last executing test programs: 3.32591053s ago: executing program 1 (id=1989): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r4, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8=0x0, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=0x0, @ANYBLOB="06002a00dd9b"], 0x24}}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2e41d16cd5f466b822000f00d0460f06f245dd48f526263ef2a585f6b92e030000b800000000ba008000000f3041ab0fc73a0fc71f", 0x35}], 0x1, 0x70, &(0x7f0000000200), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x10}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x10000) 3.221169484s ago: executing program 1 (id=1991): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005140)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2d, 0x25dfdbfd, 0xff}, 0x14}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4008040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.171569206s ago: executing program 1 (id=1992): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x2, 0x1, 0x1}, &(0x7f0000000040)=[{}]) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000051aae040030478fa79ab010203010902120001040020000904"], 0x0) 1.998676454s ago: executing program 1 (id=2004): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) cachestat(r0, &(0x7f00000000c0)={0x0, 0x6fee}, &(0x7f0000000100), 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat(r3, &(0x7f0000000080)='./file0/file1\x00', 0x0, 0x5) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x2, r4, 0x0, 0xfcfd, 0xaf, 0x0, 0x5400655aa3227f64, r4}]) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) socket(0x10, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) (async) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) cachestat(r0, &(0x7f00000000c0)={0x0, 0x6fee}, &(0x7f0000000100), 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) dup(r2) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) openat(r3, &(0x7f0000000080)='./file0/file1\x00', 0x0, 0x5) (async) io_setup(0x5, &(0x7f00000002c0)) (async) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x2, r4, 0x0, 0xfcfd, 0xaf, 0x0, 0x5400655aa3227f64, r4}]) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) (async) 1.925606746s ago: executing program 2 (id=2008): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0', [], 0xa, "6fa2dd05e52d"}, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000cc0)={0x0, 0x10, '\x00', [@enc_lim={0x4, 0x1, 0xe}, @ra={0x5, 0x2, 0xfff9}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x1000}, @generic={0x8, 0x73, "ff44fdf4a84354e4f79d15cf1a7cefced26ba847294edc8e4eba23ae82e12fcd109eda5e8c1599771a2c943de39efc987f473a79a58ca8d31e10d508727133f19e8a147df4e8c0917a598779ac000df5139ef2d590a175f1707f79c18cc2ee377aaca4ded9b098d29ccba2efe91f18f7115c74"}]}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x1800000}, {}, {0x28}, {0xb1, 0x0, 0x0, 0x1ff}, {0x6}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f0000000240)='./cgroup\x00', &(0x7f0000000200)=@known='com.apple.FinderInfo\x00') sendfile(r0, r1, &(0x7f0000000100)=0x10, 0x7ffff000) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3042, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x30, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x6, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x5, 0x0, {0x8, 0x25, 0x1, 0x1, 0x6, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xe6, 0x40, {0x8, 0x25, 0x1, 0x3, 0x33, 0xfe, 0x5}}}}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x4, 0x65, &(0x7f0000000c40)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0x0, 0x10, 0xa, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x6, 0x24, 0x6, 0x0, 0x0, "d8"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xbf9, 0x14, 0x2, 0x5}, [@country_functional={0x6, 0x24, 0x7, 0xa8}, @mbim_extended={0x8, 0x24, 0x1c, 0x9c4, 0xfd, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x208, 0xa6, 0x0, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x6, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xd6, 0x9, 0x9}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x77, 0x6, 0x9, 0x40, 0x3}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1007}}, {0xb1, &(0x7f0000000240)=@string={0xb1, 0x3, "f9b1c168ecc85bc1405f5fcb6a6841deb83dc12484b826d0e41aa128a994605481a4d03deebf1775c841fcf5618178488f31c114c36fc0122e7dbc8951cbb23d42a7c100bc7eb8dc270afa4032bd5bae7e00edece02ae408d1474b01d378b8a44aa3e137e5cfcbb068f27438088da2ce203c9092007c9317ae9bce556a66794a8c12ab95a93d137806f0582ee37aa2162557a12de10b4f9dfcc7822b4f770ee455848a55cdd2502aae66dcb45d1f92"}}, {0xe3, &(0x7f0000000d80)=@string={0xe3, 0x3, "42542aeab32934c7f9093b5b90fbfcaf4499e40eef651d4ba7ff0a9eb520dcdf4026612694084f1b63fb745a1072e7f4f424529f5beb55917fd658e2689b924d5e93308f4ad9d068e39fbde71a27f1fcae28da7cd8b4c5bda1f127250b611b29abffebff6c509deb5a9e2532b3a3910be5ed6ce1e0c4d4ba285aeea3e3d740391422b6272284eff3de90e2e04c91168d2d4499ebf36b3f5dc4ea062e2fce8e7b30a18c73ef0f618fb10d225b84bc8890f0610fc556233e26dee0d177dc8d1b60b2537975dd537996392470636ad42537c7c1284c727158c0cc4a204745e473d619"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41c}}, {0xf4, &(0x7f0000000400)=@string={0xf4, 0x3, "dc12e507823864bb2de2a6e881ce015dc16a81d0293e28cbcd0bf735ec79fe25db7feb9ff00f406defe012a6c740946cb6d5007e4aa2b9b71bd75801b6cbdaed469e74d00801e3b6c825c6f1e9172e0e79ad947b9e1fc835355c68cb2a9cce001d71b5740504dfe438d9cc6417cfe817d5027360d65ec93edf060b37ad0526a2338b6e63960e5c9a515989c9d52bdc7af28a6741c75cb3d1d816d82527e09582f30ef438376f390b54ed3ae27e5768538d7c88991ace5271f7535d6f1d47a1cb2aa4f75312ff4891850b8c8d7447aae912cd518ff4735638fa6d41b30a4d8365c9b2a080da2de3db5389ef5d4c583a06d3d9"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x31}}]}) syz_usb_connect$uac3(0x2, 0xfb, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1036, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe9, 0x3, 0x1, 0x3, 0x10, 0xa, {0x8, 0xb, 0x2, 0x0, 0x1, 0x24, 0x30, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x39, 0x9d}, [@feature_unit={0x15, 0x24, 0x7, 0x1, 0x6, [0x0, 0x16, 0x4, 0x2]}, @processing_unit={0x9, 0x24, 0x9, 0x6, 0x6, [0x0]}, @selector_unit={0x5, 0x24, 0xc, 0x8d}, @selector_unit={0xc, 0x24, 0xc, 0x5, 0x7, "e23369207e8980"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x9, 0xd, 0x574a, 0x5, 0x7, 0x8, 0x72f5}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfff, 0x42}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0xc, 0x8, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x8, 0x7, 0x3, 0xfe}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0xff}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x6, 0x2, {0xa, 0x25, 0x25, 0x5, 0x2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x81}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x80, 0x2, {0xa, 0x25, 0x25, 0x9, 0x8, 0x2}}}}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x2, 0x0, 0x0, 0x8, 0x1}, 0x5, &(0x7f0000000740)={0x5, 0xf, 0x5}, 0x7, [{0x72, &(0x7f0000000780)=@string={0x72, 0x3, "b0ccc8677abcece50197d07ad10b9221cd49669c77941ac21cecef1291137c037e05407849576e515d9907bddf73e97a670eaf442c43b4384d3a049df390d84265d2b98d5a5ec7b8b6e501b8afb8141ec01d10c25d91f0275f6955d65d418622987be40a3b9aabaf5a2b076fa8d76be2"}}, {0xcf, &(0x7f0000000800)=@string={0xcf, 0x3, "1b433058c52291cbe92e35a3eca1746b64d970024b03ee632a255699c069e4d2364941b7e35da02bf7405463a25875d62724f832b415d3687a7dd3503b595a43138bd3e2cc3e0c454b4e02d52063be0fdef3e55f981081a2a0162c4f9e2ec4b798afbfc05aa277129e09d9dca772ce5c78547b2ca6a32081e9fc2bf07cd6c4b43560081bf30516963f2629ea136bf0cb5a7750bf7cb7ae432f2016ce84092eecbef678418860bedf3ce10d7a2cace0ddad64d0c8bc90e14a513a0c48316d55cfbfa1d2fd786330f2d6baccadd0"}}, {0xbc, &(0x7f0000000900)=@string={0xbc, 0x3, "3e3634f74465fcd0ef95c74996950786912519e72433fb83ea258535db9e3fa6d1dfc5f542b02d341dff79b5dede3b9fbbed43df9fde30b4125052e957e8f152a50fcdd91de71a400cb7f9d7c631cf2d848f3ba353aef46db9cc414fa863024354276ffafd5b23eac3e55bdeaa900076c4732d1542553881450b605a1f657afd0f426849a4d5b13c9a236f5ee4bc2c574e8b01a300a0245f699344d4587fa6ae2a1875e4109a4f55fcf2e2e9f391ed27ae54d76cf951c0403f17"}}, {0x5c, &(0x7f00000009c0)=@string={0x5c, 0x3, "2eaba9e0f8af91865f5e90355b9d5a5a42b3d8fd51f6919ce0b24f164955d6dff2111644d76b40b15c8d8752d6b113d7fe0cdfd012ffad7058ff115eecd74edefe10fb9b7c44893546ae435cd86e748d630f30014651522e2281"}}, {0x16, &(0x7f0000000a40)=ANY=[@ANYBLOB="162381ec8728f593b930c61d51338b21ad70b801c39d"]}, {0xcf, &(0x7f0000000a80)=@string={0xcf, 0x3, "31b3223ff2fe364c8dfc54f400be13c8aa1c20ff96169b9c29a0e0136acdaebf5ca5df71873125f888e46a90f3520cc3132dd6dc03ac395429a3be7c45573fe245833fc96519443cb0d1ef7a9dbe1ac01a565ed266eb3ba9ab55d465f9158d04e6e086c5e4c949959d599a8fef072ac57bf82afc28a68fc9e8660e75150f07daa4b99f4a57c01ab6e65a6369abd573ce93917a713bfbf3613c1077e7ed3dfae088347ff4f36b7b4d3fa14be97ef397a8c92f517edb00ee859eb36bb9bbea0a498b3834fa20332a67522ab382f0"}}, {0x6, &(0x7f0000000b80)=@string={0x6, 0x3, "7ce722a0"}}]}) 1.83512968s ago: executing program 1 (id=2009): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, 0xee01, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r2, 0x4, 0x3, 0x1000000000}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)=ANY=[@ANYBLOB="28000000430001"], 0x28}], 0x1}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000140)) 1.83492092s ago: executing program 1 (id=2010): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x2d45, 0x1000, 0x400000}, &(0x7f0000ffe000), 0x0, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x9, 0x0, 0x2, {0x8, 0xb, 0x0, 0x1, 0x1, 0x9, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x20, 0x5, 0x9, 0xfc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x4, 0x5, {0x8, 0x25, 0x1, 0x80, 0x0, 0x1, 0x8f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0x8, 0x5, {0x8, 0x25, 0x1, 0x80, 0x0, 0xfa, 0x2}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 1.363188825s ago: executing program 2 (id=2013): timerfd_create(0x9, 0x800) syz_usb_connect$uac1(0x4, 0xbc, &(0x7f0000002000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa00030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002000a000a00040c240202030202508000090111240605020507002e130a004ef10200000924030102020505f50904010000010200000904010101010200000905010920009301050725010003480f090402000001020000090402010101ff"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0xe4, &(0x7f0000000000)=@string={0xe4, 