last executing test programs: 33.459108232s ago: executing program 0 (id=790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xdddd0000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0xa, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0xfc, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xbf, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x2, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xfd}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x8, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x60000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x400, 0x7, 0xc5]}) 33.346514785s ago: executing program 0 (id=791): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="271602"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 30.370601498s ago: executing program 0 (id=829): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0x3}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="e71d75bb783fee7f645ab27cd92eabeaa8ee4a2c28850b1546037ca1751ee8417c82206b5cbcd1251c9dbe9984c8b42ce06b245cfbe80062f4d4834d95148ac0e2e105b824457f8dbb0421057b5f7c0b81eb8d3db385b5f61f4a41d7236b27e0064caa90f57682", 0x67}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 30.29848994s ago: executing program 0 (id=830): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 30.29824599s ago: executing program 0 (id=831): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) sendmmsg$unix(r1, &(0x7f0000010a80)=[{{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000002600)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r5}}}], 0x70, 0x40c0}}], 0x1, 0x20000000) 30.260842881s ago: executing program 0 (id=832): keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000000)='\xc9\x8d\n$\x11J\x06t\x8e\xa6ZH\x88\x9967\xd1\xe6zy\xb1\xc7\xcbB-\xacbe\xad\xc4\xc4o\x1f\xae\x1d\x82v\xe6\x8e\x9eAT\xe49\x17\x85hfr\xca\x03\xcf\x00\x00\x00\x00\x00\x00', 0x0) 30.234756832s ago: executing program 32 (id=832): keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000000)='\xc9\x8d\n$\x11J\x06t\x8e\xa6ZH\x88\x9967\xd1\xe6zy\xb1\xc7\xcbB-\xacbe\xad\xc4\xc4o\x1f\xae\x1d\x82v\xe6\x8e\x9eAT\xe49\x17\x85hfr\xca\x03\xcf\x00\x00\x00\x00\x00\x00', 0x0) 17.634503234s ago: executing program 2 (id=1062): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x2, 0x6, 0x103, 0x0, 0x0, 0x0, 0x0}) 17.625406595s ago: executing program 2 (id=1064): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept(0xffffffffffffffff, 0x0, 0x0) 17.562429347s ago: executing program 2 (id=1066): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x40100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff, 0x3}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 17.562085937s ago: executing program 2 (id=1067): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) ftruncate(r3, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 16.706333466s ago: executing program 2 (id=1070): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000000c0)={0x2, 0x240, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0x3, 0x6}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r5) 15.850222846s ago: executing program 2 (id=1085): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xc0, 0x0, 0x8000}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ptrace(0x10, 0x1) 3.710074482s ago: executing program 3 (id=1242): r0 = socket(0x10, 0x803, 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f00000002c0)) 3.709995472s ago: executing program 3 (id=1243): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDADDIO(r0, 0x4b34, 0x9) 3.705325842s ago: executing program 3 (id=1244): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x20, 0xa, 0x6, 0x5c13}, {0x6, 0xff, 0xc, 0x401}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 3.676815603s ago: executing program 3 (id=1245): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a40)={0x34, &(0x7f00000006c0)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.166113145s ago: executing program 1 (id=1256): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x40000009, 0x4) recvmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000001c0)=0x47f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.73390564s ago: executing program 4 (id=1272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf250f000000240007800c00030006000000000000000c0004"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) 1.658001943s ago: executing program 4 (id=1273): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x2}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x1, 0x2, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 1.302139245s ago: executing program 1 (id=1274): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x8000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2420, 0x0) 1.242712637s ago: executing program 1 (id=1275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x200080d0}, 0x40010) 1.1382864s ago: executing program 1 (id=1276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f00000002c0)={[{0xfffc, 0x103, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xffffffff, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x6, 0x10, 0xc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x21, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}]}) 1.130399271s ago: executing program 1 (id=1277): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x476d, &(0x7f0000000140)={0x0, 0x9167, 0x80, 0x1, 0x35d}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 821.672251ms ago: executing program 4 (id=1278): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) sendto$inet(r0, &(0x7f0000000500)="b018", 0x2, 0x40001, 0x0, 0x0) shutdown(r0, 0x1) 812.065642ms ago: executing program 33 (id=1085): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xc0, 0x0, 0x8000}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ptrace(0x10, 0x1) 758.652063ms ago: executing program 4 (id=1280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40090}, 0x20008040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c000180"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 709.390095ms ago: executing program 4 (id=1281): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACETEARDOWN(r0, 0xc0c0128e, 0x0) 670.592807ms ago: executing program 4 (id=1282): mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004000)=ANY=[@ANYBLOB="240000006c0001"], 0x24}}, 0x4008000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) (async) syz_usb_connect_ath9k(0x3, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e402, [{{0x9, 0x2, 0xfffffffffffffc3f}}]}}, 0x7fe782539b0b) 598.506339ms ago: executing program 3 (id=1283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000ac0)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x7f4e4cdec6f75847}, 0x24002090) 591.736279ms ago: executing program 3 (id=1284): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000440)) (async) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000440)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000140)={{0xffff0060, 0x3000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x7, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x30000, 0x4, 0x4, 0x11, 0x81, 0x8f, 0x5, 0x5, 0x4, 0x92, 0x9}, {0x40000, 0xeeef0000, 0x1b, 0x7, 0x1, 0x40, 0x4, 0x0, 0xfa, 0x29, 0x9, 0x9}, {0xeeee8000, 0x0, 0x1, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x4000, 0x80a0000, 0x10, 0x2, 0xad, 0x2, 0x5, 0x4, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x10000, 0xe, 0x0, 0xcd, 0x5, 0x5, 0x26, 0xa, 0x6, 0xff, 0x6}, {0x1, 0x6000, 0xb, 0xe, 0x13, 0x1e, 0x3, 0x0, 0x7f, 0x5, 0x9, 0x96}, {0x3000, 0x405}, {0x80a0000, 0xff81}, 0xe0000031, 0x0, 0x6000, 0x60, 0x80000000005, 0xa800, 0x800f900, 0x1, [0x6, 0x400, 0x8000000000000003, 0x1]}) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d000905090000000006f808050ae500"], 0x0) 252.814981ms ago: executing program 1 (id=1285): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x80, @ipv4={'\x00', '\xff\xff', @empty}, 0x8007}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000680), 0x1d}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000340)={[0xdddd0000, 0x0, 0x1000, 0xf000], 0x800, 0x0, 0x8}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x4, 0x7f, 0x4232, 0x0, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x12, 0x0, 0x101}}) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) chroot(&(0x7f0000000000)='./file0\x00') r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a88800892f4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) ioctl$BTRFS_IOC_SPACE_INFO(r7, 0xc0109414, &(0x7f0000000140)={0xdec, 0x100000001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) getcwd(0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 60.672077ms ago: executing program 5 (id=1279): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = epoll_create1(0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000014}) 351.089µs ago: executing program 5 (id=1286): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001900010000000000000000001d0109004d00128008002100", @ANYRES32=0x0, @ANYBLOB="428184a477201acb0f24d8c531680464ff1e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3da0000000c000d"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x804) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000007c0)={@any, 0x382}) 0s ago: executing program 5 (id=1287): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000180)) syz_usb_connect$uac1(0x3, 0x95, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x2b73, 0x1e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x7, 0x30, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x81, 0x2, 0x7f, 0xa}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x4, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x3, 0x1, {0x7, 0x25, 0x1, 0x0, 0x2f, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5e, 0x2, 0x1002}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x1ff, 0x53, "38b74b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xf8, 0x6, 0xff, {0x7, 0x25, 0x1, 0x0, 0x9, 0xcd}}}}}}}}]}}, 0x0) kernel console output (not intermixed with test programs): ric 4-1:3.255: device disconnected [ 59.763154][ T348] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 59.776744][ T348] usb 2-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 59.786408][ T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.794774][ T348] usb 2-1: Product: syz [ 59.798967][ T348] usb 2-1: Manufacturer: ఊ [ 59.803643][ T348] usb 2-1: SerialNumber: syz [ 60.010740][ T1324] fuseblk: Bad value for 'fd' [ 60.216244][ T348] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 60.223867][ T348] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 60.230798][ T348] usb 2-1: unit 3 not found! [ 60.241269][ T348] usb 2-1: USB disconnect, device number 27 [ 60.253879][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.274598][ T320] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 60.394538][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 60.435674][ T320] usb 1-1: too many configurations: 79, using maximum allowed: 8 [ 60.450223][ T320] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 60.459409][ T320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.467992][ T320] usb 1-1: Product: syz [ 60.472366][ T320] usb 1-1: Manufacturer: syz [ 60.476984][ T320] usb 1-1: SerialNumber: syz [ 60.544490][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 60.551428][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 60.560056][ T10] usb 4-1: config 1 has an invalid interface number: 206 but max is 0 [ 60.568455][ T10] usb 4-1: config 1 has no interface number 0 [ 60.576322][ T10] usb 4-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 60.585508][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.593509][ T10] usb 4-1: Product: syz [ 60.597855][ T10] usb 4-1: Manufacturer: syz [ 60.602459][ T10] usb 4-1: SerialNumber: syz [ 60.779212][ T36] audit: type=1400 audit(1775142895.105:495): avc: denied { accept } for pid=1350 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.813493][ T10] usb 4-1: USB disconnect, device number 28 [ 61.001463][ T1366] cgroup: Unknown subsys name 'measure' [ 61.087499][ T320] (unnamed net_device) (uninitialized): Assigned a random MAC address: ae:6b:4c:55:2e:2e [ 61.115923][ T320] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 61.125539][ T320] usb 1-1: USB disconnect, device number 21 [ 61.155584][ T36] audit: type=1400 audit(1775142895.485:496): avc: denied { name_bind } for pid=1378 comm="syz.2.365" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 61.207068][ T1381] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 61.223965][ T1381] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 61.346407][ T36] audit: type=1400 audit(1775142895.675:497): avc: denied { ioctl } for pid=1391 comm="syz.3.369" path="mnt:[4026532313]" dev="nsfs" ino=4026532313 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.473971][ T36] audit: type=1326 audit(1775142895.795:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1387 comm="syz.1.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd788b9c819 code=0x7fc00000 [ 61.534506][ T36] audit: type=1326 audit(1775142895.795:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1387 comm="syz.1.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fd788b9c819 code=0x7fc00000 [ 61.546583][ T1401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.574490][ T36] audit: type=1326 audit(1775142895.795:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1387 comm="syz.1.