog limit exceeded [ 232.731425][ T294] audit: audit_lost=19 audit_rate_limit=0 audit_backlog_limit=64 [ 232.743900][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 232.755970][ T36] audit: type=1400 audit(1784643654.782:54069): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 232.764293][ T294] audit: backlog limit exceeded [ 232.996845][ T4442] FAULT_INJECTION: forcing a failure. [ 232.996845][ T4442] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 233.010847][ T4442] CPU: 1 UID: 0 PID: 4442 Comm: syz.3.1378 Not tainted syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 233.010890][ T4442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 233.010906][ T4442] Call Trace: [ 233.010913][ T4442] [ 233.010922][ T4442] __dump_stack+0x21/0x30 [ 233.010956][ T4442] dump_stack_lvl+0x140/0x1c0 [ 233.010987][ T4442] ? __cfi_dump_stack_lvl+0x10/0x10 [ 233.011019][ T4442] dump_stack+0x19/0x20 [ 233.011049][ T4442] should_fail_ex+0x3c2/0x510 [ 233.011073][ T4442] should_fail+0xf/0x20 [ 233.011094][ T4442] should_fail_usercopy+0x1e/0x30 [ 233.011128][ T4442] _copy_from_iter+0x1a6/0x1520 [ 233.011158][ T4442] ? __cfi__copy_from_iter+0x10/0x10 [ 233.011188][ T4442] tun_get_user+0x231/0x3720 [ 233.011210][ T4442] ? arch_stack_walk+0x10a/0x170 [ 233.011234][ T4442] ? ptr_ring_consume+0x430/0x430 [ 233.011255][ T4442] ? _parse_integer+0x2e/0x40 [ 233.011276][ T4442] ? kstrtoull+0x13b/0x1e0 [ 233.011298][ T4442] ? __kasan_check_write+0x18/0x20 [ 233.011319][ T4442] ? ref_tracker_alloc+0x32b/0x5b0 [ 233.011346][ T4442] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 233.011372][ T4442] ? selinux_file_permission+0x318/0xb60 [ 233.011409][ T4442] ? __kasan_check_write+0x18/0x20 [ 233.011431][ T4442] ? proc_fail_nth_write+0x184/0x220 [ 233.011464][ T4442] tun_chr_write_iter+0x1fa/0x310 [ 233.011499][ T4442] vfs_write+0x75f/0xfd0 [ 233.011523][ T4442] ? __cfi_vfs_write+0x10/0x10 [ 233.011551][ T4442] ksys_write+0x145/0x260 [ 233.011574][ T4442] ? __cfi_ksys_write+0x10/0x10 [ 233.011599][ T4442] ? __kasan_check_read+0x15/0x20 [ 233.011622][ T4442] __x64_sys_write+0x7f/0x90 [ 233.011646][ T4442] x64_sys_call+0x271c/0x2ee0 [ 233.011669][ T4442] do_syscall_64+0x57/0xf0 [ 233.011695][ T4442] ? clear_bhb_loop+0x50/0xa0 [ 233.011726][ T4442] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 233.011756][ T4442] RIP: 0033:0x7faeaad9de99 [ 233.011777][ T4442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.011799][ T4442] RSP: 002b:00007faea97f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 233.011824][ T4442] RAX: ffffffffffffffda RBX: 00007faeab025fa0 RCX: 00007faeaad9de99 [ 233.011842][ T4442] RDX: 000000000000003e RSI: 0000200000000440 RDI: 0000000000000003 [ 233.011858][ T4442] RBP: 00007faea97f7090 R08: 0000000000000000 R09: 0000000000000000 [ 233.011873][ T4442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.011888][ T4442] R13: 00007faeab026038 R14: 00007faeab025fa0 R15: 00007ffc30490bc8 [ 233.011909][ T4442] [ 234.363858][ T4467] FAULT_INJECTION: forcing a failure. [ 234.363858][ T4467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.395324][ T4467] CPU: 0 UID: 0 PID: 4467 Comm: syz.0.1388 Not tainted syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 234.395362][ T4467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 234.395379][ T4467] Call Trace: [ 234.395387][ T4467] [ 234.395397][ T4467] __dump_stack+0x21/0x30 [ 234.395438][ T4467] dump_stack_lvl+0x140/0x1c0 [ 234.395472][ T4467] ? __cfi_dump_stack_lvl+0x10/0x10 [ 234.395506][ T4467] ? x64_sys_call+0x271c/0x2ee0 [ 234.395538][ T4467] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 234.395571][ T4467] dump_stack+0x19/0x20 [ 234.395603][ T4467] should_fail_ex+0x3c2/0x510 [ 234.395632][ T4467] should_fail+0xf/0x20 [ 234.395657][ T4467] should_fail_usercopy+0x1e/0x30 [ 234.395686][ T4467] _copy_from_iter+0x1a6/0x1520 [ 234.395720][ T4467] ? __cfi__copy_from_iter+0x10/0x10 [ 234.395751][ T4467] ? __check_object_size+0x54c/0x870 [ 234.395778][ T4467] ? __cfi___check_object_size+0x10/0x10 [ 234.395803][ T4467] ? __kasan_check_write+0x18/0x20 [ 234.395828][ T4467] ? __build_skb_around+0x2a4/0x590 [ 234.395862][ T4467] skb_copy_datagram_from_iter+0xf4/0x6f0 [ 234.395899][ T4467] ? napi_alloc_skb+0x212/0x560 [ 234.395933][ T4467] tun_get_user+0xd99/0x3720 [ 234.395961][ T4467] ? ptr_ring_consume+0x430/0x430 [ 234.395984][ T4467] ? _parse_integer+0x2e/0x40 [ 234.396008][ T4467] ? kstrtoull+0x13b/0x1e0 [ 234.396033][ T4467] ? __kasan_check_write+0x18/0x20 [ 234.396057][ T4467] ? ref_tracker_alloc+0x32b/0x5b0 [ 234.396087][ T4467] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 234.396116][ T4467] ? selinux_file_permission+0x318/0xb60 [ 234.396158][ T4467] ? __kasan_check_write+0x18/0x20 [ 234.396181][ T4467] ? proc_fail_nth_write+0x184/0x220 [ 234.396218][ T4467] tun_chr_write_iter+0x1fa/0x310 [ 234.396255][ T4467] vfs_write+0x75f/0xfd0 [ 234.396281][ T4467] ? __cfi_vfs_write+0x10/0x10 [ 234.396309][ T4467] ksys_write+0x145/0x260 [ 234.396335][ T4467] ? __cfi_ksys_write+0x10/0x10 [ 234.396361][ T4467] ? __kasan_check_read+0x15/0x20 [ 234.396385][ T4467] __x64_sys_write+0x7f/0x90 [ 234.396410][ T4467] x64_sys_call+0x271c/0x2ee0 [ 234.396433][ T4467] do_syscall_64+0x57/0xf0 [ 234.396460][ T4467] ? clear_bhb_loop+0x50/0xa0 [ 234.396489][ T4467] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 234.396524][ T4467] RIP: 0033:0x7f15cdf9de99 [ 234.396546][ T4467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.396567][ T4467] RSP: 002b:00007f15ceed6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.396592][ T4467] RAX: ffffffffffffffda RBX: 00007f15ce225fa0 RCX: 00007f15cdf9de99 [ 234.396611][ T4467] RDX: 000000000000003e RSI: 0000200000000440 RDI: 0000000000000003 [ 234.396628][ T4467] RBP: 00007f15ceed6090 R08: 0000000000000000 R09: 0000000000000000 [ 234.396644][ T4467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.396660][ T4467] R13: 00007f15ce226038 R14: 00007f15ce225fa0 R15: 00007ffdd54742a8 [ 234.396681][ T4467] [ 234.908203][ T4471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1390'. [ 234.935194][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.979233][ T4471] bridge_slave_0 (unregistering): left allmulticast mode [ 235.007957][ T4471] bridge_slave_0 (unregistering): left promiscuous mode [ 235.053027][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.342593][ T4457] : renamed from vlan0 [ 235.858351][ T4469] netlink: 'syz.3.1389': attribute type 6 has an invalid length. [ 236.011101][ T4496] FAULT_INJECTION: forcing a failure. [ 236.011101][ T4496] name failslab, interval 1, probability 0, space 0, times 0 [ 236.024436][ T4496] CPU: 0 UID: 0 PID: 4496 Comm: syz.3.1399 Not tainted syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 236.024471][ T4496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 236.024486][ T4496] Call Trace: [ 236.024495][ T4496] [ 236.024504][ T4496] __dump_stack+0x21/0x30 [ 236.024542][ T4496] dump_stack_lvl+0x140/0x1c0 [ 236.024574][ T4496] ? __cfi_dump_stack_lvl+0x10/0x10 [ 236.024608][ T4496] ? __cfi_fib_validate_source+0x10/0x10 [ 236.024632][ T4496] ? update_curr+0xf1/0x9c0 [ 236.024657][ T4496] dump_stack+0x19/0x20 [ 236.024688][ T4496] should_fail_ex+0x3c2/0x510 [ 236.024715][ T4496] should_failslab+0xac/0x100 [ 236.024745][ T4496] kmem_cache_alloc_noprof+0x42/0x410 [ 236.024770][ T4496] ? dst_alloc+0x13c/0x240 [ 236.024795][ T4496] dst_alloc+0x13c/0x240 [ 236.024820][ T4496] ip_route_input_rcu+0xda3/0x26b0 [ 236.024846][ T4496] ? ip_route_input_noref+0x150/0x150 [ 236.024882][ T4496] ? ipt_do_table+0x2ba/0x1540 [ 236.024908][ T4496] ? __cfi_ipt_do_table+0x10/0x10 [ 236.024934][ T4496] ? ipt_do_table+0x2ba/0x1540 [ 236.024961][ T4496] ip_route_input_noref+0xd4/0x150 [ 236.024985][ T4496] ? __cfi_ip_route_input_noref+0x10/0x10 [ 236.025012][ T4496] ? nf_hook_slow_list+0x2b9/0x3b0 [ 236.025035][ T4496] ip_rcv_finish_core+0x4ae/0x1460 [ 236.025068][ T4496] ip_sublist_rcv+0x28a/0x9b0 [ 236.025101][ T4496] ? ip_list_rcv+0x450/0x450 [ 236.025132][ T4496] ? __cfi_ip_rcv_finish+0x10/0x10 [ 236.025162][ T4496] ? ip_rcv_core+0x833/0xd00 [ 236.025194][ T4496] ip_list_rcv+0x3e8/0x450 [ 236.025226][ T4496] ? __cfi_ip_list_rcv+0x10/0x10 [ 236.025256][ T4496] ? eth_gro_receive+0x76e/0x7a0 [ 236.025292][ T4496] ? __cfi_ip_list_rcv+0x10/0x10 [ 236.025322][ T4496] __netif_receive_skb_list_core+0x830/0x880 [ 236.025360][ T4496] ? set_rps_cpu+0x670/0x670 [ 236.025393][ T4496] netif_receive_skb_list_internal+0x847/0xb00 [ 236.025430][ T4496] ? __cfi_netif_receive_skb_list_internal+0x10/0x10 [ 236.025466][ T4496] ? eth_type_trans+0x333/0x6f0 [ 236.025500][ T4496] napi_complete_done+0x323/0x790 [ 236.025536][ T4496] ? __cfi_napi_complete_done+0x10/0x10 [ 236.025570][ T4496] ? napi_gro_frags+0x7f8/0xde0 [ 236.025603][ T4496] ? tun_get_user+0x2656/0x3720 [ 236.025626][ T4496] tun_get_user+0x2673/0x3720 [ 236.025652][ T4496] ? ptr_ring_consume+0x430/0x430 [ 236.025674][ T4496] ? _parse_integer+0x2e/0x40 [ 236.025697][ T4496] ? kstrtoull+0x13b/0x1e0 [ 236.025737][ T4496] ? __kasan_check_write+0x18/0x20 [ 236.025761][ T4496] ? ref_tracker_alloc+0x32b/0x5b0 [ 236.025794][ T4496] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 236.025823][ T4496] ? selinux_file_permission+0x318/0xb60 [ 236.025870][ T4496] ? __kasan_check_write+0x18/0x20 [ 236.025892][ T4496] ? proc_fail_nth_write+0x184/0x220 [ 236.025928][ T4496] tun_chr_write_iter+0x1fa/0x310 [ 236.025965][ T4496] vfs_write+0x75f/0xfd0 [ 236.025990][ T4496] ? __cfi_vfs_write+0x10/0x10 [ 236.026018][ T4496] ksys_write+0x145/0x260 [ 236.026043][ T4496] ? xfd_validate_state+0x68/0x140 [ 236.026074][ T4496] ? __cfi_ksys_write+0x10/0x10 [ 236.026100][ T4496] ? __kasan_check_read+0x15/0x20 [ 236.026123][ T4496] __x64_sys_write+0x7f/0x90 [ 236.026147][ T4496] x64_sys_call+0x271c/0x2ee0 [ 236.026169][ T4496] do_syscall_64+0x57/0xf0 [ 236.026195][ T4496] ? clear_bhb_loop+0x50/0xa0 [ 236.026226][ T4496] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 236.026255][ T4496] RIP: 0033:0x7faeaad9de99 [ 236.026276][ T4496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.026295][ T4496] RSP: 002b:00007faea97f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 236.026318][ T4496] RAX: ffffffffffffffda RBX: 00007faeab025fa0 RCX: 00007faeaad9de99 [ 236.026336][ T4496] RDX: 000000000000003e RSI: 0000200000000440 RDI: 0000000000000003 [ 236.026353][ T4496] RBP: 00007faea97f7090 R08: 0000000000000000 R09: 0000000000000000 [ 236.026368][ T4496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.026383][ T4496] R13: 00007faeab026038 R14: 00007faeab025fa0 R15: 00007ffc30490bc8 [ 236.026404][ T4496] [ 236.713590][ T4517] kernel profiling enabled (shift: 9) [ 237.110499][ T4529] netlink: 'syz.2.1413': attribute type 4 has an invalid length. [ 237.120172][ T4529] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1413'. [ 238.063420][ T36] kauditd_printk_skb: 33128 callbacks suppressed [ 238.063442][ T36] audit: type=1400 audit(1784643659.783:77941): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 238.088041][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.094441][ T36] audit: type=1400 audit(1784643659.792:77942): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 238.101095][ T149] audit: audit_lost=3106 audit_rate_limit=0 audit_backlog_limit=64 [ 238.126770][ T36] audit: type=1400 audit(1784643659.792:77943): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 238.135192][ T149] audit: backlog limit exceeded [ 238.164689][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.172079][ T149] audit: audit_lost=3107 audit_rate_limit=0 audit_backlog_limit=64 [ 238.180214][ T295] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.181223][ T149] audit: backlog limit exceeded [ 238.431391][ T4587] futex_wake_op: syz.2.1435 tries to shift op by 144; fix this program [ 239.474772][ T2556] syz_tun (unregistering): left allmulticast mode [ 241.903156][ T4668] netlink: 'syz.3.1465': attribute type 4 has an invalid length. [ 243.493174][ T36] kauditd_printk_skb: 38728 callbacks suppressed [ 243.493194][ T36] audit: type=1400 audit(1784643664.803:116475): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.523183][ T36] audit: type=1400 audit(1784643664.803:116476): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.527956][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.547970][ T36] audit: type=1400 audit(1784643664.803:116477): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.555867][ T149] audit: audit_lost=3174 audit_rate_limit=0 audit_backlog_limit=64 [ 243.584339][ T36] audit: type=1400 audit(1784643664.803:116478): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.593293][ T149] audit: backlog limit exceeded [ 243.617944][ T36] audit: type=1400 audit(1784643664.803:116479): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.626973][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.648442][ T36] audit: type=1400 audit(1784643664.803:116480): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.796326][ T4693] netlink: 'syz.1.1470': attribute type 29 has an invalid length. [ 243.810855][ T4693] netlink: 'syz.1.1470': attribute type 32 has an invalid length. [ 246.144785][ T4711] netlink: 'syz.0.1475': attribute type 3 has an invalid length. [ 246.161674][ T4711] netlink: 944 bytes leftover after parsing attributes in process `syz.0.1475'. [ 248.923184][ T36] kauditd_printk_skb: 47255 callbacks suppressed [ 248.923206][ T36] audit: type=1400 audit(1784643669.804:163191): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 248.955743][ T36] audit: type=1400 audit(1784643669.804:163192): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 248.978291][ T36] audit: type=1400 audit(1784643669.804:163193): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 249.000818][ T36] audit: type=1400 audit(1784643669.804:163194): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 249.002720][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 249.025521][ T4730] audit: audit_backlog=65 > audit_backlog_limit=64 [ 249.037577][ T4724] audit: audit_backlog=65 > audit_backlog_limit=64 [ 249.040853][ T4730] audit: audit_lost=3357 audit_rate_limit=0 audit_backlog_limit=64 [ 249.055061][ T4728] audit: audit_backlog=65 > audit_backlog_limit=64 [ 249.056730][ T4724] audit: audit_lost=3358 audit_rate_limit=0 audit_backlog_limit=64 [ 254.352645][ T36] kauditd_printk_skb: 49749 callbacks suppressed [ 254.352666][ T36] audit: type=1400 audit(1784643674.823:212920): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.378552][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 254.387574][ T36] audit: type=1400 audit(1784643674.823:212921): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.393089][ T149] audit: audit_lost=3367 audit_rate_limit=0 audit_backlog_limit=64 [ 254.417991][ T36] audit: type=1400 audit(1784643674.823:212922): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.428175][ T149] audit: backlog limit exceeded [ 254.453464][ T36] audit: type=1400 audit(1784643674.823:212923): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.459789][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 254.481243][ T36] audit: type=1400 audit(1784643674.823:212924): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.488247][ T149] audit: audit_lost=3368 audit_rate_limit=0 audit_backlog_limit=64 [ 257.867774][ T4780] veth1_to_hsr: entered allmulticast mode [ 259.782283][ T36] kauditd_printk_skb: 47250 callbacks suppressed [ 259.782307][ T36] audit: type=1400 audit(1784643679.824:260174): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.808790][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 259.812301][ T36] audit: type=1400 audit(1784643679.834:260175): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.818704][ T149] audit: audit_lost=3369 audit_rate_limit=0 audit_backlog_limit=64 [ 259.841876][ T36] audit: type=1400 