0x3, "50fa212f57e92fcd45d370e2123640efaf2f93a9ec67524bad105692c1773496ca7751323fba621d30c35fa2da8b2d3b0d7ee252e3cde403216a7edd08cfd8e51396408a026c8bc4340221d34e9bed1f8c7464de463bae1d24b825e700335e752d40d3d746f7f2802534d2fd398f90b21595efb123955a63ddb15c3180c366b567a8901863beb8d0f34b8b0e18f22d0f41278adde6a9691ce1feeed25e39eb2539fde63c03ffaf6900ff3c4b13e514e8edafa92dfb151021d99449647d8155474ba571c52c4317b67dbebec61a6414941d035ac236349aa5a56c10dda5bc753dd6b6"}}, {0xffffffffffffffe1, &(0x7f0000000100)=@string={0x79, 0x3, "5db1ae3d79823ad43b3fec86d7e0b90bc25bf97fa288b738d07ca5056e252337b7b64913ed4c2cbd182bf9ba054d93d620a73da4fc31ab003754e115b0868db6c19376dfd608246179e8a4a238a097486ec3c9adbaf3736b4ec78f7af4eff721f925cb1839516875431b25b5b032b28b2763c2acda0ba3"}}, {0xc5, &(0x7f0000000180)=@string={0xc5, 0x3, "7a4ae5e27a0a2d1d5cbeb1cb3bdd059b832347107948660546db1b48af2c3ae708af001c67648e87ced49f9a5d7283b6856466c551fcbdaa12a875ae7262396debe8ac4225950dddf9794c97419d9fd8aa3b7b77b5b8ea19ad0bb1fe1911306fd29e564ef099566994e04c5d7840ca2236c91dc65605874b8e7271bd8eb9bad1794fc3b074f32ecc2b58c1f8b7553f6a9467dd58419eb89ca05dfe95b855786ccd53bdee1e15ee18afe19a4cc198d7b1687e64989d05e2d9ba1153a1c45c3cb30c72d1"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x814}}, {0x41, &(0x7f0000000340)=@string={0x41, 0x3, "4d35f21a3a9a096602994dc2faa91e9d5632a83092b42a06a9ef0f39f043d2541335a14d7b31405dc63d3d552d99627fd0fbd4a5be114b9251bf6ad0b0e29d"}}]}) timerfd_create(0x8, 0x80800) 1.362971155s ago: executing program 0 (id=2014): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kheaders.tar.xz', 0x1c1000, 0x76c49b7ca1bc0dc4) 1.361871805s ago: executing program 0 (id=2015): syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010400000000204f0453b640000102030109022d"], 0xfffffffffffffffc) r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) fchdir(r1) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000000)) syz_usb_connect$cdc_ecm(0x2, 0x54, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42, 0x1, 0x1, 0x8, 0x30, 0x4, "", [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x7, 0x24, 0x6, 0x0, 0x0, "f273"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1000, 0xfff9, 0x3}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0xac}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x8, 0x41}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2, 0xff, 0x8}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x5, 0x3f, 0x4, 0x20, 0xa}, 0x1d, &(0x7f0000000140)={0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xa, 0x7, 0x30}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xe, 0x4, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x24, 0xf}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x416}}]}) 873.053532ms ago: executing program 2 (id=2016): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000103, 0x0, 0x4}]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0xfff, 0xfa, 0x19, 0x8ed}]}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x1, 0x2, 0xffffffff}) 861.217232ms ago: executing program 2 (id=2017): openat$rtc(0xffffff9c, &(0x7f0000000000), 0xc2440, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) close_range(r0, 0xffffffffffffffff, 0x0) 849.679922ms ago: executing program 2 (id=2018): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000500)=@ethtool_per_queue_op={0x25, 0xe, [0x9, 0x1ff, 0x7fff, 0x1c2, 0x0, 0x7, 0x81, 0x7, 0x6, 0x5, 0x3ff, 0x80, 0x0, 0x942f, 0x10, 0x10000, 0xe157, 0x1000, 0x65, 0x9, 0x4, 0x8, 0x6, 0x2, 0x5, 0x3, 0x92, 0x1d, 0x1, 0x0, 0xf0000000, 0x3, 0x9, 0x6, 0x47cd, 0x7, 0x8, 0xff, 0x6, 0x9, 0xb2d5, 0xf045, 0x2, 0x1ff, 0x351, 0x9, 0x9, 0x1, 0x2, 0x80000000, 0x0, 0x7fff, 0x91, 0xb7c, 0xc, 0x7, 0x80000001, 0x8, 0x2, 0x4, 0x1, 0x41, 0x8000, 0x4, 0x20b, 0x2, 0x2, 0x9, 0x6, 0x6, 0x8b, 0xfffff91a, 0x4, 0x8a, 0x8, 0x101, 0x80000000, 0x3, 0x2, 0x2, 0x7, 0x81, 0xa, 0x4, 0x3, 0x6, 0xaf6, 0x1, 0x9, 0x80005, 0x2, 0x6, 0x84, 0x19a400, 0xcb, 0x27, 0x9, 0xe, 0x4, 0x10001, 0x4c, 0x8, 0x3, 0x10000, 0x3, 0x4, 0x0, 0x6, 0xfffffffa, 0x20000, 0x8, 0xfffffffb, 0x0, 0x5, 0x0, 0x9, 0x1, 0x0, 0x0, 0xfb, 0x6, 0x8000, 0x7, 0x3, 0x9, 0x4, 0x6, 0x5]}}) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'erspan0\x00', {0x300}, 0x4b5d}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000060c"], 0x80}, 0x1, 0x0, 0x0, 0x20048085}, 0x30004084) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x200402, 0x49) 790.998674ms ago: executing program 0 (id=2020): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x0, &(0x7f0000001300)) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x1b) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x384, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4010) io_setup(0x251, &(0x7f0000000080)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x104) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {0x1, 0x1}, [], {0x4, 0x5}, [], {0x10, 0x7}, {0x20, 0x2}}, 0x24, 0x2) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x41, 0x1, 0x0, r2, 0x0, 0x0, 0x4000}]) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f0000000200)=""/207, 0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x5e}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 699.023707ms ago: executing program 0 (id=2021): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5) fsopen(&(0x7f0000000000)='mqueue\x00', 0x1) 663.245538ms ago: executing program 0 (id=2022): r0 = syz_usb_connect$printer(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904000012070103000905010200000000000905820200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x160, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x23, 0x38, {0x38, 0xd, "59d29674bba0eb8dcd9b39988a096f8cb6d4a0e8d0203862a2405925bee8707e25612278d1b2f4501ae1e64934d34a6b8063f4898a55"}}, &(0x7f0000000140)={0x0, 0x3, 0xe, @string={0xe, 0x3, "5621d38a021fb0472190abdd"}}, &(0x7f0000000180)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x4, 0x0, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x3, 0xa, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x8, 0x2, 0x7f}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc9, 0x2, 0xfc, 0x5, "7a0eeccf", "3a8357a4"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x8, 0x0, 0x7a, 0x5, 0x0, 0x3}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000280)={0x40, 0x0, 0x26, "e20494b9937faf51f56676b814054cb52b5ac23a4bf49f84de92ea52c0865367ba1b3a38d060"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6a}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x0, 0x4, [0xf00f]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000500)={0x40, 0xb, 0x2, "0210"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x725}, &(0x7f0000000580)={0x40, 0x13, 0x6, @random="f82314faf5cc"}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x19, 0x2, "d9dd"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x5aa}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r1, 0x10e, 0x3, 0x0, &(0x7f0000000080)) r2 = syz_usb_connect$uac3(0x2, 0x163, &(0x7f0000000880)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1507, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x151, 0x3, 0x1, 0x5, 0xe0, 0x7f, {0x8, 0xb, 0x1, 0x1, 0x1, 0x22, 0x30, 0x4e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x4a, 0x4}, [@cluster_info_segment={0x6, 0x20, 0x6, 0x99, 0xd}, @extension_unit={0x1d, 0x24, 0xa, 0x4, 0x2, [0x1, 0x3, 0x1, 0x2, 0x2, 0x3]}, @mixer_unit={0x9, 0x24, 0x5, 0x3, 0x13, "4eb12339"}, @input_terminal={0x14, 0x24, 0x2, 0x5, 0x401, 0x6, 0xd8, 0xfffffffa, 0x4, 0x294f, 0x5, 0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x40, 0x2, 0xea, 0x7, "445eca"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x9, 0x0, 0x5, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xff, 0xc, 0x6, 0x0, 0x4}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x4, 0x81, 0x3, "d1", "482ed8"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x7, 0x6, "4b3f47659ac2977468"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x7, 0x80, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x420, 0x7, 0x81, 0x4, {0xa, 0x25, 0x25, 0x10, 0x47, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1c, 0x2, 0x0, 0xa, "75d518f1150318"}, @as_header={0x17, 0x24, 0x1, 0x2, 0x7, 0x8, 0x0, 0xed, 0x5, 0x4, 0x81}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xffff, 0x3, 0xe, "64c60958627c"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xad, 0x4, 0x8, 0x8, "9c", "c872f2"}, @as_header={0x17, 0x24, 0x1, 0x7, 0x0, 0x2, 0x4, 0x45, 0xf9, 0x6, 0xb}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x90, 0xff, 0x2, {0xa, 0x25, 0x25, 0xb6, 0x3, 0x74}}}}}}}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x300, 0x2, 0x1d, 0xc8, 0x10, 0x5}, 0x30, &(0x7f0000000a40)={0x5, 0xf, 0x30, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x6, 0x1, 0xffff, 0x2}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x2, 0xf000, 0x4, [0xc0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x81, 0x5}, @ptm_cap={0x3}]}, 0x9, [{0x79, &(0x7f0000000b40)=@string={0x79, 0x3, "1780fa45a73afb6dd55c05954b401dd5204be46f74899ca8eba0ba0c7878c51e6a5486cb53afc5bd8218423d585698b5342c67439b8d42319a9519a0bd1a4194dace76064f9aecda2f373ad4a4530fecf36c9b89e7102909704558f9ad6d75fa0bb2080b76ba25e34737eb1c134dd3d048f3c21aedf44f"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x81d}}, {0xce, &(0x7f0000000c00)=@string={0xce, 0x3, "96db6d2703d32c773bf267cc8aed3bd10c0eb1666b065587ea12aa544deb70942ab76187c6c7ad57e2a2d1908d81674f4134334810741c4c79d2415f21c9850afdd37dd7ab09d19682a26b1d6e7157045fcee18c9b8264cd031ef26740f71254a68bb1aa720d2b13bfb9f682011fec116281192a048d96a8844b7aafeacfe0014000470f31ec9b373a7c5c4c8cbf0d7fec5c72b8fc27ea06d7a94c5e0a9e4f49989620fd608a8cb571efc9060835c10ece8fda69c2d59ced6649cc236d08e042f50b1014fb5a3490b81a458c"}}, {0x77, &(0x7f0000000d00)=@string={0x77, 0x3, "66238881a6a592befd094572126b29df7bac1715ad4cd73362d3c20fc9846d5fd918552b995f85183c467d1a987e407456985a1d05b0f59784ed68d7fabfee511051a4e019e9f7b1878a43e591dc41640ecb42cafe483b811724d7b1b49cec911a504b6da7a2c4a7cb12dd99add09c08b2652c7f43"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x43e}}, {0x53, &(0x7f0000000dc0)=@string={0x53, 