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd788b9c819 code=0x7fc00000 [ 61.585163][ T1401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.764704][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 61.784470][ T320] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 61.894490][ T381] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 61.914482][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 61.920788][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 61.931379][ T31] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 61.940925][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.949627][ T31] usb 2-1: Product: syz [ 61.953995][ T31] usb 2-1: Manufacturer: syz [ 61.959045][ T31] usb 2-1: SerialNumber: syz [ 61.963867][ T320] usb 4-1: unable to get BOS descriptor or descriptor too short [ 61.972500][ T1409] overlay: Unknown parameter ':' [ 61.973219][ T31] usb 2-1: config 0 descriptor?? [ 61.983220][ T320] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 61.994187][ T31] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 62.001751][ T320] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.011306][ T31] usb 2-1: Detected FT232R [ 62.019328][ T320] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 62.028716][ T320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.037135][ T320] usb 4-1: Product: Е [ 62.041250][ T320] usb 4-1: SerialNumber: 꼎㙛тꕣἼ稾疹冱꓄脌戣쟦湟鳢㏤ꨄẴ簱㗓ꒁ摐㙪繅姤眨靖 [ 62.056488][ T381] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 62.064940][ T381] usb 1-1: config 160 has no interface number 0 [ 62.071192][ T381] usb 1-1: config 160 interface 200 has no altsetting 0 [ 62.079560][ T381] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 62.088700][ T381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.096755][ T381] usb 1-1: Product: syz [ 62.100961][ T381] usb 1-1: Manufacturer: syz [ 62.105634][ T381] usb 1-1: SerialNumber: syz [ 62.185337][ T1396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:188 [ 62.185775][ T1396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.203804][ T1396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.221302][ T31] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 62.228365][ T31] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 62.235459][ T31] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 62.242515][ T31] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 62.254126][ T31] usb 2-1: USB disconnect, device number 28 [ 62.261378][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 62.271468][ T31] ftdi_sio 2-1:0.0: device disconnected [ 62.277580][ T320] usb 4-1: 0:1 : does not exist [ 62.285060][ T320] usb 4-1: unit 13 not found! [ 62.292222][ T320] usb 4-1: USB disconnect, device number 29 [ 62.302737][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.380467][ T381] usb 1-1: MIDIStreaming interface descriptor not found [ 62.389703][ T381] usb 1-1: USB disconnect, device number 22 [ 62.400874][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.889173][ T1432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=1432 comm=syz.2.383 [ 62.902597][ T1432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1432 comm=syz.2.383 [ 62.957640][ T1438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.386'. [ 62.989861][ T1445] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 63.034517][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 63.148846][ T1455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.392'. [ 63.195786][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 63.206465][ T10] usb 4-1: config 4 has an invalid interface number: 218 but max is 0 [ 63.215073][ T10] usb 4-1: config 4 has no interface number 0 [ 63.221263][ T10] usb 4-1: config 4 interface 218 has no altsetting 0 [ 63.235164][ T10] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=88.0a [ 63.244235][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.252273][ T10] usb 4-1: Product: syz [ 63.256781][ T10] usb 4-1: Manufacturer: syz [ 63.263528][ T10] usb 4-1: SerialNumber: syz [ 63.324683][ T1457] mmap: syz.0.393 (1457) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.502038][ T1429] devpts: called with bogus options [ 63.809300][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 63.809320][ T36] audit: type=1400 audit(1775142898.135:514): avc: denied { accept } for pid=1484 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 63.835412][ T36] audit: type=1400 audit(1775142898.155:515): avc: denied { listen } for pid=1484 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 63.835888][ T1485] netlink: 'syz.2.401': attribute type 46 has an invalid length. [ 63.959828][ T36] audit: type=1400 audit(1775142898.285:516): avc: denied { map } for pid=1486 comm="syz.2.402" path="socket:[10465]" dev="sockfs" ino=10465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 64.191215][ T10] sr9700 4-1:4.218: probe with driver sr9700 failed with error -22 [ 64.208929][ T10] usb 4-1: USB disconnect, device number 30 [ 64.223697][ T1501] syzkaller1: entered promiscuous mode [ 64.229285][ T1501] syzkaller1: entered allmulticast mode [ 64.425484][ T36] audit: type=1400 audit(1775142898.755:517): avc: denied { getopt } for pid=1511 comm="syz.0.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.542952][ T1519] syzkaller1: entered promiscuous mode [ 64.548508][ T1519] syzkaller1: entered allmulticast mode [ 64.624494][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 64.642711][ T36] audit: type=1400 audit(1775142898.965:518): avc: denied { read } for pid=1526 comm="syz.0.416" name="usbmon3" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 64.666562][ T36] audit: type=1400 audit(1775142898.965:519): avc: denied { open } for pid=1526 comm="syz.0.416" path="/dev/usbmon3" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 64.733166][ T1535] netlink: 'syz.2.415': attribute type 19 has an invalid length. [ 64.741016][ T1535] netlink: 'syz.2.415': attribute type 28 has an invalid length. [ 64.751516][ T1534] netlink: 96 bytes leftover after parsing attributes in process `syz.0.417'. [ 64.761104][ T36] audit: type=1400 audit(1775142899.085:520): avc: denied { listen } for pid=1533 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.774480][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 64.787418][ T10] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.798399][ T10] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 64.811833][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 64.818552][ T10] usb 4-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 64.827800][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.836410][ T10] usb 4-1: config 0 descriptor?? [ 64.994500][ T65] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 65.144482][ T65] usb 1-1: Invalid ep0 maxpacket: 32 [ 65.274479][ T65] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 65.424470][ T65] usb 1-1: Invalid ep0 maxpacket: 32 [ 65.429904][ T65] usb usb1-port1: attempt power cycle [ 65.445786][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 65.451741][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 65.461693][ T10] usb 4-1: USB disconnect, device number 31 [ 65.516624][ T36] audit: type=1400 audit(1775142899.845:521): avc: denied { mount } for pid=1537 comm="syz.2.418" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 65.539352][ T1538] overlayfs: failed to clone lowerpath [ 65.560182][ T1540] netlink: 'syz.2.419': attribute type 46 has an invalid length. [ 65.774549][ T65] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 65.794970][ T65] usb 1-1: Invalid ep0 maxpacket: 32 [ 65.897977][ T36] audit: type=1400 audit(1775142900.225:522): avc: denied { watch } for pid=1552 comm="syz.1.423" path="/74/file0" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.929970][ T65] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 65.954835][ T65] usb 1-1: Invalid ep0 maxpacket: 32 [ 65.960275][ T65] usb usb1-port1: unable to enumerate USB device [ 65.977221][ T1559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.424'. [ 66.092714][ T1569] netlink: 72 bytes leftover after parsing attributes in process `syz.2.429'. [ 66.102122][ T1569] netlink: 64 bytes leftover after parsing attributes in process `syz.2.429'. [ 66.152503][ T1571] 9pnet_fd: Insufficient options for proto=fd [ 66.304490][ T10] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 66.455668][ T10] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 66.464039][ T10] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 66.472262][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 66.481158][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 66.492042][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 66.501807][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 66.516780][ T10] usb 2-1: string descriptor 0 read error: -22 [ 66.523348][ T10] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 66.532454][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.540962][ T10] usb 2-1: config 0 descriptor?? [ 66.546946][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 66.552966][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 66.854620][ T31] usb 2-1: USB disconnect, device number 29 [ 67.057820][ T1583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 67.304500][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 67.320353][ T36] audit: type=1400 audit(1775142901.645:523): avc: denied { accept } for pid=1587 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.464482][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 67.475234][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.504477][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.514265][ T10] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 67.523762][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.532865][ T10] usb 4-1: config 0 descriptor?? [ 67.554475][ T31] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 67.729897][ T31] usb 2-1: config 2 has an invalid interface number: 237 but max is 0 [ 67.738219][ T31] usb 2-1: config 2 has no interface number 0 [ 67.745148][ T31] usb 2-1: config 2 interface 237 altsetting 9 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 67.757334][ T31] usb 2-1: config 2 interface 237 altsetting 9 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 67.768846][ T31] usb 2-1: config 2 interface 237 has no altsetting 0 [ 67.777788][ T31] usb 2-1: New USB device found, idVendor=0421, idProduct=04ce, bcdDevice=4a.2d [ 67.787179][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.804467][ T31] usb 2-1: Product: syz [ 67.811552][ T31] usb 2-1: Manufacturer: syz [ 67.816403][ T31] usb 2-1: SerialNumber: syz [ 67.948101][ T10] ntrig 0003:1B96:0008.0005: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.3-1/input0 [ 68.025335][ T31] rndis_host 2-1:2.237: skipping garbage [ 68.031026][ T31] usb 2-1: bad CDC descriptors [ 68.036163][ T31] cdc_acm 2-1:2.237: skipping garbage [ 68.042905][ T31] usb 2-1: USB disconnect, device number 30 [ 68.146958][ T10] usb 4-1: USB disconnect, device number 32 [ 68.214530][ T65] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 68.344537][ T65] usb 1-1: device descriptor read/64, error -71 [ 68.584543][ T65] usb 1-1: device descriptor read/64, error -71 [ 68.764551][ T31] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 68.824522][ T65] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 68.904494][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 68.915981][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 68.925928][ T31] usb 2-1: New USB device found, idVendor=0499, idProduct=101e, bcdDevice= 0.40 [ 68.935020][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.942993][ T31] usb 2-1: Product: syz [ 68.947181][ T31] usb 2-1: Manufacturer: 릃⛌쿪虙⣙䳣머ꬌ죓⭢혡鮶ꎌ䡺볂﵍缷둧쵯퓢繣韂ﵤᣪ䦪놥楮㤉䕢첟뜁꛵띂㮪ࢭ灟섹㧶鈡ﮅ㽀셧ᝲ鞌绪箈녲࣢氅퇉ᵆ镰䬸닰랜鳭̫䒽﫭犧밂앤慻䩡哔㤌坙㩺㮳ཬ湘ᔨ楚㦵鷬ឈ客Ე᧺㥁쟶꾯ߏ砃戶䉱뢆옇乬 [ 68.977510][ T31] usb 2-1: SerialNumber: syz [ 68.984491][ T65] usb 1-1: device descriptor read/64, error -71 [ 69.065857][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.076894][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.086691][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 69.095824][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.104991][ T10] usb 4-1: config 0 descriptor?? [ 69.188434][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 69.199264][ T31] usb 2-1: USB disconnect, device number 31 [ 69.212504][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.234844][ T65] usb 1-1: device descriptor read/64, error -71 [ 69.344596][ T65] usb usb1-port1: attempt power cycle [ 69.684515][ T65] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 69.714901][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 69.720987][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 69.721011][ T1620] binder: Unknown parameter '18446744073709551615' [ 69.730291][ T10] usb 4-1: USB disconnect, device number 33 [ 69.747267][ T65] usb 1-1: device descriptor read/8, error -71 [ 69.875576][ T65] usb 1-1: device descriptor read/8, error -71 [ 70.114493][ T65] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 70.135630][ T65] usb 1-1: device descriptor read/8, error -71 [ 70.225666][ T1631] fuse: Bad value for 'fd' [ 70.231496][ T1632] fuse: Bad value for 'fd' [ 70.267038][ T65] usb 1-1: device descriptor read/8, error -71 [ 70.361595][ T1652] netlink: 'syz.2.458': attribute type 21 has an invalid length. [ 70.369519][ T1652] netlink: 388 bytes leftover after parsing attributes in process `syz.2.458'. [ 70.385166][ T65] usb usb1-port1: unable to enumerate USB device [ 70.412212][ T36] audit: type=1400 audit(1775142904.735:524): avc: denied { remount } for pid=1658 comm="syz.2.461" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 70.481022][ T1670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.489676][ T1670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.569289][ T36] audit: type=1400 audit(1775142904.895:525): avc: denied { validate_trans } for pid=1674 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 70.608776][ T36] audit: type=1400 audit(1775142904.935:526): avc: denied { mounton } for pid=1678 comm="syz.1.467" path="/proc/230/task" dev="proc" ino=11386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 70.914522][ T65] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 70.988233][ T36] audit: type=1400 audit(1775142905.315:527): avc: denied { setcheckreqprot } for pid=1715 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 71.017805][ T36] audit: type=1400 audit(1775142905.345:528): avc: denied { accept } for pid=1720 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 71.053362][ T1730] netlink: 116 bytes leftover after parsing attributes in process `syz.1.478'. [ 71.085630][ T65] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.098048][ T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.107518][ T65] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 71.115650][ T65] usb 4-1: Product: syz [ 71.119887][ T65] usb 4-1: SerialNumber: syz [ 71.284506][ T31] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 71.316600][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 71.329848][ T1734] netlink: 140 bytes leftover after parsing attributes in process `syz.2.480'. [ 71.434509][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 71.440737][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.450868][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.461361][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.470467][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.478489][ T31] usb 1-1: Product: syz [ 71.482646][ T31] usb 1-1: Manufacturer: syz [ 71.487276][ T31] usb 1-1: SerialNumber: syz [ 71.495972][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 71.506105][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 71.515376][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.523915][ T10] usb 2-1: Product: syz [ 71.528200][ T10] usb 2-1: Manufacturer: syz [ 71.529567][ T1677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.532807][ T10] usb 2-1: SerialNumber: syz [ 71.543359][ T1677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.755264][ T31] usb 1-1: 0:2 : does not exist [ 71.762115][ T31] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 71.772841][ T31] usb 1-1: USB disconnect, device number 31 [ 71.772949][ T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 71.795563][ T10] usb 2-1: USB disconnect, device number 32 [ 71.802632][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.878113][ T1736] fuse: Unknown parameter 'w000000000000000000000070x000000000000000700000000000000000000007' [ 71.960872][ T1677] netlink: 92 bytes leftover after parsing attributes in process `syz.3.466'. [ 72.171296][ T36] audit: type=1400 audit(1775142906.495:529): avc: denied { execute_no_trans } for pid=1676 comm="syz.3.466" path=2F6D656D66643A5B0B7827A5291AA9FDFAADD16D64C8854858A9250C1A6501202864656C6574656429 dev="tmpfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.200873][ T65] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 72.207326][ T65] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 72.214843][ T65] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 72.344074][ T36] audit: type=1400 audit(1775142906.665:530): avc: denied { bind } for pid=1747 comm="syz.0.