audit(1784643679.834:260176): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.850893][ T149] audit: backlog limit exceeded [ 259.873211][ T36] audit: type=1400 audit(1784643679.834:260177): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.879978][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 259.900121][ T36] audit: type=1400 audit(1784643679.834:260178): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.906786][ T149] audit: audit_lost=3370 audit_rate_limit=0 audit_backlog_limit=64 [ 262.479272][ T1716] bridge_slave_1: left allmulticast mode [ 262.486890][ T1716] bridge_slave_1: left promiscuous mode [ 262.495355][ T1716] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.513598][ T1716] bridge_slave_0: left allmulticast mode [ 262.522235][ T1716] bridge_slave_0: left promiscuous mode [ 262.556334][ T1716] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.748633][ T1716] veth1_macvtap: left promiscuous mode [ 262.764904][ T1716] veth0_vlan: left promiscuous mode [ 263.057570][ T1716] ------------[ cut here ]------------ [ 263.063761][ T1716] WARNING: CPU: 1 PID: 1716 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 263.074751][ T1716] Modules linked in: [ 263.079178][ T1716] CPU: 1 UID: 0 PID: 1716 Comm: kworker/u8:49 Not tainted syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 263.091279][ T1716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 263.103283][ T1716] Workqueue: netns cleanup_net [ 263.108869][ T1716] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 263.116012][ T1716] Code: e8 b1 0e d7 fc 4b 83 3c 3e 00 75 19 e8 45 5b 7e fc 49 81 ff f8 07 00 00 74 1b e8 37 5b 7e fc 49 83 c7 08 eb c9 e8 2c 5b 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 263.141831][ T1716] RSP: 0018:ffffc9000e097b90 EFLAGS: 00010293 [ 263.150210][ T1716] RAX: ffffffff850916c4 RBX: ffff88813103d8c0 RCX: ffff888149b62600 [ 263.159231][ T1716] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888104b48000 [ 263.168810][ T1716] RBP: ffffc9000e097bb0 R08: 0000000000000003 R09: 0000000000000004 [ 263.177617][ T1716] R10: dffffc0000000000 R11: fffff52001c12f04 R12: dffffc0000000000 [ 263.189407][ T1716] R13: dffffc0000000000 R14: ffff888104b48000 R15: 0000000000000000 [ 263.198835][ T1716] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 263.209459][ T1716] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.217963][ T1716] CR2: 000055b87f59e390 CR3: 000000010b74c000 CR4: 00000000003526b0 [ 263.226684][ T1716] DR0: 0000000000000000 DR1: 0000000000000071 DR2: 0000000000000000 [ 263.235970][ T1716] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 263.244602][ T1716] Call Trace: [ 263.248650][ T1716] [ 263.252544][ T1716] cleanup_net+0x6ba/0xc90 [ 263.258016][ T1716] ? __cfi_cleanup_net+0x10/0x10 [ 263.264123][ T1716] ? kick_pool+0xb9/0x540 [ 263.268854][ T1716] process_scheduled_works+0x7f7/0x1060 [ 263.274920][ T1716] worker_thread+0xc99/0x13f0 [ 263.280468][ T1716] kthread+0x2c7/0x360 [ 263.285405][ T1716] ? __cfi_worker_thread+0x10/0x10 [ 263.290833][ T1716] ? __cfi_kthread+0x10/0x10 [ 263.297066][ T1716] ret_from_fork+0x67/0xa0 [ 263.302170][ T1716] ? __cfi_kthread+0x10/0x10 [ 263.307291][ T1716] ret_from_fork_asm+0x1a/0x30 [ 263.312369][ T1716] [ 263.316084][ T1716] ---[ end trace 0000000000000000 ]--- [ 263.324296][ T1716] ------------[ cut here ]------------ [ 263.329941][ T1716] WARNING: CPU: 1 PID: 1716 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 263.341789][ T1716] Modules linked in: [ 263.345991][ T1716] CPU: 1 UID: 0 PID: 1716 Comm: kworker/u8:49 Tainted: G W syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 263.363014][ T1716] Tainted: [W]=WARN [ 263.366894][ T1716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 263.378219][ T1716] Workqueue: netns cleanup_net [ 263.383374][ T1716] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 263.390036][ T1716] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 f0 5a 7e fc 49 81 ff f8 07 00 00 74 1b e8 e2 5a 7e fc 