0x3, "1e6d39dccb5749f446f40b67f24081d7ff904c93a6812204d0c74d0ba73600af4f6d7b22094b80d96f162ca9aa7f30840b085cbf7ea99c05c6218449aaabc08c5e7e2366c45084d7c18f81a8d6ceb2ea73"}}, {0xd7, &(0x7f0000000e40)=@string={0xd7, 0x3, "4ad001615a9ddd924ff7ac6fc9aa7b2c778fa520702b87dc4564717da72a52e4a981c13fdb48895f3127d75382da11cc9947cd05082228a555e5eb87e854616930bca213681a039e91b230404a2a601b8b9f4af5c3d31ddf3a888ea3d7b45fe3a8db5e1d07317f83d571303475a1bddcf6aa48e2902d9d8e25f23b53c81f8657f37a05c426e9c25fe739a1c934d1aa542adb2751acc6701d851f2997f744235bc127cd850bdfb62ef1e780a1e5fc75801974938c0a7f206f692628b9b449a703cf2b756c81e673337d2ebda90b9efef91287778bba"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x5617}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x180c}}]}) syz_usb_control_io$uac3(r2, &(0x7f0000001240)={0x14, &(0x7f0000001080)={0x0, 0x24, 0x81, {0x81, 0x7, "09efd3c894547fcd34cf64788f45d346090115545c269f85bab9e02a2109dd645183e029447ce8371869c326c2384a0007d894822121fd85e2043f847f753114f26b7444c6196657a6a8ea116761a82f017ad9e04b5d7c152b0066b39d23e870499c71668fc9a67d774b8351fda2f1de52732a80b1d2d750dfd89aab7229e3"}}, &(0x7f0000001140)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "a808fe980cc4c12f2e347253638044e1e8c00276b25bb37f8980e70a8c89700f994ff421ace5c2515cd1c67027f4f77d579286ca6a2a10f8e8f86929147ac905ed871cb92326f40c2a58c55a7021b8d6e1c9f85ac3f8a3deb2a913910e025ec9704a5172d6d5fc639697e7079da087b3690e4bb845a03c65339a205793b3cf381df98664a04979ab242d481d3f9a3b666f1576839efc1d7020c6458296767d385ea7a678f4d1e589d4a03a627059df9fa8ed18eefe39ee0cd16ef9d65e85fcfa4771a5d5477185e85b4e281c88ec1e3b2811ea67b80146c8a3b659559ecb24540dc3ed22369c2bed8fe2885aeef1"}}}, &(0x7f0000001540)={0x44, &(0x7f0000001280)={0x40, 0x30, 0xc9, "c831d44d3c4d4b1aa556e7fbc350c80ece08ab631b55d8c5a1ab74dec4cebfe7a293adaba4fd745f4d6c752fd05fc40875ad633ed0f3422a533eb41641d53242f7a49d96b55a4d3dceacfa57ae860deaa57ddd9a505de101227d4910b66b12926623a5f2622b0ba420ab6fbf14fc38c93d280547812532721ff7e2b4b392877e68a9829dfd338383de444f205dd49dc0491147fc763cec25fbd02130ecdfa15b05c64a393a60829dee0f58d615d015e8b6c50f9c5ae22eb9d5aa458ae3c40ca1d237bd966ea7370cd1"}, &(0x7f0000001380)={0x0, 0xa, 0x1}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001400)={0x20, 0x81, 0x1, "cb"}, &(0x7f0000001440)={0x20, 0x82, 0x2, "72af"}, &(0x7f0000001480)={0x20, 0x83, 0x3, "5bb5b2"}, &(0x7f00000014c0)={0x20, 0x84, 0x3, "371d7a"}, &(0x7f0000001500)={0x20, 0x85, 0x3, "6257b4"}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) 507.079544ms ago: executing program 3 (id=2023): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)={0x18, 0x69, 0x15, 0x8000000, 0xffffffff, "", [@generic="fdee1438fa"]}, 0x18}], 0x1}, 0x8000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0x10001, 0x8) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="be813875082f677431153cac48e117cbdce6df562f", 0x15}, {&(0x7f0000000100)="6f1ebc0a338e0a40297f01efe93e19b5154e28c54aab398e5136783b74258473b1152114c797c2e2c1ef64a1f619ce58b61be01e0107135534835be4eb6890552eaa33c44a1e344934173b86eafd55908841e8678d4888320d83ee4649b883c34be6ef962630765ed32eae8ea4b3968e23c87f428d2cada9faf7a5ee51542cacbc0ded5067291e8f21c27ae1f33acc67dfc54dece795febe0668fb634b6fd493b0be4c4354ecd9e16a09415e8976e55718e181b867d6cc2904a2ed798cb73e9152b7e5200481c5a70a19ee33583c6be4301658c98e64e7d0f59a6336d06ff56c", 0xe0}, {&(0x7f0000000200)="743ca31cc91755c34f2020e97ce04d50", 0x10}], 0x3, 0x1a5, 0x0, 0x14) 506.783624ms ago: executing program 3 (id=2024): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000001a80)={0x6, 'batadv_slave_0\x00', {0x5}, 0xfd}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000011}, 0x20040010) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x700, 0x7800, 0x3, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r5 = syz_open_dev$mouse(&(0x7f0000000040), 0x7fffffff, 0x2180) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000c00)={0x0, 'bond_slave_0\x00', {}, 0x9}) 475.459685ms ago: executing program 3 (id=2025): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x1, r1}) ioctl$KDSETLED(r0, 0x4b32, 0x4) r2 = syz_open_pts(r0, 0x12d080) ptrace(0x8, r1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0x6, 0x3, 0x4, 0x81, 0x1, 0x0, [{0xffffffffffffff5f, 0x6, 0x8, '\x00', 0x2080}]}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)=0x20000) r3 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x1, 0x14) preadv2(r3, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000000300)=""/115, 0x73}, {&(0x7f0000000380)=""/72, 0x48}, {&(0x7f0000000400)=""/206, 0xce}, {&(0x7f0000000500)=""/106, 0x6a}], 0x6, 0x2, 0xffffff63, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000600)) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000a40)={0x0, 0x0, 0x14, 0x3, 0x1c3, &(0x7f0000000640)="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"}) syz_create_resource$binfmt(&(0x7f0000000a80)='./file0\x00') r4 = creat(&(0x7f0000000ac0)='./file0\x00', 0x104) read$FUSE(r0, &(0x7f0000000b00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r4, &(0x7f0000002b40)={0x20, 0x0, r5, {0x3ff, 0x4, 0x401, 0x96}}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000002b80)={0x0, 0x4, 0x9000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r6 = creat(&(0x7f0000002bc0)='./file0\x00', 0x8c) faccessat(r6, &(0x7f0000002c00)='./file0\x00', 0x6) sendto$inet6(r6, &(0x7f0000002c40)="ad170bcb0a4e6837a5a037d7", 0xc, 0x10000000, &(0x7f0000002c80)={0xa, 0x4e24, 0xfffffe00, @local, 0x7}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000002cc0)={0x3ff, r2, 'id0\x00'}) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000002d40)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000002d80)={"c2606e8c4fbf1bbb5b8d740c5e7586a0", 0x0, r8, {0x5, 0x1}, {0xe1b0, 0x1}, 0x0, [0x73, 0x5, 0x1, 0x6, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x1d07f29f, 0xef, 0x5, 0x7, 0x5, 0x6, 0x5]}) read(r7, &(0x7f0000002e80)=""/90, 0x5a) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000002f00)) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000002f40)={'filter\x00', 0x4}, 0x68) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000002fc0)) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000003000)={0x2, 0xfffffff9}) truncate(&(0x7f0000003040)='./file0\x00', 0x4) pidfd_send_signal(r3, 0x5, &(0x7f0000003080)={0x19, 0x1, 0x9}, 0x0) 439.888656ms ago: executing program 3 (id=2026): openat$rtc(0xffffff9c, &(0x7f0000000000), 0xc2440, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) close_range(r0, 0xffffffffffffffff, 0x0) 338.121509ms ago: executing program 3 (id=2027): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40eaf000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x9) 199.068744ms ago: executing program 3 (id=2028): preadv(0xffffffffffffffff, &(0x7f00000022c0)=[{&(0x7f00000000c0)=""/198, 0xc6}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/216, 0xd8}, {&(0x7f00000012c0)=""/4096, 0x1000}], 0x4, 0x40, 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x12900, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000002300)=@sco={0x1f, @none}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002380)=""/22, 0x16}], 0x1}, 0xfffff9a7}, {{&(0x7f0000002400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000003600)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/62, 0x3e}, {&(0x7f00000034c0)=""/206, 0xce}, {&(0x7f00000035c0)=""/28, 0x1c}], 0x4, &(0x7f0000003640)=""/132, 0x84}, 0x5}, {{&(0x7f0000003700)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000003880)=[{&(0x7f0000003780)=""/227, 0xe3}], 0x1}, 0x2}, {{&(0x7f00000038c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003940)=""/124, 0x7c}], 0x1, &(0x7f0000003a00)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000004a00)=""/9, 0x9}, {&(0x7f0000004a40)=""/207, 0xcf}, {&(0x7f0000004b40)=""/61, 0x3d}, {&(0x7f0000004b80)=""/15, 0xf}, {&(0x7f0000004bc0)=""/86, 0x56}, {&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000005c40)=""/98, 0x62}, {&(0x7f0000005cc0)=""/79, 0x4f}], 0x8, &(0x7f0000005dc0)=""/98, 0x62}, 0x9}, {{&(0x7f0000005e40)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000005ec0), 0x0, &(0x7f0000005f00)=""/141, 0x8d}, 0x6}], 0x6, 0x0, &(0x7f0000006140)) close(r0) 140.107606ms ago: executing program 0 (id=2029): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x9b6, &(0x7f0000000000)=0x0) io_pgetevents(r2, 0x1, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) r3 = eventfd(0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0xa000000}, 0xc) io_getevents(r2, 0x8, 0xa, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)={0x77359400}) unlinkat(r4, &(0x7f0000000180)='./file1\x00', 0x0) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x3, 0xffffffffffffffff, &(0x7f0000000000)="ac3c577e623533093b5ca19a95b140de6a35f773556a6ecb3f4bd81a740fcb905cd6f65ddfdb32f06c1ccacaf63c1c0c0999369ab6dc716823b571e80871ea140d160148ea749e87a39964a0cdf1a0f75740f9ea2ca00c46eee691c40b795645d662ea423c70f231fba85fac357b293392cc36f9e408da94cf63a80d06b88caa35fada4f4892d2702e8701463974201eb688069f7dfaeb7db64f0fc96ad38c12e49eb3a6a23b1e6b4c3b89b9e6c0d95f74c17920925299d723aa5d8c9e2d5a691398b31af8b6a9fea0e123bbf716a0d532c78ce8b7bfe173af26a26b71d072dd", 0xe0, 0x3, 0x0, 0x3, r3}, &(0x7f0000000140)) 0s ago: executing program 2 (id=2019): userfaultfd(0x1) (async) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x1, 'veth0_vlan\x00', {}, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_connect$uac2(0x3, 0x98, &(0x7f0000000300)=ANY=[@ANYBLOB="12010003000000401e040030400001020301090286000301003003080b00020109200609040000000101200009240102000626000311240903060000000000000200010000000c24030402031c0103"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac2(0x3, 0x98, &(0x7f0000000300)=ANY=[@ANYBLOB="12010003000000401e040030400001020301090286000301003003080b00020109200609040000000101200009240102000626000311240903060000000000000200010000000c24030402031c0103"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) kernel console output (not intermixed with test programs): attempt power cycle [ 148.968146][ T10] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 148.989255][ T10] usb 4-1: device descriptor read/8, error -71 [ 149.068076][ T364] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 149.089245][ T364] usb 1-1: device descriptor read/8, error -71 [ 149.119199][ T10] usb 4-1: device descriptor read/8, error -71 [ 149.219223][ T364] usb 1-1: device descriptor read/8, error -71 [ 149.299909][ T3096] cgroup: Unknown subsys name 'uid>00000000000000032832' [ 149.358083][ T10] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 149.379285][ T10] usb 4-1: device descriptor read/8, error -71 [ 149.458148][ T364] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 149.479342][ T364] usb 1-1: device descriptor read/8, error -71 [ 149.492068][ T3103] netlink: 'syz.2.930': attribute type 27 has an invalid length. [ 149.502516][ T3103] 0{X功: left allmulticast mode [ 149.511074][ T10] usb 4-1: device descriptor read/8, error -71 [ 149.609385][ T364] usb 1-1: device descriptor read/8, error -71 [ 149.618429][ T10] usb usb4-port1: unable to enumerate USB device [ 149.647923][ T3128] fuse: Bad value for 'user_id' [ 149.653221][ T3128] fuse: Bad value for 'user_id' [ 149.670169][ T36] audit: type=1400 audit(1775214979.567:87615): avc: denied { create } for pid=3129 comm="syz.2.