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.372734][ T36] audit: type=1400 audit(1775142906.695:531): avc: denied { create } for pid=1752 comm="syz.0.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.401651][ T65] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 72.414364][ T65] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 72.432918][ T65] usb 4-1: USB disconnect, device number 34 [ 72.440823][ T1759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.488'. [ 72.453504][ T65] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 72.504506][ T31] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 72.634489][ T31] usb 2-1: device descriptor read/64, error -71 [ 72.684557][ T320] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 72.835594][ T320] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 72.845852][ T320] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 72.859819][ T320] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.868903][ T320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 72.877012][ T31] usb 2-1: device descriptor read/64, error -71 [ 72.883270][ T320] usb 1-1: SerialNumber: syz [ 72.889740][ T320] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 72.916553][ T1767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.492'. [ 72.968326][ T36] audit: type=1326 audit(1775142907.295:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1766 comm="syz.3.492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f383a79c819 code=0x0 [ 73.091196][ T1761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.099720][ T1761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.108208][ T320] usb 1-1: USB disconnect, device number 32 [ 73.114922][ T31] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 73.254546][ T31] usb 2-1: device descriptor read/64, error -71 [ 73.314524][ T65] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 73.464516][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 73.471071][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 73.479487][ T65] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 73.491627][ T65] usb 4-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 73.500864][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.504506][ T31] usb 2-1: device descriptor read/64, error -71 [ 73.508896][ T65] usb 4-1: Product: syz [ 73.519293][ T65] usb 4-1: Manufacturer: syz [ 73.523900][ T65] usb 4-1: SerialNumber: syz [ 73.624665][ T31] usb usb2-port1: attempt power cycle [ 73.797340][ T65] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 73.812692][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.813508][ T65] usb 4-1: USB disconnect, device number 35 [ 73.964593][ T31] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 73.985556][ T31] usb 2-1: device descriptor read/8, error -71 [ 74.067085][ T1825] overlayfs: failed to clone upperpath [ 74.123960][ T36] audit: type=1400 audit(1775142908.445:533): avc: denied { ioctl } for pid=1831 comm="syz.2.512" path="socket:[12686]" dev="sockfs" ino=12686 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.124055][ T1832] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 74.159509][ T31] usb 2-1: device descriptor read/8, error -71 [ 74.404569][ T31] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 74.425615][ T31] usb 2-1: device descriptor read/8, error -71 [ 74.555497][ T31] usb 2-1: device descriptor read/8, error -71 [ 74.664597][ T31] usb usb2-port1: unable to enumerate USB device [ 74.896569][ T1857] fuse: Bad value for 'user_id' [ 74.901454][ T1857] fuse: Bad value for 'user_id' [ 75.504506][ T31] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 75.654535][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 75.661126][ T31] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 75.674229][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 75.674533][ T65] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 75.680904][ T31] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 75.697552][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.706567][ T31] usb 4-1: config 0 descriptor?? [ 75.828527][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 75.828547][ T36] audit: type=1326 audit(1775142910.155:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1888 comm="syz.2.533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d58f9c819 code=0x0 [ 75.857476][ T65] usb 2-1: Using ep0 maxpacket: 8 [ 75.863786][ T65] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 75.872053][ T65] usb 2-1: config 0 has no interface number 0 [ 75.878199][ T65] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 75.890012][ T65] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 65, changing to 10 [ 75.902400][ T65] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 16947, setting to 1024 [ 75.913772][ T65] usb 2-1: config 0 interface 200 has no altsetting 0 [ 75.922438][ T65] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 75.931860][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.939928][ T65] usb 2-1: Product: syz [ 75.944114][ T65] usb 2-1: Manufacturer: syz [ 75.948804][ T65] usb 2-1: SerialNumber: syz [ 75.956777][ T65] usb 2-1: config 0 descriptor?? [ 76.124622][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.132104][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.139578][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.147255][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.154702][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.161995][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.164964][ T65] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input10 [ 76.174487][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.190491][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.198132][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.205608][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.212884][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.220513][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.227931][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.235394][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.242816][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.249596][ T65] usb 2-1: USB disconnect, device number 37 [ 76.257151][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.265108][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.278678][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.288966][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.296800][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.304657][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.312223][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.319759][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.327292][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.337050][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.345297][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.352650][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.360604][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.368208][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.375871][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.383151][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.390492][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.397752][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.405319][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.412603][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.420052][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.440094][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.449059][ T31] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 76.449663][ T36] audit: type=1400 audit(1775142910.775:552): avc: denied { append } for pid=1891 comm="syz.0.534" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.480293][ T1892] Invalid logical block size (1021) [ 76.504654][ T31] greenasia 0003:0E8F:0012.0006: hidraw0: USB HID v0.08 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0 [ 76.534493][ T31] greenasia 0003:0E8F:0012.0006: no inputs found [ 76.544153][ T31] usb 4-1: USB disconnect, device number 36 [ 76.954509][ T65] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 77.120425][ T65] usb 2-1: config 0 has no interfaces? [ 77.127486][ T65] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 77.144498][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 77.152534][ T65] usb 2-1: SerialNumber: syz [ 77.165206][ T65] usb 2-1: config 0 descriptor?? [ 77.294498][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 77.383681][ T320] usb 2-1: USB disconnect, device number 38 [ 77.404472][ T31] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 77.444457][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 77.450724][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 64: 129, using maximum allowed: 30 [ 77.462477][ T10] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.473812][ T10] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.484751][ T10] usb 1-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 77.498278][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 77.505206][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 77.514684][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.523622][ T10] usb 1-1: config 0 descriptor?? [ 77.534507][ T31] usb 4-1: device descriptor read/64, error -71 [ 77.774637][ T31] usb 4-1: device descriptor read/64, error -71 [ 78.014924][ T31] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 78.144486][ T320] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 78.152181][ T31] usb 4-1: device descriptor read/64, error -71 [ 78.162489][ T1904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.172321][ T1904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.214752][ T381] usb 1-1: USB disconnect, device number 33 [ 78.305684][ T320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.315936][ T320] usb 2-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 78.329546][ T320] usb 2-1: config 0 interface 0 has no altsetting 0 [ 78.336575][ T320] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 78.346415][ T320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.355742][ T320] usb 2-1: config 0 descriptor?? [ 78.394475][ T31] usb 4-1: device descriptor read/64, error -71 [ 78.504805][ T31] usb usb4-port1: attempt power cycle [ 78.766242][ T320] usb 2-1: string descriptor 0 read error: -71 [ 78.781688][ T320] usb 2-1: USB disconnect, device number 39 [ 78.845032][ T31] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 78.869288][ T31] usb 4-1: device descriptor read/8, error -71 [ 78.887658][ T1915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 78.994513][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 79.015718][ T31] usb 4-1: device descriptor read/8, error -71 [ 79.144518][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 79.150701][ T10] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 79.162119][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 79.168857][ T10] usb 1-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 79.178045][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.186607][ T10] usb 1-1: config 0 descriptor?? [ 79.254526][ T31] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 79.275638][ T31] usb 4-1: device descriptor read/8, error -71 [ 79.405681][ T31] usb 4-1: device descriptor read/8, error -71 [ 79.421613][ T1910] kvm: kvm [1909]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x5 [ 79.430062][ T1910] kvm: kvm [1909]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x5 [ 79.440566][ T1910] kvm: kvm [1909]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x5 [ 79.451269][ T1910] kvm: kvm [1909]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x5 [ 79.459778][ T1910] kvm: kvm [1909]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x5 [ 79.470095][ T1910] kvm_intel: kvm [1909]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x5 [ 79.514567][ T31] usb usb4-port1: unable to enumerate USB device [ 79.564528][ T320] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 79.686328][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 79.692310][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 79.702466][ T10] usb 1-1: USB disconnect, device number 34 [ 79.724494][ T320] usb 2-1: Using ep0 maxpacket: 16 [ 79.730765][ T320] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.741075][ T320] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.751942][ T320] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.761267][ T320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.769580][ T320] usb 2-1: Product: syz [ 79.773881][ T320] usb 2-1: Manufacturer: syz [ 79.778999][ T320] usb 2-1: SerialNumber: syz [ 79.987793][ T320] usb 2-1: 0:2 : does not exist [ 79.994508][ T320] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 80.005239][ T320] usb 2-1: USB disconnect, device number 40 [ 80.136737][ T1933] netlink: 'syz.3.548': attribute type 12 has an invalid length. [ 80.160114][ T1936] overlay: Unknown parameter 'subj_user' [ 80.211891][ T1942] overlay: Unknown parameter 'obj_type' [ 80.224616][ T1944] overlay: Unknown parameter 'obj_type' [ 80.235613][ T1942] netlink: 'syz.0.551': attribute type 4 has an invalid length. [ 80.243292][ T1942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'. [ 80.296168][ T1949] overlayfs: failed to clone lowerpath [ 80.304533][ T1950] fuse: Bad value for 'group_id' [ 80.309620][ T1950] fuse: Bad value for 'group_id' [ 80.314517][ T36] audit: type=1400 audit(1775142914.625:553): avc: denied { mounton } for pid=1947 comm="syz.3.552" path="/116/file0" dev="tmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 80.338361][ T1949] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 80.351171][ T1949] overlayfs: missing 'lowerdir' [ 80.604482][ T65] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 80.684016][ T1966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.558'. [ 80.694281][ T1966] netlink: 64 bytes leftover after parsing attributes in process `syz.0.558'. [ 80.764492][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 80.775456][ T65] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 80.783552][ T65] usb 4-1: config 0 has no interface number 0 [ 80.794769][ T65] usb 4-1: config 0 interface 41 has no altsetting 0 [ 80.813529][ T65] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 80.822658][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.830810][ T65] usb 4-1: Product: syz [ 80.835284][ T65] usb 4-1: Manufacturer: syz [ 80.839871][ T65] usb 4-1: SerialNumber: syz [ 80.845259][ T65] usb 4-1: config 0 descriptor?? [ 80.944488][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 80.950866][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 237, changing to 7 [ 80.963481][ T10] usb 2-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 80.972584][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.980604][ T10] usb 2-1: Product: syz [ 80.984894][ T10] usb 2-1: Manufacturer: syz [ 80.989514][ T10] usb 2-1: SerialNumber: syz [ 81.054503][ T320] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 81.198594][ T10] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 81.204543][ T320] usb 1-1: Using ep0 maxpacket: 16 [ 81.205791][ T10] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 81.211198][ T320] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.228122][ T320] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.241336][ T320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 81.242365][ T10] usb 2-1: USB disconnect, device number 41 [ 81.248156][ T320] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 0.00 [ 81.263310][ T320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.273160][ T320] usb 1-1: config 0 descriptor?? [ 81.688385][ T320] usbhid 1-1:0.0: can't add hid device: -71 [ 81.694714][ T320] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 81.709087][ T320] usb 1-1: USB disconnect, device number 35 [ 81.728486][ T1975] cgroup2: Unknown parameter 'rdma' [ 82.006862][ T65] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 82.022294][ T65] usb 4-1: USB disconnect, device number 41 [ 82.064504][ T428] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 82.065290][ T36] audit: type=1400 audit(1775142916.395:554): avc: denied { read } for pid=2002 comm="syz.2.