49 83 c7 08 eb c5 e8 d7 5a 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 c7 5a 7e fc 5b 41 5c 41 5e 41 [ 263.412806][ T1716] RSP: 0018:ffffc9000e097b90 EFLAGS: 00010293 [ 263.420433][ T1716] RAX: ffffffff85091719 RBX: ffff888104b48800 RCX: ffff888149b62600 [ 263.430496][ T1716] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888104b48808 [ 263.441381][ T1716] RBP: ffffc9000e097bb0 R08: 0000000000000003 R09: 0000000000000004 [ 263.451377][ T1716] R10: dffffc0000000000 R11: fffff52001c12f04 R12: dffffc0000000000 [ 263.460966][ T1716] R13: dffffc0000000000 R14: ffff888104b48000 R15: 0000000000000008 [ 263.469853][ T1716] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 263.478859][ T1716] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.485841][ T1716] CR2: 000055b87f59e390 CR3: 000000010cf7e000 CR4: 00000000003526b0 [ 263.495807][ T1716] DR0: 0000000000000000 DR1: 0000000000000071 DR2: 0000000000000000 [ 263.504448][ T1716] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 263.514175][ T1716] Call Trace: [ 263.518104][ T1716] [ 263.522589][ T1716] cleanup_net+0x6ba/0xc90 [ 263.527438][ T1716] ? __cfi_cleanup_net+0x10/0x10 [ 263.534079][ T1716] ? kick_pool+0xb9/0x540 [ 263.539873][ T1716] process_scheduled_works+0x7f7/0x1060 [ 263.547250][ T1716] worker_thread+0xc99/0x13f0 [ 263.554405][ T1716] kthread+0x2c7/0x360 [ 263.559969][ T1716] ? __cfi_worker_thread+0x10/0x10 [ 263.566089][ T1716] ? __cfi_kthread+0x10/0x10 [ 263.571812][ T1716] ret_from_fork+0x67/0xa0 [ 263.577389][ T1716] ? __cfi_kthread+0x10/0x10 [ 263.582234][ T1716] ret_from_fork_asm+0x1a/0x30 [ 263.587772][ T1716] [ 263.591061][ T1716] ---[ end trace 0000000000000000 ]--- [ 263.603459][ T1716] ------------[ cut here ]------------ [ 263.609973][ T1716] WARNING: CPU: 1 PID: 1716 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 263.620347][ T1716] Modules linked in: [ 263.624572][ T1716] CPU: 1 UID: 0 PID: 1716 Comm: kworker/u8:49 Tainted: G W syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 263.639351][ T1716] Tainted: [W]=WARN [ 263.646367][ T1716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 263.657552][ T1716] Workqueue: netns cleanup_net [ 263.662683][ T1716] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 263.668304][ T1716] Code: 3c 20 00 74 08 48 89 df e8 9f ce f1 fc 48 8b 3b e8 b7 bf dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 88 b7 00 cc e8 22 1b 99 fc <0f> 0b e9 b0 fd ff ff e8 16 1b 99 fc 0f 0b e9 18 fe ff ff e8 0a 1b [ 263.691092][ T1716] RSP: 0018:ffffc9000e097b70 EFLAGS: 00010293 [ 263.697813][ T1716] RAX: ffffffff84ee56ce RBX: ffff88813103d8c0 RCX: ffff888149b62600 [ 263.707098][ T1716] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888149b62600 [ 263.715571][ T1716] RBP: ffffc9000e097b98 R08: ffffffff87d41c27 R09: 1ffffffff0fa8384 [ 263.726960][ T1716] R10: dffffc0000000000 R11: fffffbfff0fa8385 R12: 1ffffffff0fa80d8 [ 263.737561][ T1716] R13: dffffc0000000000 R14: ffff88813103e4c0 R15: dffffc0000000000 [ 263.747352][ T1716] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 263.757676][ T1716] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.765662][ T1716] CR2: 000055b87f59e390 CR3: 000000010b74c000 CR4: 00000000003526b0 [ 263.773724][ T1716] DR0: 0000000000000000 DR1: 0000000000000071 DR2: 0000000000000000 [ 263.782912][ T1716] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 263.792121][ T1716] Call Trace: [ 263.797018][ T1716] [ 263.800532][ T1716] xfrm_net_exit+0x31/0x80 [ 263.806634][ T1716] cleanup_net+0x6ba/0xc90 [ 263.812613][ T1716] ? __cfi_cleanup_net+0x10/0x10 [ 263.817816][ T1716] ? kick_pool+0xb9/0x540 [ 263.822619][ T1716] process_scheduled_works+0x7f7/0x1060 [ 263.828707][ T1716] worker_thread+0xc99/0x13f0 [ 263.834339][ T1716] kthread+0x2c7/0x360 [ 263.839125][ T1716] ? __cfi_worker_thread+0x10/0x10 [ 263.844823][ T1716] ? __cfi_kthread+0x10/0x10 [ 263.849658][ T1716] ret_from_fork+0x67/0xa0 [ 263.854695][ T1716] ? __cfi_kthread+0x10/0x10 [ 263.860164][ T1716] ret_from_fork_asm+0x1a/0x30 [ 263.865518][ T1716] [ 263.868718][ T1716] ---[ end trace 0000000000000000 ]--- [ 263.875517][ T1716] ------------[ cut here ]------------ [ 263.882757][ T1716] WARNING: CPU: 1 PID: 1716 at net/xfrm/xfrm_state.c:3224 xfrm_state_fini+0x2e2/0x310 [ 263.893106][ T1716] Modules linked in: [ 263.897485][ T1716] CPU: 1 UID: 0 PID: 1716 Comm: kworker/u8:49 Tainted: G W syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 263.912725][ T1716] Tainted: [W]=WARN [ 263.917465][ T1716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 263.931786][ T1716] Workqueue: netns cleanup_net [ 263.937010][ T1716] RIP: 0010:xfrm_state_fini+0x2e2/0x310 [ 263.944645][ T1716] Code: cc e8 22 1b 99 fc 0f 0b e9 b0 fd ff ff e8 16 1b 99 fc 0f 0b e9 18 fe ff ff e8 0a 1b 99 fc 0f 0b e9 8c fe ff ff e8 fe 1a 99 fc <0f> 0b e9 f9 fe ff ff e8 f2 1a 99 fc 0f 0b e9 66 ff ff ff 89 f9 80 [ 263.966382][ T1716] RSP: 0018:ffffc9000e097b70 EFLAGS: 00010293 [ 263.974115][ T1716] RAX: ffffffff84ee56f2 RBX: ffff88813103d8c0 RCX: ffff888149b62600 [ 263.983399][ T1716] RDX: 0000000000000000 RSI: ffff888103f55580 RDI: ffff8881000418c0 [ 263.993942][ T1716] RBP: ffffc9000e097b98 R08: 00000000283e246d R09: 00000000ca2e7790 [ 264.003118][ T1716] R10: 000000000000000d R11: ffffffff81759d20 R12: ffff888103f55480 [ 264.013618][ T1716] R13: 1ffff11026207c9b R14: 0000000000000040 R15: ffff88813103e4d8 [ 264.022203][ T1716] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 264.032749][ T1716] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.039410][ T1716] CR2: 000055b87f59e390 CR3: 000000010b74c000 CR4: 00000000003526b0 [ 264.048612][ T1716] DR0: 0000000000000000 DR1: 0000000000000071 DR2: 0000000000000000 [ 264.057906][ T1716] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 264.067682][ T1716] Call Trace: [ 264.071264][ T1716] [ 264.075569][ T1716] xfrm_net_exit+0x31/0x80 [ 264.080645][ T1716] cleanup_net+0x6ba/0xc90 [ 264.085537][ T1716] ? __cfi_cleanup_net+0x10/0x10 [ 264.091519][ T1716] ? kick_pool+0xb9/0x540 [ 264.096544][ T1716] process_scheduled_works+0x7f7/0x1060 [ 264.102888][ T1716] worker_thread+0xc99/0x13f0 [ 264.109567][ T1716] kthread+0x2c7/0x360 [ 264.114056][ T1716] ? __cfi_worker_thread+0x10/0x10 [ 264.120679][ T1716] ? __cfi_kthread+0x10/0x10 [ 264.125683][ T1716] ret_from_fork+0x67/0xa0 [ 264.130692][ T1716] ? __cfi_kthread+0x10/0x10 [ 264.136597][ T1716] ret_from_fork_asm+0x1a/0x30 [ 264.143294][ T1716] [ 264.147283][ T1716] ---[ end trace 0000000000000000 ]--- [ 264.154815][ T1716] ------------[ cut here ]------------ [ 264.162016][ T1716] WARNING: CPU: 1 PID: 1716 at net/xfrm/xfrm_state.c:3226 xfrm_state_fini+0x2ee/0x310 [ 264.173522][ T1716] Modules linked in: [ 264.178353][ T1716] CPU: 1 UID: 0 PID: 1716 Comm: kworker/u8:49 Tainted: G W syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 264.192810][ T1716] Tainted: [W]=WARN [ 264.196773][ T1716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 264.208546][ T1716] Workqueue: netns cleanup_net [ 264.214184][ T1716] RIP: 0010:xfrm_state_fini+0x2ee/0x310 [ 264.220209][ T1716] Code: ff e8 16 1b 99 fc 0f 0b e9 18 fe ff ff e8 0a 1b 99 fc 0f 0b e9 8c fe ff ff e8 fe 1a 99 fc 0f 0b e9 f9 fe ff ff e8 f2 1a 99 fc <0f> 0b e9 66 ff ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 8e fd ff [ 264.241720][ T1716] RSP: 0018:ffffc9000e097b70 EFLAGS: 00010293 [ 264.249236][ T1716] RAX: ffffffff84ee56fe RBX: ffff88813103d8c0 RCX: ffff888149b62600 [ 264.257908][ T1716] RDX: 0000000000000000 RSI: ffff888103f55480 RDI: ffff8881000418c0 [ 264.266971][ T1716] RBP: ffffc9000e097b98 R08: 000000003da670db R09: 0000000079b6a7a6 [ 264.276154][ T1716] R10: 000000000000000d R11: ffffffff81759d20 R12: ffff888103f55700 [ 264.285524][ T1716] R13: 1ffff11026207c9a R14: 0000000000000040 R15: ffff88813103e4d0 [ 264.294457][ T1716] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 264.305249][ T1716] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.312510][ T1716] CR2: 000055b87f59e390 CR3: 000000010b74c000 CR4: 00000000003526b0 [ 264.321538][ T1716] DR0: 0000000000000000 DR1: 0000000000000071 DR2: 0000000000000000 [ 264.331961][ T1716] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 264.341696][ T1716] Call Trace: [ 264.346970][ T1716] [ 264.351665][ T1716] xfrm_net_exit+0x31/0x80 [ 264.356271][ T1716] cleanup_net+0x6ba/0xc90 [ 264.360857][ T1716] ? __cfi_cleanup_net+0x10/0x10 [ 264.365978][ T1716] ? kick_pool+0xb9/0x540 [ 264.370435][ T1716] process_scheduled_works+0x7f7/0x1060 [ 264.376756][ T1716] worker_thread+0xc99/0x13f0 [ 264.381577][ T1716] kthread+0x2c7/0x360 [ 264.385697][ T1716] ? __cfi_worker_thread+0x10/0x10 [ 264.391173][ T1716] ? __cfi_kthread+0x10/0x10 [ 264.395817][ T1716] ret_from_fork+0x67/0xa0 [ 264.400555][ T1716] ? __cfi_kthread+0x10/0x10 [ 264.405467][ T1716] ret_from_fork_asm+0x1a/0x30 [ 264.410870][ T1716] [ 264.414825][ T1716] ---[ end trace 0000000000000000 ]--- [ 264.488231][ T1716] veth0_vlan: left allmulticast mode [ 264.494240][ T1716] bridge0: port 3(veth0_vlan) entered disabled state [ 264.503642][ T1716] bridge_slave_1: left allmulticast mode [ 264.509940][ T1716] bridge_slave_1: left promiscuous mode [ 264.515769][ T1716] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.526581][ T1716] bridge_slave_1: left allmulticast mode [ 264.532966][ T1716] bridge_slave_1: left promiscuous mode [ 264.541718][ T1716] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.551898][ T1716] bridge_slave_0: left allmulticast mode [ 264.557831][ T1716] bridge_slave_0: left promiscuous mode [ 264.564336][ T1716] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.739573][ T1716] tipc: Disabling bearer [ 264.745662][ T1716] tipc: Left network mode [ 264.753418][ T1716] veth1_macvtap: left promiscuous mode [ 264.761151][ T1716] veth0_vlan: left promiscuous mode [ 264.768212][ T1716] veth1_macvtap: left promiscuous mode [ 265.212186][ T36] kauditd_printk_skb: 35201 callbacks suppressed [ 265.212214][ T36] audit: type=1400 audit(1784643684.835:293237): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 265.241329][ T36] audit: type=1400 audit(1784643684.844:293238): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 265.245972][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 265.267890][ T36] audit: type=1400 audit(1784643684.844:293239): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 265.277560][ T149] audit: audit_lost=4085 audit_rate_limit=0 audit_backlog_limit=64 [ 265.303754][ T36] audit: type=1400 audit(1784643684.844:293240): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 265.314807][ T149] audit: backlog limit exceeded [ 265.340556][ T36] audit: type=1400 audit(1784643684.844:293241): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 265.345228][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 265.368752][ T36] audit: type=1400 audit(1784643684.844:293242): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.641740][ T36] kauditd_printk_skb: 48981 callbacks suppressed [ 270.641761][ T36] audit: type=1400 audit(1784643689.845:341868): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.672750][ T36] audit: type=1400 audit(1784643689.854:341869): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.673776][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 270.697773][ T36] audit: type=1400 audit(1784643689.854:341870): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.705475][ T149] audit: audit_lost=4205 audit_rate_limit=0 audit_backlog_limit=64 [ 270.730413][ T36] audit: type=1400 audit(1784643689.854:341871): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.738820][ T149] audit: backlog limit exceeded [ 270.762173][ T36] audit: type=1400 audit(1784643689.854:341872): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.768702][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 270.791705][ T36] audit: type=1400 audit(1784643689.854:341873): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0