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 149.728324][ T364] usb usb1-port1: unable to enumerate USB device [ 149.840118][ T3137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.941'. [ 150.226815][ T3148] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 150.239303][ T36] audit: type=1326 audit(1775214980.137:87616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3149 comm="syz.3.946" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7440f9c819 code=0x0 [ 150.399671][ T3160] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 150.479688][ T3162] rust_binder: Write failure EFAULT in pid:298 [ 150.480295][ T3162] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.585559][ T36] audit: type=1400 audit(1775214980.477:87617): avc: denied { setattr } for pid=3169 comm="syz.0.951" name="PINGv6" dev="sockfs" ino=16943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.918084][ T364] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 151.069258][ T364] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.080689][ T364] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.090868][ T364] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 151.100345][ T364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.109471][ T364] usb 1-1: config 0 descriptor?? [ 151.352580][ T3201] netlink: 68 bytes leftover after parsing attributes in process `syz.2.964'. [ 151.437362][ T3216] 9pnet: Could not find request transport: rdma [ 151.475681][ T3220] syz.3.971 (3220): /proc/3219/oom_adj is deprecated, please use /proc/3219/oom_score_adj instead. [ 151.487084][ T36] audit: type=1400 audit(1775214981.377:87618): avc: denied { accept } for pid=3219 comm="syz.3.971" path="socket:[17049]" dev="sockfs" ino=17049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 151.521471][ T3176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.524543][ T3222] syz.3.971: attempt to access beyond end of device [ 151.524543][ T3222] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 151.533216][ T3176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.544445][ T3222] FAT-fs (loop3): unable to read boot sector [ 151.557550][ T3221] syz.3.971: attempt to access beyond end of device [ 151.557550][ T3221] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 151.570712][ T3221] FAT-fs (loop3): unable to read boot sector [ 151.771612][ T364] usbhid 1-1:0.0: can't add hid device: -71 [ 151.777658][ T364] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 151.786624][ T364] usb 1-1: USB disconnect, device number 69 [ 151.935147][ T3226] netlink: 'syz.2.973': attribute type 10 has an invalid length. [ 151.943485][ T3226] netlink: 17 bytes leftover after parsing attributes in process `syz.2.973'. [ 151.968879][ T3231] netlink: 9 bytes leftover after parsing attributes in process `syz.2.975'. [ 151.978056][ T3231] z00猉功: renamed from 30{X功 (while UP) [ 151.985295][ T3231] z00猉功: entered allmulticast mode [ 152.358031][ T364] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 152.508018][ T364] usb 4-1: Using ep0 maxpacket: 8 [ 152.518528][ T364] usb 4-1: unable to get BOS descriptor or descriptor too short [ 152.534000][ T364] usb 4-1: config 1 interface 0 altsetting 131 bulk endpoint 0x1 has invalid maxpacket 64 [ 152.545870][ T364] usb 4-1: config 1 interface 0 altsetting 131 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.559364][ T364] usb 4-1: config 1 interface 0 has no altsetting 0 [ 152.566358][ T3246] veth0: entered allmulticast mode [ 152.567684][ T364] usb 4-1: New USB device found, idVendor=04ca, idProduct=0202, bcdDevice= 0.40 [ 152.582276][ T364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.582436][ T3246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.982'. [ 152.590592][ T364] usb 4-1: Product: syz [ 152.603787][ T364] usb 4-1: Manufacturer: syz [ 152.608605][ T364] usb 4-1: SerialNumber: syz [ 152.616596][ T3241] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 152.618036][ T36] audit: type=1400 audit(1775214982.507:87619): avc: denied { create } for pid=3248 comm="syz.1.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.645632][ T36] audit: type=1400 audit(1775214982.537:87620): avc: denied { getopt } for pid=3248 comm="syz.1.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.828935][ T3241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.844551][ T3241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.865299][ T364] usb 4-1: USB disconnect, device number 64 [ 152.872288][ T36] audit: type=1400 audit(1775214982.757:87621): avc: denied { execmem } for pid=3256 comm="syz.0.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 152.962085][ T36] audit: type=1400 audit(1775214982.857:87622): avc: denied { write } for pid=3261 comm="syz.0.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.982577][ T36] audit: type=1400 audit(1775214982.857:87623): avc: denied { nlmsg_write } for pid=3261 comm="syz.0.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.440595][ T36] audit: type=1400 audit(1775214983.337:87624): avc: denied { create } for pid=3271 comm="syz.2.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 153.608215][ T364] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 153.758049][ T364] usb 4-1: Using ep0 maxpacket: 16 [ 153.764352][ T364] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.775568][ T364] usb 4-1: config 0 interface 0 has no altsetting 0 [ 153.782528][ T364] usb 4-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.00 [ 153.791757][ T364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.800702][ T364] usb 4-1: config 0 descriptor?? [ 154.224374][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.232887][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.241247][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.249688][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.258041][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.266323][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.274742][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.283231][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.291715][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.300120][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.308508][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.316858][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.325153][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.333518][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.341811][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.350397][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.358752][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.367127][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.376026][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.384303][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.392582][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.400876][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.409159][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.417421][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.425721][ T3266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.425745][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.434773][ T3266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.442620][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.458630][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.467011][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.475638][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.484000][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.492354][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.500872][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.509201][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.517555][ T364] logitech-hidpp-device 0003:046D:0A87.000C: unknown main item tag 0x0 [ 154.527102][ T364] logitech-hidpp-device 0003:046D:0A87.000C: hidraw0: USB HID v0.08 Device [HID 046d:0a87] on usb-dummy_hcd.3-1/input0 [ 154.560243][ T364] usb 4-1: USB disconnect, device number 65 [ 154.584532][ T3287] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 154.593417][ T3287] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 154.605485][ T3287] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 154.958013][ T364] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 155.088071][ T364] usb 4-1: device descriptor read/64, error -71 [ 155.328064][ T364] usb 4-1: device descriptor read/64, error -71 [ 155.568531][ T364] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 155.575965][ T3303] mmap: syz.2.1001 (3303) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 155.589520][ T3303] cgroup: Unknown subsys name 'uid' [ 155.701705][ T364] usb 4-1: device descriptor read/64, error -71 [ 155.736054][ T36] audit: type=1400 audit(1775214985.627:87625): avc: denied { nlmsg_read } for pid=3315 comm="syz.1.