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.105790][ T36] audit: type=1400 audit(1775142916.435:555): avc: denied { create } for pid=2004 comm="syz.0.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.215636][ T428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.226690][ T428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.236489][ T428] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 82.245576][ T428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.254302][ T428] usb 2-1: config 0 descriptor?? [ 82.334653][ T65] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 82.394491][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 82.485530][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.495730][ T65] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.507003][ T65] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.521177][ T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.530825][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.538899][ T65] usb 4-1: Product: syz [ 82.543070][ T65] usb 4-1: Manufacturer: syz [ 82.547686][ T65] usb 4-1: SerialNumber: syz [ 82.555739][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 82.564023][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.574262][ T10] usb 1-1: config 1 interface 1 has no altsetting 1 [ 82.582397][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.591503][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.599524][ T10] usb 1-1: Product: syz [ 82.603688][ T10] usb 1-1: Manufacturer: syz [ 82.608302][ T10] usb 1-1: SerialNumber: syz [ 82.662610][ T428] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 82.669676][ T428] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 82.676673][ T428] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 82.683641][ T428] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 82.690688][ T428] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 82.697817][ T428] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 82.704820][ T428] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 82.712376][ T428] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 82.816954][ T10] usb 1-1: selecting invalid altsetting 1 [ 82.823243][ T10] cdc_ncm 1-1:1.0: bind() failure [ 82.829159][ T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 82.835986][ T10] cdc_ncm 1-1:1.1: bind() failure [ 82.842963][ T10] usb 1-1: USB disconnect, device number 36 [ 82.861801][ T428] cp2112 0003:10C4:EA90.0008: Part Number: 0x47 Device Version: 0xD0 [ 82.954515][ T2001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.963040][ T2001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.975623][ T65] cdc_ncm 4-1:1.0: bind() failure [ 82.986110][ T65] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 82.995096][ T65] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 83.005255][ T65] usb 4-1: USB disconnect, device number 42 [ 83.070396][ T428] cp2112 0003:10C4:EA90.0008: error requesting SMBus config [ 83.078582][ T428] cp2112 0003:10C4:EA90.0008: probe with driver cp2112 failed with error -71 [ 83.090787][ T428] usb 2-1: USB disconnect, device number 42 [ 83.350950][ T65] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 83.504515][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 83.510974][ T65] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 83.521941][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.533591][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.546909][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 83.559957][ T65] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 83.569058][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.580779][ T65] usb 4-1: config 0 descriptor?? [ 83.603115][ T2051] syzkaller1: entered promiscuous mode [ 83.608952][ T2051] syzkaller1: entered allmulticast mode [ 83.768375][ T2057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 83.788117][ T2059] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 83.991867][ T65] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0009/input/input12 [ 84.009767][ T65] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0009/input/input13 [ 84.023346][ T65] kye 0003:0458:5013.0009: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 84.204469][ T10] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 84.240018][ T65] usb 4-1: USB disconnect, device number 43 [ 84.356359][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.366696][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 84.377457][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.392408][ T10] usb 1-1: string descriptor 0 read error: -22 [ 84.398948][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.408078][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.420608][ T10] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 84.428899][ T10] cdc_ncm 1-1:1.0: bind() failure [ 84.440507][ T2082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.591'. [ 84.477182][ T2082] kvm: kvm [2081]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 84.486086][ T2082] kvm: kvm [2081]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 84.619659][ T10] usb 1-1: USB disconnect, device number 37 [ 84.676211][ T2090] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3908451893 (7816903786 ns) > initial count (5594127646 ns). Using initial count to start timer. [ 85.050863][ T36] audit: type=1400 audit(1775142919.375:556): avc: denied { map } for pid=2097 comm="syz.3.597" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.051239][ T2098] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 85.074653][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 85.090352][ T2098] rust_binder: Read failure Err(EFAULT) in pid:390 [ 85.090576][ T36] audit: type=1400 audit(1775142919.415:557): avc: denied { call } for pid=2097 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 85.145668][ T2102] binder: Bad value for 'defcontext' [ 85.244501][ T10] usb 2-1: device descriptor read/64, error -71 [ 85.394482][ T65] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 85.484482][ T10] usb 2-1: device descriptor read/64, error -71 [ 85.555925][ T65] usb 1-1: unable to get BOS descriptor or descriptor too short [ 85.564676][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.574979][ T65] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 85.584042][ T65] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 85.597080][ T65] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 85.606423][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.614805][ T65] usb 1-1: Product: syz [ 85.619163][ T65] usb 1-1: Manufacturer: syz [ 85.623822][ T65] usb 1-1: SerialNumber: syz [ 85.724479][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 85.840747][ T65] usb 1-1: Can't get UAC3 power state for id 10 [ 85.854510][ T65] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 85.863879][ T65] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 85.874493][ T10] usb 2-1: device descriptor read/64, error -71 [ 85.896086][ T65] usb 1-1: USB disconnect, device number 38 [ 85.908201][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.124490][ T10] usb 2-1: device descriptor read/64, error -71 [ 86.234608][ T10] usb usb2-port1: attempt power cycle [ 86.266735][ T36] audit: type=1400 audit(1775142920.595:558): avc: denied { setattr } for pid=2115 comm="syz.3.602" name="[userfaultfd]" dev="anon_inodefs" ino=15597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 86.404530][ T2134] overlayfs: missing 'lowerdir' [ 86.444173][ T2143] netlink: 32 bytes leftover after parsing attributes in process `syz.3.611'. [ 86.453284][ T2140] netlink: 32 bytes leftover after parsing attributes in process `syz.3.611'. [ 86.574533][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 86.615686][ T10] usb 2-1: device descriptor read/8, error -71 [ 86.765540][ T10] usb 2-1: device descriptor read/8, error -71 [ 87.004504][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 87.046050][ T10] usb 2-1: device descriptor read/8, error -71 [ 87.175483][ T10] usb 2-1: device descriptor read/8, error -71 [ 87.285002][ T10] usb usb2-port1: unable to enumerate USB device [ 87.376464][ T2176] netlink: 92 bytes leftover after parsing attributes in process `syz.0.622'. [ 87.624515][ T31] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 87.698554][ T2180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.623'. [ 87.708463][ T2180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.623'. [ 87.775651][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 87.785524][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 87.795765][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 87.806896][ T31] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 87.815989][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.823975][ T31] usb 1-1: Product: syz [ 87.828297][ T31] usb 1-1: Manufacturer: syz [ 87.832900][ T31] usb 1-1: SerialNumber: syz [ 87.838206][ T31] usb 1-1: config 0 descriptor?? [ 87.843448][ T2176] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 87.852363][ T31] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22 [ 87.969785][ T36] audit: type=1400 audit(1775142922.295:559): avc: denied { create } for pid=2197 comm="syz.1.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.045586][ T36] audit: type=1400 audit(1775142922.375:560): avc: denied { mounton } for pid=2206 comm="syz.1.633" path="/118/file0" dev="tmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 88.078492][ T381] usb 1-1: USB disconnect, device number 39 [ 88.087371][ T2211] IPv6: NLM_F_CREATE should be specified when creating new route [ 88.254508][ T31] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 88.404499][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 88.410643][ T31] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 88.419098][ T31] usb 4-1: config 179 has no interface number 0 [ 88.425481][ T381] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 88.433106][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 88.444286][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 88.455695][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 88.467194][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 88.478598][ T31] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 88.491869][ T31] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 88.501004][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.511963][ T2205] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.615757][ T381] usb 1-1: unable to get BOS descriptor or descriptor too short [ 88.623858][ T381] usb 1-1: not running at top speed; connect to a high speed hub [ 88.632312][ T381] usb 1-1: config 5 has an invalid interface number: 45 but max is 0 [ 88.640447][ T381] usb 1-1: config 5 has no interface number 0 [ 88.646604][ T381] usb 1-1: config 5 interface 45 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 88.658207][ T381] usb 1-1: config 5 interface 45 has no altsetting 0 [ 88.666332][ T381] usb 1-1: New USB device found, idVendor=162e, idProduct=cba2, bcdDevice=bd.d6 [ 88.675470][ T381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.683478][ T381] usb 1-1: Product: syz [ 88.687696][ T381] usb 1-1: Manufacturer: syz [ 88.692310][ T381] usb 1-1: SerialNumber: syz [ 88.722237][ T2205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.731207][ T2205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.901484][ T2211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.910063][ T2211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.922497][ T381] usb 1-1: USB disconnect, device number 40 [ 88.940707][ T10] usb 4-1: USB disconnect, device number 44 [ 88.940754][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 88.955258][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 89.462910][ T36] audit: type=1400 audit(1775142923.785:561): avc: denied { ioctl } for pid=2221 comm="syz.3.638" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 89.550346][ T2231] netlink: 288 bytes leftover after parsing attributes in process `syz.1.641'. [ 89.664519][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 89.764642][ T31] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 89.816030][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 89.825767][ T10] usb 1-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice= 0.40 [ 89.834974][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.842943][ T10] usb 1-1: Product: syz [ 89.847494][ T10] usb 1-1: Manufacturer: syz [ 89.852099][ T10] usb 1-1: SerialNumber: syz [ 89.914469][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 89.920821][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.933071][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.943250][ T31] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 89.952389][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.961186][ T31] usb 4-1: config 0 descriptor?? [ 90.060787][ T10] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 90.070903][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 90.082528][ T10] usb 1-1: USB disconnect, device number 41 [ 90.092499][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 90.622601][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 90.628635][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 90.643112][ T31] usb 4-1: USB disconnect, device number 45 [ 90.688428][ T2272] netlink: 'syz.1.656': attribute type 22 has an invalid length. [ 90.698184][ T2272] netlink: 32 bytes leftover after parsing attributes in process `syz.1.656'. [ 90.886340][ T2282] syz.2.660: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 90.904367][ T2282] CPU: 1 UID: 0 PID: 2282 Comm: syz.2.660 Not tainted syzkaller #0 4629476e74998a42e0eeb731ff095178aeeee8c1 [ 90.904399][ T2282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.904414][ T2282] Call Trace: [ 90.904421][ T2282] [ 90.904429][ T2282] __dump_stack+0x21/0x30 [ 90.904466][ T2282] dump_stack_lvl+0x140/0x1c0 [ 90.904489][ T2282] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.904516][ T2282] dump_stack+0x19/0x20 [ 90.904539][ T2282] warn_alloc+0x1e7/0x2c0 [ 90.904569][ T2282] ? __kasan_slab_free+0x5f/0x80 [ 90.904588][ T2282] ? __cfi_warn_alloc+0x10/0x10 [ 90.904609][ T2282] ? __get_vm_area_node+0x201/0x3d0 [ 90.904632][ T2282] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.904661][ T2282] ? xskq_create+0xdb/0x290 [ 90.904680][ T2282] __vmalloc_node_range_noprof+0x6aa/0x1480 [ 90.904706][ T2282] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 90.904730][ T2282] ? kasan_save_alloc_info+0x40/0x50 [ 90.904753][ T2282] ? __kasan_kmalloc+0x96/0xb0 [ 90.904771][ T2282] ? __kmalloc_cache_noprof+0x23c/0x470 [ 90.904798][ T2282] vmalloc_user_noprof+0x77/0x90 [ 90.904820][ T2282] ? xskq_create+0xdb/0x290 [ 90.904837][ T2282] xskq_create+0xdb/0x290 [ 90.904854][ T2282] xsk_init_queue+0xb2/0x120 [ 90.904872][ T2282] xsk_setsockopt+0x4e1/0x760 [ 90.904898][ T2282] ? __cfi_xsk_setsockopt+0x10/0x10 [ 90.904925][ T2282] ? do_futex+0x37d/0x510 [ 90.904948][ T2282] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 90.904977][ T2282] ? security_socket_setsockopt+0x3d/0x100 [ 90.904999][ T2282] ? __cfi_xsk_setsockopt+0x10/0x10 [ 90.905027][ T2282] do_sock_setsockopt+0x27c/0x410 [ 90.905054][ T2282] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 90.905080][ T2282] __x64_sys_setsockopt+0x1b7/0x250 [ 90.905104][ T2282] x64_sys_call+0x2adc/0x2ee0 [ 90.905130][ T2282] do_syscall_64+0x57/0xf0 [ 90.905154][ T2282] ? clear_bhb_loop+0x50/0xa0 [ 90.905171][ T2282] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.905197][ T2282] RIP: 0033:0x7f9d58f9c819 [ 90.905220][ T2282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.905236][ T2282] RSP: 002b:00007f9d59db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 90.905258][ T2282] RAX: ffffffffffffffda RBX: 00007f9d59215fa0 RCX: 00007f9d58f9c819 [ 90.905272][ T2282] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 90.905284][ T2282] RBP: 00007f9d59032c91 R08: 0000000000000004 R09: 0000000000000000 [ 90.905355][ T2282] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 90.905368][ T2282] R13: 00007f9d59216038 R14: 00007f9d59215fa0 R15: 00007ffdc43b1ac8 [ 90.905385][ T2282] [ 91.169511][ T2282] Mem-Info: [ 91.172627][ T2282] active_anon:44031 inactive_anon:6 isolated_anon:0 [ 91.172627][ T2282] active_file:21623 inactive_file:2587 isolated_file:0 [ 91.172627][ T2282] unevictable:0 dirty:61 writeback:0 [ 91.172627][ T2282] slab_reclaimable:6099 slab_unreclaimable:70844 [ 91.172627][ T2282] mapped:24810 shmem:35950 pagetables:1155 [ 91.172627][ T2282] sec_pagetables:0 bounce:0 [ 91.172627][ T2282] kernel_misc_reclaimable:0 [ 91.172627][ T2282] free:1473960 free_pcp:10974 free_cma:0 [ 91.217655][ T2282] Node 0 active_anon:176056kB inactive_anon:24kB active_file:86492kB inactive_file:10348kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99188kB dirty:244kB writeback:0kB shmem:143720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4896kB pagetables:4552kB sec_pagetables:0kB all_unreclaimable? no [ 91.249946][ T2282] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963356kB mlocked:0kB bounce:0kB free_pcp:5192kB local_pcp:516kB free_cma:0kB [ 91.279988][ T2282] lowmem_reserve[]: 0 3921 3921 [ 91.285143][ T2282] Normal free:2938924kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:176056kB inactive_anon:24kB active_file:86492kB inactive_file:10348kB unevictable:0kB writepending:244kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:37520kB local_pcp:34704kB free_cma:0kB [ 91.316867][ T2282] lowmem_reserve[]: 0 0 0 [ 91.321221][ T2282] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 91.336756][ T2282] Normal: 189*4kB (UME) 91*8kB (UME) 128*16kB (UM) 45*32kB (UME) 63*64kB (UM) 50*128kB (UME) 28*256kB (UM) 20*512kB (UME) 14*1024kB (UME) 14*2048kB (UME) 699*4096kB (UM) = 2938924kB [ 91.354935][ T2282] 60142 total pagecache pages [ 91.359613][ T2282] 6 pages in swap cache [ 91.363746][ T2282] Free swap = 124588kB [ 91.367984][ T2282] Total swap = 124996kB [ 91.372133][ T2282] 2097051 pages RAM [ 91.375943][ T2282] 0 pages HighMem/MovableOnly [ 91.380703][ T2282] 352246 pages reserved [ 91.384895][ T2282] 0 pages cma reserved [ 91.401089][ T2282] Memory allocations: [ 91.405234][ T2282] 0 B 0 init/main.c:1477 func:do_initcalls [ 91.412543][ T2282] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 91.420996][ T2282] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 91.429000][ T2282] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 91.443759][ T2282] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 91.454488][ T2282] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 91.473552][ T2282] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 91.477712][ T2292] binder: Bad value for 'max' [ 91.482002][ T2282] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 91.494500][ T36] audit: type=1400 audit(1775142925.805:562): avc: denied { shutdown } for pid=2291 comm="syz.0.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.512642][ T2282] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 91.527303][ T2282] 0 B 0 init/initramfs.c:101 func:find_link [ 91.734506][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 91.784544][ T65] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 91.864534][ T10] usb 1-1: device descriptor read/64, error -71 [ 91.935618][ T65] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 91.943982][ T65] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 91.953007][ T65] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 91.963483][ T65] usb 4-1: config 220 has no interface number 2 [ 91.969883][ T65] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 91.983101][ T65] usb 4-1: config 220 interface 0 has no altsetting 0 [ 91.989974][ T65] usb 4-1: config 220 interface 76 has no altsetting 0 [ 91.996900][ T65] usb 4-1: config 220 interface 1 has no altsetting 0 [ 92.005167][ T65] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 92.014215][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.022304][ T65] usb 4-1: Product: syz [ 92.026562][ T65] usb 4-1: Manufacturer: syz [ 92.031157][ T65] usb 4-1: SerialNumber: syz [ 92.134631][ T10] usb 1-1: device descriptor read/64, error -71 [ 92.163427][ T2326] netlink: 'syz.2.674': attribute type 5 has an invalid length. [ 92.171331][ T2326] netlink: 45 bytes leftover after parsing attributes in process `syz.2.674'. [ 92.190103][ T2328] exfat: Deprecated parameter 'debug' [ 92.195853][ T2328] /dev/loop2: Can't lookup blockdev [ 92.217345][ T2332] syz.2.677 uses obsolete (PF_INET,SOCK_PACKET) [ 92.225947][ T2332] netlink: 56 bytes leftover after parsing attributes in process `syz.2.677'. [ 92.235228][ T36] audit: type=1400 audit(1775142926.565:563): avc: denied { lock } for pid=2331 comm="syz.2.677" path="socket:[16776]" dev="sockfs" ino=16776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.240239][ T65] uvcvideo 4-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 92.271057][ T65] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 92.277821][ T65] usb 4-1: No valid video chain found. [ 92.282929][ T2335] netlink: 'syz.2.678': attribute type 3 has an invalid length. [ 92.283471][ T65] usb 4-1: selecting invalid altsetting 0 [ 92.301637][ T65] usb 4-1: USB disconnect, device number 46 [ 92.323636][ T2340] netlink: 460 bytes leftover after parsing attributes in process `syz.2.680'. [ 92.394502][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 92.433549][ T2349] fuse: Bad value for 'rootmode' [ 92.524497][ T10] usb 1-1: device descriptor read/64, error -71 [ 92.764535][ T10] usb 1-1: device descriptor read/64, error -71 [ 92.874609][ T10] usb usb1-port1: attempt power cycle [ 92.999613][ T2377] netlink: 104 bytes leftover after parsing attributes in process `syz.1.693'. [ 93.034612][ T2383] veth1_macvtap: left promiscuous mode [ 93.040173][ T2383] macsec0: entered allmulticast mode [ 93.046956][ T2383] veth1_macvtap: entered promiscuous mode [ 93.052701][ T2383] veth1_macvtap: entered allmulticast mode [ 93.058653][ T2383] macsec0: left allmulticast mode [ 93.063679][ T2383] veth1_macvtap: left allmulticast mode [ 93.064495][ T31] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 93.214506][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 93.235513][ T10] usb 1-1: device descriptor read/8, error -71 [ 93.235556][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.252663][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.262527][ T31] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 93.271670][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.280483][ T31] usb 4-1: config 0 descriptor?? [ 93.365763][ T10] usb 1-1: device descriptor read/8, error -71 [ 93.519851][ T36] audit: type=1326 audit(1775142927.845:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2394 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d58f9c819 code=0x50000 [ 93.543123][ T36] audit: type=1326 audit(1775142927.845:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2394 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d58f9c819 code=0x50000 [ 93.566475][ T36] audit: type=1326 audit(1775142927.845:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2394 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d58f9c819 code=0x50000 [ 93.589566][ T36] audit: type=1326 audit(1775142927.845:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2394 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d58f9c819 code=0x50000 [ 93.613022][ T36] audit: type=1326 audit(1775142927.845:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2394 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d58f9c819 code=0x50000 [ 93.636216][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 93.643825][ T36] audit: type=1326 audit(1775142927.845:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2394 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d58f9c819 code=0x50000 [ 93.666932][ T36] audit: type=1326 audit(1775142927.845:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2394 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d58f9c819 code=0x50000 [ 93.690152][ T36] audit: type=1326 audit(1775142927.845:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2394 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d58f9c819 code=0x50000 [ 93.697881][ T31] cp2112 0003:10C4:EA90.000A: item fetching failed at offset 5/7 [ 93.713438][ T36] audit: type=1326 audit(1775142927.845:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2394 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d58f9c819 code=0x50000 [ 93.721624][ T31] cp2112 0003:10C4:EA90.000A: parse failed [ 93.744043][ T36] audit: type=1326 audit(1775142927.845:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2394 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d58f9c819 code=0x50000 [ 93.750120][ T31] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -22 [ 93.773437][ T10] usb 1-1: device descriptor read/8, error -71 [ 93.915467][ T10] usb 1-1: device descriptor read/8, error -71 [ 94.024613][ T10] usb usb1-port1: unable to enumerate USB device [ 94.263905][ T2407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.274979][ T2407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.635070][ T2426] netlink: 64 bytes leftover after parsing attributes in process `syz.3.689'. [ 95.151621][ T2436] netlink: 'syz.1.713': attribute type 5 has an invalid length. [ 95.176593][ T2438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.714'. [ 95.253858][ T2444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 95.266035][ T2444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 95.275128][ T2444] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 95.295103][ T2444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2444 comm=syz.0.717 [ 95.594461][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 95.724459][ T10] usb 1-1: device descriptor read/64, error -71 [ 95.829244][ T9] usb 4-1: USB disconnect, device number 47 [ 95.964469][ T10] usb 1-1: device descriptor read/64, error -71 [ 96.059658][ T2453] veth1: entered allmulticast mode [ 96.065287][ T2454] veth1: left allmulticast mode [ 96.204465][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 96.294482][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 96.334462][ T10] usb 1-1: device descriptor read/64, error -71 [ 96.444493][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 96.450803][ T9] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 96.459046][ T9] usb 4-1: config 0 has no interface number 0 [ 96.474458][ T9] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 96.485934][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 96.495028][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.503010][ T9] usb 4-1: Product: syz [ 96.514637][ T9] usb 4-1: Manufacturer: syz [ 96.519352][ T9] usb 4-1: SerialNumber: syz [ 96.529137][ T9] usb 4-1: config 0 descriptor?? [ 96.534500][ T2449] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 96.574532][ T10] usb 1-1: device descriptor read/64, error -71 [ 96.693984][ T10] usb usb1-port1: attempt power cycle [ 96.743106][ T2449] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 97.034481][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 97.055466][ T10] usb 1-1: device descriptor read/8, error -71 [ 97.185554][ T10] usb 1-1: device descriptor read/8, error -71 [ 97.424515][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 97.445519][ T10] usb 1-1: device descriptor read/8, error -71 [ 97.575482][ T10] usb 1-1: device descriptor read/8, error -71 [ 97.684552][ T10] usb usb1-port1: unable to enumerate USB device [ 97.954454][ T9] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 97.967763][ T9] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 97.994506][ T9] asix 4-1:0.188: probe with driver asix failed with error -71 [ 98.003903][ T9] usb 4-1: USB disconnect, device number 48 [ 98.582972][ T36] kauditd_printk_skb: 31068 callbacks suppressed [ 98.582990][ T36] audit: type=1400 audit(1775142932.905:31642): avc: denied { create } for pid=2538 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.754459][ T9] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 98.945618][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 98.962587][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 98.980954][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.996938][ T9] usb 1-1: config 0 descriptor?? [ 99.008712][ T2529] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 99.230871][ T31] usb 1-1: USB disconnect, device number 50 [ 99.399035][ T2553] loop8: detected capacity change from 0 to 7 [ 99.548293][ T2564] tipc: Started in network mode [ 99.553221][ T2564] tipc: Node identity ac14140f, cluster identity 4711 [ 99.560267][ T2564] tipc: Enabled bearer , priority 10 [ 100.574450][ T36] audit: type=1400 audit(1775142934.895:31643): avc: denied { append } for pid=2566 comm="syz.0.767" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 100.674473][ T9] tipc: Node number set to 2886997007 [ 100.866855][ T36] audit: type=1400 audit(1775142935.195:31644): avc: denied { read } for pid=2601 comm="syz.0.783" path="socket:[17495]" dev="sockfs" ino=17495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.924022][ T36] audit: type=1400 audit(1775142935.245:31645): avc: denied { setattr } for pid=2603 comm="syz.2.784" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 101.074508][ T381] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 101.224474][ T381] usb 4-1: Using ep0 maxpacket: 32 [ 101.230670][ T381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.241718][ T381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.251596][ T381] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 101.260757][ T381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.269367][ T381] usb 4-1: config 0 descriptor?? [ 101.275291][ T381] hub 4-1:0.0: USB hub found [ 101.304482][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 101.457037][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 101.466205][ T9] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 101.474462][ T9] usb 1-1: Product: syz [ 101.478677][ T9] usb 1-1: Manufacturer: syz [ 101.479962][ T381] hub 4-1:0.0: 1 port detected [ 101.483334][ T9] usb 1-1: SerialNumber: syz [ 101.493306][ T9] usb 1-1: config 0 descriptor?? [ 102.110566][ T381] hub 4-1:0.0: activate --> -90 [ 102.311808][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 102.319519][ T381] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 102.321872][ T9] usb 4-1: USB disconnect, device number 49 [ 102.789510][ T36] audit: type=1400 audit(1775142937.115:31646): avc: denied { mount } for pid=2678 comm="syz.2.816" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 102.987229][ T36] audit: type=1400 audit(1775142937.315:31647): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 103.234531][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 103.388756][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 103.398681][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.406872][ T9] usb 4-1: Product: syz [ 103.411950][ T9] usb 4-1: Manufacturer: syz [ 103.417037][ T9] usb 4-1: SerialNumber: syz [ 104.071572][ T31] usb 1-1: USB disconnect, device number 51 [ 104.086676][ T36] audit: type=1400 audit(1775142938.415:31648): avc: denied { write } for pid=2708 comm="syz.0.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.278257][ T36] audit: type=1400 audit(1775142938.605:31649): avc: denied { mounton } for pid=2721 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 104.313830][ T2721] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.320935][ T2721] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.328297][ T2721] bridge_slave_0: entered allmulticast mode [ 104.334617][ T2721] bridge_slave_0: entered promiscuous mode [ 104.341338][ T2721] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.348427][ T2721] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.355676][ T2721] bridge_slave_1: entered allmulticast mode [ 104.361861][ T2721] bridge_slave_1: entered promiscuous mode [ 104.368069][ T305] bridge_slave_1: left allmulticast mode [ 104.373813][ T305] bridge_slave_1: left promiscuous mode [ 104.379711][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.387351][ T305] bridge_slave_0: left allmulticast mode [ 104.393026][ T305] bridge_slave_0: left promiscuous mode [ 104.398972][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.496746][ T2721] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.503795][ T2721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.511126][ T2721] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.518163][ T2721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.536752][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.544101][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.553225][ T1575] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.560337][ T1575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.569865][ T1575] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.576941][ T1575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.586166][ T305] veth1_macvtap: left promiscuous mode [ 104.591759][ T305] veth0_vlan: left promiscuous mode [ 104.637201][ T2721] veth0_vlan: entered promiscuous mode [ 104.647331][ T2721] veth1_macvtap: entered promiscuous mode [ 104.744294][ T36] audit: type=1400 audit(1775142939.065:31650): avc: denied { create } for pid=2728 comm="syz.4.838" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.766262][ T36] audit: type=1400 audit(1775142939.095:31651): avc: denied { mounton } for pid=2728 comm="syz.4.838" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.790109][ T36] audit: type=1400 audit(1775142939.095:31652): avc: denied { remount } for pid=2728 comm="syz.4.838" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 104.864922][ T36] audit: type=1400 audit(1775142939.185:31653): avc: denied { setattr } for pid=2734 comm="syz.4.841" path="socket:[18524]" dev="sockfs" ino=18524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.947879][ T2741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.843'. [ 105.294507][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.444544][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 105.450876][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.461818][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.471627][ T31] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 105.480917][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.490674][ T31] usb 5-1: config 0 descriptor?? [ 105.745330][ T36] audit: type=1326 audit(1775142940.075:31654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.1.854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd788b9c819 code=0x0 [ 105.901803][ T31] kye 0003:0458:5016.000B: control desc unexpectedly large [ 105.910100][ T31] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.000B/input/input14 [ 105.922779][ T31] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.000B/input/input15 [ 105.936048][ T31] kye 0003:0458:5016.000B: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 106.002523][ T10] usb 4-1: USB disconnect, device number 50 [ 106.102364][ T31] usb 5-1: USB disconnect, device number 2 [ 106.172929][ T36] audit: type=1400 audit(1775142940.495:31655): avc: denied { create } for pid=2793 comm="syz.2.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 106.339040][ T2798] batadv_slave_0: entered promiscuous mode [ 106.354529][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 106.505994][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.517454][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.527585][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 106.536801][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.548151][ T10] usb 4-1: config 0 descriptor?? [ 106.969287][ T10] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 106.994882][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000C/input/input16 [ 107.041838][ T2795] batadv_slave_0: left promiscuous mode [ 107.073651][ T10] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 107.143903][ T2826] 9pnet_fd: Insufficient options for proto=fd [ 107.165746][ T31] usb 4-1: USB disconnect, device number 51 [ 108.424493][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.575608][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.585950][ T9] usb 5-1: config 0 has no interfaces? [ 108.591439][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 108.600547][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.609087][ T9] usb 5-1: config 0 descriptor?? [ 108.794481][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 108.876633][ T2901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.885702][ T2901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.894543][ T9] usb 5-1: USB disconnect, device number 3 [ 109.025512][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 109.252732][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 109.268621][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 255, changing to 11 [ 109.279934][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 59391, setting to 1024 [ 109.293123][ T10] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 109.302555][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.310779][ T10] usb 4-1: Product: syz [ 109.315295][ T10] usb 4-1: Manufacturer: syz [ 109.320100][ T10] usb 4-1: SerialNumber: syz [ 109.325758][ T10] usb 4-1: config 0 descriptor?? [ 109.331158][ T2903] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 109.534478][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 109.542744][ T381] usb 4-1: USB disconnect, device number 52 [ 109.685754][ T9] usb 5-1: config 1 has an invalid interface number: 170 but max is 0 [ 109.694249][ T9] usb 5-1: config 1 has no interface number 0 [ 109.700406][ T9] usb 5-1: config 1 interface 170 has no altsetting 0 [ 109.708777][ T9] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f3.04 [ 109.717901][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.725941][ T9] usb 5-1: Product: syz [ 109.730111][ T9] usb 5-1: Manufacturer: syz [ 109.734977][ T9] usb 5-1: SerialNumber: syz [ 109.978918][ T2901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.991474][ T2901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.070688][ T9] hub 5-1:1.170: bad descriptor, ignoring hub [ 110.076841][ T9] hub 5-1:1.170: probe with driver hub failed with error -5 [ 110.104317][ T36] audit: type=1400 audit(1775142944.425:31656): avc: denied { write } for pid=2944 comm="syz.3.930" name="igmp" dev="proc" ino=4026532357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 110.135099][ T9] usb 5-1: USB disconnect, device number 4 [ 111.027903][ T36] audit: type=1400 audit(1775142945.355:31657): avc: denied { mount } for pid=2962 comm="syz.1.936" name="/" dev="configfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 111.465627][ T36] audit: type=1400 audit(1775142945.385:31658): avc: denied { search } for pid=2962 comm="syz.1.936" name="/" dev="configfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.482136][ T2976] netlink: 156 bytes leftover after parsing attributes in process `syz.2.942'. [ 111.487957][ T36] audit: type=1400 audit(1775142945.495:31659): avc: denied { read } for pid=2962 comm="syz.1.936" name="/" dev="configfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.519319][ T36] audit: type=1400 audit(1775142945.495:31660): avc: denied { open } for pid=2962 comm="syz.1.936" path="/" dev="configfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.570499][ T2982] overlayfs: failed to clone lowerpath [ 111.634480][ T381] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 111.786792][ T381] usb 4-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 111.795904][ T381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.803877][ T381] usb 4-1: Product: syz [ 111.804453][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.808204][ T381] usb 4-1: Manufacturer: syz [ 111.820110][ T381] usb 4-1: SerialNumber: syz [ 111.825736][ T381] usb 4-1: config 0 descriptor?? [ 111.831653][ T381] rndis_host 4-1:0.0: More than one union descriptor, skipping ... [ 111.839599][ T381] usb 4-1: bad CDC descriptors [ 111.844626][ T381] cdc_acm 4-1:0.0: More than one union descriptor, skipping ... [ 111.964526][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 111.970649][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.980893][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 111.989895][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.000795][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 112.010008][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.018397][ T9] usb 5-1: Product: syz [ 112.022601][ T9] usb 5-1: Manufacturer: syz [ 112.027426][ T9] usb 5-1: SerialNumber: syz [ 112.037152][ T10] usb 4-1: USB disconnect, device number 53 [ 112.810123][ T36] audit: type=1326 audit(1775142947.146:31661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3053 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383a79c819 code=0x7ffc0000 [ 112.834852][ T36] audit: type=1326 audit(1775142947.146:31662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3053 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383a79c819 code=0x7ffc0000 [ 112.860128][ T36] audit: type=1326 audit(1775142947.176:31663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3053 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f383a79c819 code=0x7ffc0000 [ 112.919441][ T36] audit: type=1326 audit(1775142947.176:31664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3053 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383a79c819 code=0x7ffc0000 [ 112.946327][ T36] audit: type=1326 audit(1775142947.176:31665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3053 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383a79c819 code=0x7ffc0000 [ 113.444384][ T3083] overlay: Unknown parameter '/' [ 113.451734][ T3083] overlayfs: failed to clone lowerpath [ 114.429963][ T3134] tmpfs: Unknown parameter 'usrquota' [ 114.497077][ T305] tipc: Subscription rejected, illegal request [ 114.590976][ T9] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 114.601283][ T9] usb 5-1: clock source 0 is not valid, cannot use [ 114.608864][ T9] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 114.615673][ T9] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 114.630150][ T9] usb 5-1: USB disconnect, device number 5 [ 114.646095][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 115.483014][ T3163] netlink: 'syz.2.1029': attribute type 3 has an invalid length. [ 115.724489][ T381] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 115.874496][ T381] usb 4-1: Using ep0 maxpacket: 16 [ 115.882588][ T381] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 115.893946][ T381] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 115.908359][ T381] usb 4-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 115.917946][ T381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.927329][ T381] usb 4-1: Product: syz [ 115.932335][ T381] usb 4-1: Manufacturer: syz [ 115.937629][ T381] usb 4-1: SerialNumber: syz [ 116.167187][ T381] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 116.174962][ T381] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 116.191181][ T381] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 116.207668][ T381] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 116.224479][ T381] usb 4-1: USB disconnect, device number 54 [ 116.261800][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 116.511215][ T3211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1049'. [ 116.781012][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 116.781031][ T36] audit: type=1400 audit(1775142951.116:31685): avc: denied { map } for pid=3234 comm="syz.3.1061" path="/dev/usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.894501][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.055650][ T9] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 117.073958][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.084928][ T65] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 117.104519][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.114391][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.128276][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.140966][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.149777][ T9] usb 5-1: config 0 descriptor?? [ 117.264463][ T65] usb 4-1: Using ep0 maxpacket: 8 [ 117.271128][ T65] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 117.279546][ T65] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.289703][ T65] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.299842][ T65] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.310031][ T65] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.323316][ T65] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.332466][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.557915][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 117.566048][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 117.573625][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 117.581092][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 117.588520][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 117.595951][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 117.603482][ T9] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 117.612624][ T9] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 117.805274][ T36] audit: type=1326 audit(1775142952.146:31686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3257 comm="syz.2.