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.948043][ T364] usb 4-1: device descriptor read/64, error -71 [ 156.058169][ T364] usb usb4-port1: attempt power cycle [ 156.398073][ T364] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 156.419388][ T364] usb 4-1: device descriptor read/8, error -71 [ 156.549191][ T364] usb 4-1: device descriptor read/8, error -71 [ 156.651219][ T3340] netlink: 964 bytes leftover after parsing attributes in process `syz.2.1015'. [ 156.788071][ T364] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 156.809266][ T364] usb 4-1: device descriptor read/8, error -71 [ 156.939274][ T364] usb 4-1: device descriptor read/8, error -71 [ 157.048200][ T364] usb usb4-port1: unable to enumerate USB device [ 157.573346][ T3363] 9pnet_fd: Insufficient options for proto=fd [ 157.578017][ T3365] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=39168 sclass=netlink_xfrm_socket pid=3365 comm=syz.0.1024 [ 157.633587][ T3370] 9pnet_fd: Insufficient options for proto=fd [ 157.724595][ T3391] fuse: Unknown parameter 'fowner>00000000000000000000' [ 157.866166][ T3429] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1044'. [ 157.875427][ T3429] z00猉功: entered promiscuous mode [ 157.880677][ T3429] z00猉功: left allmulticast mode [ 157.887357][ T3429] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1044'. [ 157.897365][ T3430] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.905316][ T3430] IPv6: NLM_F_REPLACE set, but no existing node found! [ 158.068049][ T306] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 158.219253][ T306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.229541][ T306] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 158.238523][ T306] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 158.253143][ T306] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 158.262644][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.270798][ T306] usb 4-1: Product: syz [ 158.275074][ T306] usb 4-1: Manufacturer: syz [ 158.279831][ T306] usb 4-1: SerialNumber: syz [ 158.285907][ T306] usb 4-1: config 0 descriptor?? [ 158.492844][ T364] usb 4-1: USB disconnect, device number 70 [ 159.857380][ T3469] fuse: Bad value for 'fd' [ 159.873321][ T36] audit: type=1400 audit(1775214989.767:87626): avc: denied { setopt } for pid=3470 comm="syz.3.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 160.198089][ T364] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 160.348036][ T364] usb 4-1: Using ep0 maxpacket: 16 [ 160.354524][ T364] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 160.365811][ T364] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 160.378633][ T364] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 160.387780][ T364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.395928][ T364] usb 4-1: Product: syz [ 160.400160][ T364] usb 4-1: Manufacturer: syz [ 160.404766][ T364] usb 4-1: SerialNumber: syz [ 160.643923][ T364] usb 4-1: USB disconnect, device number 71 [ 161.124402][ T3489] /dev/rnullb0: Can't open blockdev [ 161.205348][ T3501] netlink: 'syz.1.1069': attribute type 16 has an invalid length. [ 161.701805][ T3528] loop7: detected capacity change from 0 to 7 [ 161.988183][ T45] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 162.149269][ T45] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 162.157341][ T45] usb 4-1: config 0 has no interface number 0 [ 162.163783][ T45] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.175854][ T45] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.186872][ T45] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.200271][ T45] usb 4-1: config 0 interface 1 has no altsetting 0 [ 162.206992][ T45] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 162.216866][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.226520][ T45] usb 4-1: config 0 descriptor?? [ 162.436537][ T45] input: HID 145f:0212 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:145F:0212.000D/input/input12 [ 162.457343][ T45] input: HID 145f:0212 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:145F:0212.000D/input/input13 [ 162.475573][ T45] uclogic 0003:145F:0212.000D: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.3-1/input1 [ 162.496225][ T3570] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1090'. [ 162.524875][ T36] audit: type=1400 audit(1775214992.417:87627): avc: denied { ioctl } for pid=3569 comm="syz.1.1090" path="socket:[17723]" dev="sockfs" ino=17723 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.635840][ T360] usb 4-1: USB disconnect, device number 72 [ 162.780927][ T36] audit: type=1400 audit(1775214992.677:87628): avc: denied { mount } for pid=3575 comm="syz.2.1093" name="/" dev="pstore" ino=2689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 162.822273][ T36] audit: type=1326 audit(1775214992.717:87629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3579 comm="syz.2.1095" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba2839c819 code=0x0 [ 163.122957][ T3593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1100'. [ 163.160726][ T3605] bridge0: entered promiscuous mode [ 163.166113][ T3605] bridge0: entered allmulticast mode [ 163.172533][ T3604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1103'. [ 163.200886][ T3609] fuse: Unknown parameter 'nI頀0x00000000000000070000000000000000000002500000000000000000000' [ 163.245628][ T3610] can0: slcan on ptm0. [ 163.251204][ T36] audit: type=1326 audit(1775214993.147:87630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3596 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303659c819 code=0x7fc00000 [ 163.295731][ T3615] overlayfs: failed to clone upperpath [ 163.370152][ T36] audit: type=1400 audit(1775214993.267:87631): avc: denied { write } for pid=3607 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 163.847854][ T36] audit: type=1400 audit(1775214993.737:87632): avc: denied { map } for pid=3647 comm="syz.1.1111" path="socket:[17796]" dev="sockfs" ino=17796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.891888][ T3654] incfs: Error accessing: ./file0. [ 163.897276][ T3654] incfs: mount failed -2 [ 163.925723][ T3661] fuse: Invalid rootmode [ 163.948756][ T3663] tmpfs: Unknown parameter 'no' [ 163.951805][ T3667] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 163.953832][ T3663] futex_wake_op: syz.2.1116 tries to shift op by -1; fix this program [ 164.551133][ T3681] syz.0.1123: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 164.569195][ T3681] CPU: 0 UID: 0 PID: 3681 Comm: syz.0.1123 Not tainted syzkaller #0 a40991d314adffa3075cd603e5b19eadab4cccf0 [ 164.569232][ T3681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 164.569244][ T3681] Call Trace: [ 164.569249][ T3681] [ 164.569256][ T3681] __dump_stack+0x21/0x30 [ 164.569290][ T3681] dump_stack_lvl+0x140/0x1c0 [ 164.569315][ T3681] ? __cfi_dump_stack_lvl+0x10/0x10 [ 164.569340][ T3681] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 164.569369][ T3681] dump_stack+0x19/0x20 [ 164.569393][ T3681] warn_alloc+0x1e7/0x2c0 [ 164.569416][ T3681] ? __kasan_slab_free+0x5f/0x80 [ 164.569438][ T3681] ? __cfi_warn_alloc+0x10/0x10 [ 164.569461][ T3681] ? __get_vm_area_node+0x201/0x3d0 [ 164.569487][ T3681] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 164.569520][ T3681] ? xskq_create+0xdb/0x290 [ 164.569543][ T3681] __vmalloc_node_range_noprof+0x6aa/0x1480 [ 164.569573][ T3681] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 164.569599][ T3681] ? kasan_save_alloc_info+0x40/0x50 [ 164.569624][ T3681] ? __kasan_kmalloc+0x96/0xb0 [ 164.569642][ T3681] ? __kmalloc_cache_noprof+0x23c/0x470 [ 164.569671][ T3681] vmalloc_user_noprof+0x77/0x90 [ 164.569695][ T3681] ? xskq_create+0xdb/0x290 [ 164.569726][ T3681] xskq_create+0xdb/0x290 [ 164.569746][ T3681] xsk_init_queue+0xb2/0x120 [ 164.569766][ T3681] xsk_setsockopt+0x4e1/0x760 [ 164.569785][ T3681] ? __cfi_xsk_setsockopt+0x10/0x10 [ 164.569804][ T3681] ? do_futex+0x32a/0x510 [ 164.569830][ T3681] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 164.569860][ T3681] ? security_socket_setsockopt+0x3d/0x100 [ 164.569883][ T3681] ? __cfi_xsk_setsockopt+0x10/0x10 [ 164.569902][ T3681] do_sock_setsockopt+0x27c/0x410 [ 164.569931][ T3681] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 164.569958][ T3681] __x64_sys_setsockopt+0x1b7/0x250 [ 164.569986][ T3681] x64_sys_call+0x2adc/0x2ee0 [ 164.570014][ T3681] do_syscall_64+0x57/0xf0 [ 164.570041][ T3681] ? clear_bhb_loop+0x50/0xa0 [ 164.570059][ T3681] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 164.570088][ T3681] RIP: 0033:0x7f303659c819 [ 164.570108][ T3681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.570126][ T3681] RSP: 002b:00007f3037390028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 164.570150][ T3681] RAX: ffffffffffffffda RBX: 00007f3036815fa0 RCX: 00007f303659c819 [ 164.570166][ T3681] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 164.570179][ T3681] RBP: 00007f3036632c91 R08: 0000000000000004 R09: 0000000000000000 [ 164.570192][ T3681] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 164.570206][ T3681] R13: 00007f3036816038 R14: 00007f3036815fa0 R15: 00007ffcfbfaf8b8 [ 164.570224][ T3681] [ 164.570232][ T3681] Mem-Info: [ 164.846786][ T3681] active_anon:25269 inactive_anon:3 isolated_anon:0 [ 164.846786][ T3681] active_file:26620 inactive_file:2699 isolated_file:0 [ 164.846786][ T3681] unevictable:16444 dirty:79 writeback:0 [ 164.846786][ T3681] slab_reclaimable:5794 slab_unreclaimable:70816 [ 164.846786][ T3681] mapped:24848 shmem:16628 pagetables:1281 [ 164.846786][ T3681] sec_pagetables:0 bounce:0 [ 164.846786][ T3681] kernel_misc_reclaimable:0 [ 164.846786][ T3681] free:1471920 free_pcp:3351 free_cma:0 [ 164.892849][ T3681] Node 0 active_anon:101076kB inactive_anon:12kB active_file:106480kB inactive_file:10796kB unevictable:65776kB isolated(anon):0kB isolated(file):0kB mapped:99392kB dirty:316kB writeback:0kB shmem:66512kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB writeback_tmp:0kB kernel_stack:5152kB pagetables:5124kB sec_pagetables:0kB all_unreclaimable? no [ 164.926423][ T3681] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963356kB mlocked:0kB bounce:0kB free_pcp:5192kB local_pcp:5124kB free_cma:0kB [ 164.957524][ T3681] lowmem_reserve[]: 0 3921 3921 [ 164.962477][ T3681] Normal free:2929512kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:101076kB inactive_anon:12kB active_file:106480kB inactive_file:10796kB unevictable:65776kB writepending:316kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:8176kB local_pcp:1220kB free_cma:0kB [ 164.995744][ T3681] lowmem_reserve[]: 0 0 0 [ 165.000129][ T3681] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 165.015894][ T3681] Normal: 4*4kB (UME) 9*8kB (UME) 251*16kB (UME) 213*32kB (UME) 121*64kB (ME) 41*128kB (UME) 84*256kB (UME) 53*512kB (UME) 30*1024kB (UME) 20*2048kB (UME) 680*4096kB (UM) = 2929512kB [ 165.034425][ T3681] 62393 total pagecache pages [ 165.039138][ T3681] 6 pages in swap cache [ 165.043290][ T3681] Free swap = 124496kB [ 165.047502][ T3681] Total swap = 124996kB [ 165.051712][ T3681] 2097051 pages RAM [ 165.055886][ T3681] 0 pages HighMem/MovableOnly [ 165.060686][ T3681] 352246 pages reserved [ 165.064945][ T3681] 0 pages cma reserved [ 165.070590][ T3681] Memory allocations: [ 165.074674][ T3681] 0 B 0 init/main.c:1477 func:do_initcalls [ 165.081928][ T3681] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 165.090143][ T3681] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 165.097905][ T3681] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 165.105881][ T3681] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 165.113900][ T3681] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 165.122625][ T3681] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 165.130651][ T3681] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 165.138759][ T3681] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 165.146686][ T3681] 0 B 0 init/initramfs.c:101 func:find_link [ 165.177275][ T3688] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=3688 comm=syz.0.1125 [ 166.340057][ T3607] can0 (unregistered): slcan off ptm0. [ 166.898051][ T45] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 167.028052][ T45] usb 4-1: device descriptor read/64, error -71 [ 167.268079][ T45] usb 4-1: device descriptor read/64, error -71 [ 167.287165][ T3761] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1136'. [ 167.508084][ T45] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 167.570034][ T3769] netlink: 'syz.2.1139': attribute type 25 has an invalid length. [ 167.638045][ T45] usb 4-1: device descriptor read/64, error -71 [ 167.825216][ T3775] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1141'. [ 167.878140][ T45] usb 4-1: device descriptor read/64, error -71 [ 167.988206][ T45] usb usb4-port1: attempt power cycle [ 168.328092][ T45] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 168.349500][ T45] usb 4-1: device descriptor read/8, error -71 [ 168.385689][ T3799] SELinux: Context system_u:object_r:sshd_key_t:s0 is not valid (left unmapped). [ 168.395420][ T36] audit: type=1400 audit(1775214998.287:87633): avc: denied { relabelto } for pid=3798 comm="syz.2.1151" name=E91F7189591E9233614B dev="tmpfs" ino=1782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:sshd_key_t:s0" [ 168.437162][ T36] audit: type=1400 audit(1775214998.287:87634): avc: denied { associate } for pid=3798 comm="syz.2.1151" name=E91F7189591E9233614B dev="tmpfs" ino=1782 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sshd_key_t:s0" [ 168.449160][ T3809] netlink: 'syz.1.1153': attribute type 1 has an invalid length. [ 168.466366][ T36] audit: type=1400 audit(1775214998.317:87635): avc: denied { unlink } for pid=292 comm="syz-executor" name=E91F7189591E9233614B dev="tmpfs" ino=1782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:sshd_key_t:s0" [ 168.498327][ T3808] fuseblk: Bad value for 'fd' [ 168.519044][ T45] usb 4-1: device descriptor read/8, error -71 [ 168.525370][ T36] audit: type=1400 audit(1775214998.397:87636): avc: denied { accept } for pid=3810 comm="syz.2.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.529183][ T3815] netlink: 'syz.2.1156': attribute type 1 has an invalid length. [ 168.758073][ T45] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 168.779368][ T45] usb 4-1: device descriptor read/8, error -71 [ 168.909571][ T45] usb 4-1: device descriptor read/8, error -71 [ 169.018184][ T45] usb usb4-port1: unable to enumerate USB device [ 169.086354][ T3848] cgroup: Unknown subsys name 'devices' [ 169.109294][ T36] audit: type=1400 audit(1775214999.007:87637): avc: denied { nlmsg_write } for pid=3851 comm="syz.2.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 169.383583][ T3857] netlink: 'syz.0.1171': attribute type 3 has an invalid length. [ 169.469805][ T36] audit: type=1400 audit(1775215005.366:87638): avc: denied { mount } for pid=3861 comm="syz.0.1173" name="/" dev="ramfs" ino=19040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 169.740398][ T3877] overlayfs: missing 'lowerdir' [ 169.762088][ T3881] overlayfs: missing 'workdir' [ 169.775068][ T36] audit: type=1326 audit(1775215005.666:87639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3883 comm="syz.3.1181" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7440f9c819 code=0x0 [ 169.958301][ T3898] fuse: Bad value for 'fd' [ 169.964732][ T3898] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1185'. [ 169.974232][ T3898] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1185'. [ 169.984421][ T3898] netlink: 'syz.2.1185': attribute type 5 has an invalid length. [ 169.992973][ T3898] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1185'. [ 170.355487][ T3920] overlayfs: failed to clone upperpath [ 170.549223][ T3925] 换换换: renamed from veth0_vlan (while UP) [ 170.883677][ T3946] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 171.108025][ T364] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 171.258072][ T364] usb 4-1: Using ep0 maxpacket: 16 [ 171.264601][ T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.275597][ T364] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.288565][ T364] usb 4-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 171.297603][ T364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.306473][ T364] usb 4-1: config 0 descriptor?? [ 171.451838][ T3976] futex_wake_op: syz.1.1210 tries to shift op by 32; fix this program [ 171.717044][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x2 [ 171.724321][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.731247][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.738291][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.745376][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.750586][ T3979] tipc: Started in network mode [ 171.752363][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.757647][ T3979] tipc: Node identity , cluster identity 4711 [ 171.764161][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.770604][ T3979] tipc: Failed to obtain node identity [ 171.777157][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.783674][ T3979] tipc: Enabling of bearer rejected, failed to enable media [ 171.789946][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.805113][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.812130][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.819133][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.827308][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.834439][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.844520][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.851563][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.858560][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.865561][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.872717][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.879771][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.886727][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.893725][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.900915][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.907773][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.914770][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.921691][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.928769][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.935819][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.942978][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.949986][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.957130][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.964139][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.971125][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.978273][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.985250][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.992284][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 171.999316][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 172.006189][ T364] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 172.014109][ T364] wacom 0003:056A:5002.000E: hidraw0: USB HID vff.fc Device [HID 056a:5002] on usb-dummy_hcd.3-1/input0 [ 172.028807][ T364] usb 4-1: USB disconnect, device number 77 [ 174.101871][ T36] audit: type=1400 audit(1775215009.996:87640): avc: denied { connect } for pid=4066 comm="syz.3.