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d58f9c819 code=0x7ffc0000 [ 117.828889][ T36] audit: type=1326 audit(1775142952.146:31687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3257 comm="syz.2.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d58f9c819 code=0x7ffc0000 [ 117.852733][ T36] audit: type=1326 audit(1775142952.146:31688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3257 comm="syz.2.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9d58f9c819 code=0x7ffc0000 [ 117.907626][ T36] audit: type=1326 audit(1775142952.146:31689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3257 comm="syz.2.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d58f9c819 code=0x7ffc0000 [ 117.936465][ T36] audit: type=1326 audit(1775142952.146:31690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3257 comm="syz.2.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f9d58f9c819 code=0x7ffc0000 [ 117.960352][ T36] audit: type=1326 audit(1775142952.146:31691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3257 comm="syz.2.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d58f9c819 code=0x7ffc0000 [ 117.984169][ T36] audit: type=1326 audit(1775142952.146:31692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3257 comm="syz.2.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d58f9c819 code=0x7ffc0000 [ 118.067789][ T3265] can: request_module (can-proto-6) failed. [ 118.246592][ T3277] overlayfs: failed to clone upperpath [ 118.289038][ T36] audit: type=1326 audit(1775142952.626:31693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3286 comm="syz.1.1082" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd788b9c819 code=0x0 [ 118.336946][ T320] usb 5-1: USB disconnect, device number 6 [ 118.344442][ T36] audit: type=1326 audit(1775142952.676:31694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3286 comm="syz.1.1082" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7fd788b9c819 code=0x0 [ 119.401057][ T3307] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1089'. [ 119.839777][ T65] usb 4-1: USB disconnect, device number 55 [ 122.067233][ T3355] tmpfs: Unknown parameter 'usrquota' [ 122.139252][ T3365] overlayfs: failed to clone upperpath [ 122.167153][ T3367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1116'. [ 122.222545][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 122.222563][ T36] audit: type=1400 audit(1775142956.556:31696): avc: denied { create } for pid=3374 comm="syz.1.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.104484][ T65] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 123.254454][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 123.264464][ T65] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.275663][ T65] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.289244][ T65] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 123.298466][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.715881][ T65] hid-generic 0003:04D8:00DD.000E: item fetching failed at offset 0/5 [ 123.724265][ T65] hid-generic 0003:04D8:00DD.000E: probe with driver hid-generic failed with error -22 [ 123.770190][ T3424] loop8: detected capacity change from 0 to 8 [ 123.915760][ T65] usb 4-1: USB disconnect, device number 56 [ 124.069945][ T3429] fuse: Bad value for 'fd' [ 125.398273][ T3458] tmpfs: Unknown parameter 'usrquota' [ 125.457612][ T3466] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.674449][ T65] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 125.825568][ T65] usb 4-1: descriptor type invalid, skip [ 125.831258][ T65] usb 4-1: descriptor type invalid, skip [ 125.837040][ T65] usb 4-1: descriptor type invalid, skip [ 125.842707][ T65] usb 4-1: descriptor type invalid, skip [ 125.848384][ T65] usb 4-1: descriptor type invalid, skip [ 125.854132][ T65] usb 4-1: descriptor type invalid, skip [ 125.859942][ T65] usb 4-1: descriptor type invalid, skip [ 125.865639][ T65] usb 4-1: descriptor type invalid, skip [ 125.871283][ T65] usb 4-1: descriptor type invalid, skip [ 125.877011][ T65] usb 4-1: descriptor type invalid, skip [ 125.882763][ T65] usb 4-1: descriptor type invalid, skip [ 125.888616][ T65] usb 4-1: descriptor type invalid, skip [ 125.894288][ T65] usb 4-1: descriptor type invalid, skip [ 125.900000][ T65] usb 4-1: descriptor type invalid, skip [ 125.905725][ T65] usb 4-1: descriptor type invalid, skip [ 125.911719][ T65] usb 4-1: descriptor type invalid, skip [ 125.917450][ T65] usb 4-1: descriptor type invalid, skip [ 125.923127][ T65] usb 4-1: descriptor type invalid, skip [ 125.929320][ T65] usb 4-1: descriptor type invalid, skip [ 125.935189][ T65] usb 4-1: descriptor type invalid, skip [ 125.940880][ T65] usb 4-1: descriptor type invalid, skip [ 125.946560][ T65] usb 4-1: descriptor type invalid, skip [ 125.952224][ T65] usb 4-1: descriptor type invalid, skip [ 125.957891][ T65] usb 4-1: descriptor type invalid, skip [ 125.963560][ T65] usb 4-1: descriptor type invalid, skip [ 125.969235][ T65] usb 4-1: descriptor type invalid, skip [ 125.974953][ T65] usb 4-1: descriptor type invalid, skip [ 125.980632][ T65] usb 4-1: descriptor type invalid, skip [ 125.986418][ T65] usb 4-1: descriptor type invalid, skip [ 125.992083][ T65] usb 4-1: descriptor type invalid, skip [ 125.997876][ T65] usb 4-1: descriptor type invalid, skip [ 126.003632][ T65] usb 4-1: descriptor type invalid, skip [ 126.009331][ T65] usb 4-1: descriptor type invalid, skip [ 126.015101][ T65] usb 4-1: descriptor type invalid, skip [ 126.020751][ T65] usb 4-1: descriptor type invalid, skip [ 126.026436][ T65] usb 4-1: descriptor type invalid, skip [ 126.032127][ T65] usb 4-1: descriptor type invalid, skip [ 126.037802][ T65] usb 4-1: descriptor type invalid, skip [ 126.043463][ T65] usb 4-1: descriptor type invalid, skip [ 126.049141][ T65] usb 4-1: descriptor type invalid, skip [ 126.054863][ T65] usb 4-1: descriptor type invalid, skip [ 126.060511][ T65] usb 4-1: descriptor type invalid, skip [ 126.066183][ T65] usb 4-1: descriptor type invalid, skip [ 126.071877][ T65] usb 4-1: descriptor type invalid, skip [ 126.077578][ T65] usb 4-1: descriptor type invalid, skip [ 126.083235][ T65] usb 4-1: descriptor type invalid, skip [ 126.088909][ T65] usb 4-1: descriptor type invalid, skip [ 126.094617][ T65] usb 4-1: descriptor type invalid, skip [ 126.100274][ T65] usb 4-1: descriptor type invalid, skip [ 126.105946][ T65] usb 4-1: descriptor type invalid, skip [ 126.111617][ T65] usb 4-1: descriptor type invalid, skip [ 126.117294][ T65] usb 4-1: descriptor type invalid, skip [ 126.122975][ T65] usb 4-1: descriptor type invalid, skip [ 126.128730][ T65] usb 4-1: descriptor type invalid, skip [ 126.134382][ T65] usb 4-1: descriptor type invalid, skip [ 126.140067][ T65] usb 4-1: descriptor type invalid, skip [ 126.145760][ T65] usb 4-1: descriptor type invalid, skip [ 126.151776][ T65] usb 4-1: descriptor type invalid, skip [ 126.157438][ T65] usb 4-1: descriptor type invalid, skip [ 126.163090][ T65] usb 4-1: descriptor type invalid, skip [ 126.168833][ T65] usb 4-1: descriptor type invalid, skip [ 126.174525][ T65] usb 4-1: descriptor type invalid, skip [ 126.180169][ T65] usb 4-1: descriptor type invalid, skip [ 126.185927][ T65] usb 4-1: descriptor type invalid, skip [ 126.191581][ T65] usb 4-1: descriptor type invalid, skip [ 126.197254][ T65] usb 4-1: descriptor type invalid, skip [ 126.202912][ T65] usb 4-1: descriptor type invalid, skip [ 126.208591][ T65] usb 4-1: descriptor type invalid, skip [ 126.214286][ T65] usb 4-1: descriptor type invalid, skip [ 126.219964][ T65] usb 4-1: descriptor type invalid, skip [ 126.225778][ T65] usb 4-1: descriptor type invalid, skip [ 126.231427][ T65] usb 4-1: descriptor type invalid, skip [ 126.237099][ T65] usb 4-1: descriptor type invalid, skip [ 126.242859][ T65] usb 4-1: descriptor type invalid, skip [ 126.248575][ T65] usb 4-1: descriptor type invalid, skip [ 126.254324][ T65] usb 4-1: descriptor type invalid, skip [ 126.260064][ T65] usb 4-1: descriptor type invalid, skip [ 126.265842][ T65] usb 4-1: descriptor type invalid, skip [ 126.271497][ T65] usb 4-1: descriptor type invalid, skip [ 126.277259][ T65] usb 4-1: descriptor type invalid, skip [ 126.282914][ T65] usb 4-1: descriptor type invalid, skip [ 126.288577][ T65] usb 4-1: descriptor type invalid, skip [ 126.294321][ T65] usb 4-1: descriptor type invalid, skip [ 126.299994][ T65] usb 4-1: descriptor type invalid, skip [ 126.305681][ T65] usb 4-1: descriptor type invalid, skip [ 126.311323][ T65] usb 4-1: descriptor type invalid, skip [ 126.316987][ T65] usb 4-1: descriptor type invalid, skip [ 126.322649][ T65] usb 4-1: descriptor type invalid, skip [ 126.328318][ T65] usb 4-1: descriptor type invalid, skip [ 126.335576][ T65] usb 4-1: descriptor type invalid, skip [ 126.341235][ T65] usb 4-1: descriptor type invalid, skip [ 126.346913][ T65] usb 4-1: descriptor type invalid, skip [ 126.352549][ T65] usb 4-1: descriptor type invalid, skip [ 126.358298][ T65] usb 4-1: descriptor type invalid, skip [ 126.363931][ T65] usb 4-1: descriptor type invalid, skip [ 126.369651][ T65] usb 4-1: descriptor type invalid, skip [ 126.389727][ T65] usb 4-1: descriptor type invalid, skip [ 126.398007][ T65] usb 4-1: descriptor type invalid, skip [ 126.403663][ T65] usb 4-1: descriptor type invalid, skip [ 126.410514][ T65] usb 4-1: descriptor type invalid, skip [ 126.423808][ T65] usb 4-1: descriptor type invalid, skip [ 126.429488][ T65] usb 4-1: descriptor type invalid, skip [ 126.435163][ T65] usb 4-1: descriptor type invalid, skip [ 126.440793][ T65] usb 4-1: descriptor type invalid, skip [ 126.446535][ T65] usb 4-1: descriptor type invalid, skip [ 126.452178][ T65] usb 4-1: descriptor type invalid, skip [ 126.457821][ T65] usb 4-1: descriptor type invalid, skip [ 126.463547][ T65] usb 4-1: descriptor type invalid, skip [ 126.469235][ T65] usb 4-1: descriptor type invalid, skip [ 126.474897][ T65] usb 4-1: descriptor type invalid, skip [ 126.480521][ T65] usb 4-1: descriptor type invalid, skip [ 126.486214][ T65] usb 4-1: descriptor type invalid, skip [ 126.491934][ T65] usb 4-1: descriptor type invalid, skip [ 126.497581][ T65] usb 4-1: descriptor type invalid, skip [ 126.503218][ T65] usb 4-1: descriptor type invalid, skip [ 126.509011][ T65] usb 4-1: descriptor type invalid, skip [ 126.514687][ T65] usb 4-1: descriptor type invalid, skip [ 126.520315][ T65] usb 4-1: descriptor type invalid, skip [ 126.525960][ T65] usb 4-1: descriptor type invalid, skip [ 126.531680][ T65] usb 4-1: descriptor type invalid, skip [ 126.537332][ T65] usb 4-1: descriptor type invalid, skip [ 126.543056][ T65] usb 4-1: descriptor type invalid, skip [ 126.548732][ T65] usb 4-1: descriptor type invalid, skip [ 126.554375][ T65] usb 4-1: descriptor type invalid, skip [ 126.560040][ T65] usb 4-1: descriptor type invalid, skip [ 126.565778][ T65] usb 4-1: descriptor type invalid, skip [ 126.571419][ T65] usb 4-1: descriptor type invalid, skip [ 126.577074][ T65] usb 4-1: descriptor type invalid, skip [ 126.582727][ T65] usb 4-1: descriptor type invalid, skip [ 126.588374][ T65] usb 4-1: descriptor type invalid, skip [ 126.594001][ T65] usb 4-1: descriptor type invalid, skip [ 126.599645][ T65] usb 4-1: descriptor type invalid, skip [ 126.605304][ T65] usb 4-1: descriptor type invalid, skip [ 126.611022][ T65] usb 4-1: descriptor type invalid, skip [ 126.616777][ T65] usb 4-1: descriptor type invalid, skip [ 126.622410][ T65] usb 4-1: descriptor type invalid, skip [ 126.628065][ T65] usb 4-1: descriptor type invalid, skip [ 126.633695][ T65] usb 4-1: descriptor type invalid, skip [ 126.639353][ T65] usb 4-1: descriptor type invalid, skip [ 126.644994][ T65] usb 4-1: descriptor type invalid, skip [ 126.650603][ T65] usb 4-1: descriptor type invalid, skip [ 126.656261][ T65] usb 4-1: descriptor type invalid, skip [ 126.661884][ T65] usb 4-1: descriptor type invalid, skip [ 126.667534][ T65] usb 4-1: descriptor type invalid, skip [ 126.673247][ T65] usb 4-1: descriptor type invalid, skip [ 126.678900][ T65] usb 4-1: descriptor type invalid, skip [ 126.684651][ T65] usb 4-1: descriptor type invalid, skip [ 126.690270][ T65] usb 4-1: descriptor type invalid, skip [ 126.695918][ T65] usb 4-1: descriptor type invalid, skip [ 126.701543][ T65] usb 4-1: descriptor type invalid, skip [ 126.707193][ T65] usb 4-1: descriptor type invalid, skip [ 126.712827][ T65] usb 4-1: descriptor type invalid, skip [ 126.718465][ T65] usb 4-1: descriptor type invalid, skip [ 126.724093][ T65] usb 4-1: descriptor type invalid, skip [ 126.729729][ T65] usb 4-1: descriptor type invalid, skip [ 126.735375][ T65] usb 4-1: descriptor type invalid, skip [ 126.740998][ T65] usb 4-1: descriptor type invalid, skip [ 126.746657][ T65] usb 4-1: descriptor type invalid, skip [ 126.752300][ T65] usb 4-1: descriptor type invalid, skip [ 126.757949][ T65] usb 4-1: descriptor type invalid, skip [ 126.763595][ T65] usb 4-1: descriptor type invalid, skip [ 126.769277][ T65] usb 4-1: descriptor type invalid, skip [ 126.775039][ T65] usb 4-1: descriptor type invalid, skip [ 126.780776][ T65] usb 4-1: descriptor type invalid, skip [ 126.786451][ T65] usb 4-1: descriptor type invalid, skip [ 126.792090][ T65] usb 4-1: No LPM exit latency info found, disabling LPM. [ 126.800004][ T65] usb 4-1: config 0 has no interfaces? [ 126.807554][ T65] usb 4-1: string descriptor 0 read error: -22 [ 126.813736][ T65] usb 4-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.40 [ 126.822813][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.833356][ T65] usb 4-1: config 0 descriptor?? [ 127.046316][ T65] usb 4-1: USB disconnect, device number 57 [ 128.433005][ T36] audit: type=1400 audit(1775142962.766:31697): avc: denied { mounton } for pid=3567 comm="syz.3.1205" path="/232/file0" dev="tmpfs" ino=1252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 128.607334][ T65] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 128.805609][ T65] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 128.813963][ T65] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 128.822981][ T65] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 128.833263][ T65] usb 5-1: config 220 has no interface number 2 [ 128.839552][ T65] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 128.852724][ T65] usb 5-1: config 220 interface 0 has no altsetting 0 [ 128.859509][ T65] usb 5-1: config 220 interface 76 has no altsetting 0 [ 128.866439][ T65] usb 5-1: config 220 interface 1 has no altsetting 0 [ 128.875326][ T65] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 128.884489][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.892566][ T65] usb 5-1: Product: syz [ 128.896851][ T65] usb 5-1: Manufacturer: syz [ 128.901575][ T65] usb 5-1: SerialNumber: syz [ 