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 174.197862][ T4076] netlink: 'syz.1.1247': attribute type 4 has an invalid length. [ 174.205786][ T4076] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1247'. [ 174.378083][ T65] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 174.411685][ T4084] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1251'. [ 174.435358][ T4086] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4086 comm=syz.0.1252 [ 174.459794][ T4090] fuse: Invalid gid '00000000000037777777777' [ 174.529157][ T65] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.548794][ T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.558173][ T65] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 174.566376][ T65] usb 4-1: Product: syz [ 174.573488][ T65] usb 4-1: SerialNumber: syz [ 174.689104][ T4104] overlayfs: failed to clone upperpath [ 174.988181][ T36] audit: type=1107 audit(1775215010.876:87641): pid=4069 uid=0 auid=1 ses=1 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 175.190682][ T4071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.291175][ T4071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.381027][ T4125] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1264'. [ 175.719315][ T4071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.728103][ T4071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.737887][ T4071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.746543][ T4071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.756232][ T65] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 175.762807][ T65] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 175.851370][ T4145] overlayfs: failed to clone upperpath [ 175.870399][ T4147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'. [ 175.957203][ T65] cdc_ncm 4-1:1.0: setting tx_max = 16384 [ 175.964668][ T65] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 175.977503][ T65] usb 4-1: USB disconnect, device number 78 [ 175.985919][ T65] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 176.593064][ T4217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1286'. [ 176.633151][ T36] audit: type=1400 audit(1775215012.526:87642): avc: denied { create } for pid=4223 comm="syz.0.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 176.689416][ T36] audit: type=1400 audit(1775215012.586:87643): avc: denied { append } for pid=4230 comm="syz.3.1291" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 176.713883][ T4231] usb usb8: usbfs: process 4231 (syz.3.1291) did not claim interface 0 before use [ 177.006484][ T4238] af_packet: tpacket_rcv: packet too big, clamped from 65526 to 4. macoff=68 [ 177.133801][ T36] audit: type=1400 audit(1775215013.026:87644): avc: denied { wake_alarm } for pid=4244 comm="syz.2.1295" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 177.260101][ T4256] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1299'. [ 177.279691][ T4256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=4256 comm=syz.2.1299 [ 177.716523][ T4265] fuse: Unknown parameter 'rootm00000000040000' [ 177.838130][ T306] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 177.998032][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 178.004458][ T306] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 178.012959][ T306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.023493][ T306] usb 4-1: config 0 has no interface number 0 [ 178.031649][ T306] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 178.040799][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.048851][ T306] usb 4-1: Product: syz [ 178.053012][ T306] usb 4-1: Manufacturer: syz [ 178.057707][ T306] usb 4-1: SerialNumber: syz [ 178.063005][ T306] usb 4-1: config 0 descriptor?? [ 180.014168][ T36] audit: type=1400 audit(1775215015.906:87645): avc: denied { create } for pid=4308 comm="syz.0.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 180.615506][ T306] usb 4-1: USB disconnect, device number 79 [ 180.633713][ T36] audit: type=1400 audit(1775215016.526:87646): avc: denied { append } for pid=4318 comm="syz.3.1322" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 180.667487][ T36] audit: type=1400 audit(1775215016.556:87647): avc: denied { create } for pid=4320 comm="syz.3.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 180.670128][ T4321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1323'. [ 180.688775][ T36] audit: type=1400 audit(1775215016.556:87648): avc: denied { write } for pid=4320 comm="syz.3.1323" path="socket:[20746]" dev="sockfs" ino=20746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 180.815449][ T36] audit: type=1400 audit(1775215016.706:87649): avc: denied { setcheckreqprot } for pid=4329 comm="syz.3.1326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 181.118124][ T364] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 181.268040][ T364] usb 4-1: Using ep0 maxpacket: 32 [ 181.276109][ T364] usb 4-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 181.285417][ T364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.293794][ T364] usb 4-1: Product: syz [ 181.298136][ T364] usb 4-1: Manufacturer: syz [ 181.302915][ T364] usb 4-1: SerialNumber: syz [ 181.510583][ T4332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.519515][ T4332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.533782][ T364] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 181.545746][ T364] usb 4-1: USB disconnect, device number 80 [ 181.565596][ T3377] udevd[3377]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 182.116857][ T4373] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.165292][ T36] audit: type=1326 audit(1775215018.056:87650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.1.1348" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f491959c819 code=0x0 [ 182.538040][ T360] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 182.688052][ T360] usb 4-1: Using ep0 maxpacket: 16 [ 182.695631][ T360] usb 4-1: unable to get BOS descriptor or descriptor too short [ 182.704572][ T360] usb 4-1: config 10 interface 0 has no altsetting 0 [ 182.713015][ T360] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=8e.f4 [ 182.722252][ T360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.730395][ T360] usb 4-1: Product: syz [ 182.734574][ T360] usb 4-1: Manufacturer: syz [ 182.739195][ T360] usb 4-1: SerialNumber: syz [ 182.833069][ T36] audit: type=1326 audit(1775215018.726:87651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4366 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2839c819 code=0x7fc00000 [ 182.868575][ T36] audit: type=1400 audit(1775215018.766:87652): avc: denied { create } for pid=4400 comm="syz.2.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 182.964969][ T360] snd-usb-audio 4-1:10.0: probe with driver snd-usb-audio failed with error -22 [ 182.975875][ T360] usb 4-1: USB disconnect, device number 81 [ 182.995912][ T3480] udevd[3480]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:10.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 183.430290][ T4431] can: request_module (can-proto-5) failed. [ 183.439815][ T4431] SELinux: Context system_u:object_r:cert_t:s0 is not valid (left unmapped). [ 183.448991][ T36] audit: type=1400 audit(1775215019.346:87653): avc: denied { relabelto } for pid=4430 comm="syz.2.1364" name="file1" dev="tmpfs" ino=2109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:cert_t:s0" [ 183.475375][ T36] audit: type=1400 audit(1775215019.346:87654): avc: denied { associate } for pid=4430 comm="syz.2.1364" name="file1" dev="tmpfs" ino=2109 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:cert_t:s0" [ 183.481884][ T4436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1366'. [ 183.512565][ T4436] erspan0: entered promiscuous mode [ 183.849000][ T4472] netlink: 'syz.0.1378': attribute type 46 has an invalid length. [ 184.030474][ T364] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 184.137864][ T4498] netlink: 'syz.1.1388': attribute type 4 has an invalid length. [ 184.188048][ T364] usb 4-1: Using ep0 maxpacket: 16 [ 184.194708][ T364] usb 4-1: unable to get BOS descriptor or descriptor too short [ 184.203207][ T364] usb 4-1: config 3 has an invalid interface number: 11 but max is 0 [ 184.211451][ T364] usb 4-1: config 3 has no interface number 0 [ 184.217801][ T364] usb 4-1: config 3 interface 11 altsetting 225 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 184.228776][ T364] usb 4-1: config 3 interface 11 altsetting 225 has an invalid descriptor for endpoint zero, skipping [ 184.239957][ T364] usb 4-1: config 3 interface 11 has no altsetting 0 [ 184.248463][ T364] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=d4.bb [ 184.257547][ T364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.265826][ T364] usb 4-1: Product: syz [ 184.270022][ T364] usb 4-1: Manufacturer: syz [ 184.274640][ T364] usb 4-1: SerialNumber: syz [ 184.390104][ T4505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=4505 comm=syz.0.1391 [ 185.986263][ T4550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1407'. [ 186.837165][ T364] usbhid 4-1:3.11: couldn't find an input interrupt endpoint [ 186.848149][ T364] usb 4-1: USB disconnect, device number 82 [ 186.863809][ T4574] loop6: detected capacity change from 0 to 8 [ 187.034384][ T4584] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1420'. [ 187.079941][ T4588] netlink: 'syz.2.1422': attribute type 28 has an invalid length. [ 187.278126][ T364] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 187.428054][ T364] usb 4-1: Using ep0 maxpacket: 8 [ 187.434634][ T364] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 187.443053][ T364] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.453174][ T364] usb 4-1: config 0 has no interface number 0 [ 187.459501][ T364] usb 4-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.472586][ T364] usb 4-1: config 0 interface 200 has no altsetting 0 [ 187.481230][ T364] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 187.490370][ T364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.498409][ T364] usb 4-1: Product: syz [ 187.502583][ T364] usb 4-1: Manufacturer: syz [ 187.507185][ T364] usb 4-1: SerialNumber: syz [ 187.512887][ T364] usb 4-1: config 0 descriptor?? [ 187.601655][ T4597] x_tables: duplicate underflow at hook 1 [ 187.627343][ T4601] netlink: 'syz.0.1428': attribute type 27 has an invalid length. [ 187.667492][ T4601] bridge0: left allmulticast mode [ 187.723193][ T364] usbhid 4-1:0.200: couldn't find an input interrupt endpoint [ 187.748194][ T364] usb 4-1: USB disconnect, device number 83 [ 187.814559][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 187.814578][ T36] audit: type=1400 audit(1775215023.706:87660): avc: denied { create } for pid=4618 comm="syz.0.