129.115139][ T65] usb 5-1: selecting invalid altsetting 0 [ 129.122775][ T65] usb 5-1: selecting invalid altsetting 0 [ 129.128855][ T65] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 129.135326][ T65] usb 5-1: No valid video chain found. [ 129.143408][ T65] usb 5-1: USB disconnect, device number 7 [ 130.280381][ T36] audit: type=1326 audit(1775142964.616:31698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383a79c819 code=0x7ffc0000 [ 130.304055][ T36] audit: type=1326 audit(1775142964.616:31699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383a79c819 code=0x7ffc0000 [ 130.328535][ T36] audit: type=1326 audit(1775142964.636:31700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383a79c819 code=0x7ffc0000 [ 130.349137][ T3629] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1229'. [ 130.352379][ T36] audit: type=1326 audit(1775142964.636:31701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383a79c819 code=0x7ffc0000 [ 130.386087][ T36] audit: type=1326 audit(1775142964.636:31702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f383a79c819 code=0x7ffc0000 [ 130.410481][ T36] audit: type=1326 audit(1775142964.636:31703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383a79c819 code=0x7ffc0000 [ 130.434429][ T36] audit: type=1326 audit(1775142964.636:31704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383a79c819 code=0x7ffc0000 [ 130.458388][ T36] audit: type=1326 audit(1775142964.636:31705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f383a79c819 code=0x7ffc0000 [ 130.482159][ T36] audit: type=1326 audit(1775142964.636:31706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f383a79c819 code=0x7ffc0000 [ 130.855422][ T3673] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 130.862900][ T3673] rust_binder: Write failure EINVAL in pid:221 [ 131.014496][ T320] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 131.174472][ T320] usb 4-1: Using ep0 maxpacket: 8 [ 131.174476][ T428] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 131.189408][ T320] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 131.198581][ T320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.206604][ T320] usb 4-1: Product: syz [ 131.210748][ T320] usb 4-1: Manufacturer: syz [ 131.215341][ T320] usb 4-1: SerialNumber: syz [ 131.220757][ T320] usb 4-1: config 0 descriptor?? [ 131.324479][ T428] usb 5-1: Using ep0 maxpacket: 32 [ 131.330738][ T428] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 131.338850][ T428] usb 5-1: config 0 has no interface number 0 [ 131.344997][ T428] usb 5-1: config 0 interface 6 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.356302][ T428] usb 5-1: config 0 interface 6 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.366082][ T428] usb 5-1: config 0 interface 6 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.378997][ T428] usb 5-1: config 0 interface 6 has no altsetting 0 [ 131.385675][ T428] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 131.394770][ T428] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.403526][ T428] usb 5-1: config 0 descriptor?? [ 131.812569][ T428] uclogic 0003:28BD:0933.000F: interface is invalid, ignoring [ 132.018406][ T428] usb 5-1: USB disconnect, device number 8 [ 132.697633][ T3724] overlayfs: failed to clone upperpath [ 132.703594][ T3724] overlayfs: failed to clone upperpath [ 132.720238][ T3726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1272'. [ 132.729375][ T3726] tipc: Started in network mode [ 132.734329][ T3726] tipc: Node identity 06, cluster identity 4711 [ 133.792929][ T428] usb 4-1: USB disconnect, device number 58 [ 133.797232][ T3746] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.807117][ T3746] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.814212][ T3746] bridge_slave_0: entered allmulticast mode [ 133.820644][ T3746] bridge_slave_0: entered promiscuous mode [ 133.827014][ T3752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1282'. [ 133.836979][ T3746] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.846426][ T3746] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.860415][ T3746] bridge_slave_1: entered allmulticast mode [ 133.871018][ T3746] bridge_slave_1: entered promiscuous mode [ 133.879310][ T305] dummy0: left allmulticast mode [ 133.884277][ T305] dummy0: left promiscuous mode [ 133.889267][ T305] bridge0: port 3(dummy0) entered disabled state [ 133.896291][ T305] bridge_slave_1: left allmulticast mode [ 133.902016][ T305] bridge_slave_1: left promiscuous mode [ 133.907872][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.915489][ T305] bridge_slave_0: left allmulticast mode [ 133.921181][ T305] bridge_slave_0: left promiscuous mode [ 133.927237][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.058442][ T305] veth1_macvtap: left promiscuous mode [ 134.063983][ T305] veth0_vlan: left promiscuous mode [ 134.095547][ T354] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 134.121821][ T3746] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.128926][ T3746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.136367][ T3746] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.143756][ T3746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.175450][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.187683][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.201329][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.204762][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 134.204778][ T36] audit: type=1326 audit(1775142968.536:31710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3761 comm="syz.1.1285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd788b9c819 code=0x0 [ 134.208459][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.245243][ T428] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 134.245866][ T354] usb 5-1: config index 0 descriptor too short (expected 64575, got 68) [ 134.254564][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.268256][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.271777][ T354] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 134.287367][ T354] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 134.298691][ T3746] veth0_vlan: entered promiscuous mode [ 134.301593][ T354] usb 5-1: config index 1 descriptor too short (expected 64575, got 68) [ 134.312887][ T3746] veth1_macvtap: entered promiscuous mode [ 134.320136][ T354] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 134.330644][ T354] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 134.347583][ T354] usb 5-1: string descriptor 0 read error: -71 [ 134.354042][ T354] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 134.364701][ T354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.374500][ T428] usb 4-1: device descriptor read/64, error -71 [ 134.377053][ T354] usb 5-1: can't set config #1, error -71 [ 134.391948][ T354] usb 5-1: USB disconnect, device number 9 [ 134.407892][ T305] ------------[ cut here ]------------ [ 134.408129][ T3767] netlink: 'syz.5.1286': attribute type 13 has an invalid length. [ 134.413503][ T305] WARNING: CPU: 1 PID: 305 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 134.431344][ T305] Modules linked in: [ 134.435324][ T305] CPU: 1 UID: 0 PID: 305 Comm: kworker/u8:3 Not tainted syzkaller #0 4629476e74998a42e0eeb731ff095178aeeee8c1 [ 134.447158][ T305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.457533][ T305] Workqueue: netns cleanup_net [ 134.462318][ T305] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 134.468331][ T305] Code: e8 31 4c d9 fc 4b 83 3c 3e 00 75 19 e8 d5 1d 81 fc 49 81 ff f8 07 00 00 74 1b e8 c7 1d 81 fc 49 83 c7 08 eb c9 e8 bc 1d 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 134.488015][ T305] RSP: 0018:ffffc9000b70fb90 EFLAGS: 00010293 [ 134.494085][ T305] RAX: ffffffff85068d24 RBX: ffff888132118000 RCX: ffff88810b7a0000 [ 134.502126][ T305] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881037e8000 [ 134.510142][ T305] RBP: ffffc9000b70fbb0 R08: ffffffff87d38bc7 R09: 1ffffffff0fa7178 [ 134.518265][ T305] R10: dffffc0000000000 R11: fffffbfff0fa7179 R12: dffffc0000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 134.522633][ T36] audit: type=1400 audit(1775142968.856:31711): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2409]" dev="pipefs" ino=2409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 134.526381][ T305] R13: dffffc0000000000 R14: ffff8881037e8000 R15: 0000000000000000 [ 134.557693][ T305] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 134.566975][ T305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.573572][ T305] CR2: 00007fea8afbb9b0 CR3: 000000010c7fa000 CR4: 00000000003526b0 [ 134.581642][ T305] Call Trace: [ 134.584962][ T305] [ 134.587900][ T305] cleanup_net+0x6bd/0xc90 [ 134.592323][ T305] ? __cfi_cleanup_net+0x10/0x10 [ 134.597331][ T305] ? kick_pool+0xb9/0x550 [ 134.601666][ T305] process_scheduled_works+0x7d1/0x1020 [ 134.607295][ T305] worker_thread+0xc70/0x10b0 [ 134.612135][ T305] kthread+0x2c6/0x370 [ 134.616280][ T305] ? __cfi_worker_thread+0x10/0x10 [ 134.621413][ T305] ? __cfi_kthread+0x10/0x10 [ 134.626122][ T305] ret_from_fork+0x67/0xa0 [ 134.630566][ T305] ? __cfi_kthread+0x10/0x10 [ 134.634979][ T428] usb 4-1: device descriptor read/64, error -71 [ 134.635200][ T305] ret_from_fork_asm+0x1a/0x30 [ 134.646342][ T305] [ 134.649391][ T305] ---[ end trace 0000000000000000 ]--- [ 134.656685][ T305] ------------[ cut here ]------------ [ 134.662154][ T305] WARNING: CPU: 1 PID: 305 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 134.672325][ T305] Modules linked in: [ 134.676299][ T305] CPU: 1 UID: 0 PID: 305 Comm: kworker/u8:3 Tainted: G W syzkaller #0 4629476e74998a42e0eeb731ff095178aeeee8c1 [ 134.684441][ T65] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 134.689448][ T305] Tainted: [W]=WARN [ 134.700725][ T305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.710824][ T305] Workqueue: netns cleanup_net [ 134.715632][ T305] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 134.721717][ T305] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 80 1d 81 fc 49 81 ff f8 07 00 00 74 1b e8 72 1d 81 fc 49 83 c7 08 eb c5 e8 67 1d 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 57 1d 81 fc 5b 41 5c 41 5e 41 [ 134.741393][ T305] RSP: 0018:ffffc9000b70fb90 EFLAGS: 00010293 [ 134.747530][ T305] RAX: ffffffff85068d79 RBX: ffff8881037e8800 RCX: ffff88810b7a0000 [ 134.755573][ T305] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881037e8808 [ 134.763554][ T305] RBP: ffffc9000b70fbb0 R08: ffffffff87d38bc7 R09: 1ffffffff0fa7178 [ 134.771608][ T305] R10: dffffc0000000000 R11: fffffbfff0fa7179 R12: dffffc0000000000 [ 134.779634][ T305] R13: dffffc0000000000 R14: ffff8881037e8000 R15: 0000000000000008 [ 134.787673][ T305] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 134.796666][ T305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.803259][ T305] CR2: 00007fea8afbb9b0 CR3: 000000010c7fa000 CR4: 00000000003526b0 [ 134.811301][ T305] Call Trace: [ 134.814612][ T305] [ 134.817543][ T305] cleanup_net+0x6bd/0xc90 [ 134.821966][ T305] ? __cfi_cleanup_net+0x10/0x10 [ 134.826976][ T305] ? kick_pool+0xb9/0x550 [ 134.831315][ T305] process_scheduled_works+0x7d1/0x1020 [ 134.836929][ T305] worker_thread+0xc70/0x10b0 [ 134.841618][ T305] kthread+0x2c6/0x370 [ 134.845752][ T305] ? __cfi_worker_thread+0x10/0x10 [ 134.850874][ T305] ? __cfi_kthread+0x10/0x10 [ 134.855516][ T305] ret_from_fork+0x67/0xa0 [ 134.859937][ T305] ? __cfi_kthread+0x10/0x10 [ 134.864576][ T305] ret_from_fork_asm+0x1a/0x30 [ 134.869371][ T305] [ 134.872401][ T305] ---[ end trace 0000000000000000 ]--- [ 134.884684][ T428] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 134.937352][ T305] ------------[ cut here ]------------ [ 134.942853][ T305] WARNING: CPU: 1 PID: 305 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 134.952398][ T305] Modules linked in: [ 134.956338][ T305] CPU: 1 UID: 0 PID: 305 Comm: kworker/u8:3 Tainted: G W syzkaller #0 4629476e74998a42e0eeb731ff095178aeeee8c1 [ 134.969614][ T305] Tainted: [W]=WARN [ 134.973431][ T305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.983548][ T305] Workqueue: netns cleanup_net [ 134.988353][ T305] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 134.993927][ T305] Code: 3c 20 00 74 08 48 89 df e8 2f 18 f4 fc 48 8b 3b e8 97 40 df fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 d1 b7 00 cc e8 c2 e9 9b fc <0f> 0b e9 b0 fd ff ff e8 b6 e9 9b fc 0f 0b e9 18 fe ff ff e8 aa e9 [ 135.013675][ T305] RSP: 0018:ffffc9000b70fb70 EFLAGS: 00010293 [ 135.019800][ T305] RAX: ffffffff84ebc11e RBX: ffff888132118000 RCX: ffff88810b7a0000 [ 135.027802][ T305] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88810b7a0000 [ 135.035799][ T305] RBP: ffffc9000b70fb98 R08: ffffffff87d38bc7 R09: 1ffffffff0fa7178 [ 135.043873][ T305] R10: dffffc0000000000 R11: fffffbfff0fa7179 R12: 1ffffffff0fa6ec8 [ 135.051899][ T305] R13: dffffc0000000000 R14: ffff888132118c00 R15: dffffc0000000000 [ 135.059937][ T305] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 135.068887][ T305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.075547][ T305] CR2: 00007fea8afbb9b0 CR3: 000000010c7fa000 CR4: 00000000003526b0 [ 135.083526][ T305] Call Trace: [ 135.086828][ T305] [ 135.089763][ T305] xfrm_net_exit+0x31/0x80 [ 135.094189][ T305] cleanup_net+0x6bd/0xc90 [ 135.098666][ T305] ? __cfi_cleanup_net+0x10/0x10 [ 135.103693][ T305] ? kick_pool+0xb9/0x550 [ 135.108071][ T305] process_scheduled_works+0x7d1/0x1020 [ 135.113630][ T305] worker_thread+0xc70/0x10b0 [ 135.118376][ T305] kthread+0x2c6/0x370 [ 135.122453][ T305] ? __cfi_worker_thread+0x10/0x10 [ 135.128957][ T305] ? __cfi_kthread+0x10/0x10 [ 135.133574][ T305] ret_from_fork+0x67/0xa0 [ 135.138075][ T305] ? __cfi_kthread+0x10/0x10 [ 135.142674][ T305] ret_from_fork_asm+0x1a/0x30 [ 135.147493][ T305] [ 135.150600][ T305] ---[ end trace 0000000000000000 ]--- [ 135.256222][ T305] bridge_slave_1: left allmulticast mode [ 135.261907][ T305] bridge_slave_1: left promiscuous mode [ 135.272890][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.280769][ T305] bridge_slave_0: left allmulticast mode [ 135.287009][ T305] bridge_slave_0: left promiscuous mode [ 135.292652][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.300357][ T305] bridge_slave_1: left allmulticast mode [ 135.306095][ T305] bridge_slave_1: left promiscuous mode [ 135.311689][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.319178][ T305] bridge_slave_0: left allmulticast mode [ 135.324941][ T305] bridge_slave_0: left promiscuous mode [ 135.330537][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.566265][ T305] tipc: Left network mode [ 135.571921][ T305] veth1_macvtap: left promiscuous mode [ 135.577505][ T305] veth0_vlan: left promiscuous mode [ 135.582861][ T305] veth1_macvtap: left promiscuous mode [ 135.588422][ T305] veth0_vlan: left promiscuous mode [ 136.025478][ T305] bridge_slave_1: left allmulticast mode [ 136.031486][ T305] bridge_slave_1: left promiscuous mode [ 136.037151][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.044712][ T305] bridge_slave_0: left allmulticast mode [ 136.050454][ T305] bridge_slave_0: left promiscuous mode [ 136.056183][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.156005][ T305] veth1_macvtap: left promiscuous mode [ 136.161560][ T305] veth0_vlan: left promiscuous mode