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 188.382307][ T36] audit: type=1326 audit(1775215024.276:87661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.1437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba2839c819 code=0x0 [ 188.468105][ T36] audit: type=1400 audit(1775215024.366:87662): avc: denied { remount } for pid=4657 comm="syz.1.1443" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 188.523697][ T4672] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 188.528023][ T306] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 188.668052][ T306] usb 4-1: device descriptor read/64, error -71 [ 188.908063][ T306] usb 4-1: device descriptor read/64, error -71 [ 189.148332][ T306] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 189.278117][ T306] usb 4-1: device descriptor read/64, error -71 [ 189.518084][ T306] usb 4-1: device descriptor read/64, error -71 [ 189.628228][ T306] usb usb4-port1: attempt power cycle [ 189.696083][ T36] audit: type=1401 audit(1775215025.586:87663): op=setxattr invalid_context=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002F6465762F6275732F7573622F3030232F30302300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000002000001C0000000000000000000000000000000000000000000000C002000000200000C8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000626C6B696F2E6266712E696F5F73657276696365640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [ 189.714893][ T4698] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1457'. [ 189.968111][ T306] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 189.989205][ T306] usb 4-1: device descriptor read/8, error -71 [ 190.119522][ T306] usb 4-1: device descriptor read/8, error -71 [ 190.234663][ T36] audit: type=1400 audit(1775215026.126:87664): avc: denied { create } for pid=4711 comm="syz.1.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 190.306077][ T4721] netlink: 'syz.1.1464': attribute type 14 has an invalid length. [ 190.315528][ T4721] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1464'. [ 190.358088][ T306] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 190.379144][ T306] usb 4-1: device descriptor read/8, error -71 [ 190.382745][ T4730] netlink: 1072 bytes leftover after parsing attributes in process `syz.2.1468'. [ 190.394576][ T4730] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1468'. [ 190.509396][ T306] usb 4-1: device descriptor read/8, error -71 [ 190.618193][ T306] usb usb4-port1: unable to enumerate USB device [ 190.915380][ T4740] tipc: Enabling of bearer rejected, failed to enable media [ 191.049049][ T4743] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1473'. [ 191.329896][ T36] audit: type=1400 audit(1775215027.220:87665): avc: denied { connect } for pid=4751 comm="syz.3.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 191.424043][ T4760] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1479'. [ 191.622080][ T4767] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1481'. [ 191.633663][ T4767] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1481'. [ 191.986957][ T4799] /dev/nullb0: Can't lookup blockdev [ 192.118783][ T36] audit: type=1326 audit(1775215028.010:87666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4822 comm="syz.2.1499" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba2839c819 code=0x0 [ 192.201286][ T4836] kvm: pic: level sensitive irq not supported [ 192.201357][ T4836] kvm: pic: non byte write [ 192.212635][ T4836] kvm: pic: single mode not supported [ 192.212999][ T4836] kvm: pic: non byte write [ 192.223059][ T4836] kvm: pic: single mode not supported [ 192.596953][ T36] audit: type=1326 audit(1775215028.480:87667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.1.1509" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f491959c819 code=0x0 [ 193.109948][ T4878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.118746][ T4878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.159068][ T4881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1518'. [ 193.348031][ T364] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 193.378800][ T4883] overlayfs: regular lower layers cannot follow data lower layers [ 193.478105][ T364] usb 4-1: device descriptor read/64, error -71 [ 193.718121][ T364] usb 4-1: device descriptor read/64, error -71 [ 193.958049][ T364] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 194.088053][ T364] usb 4-1: device descriptor read/64, error -71 [ 194.328128][ T364] usb 4-1: device descriptor read/64, error -71 [ 194.358970][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1523'. [ 194.368060][ T4893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1523'. [ 194.397598][ T4897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1525'. [ 194.417055][ T4901] overlayfs: failed to clone upperpath [ 194.422803][ T4900] overlayfs: failed to clone upperpath [ 194.448167][ T364] usb usb4-port1: attempt power cycle [ 194.788084][ T364] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 194.809225][ T364] usb 4-1: device descriptor read/8, error -71 [ 194.939246][ T364] usb 4-1: device descriptor read/8, error -71 [ 195.178054][ T364] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 195.199197][ T364] usb 4-1: device descriptor read/8, error -71 [ 195.329105][ T364] usb 4-1: device descriptor read/8, error -71 [ 195.438203][ T364] usb usb4-port1: unable to enumerate USB device [ 195.489950][ T4912] netlink: 'syz.2.1531': attribute type 32 has an invalid length. [ 195.623679][ T4921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=4921 comm=syz.1.1534 [ 195.651004][ T4921] netlink: 'syz.1.1534': attribute type 9 has an invalid length. [ 195.669975][ T4923] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1535'. [ 195.679288][ T4923] gretap0: entered promiscuous mode [ 195.688374][ T4923] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1535'. [ 195.697390][ T4923] 0{X功: renamed from gretap0 [ 195.703574][ T4923] 0{X功: left promiscuous mode [ 195.708783][ T4923] 0{X功: entered allmulticast mode [ 195.714783][ T4923] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 195.756800][ T4923] netlink: 'syz.1.1535': attribute type 1 has an invalid length. [ 196.088527][ T4930] netlink: 'syz.2.1538': attribute type 22 has an invalid length. [ 196.166357][ T4934] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1540'. [ 196.498030][ T306] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 196.626805][ T4991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=4991 comm=syz.2.1544 [ 196.660382][ T306] usb 4-1: unable to get BOS descriptor or descriptor too short [ 196.675394][ T4991] netlink: 'syz.2.1544': attribute type 9 has an invalid length. [ 196.683719][ T306] usb 4-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 196.711495][ T306] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 196.733054][ T306] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 236, using maximum allowed: 30 [ 196.744571][ T306] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 236 [ 196.779109][ T306] usb 4-1: string descriptor 0 read error: -22 [ 196.785435][ T306] usb 4-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 196.795423][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.817841][ T306] usb 4-1: low speed audio streaming not supported [ 196.830853][ T306] usb 4-1: unit 4 not found! [ 196.835756][ T306] usb 4-1: unit 255 not found! [ 196.852259][ T5003] netlink: 'syz.2.1548': attribute type 40 has an invalid length. [ 197.020035][ T306] usb 4-1: USB disconnect, device number 92 [ 197.889002][ T36] audit: type=1400 audit(1775215033.780:87668): avc: denied { read } for pid=5033 comm="syz.3.1561" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 198.188561][ T5044] netlink: 'syz.1.1564': attribute type 11 has an invalid length. [ 198.760802][ T5088] netlink: 'syz.0.1581': attribute type 63 has an invalid length. [ 198.768800][ T5088] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1581'. [ 198.777721][ T5088] gretap0: entered allmulticast mode [ 198.784440][ T5088] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 198.902169][ T5094] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 198.920557][ T5098] fuse: Unknown parameter '?趪弸孤唩rootmode' [ 198.928923][ T5098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1585'. [ 199.187642][ T5105] netlink: 'syz.2.1588': attribute type 28 has an invalid length. [ 199.449896][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.457163][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.464560][ T5118] bridge_slave_0: entered allmulticast mode [ 199.470930][ T5118] bridge_slave_0: entered promiscuous mode [ 199.477403][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.484500][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.491892][ T5118] bridge_slave_1: entered allmulticast mode [ 199.499439][ T5118] bridge_slave_1: entered promiscuous mode [ 199.541831][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.548932][ T5118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.556202][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.563480][ T5118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.584568][ T4989] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.592044][ T4989] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.601720][ T4620] bridge_slave_0: left allmulticast mode [ 199.607457][ T4620] bridge_slave_0: left promiscuous mode [ 199.613361][ T4620] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.663438][ T4987] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.670572][ T4987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.680045][ T4987] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.687127][ T4987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.699588][ T4620] veth1_macvtap: left promiscuous mode [ 199.705203][ T4620] veth0_vlan: left promiscuous mode [ 199.754937][ T4620] veth0 (unregistering): left allmulticast mode [ 199.794214][ T5118] veth0_vlan: entered promiscuous mode [ 199.814238][ T5118] veth1_macvtap: entered promiscuous mode [ 199.880766][ T36] audit: type=1400 audit(1775215035.770:87669): avc: denied { watch } for pid=5139 comm="syz.3.1600" path="/195/file0" dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 200.006944][ T36] audit: type=1400 audit(1775215035.890:87670): avc: denied { create } for pid=5148 comm="syz.0.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 200.039225][ T5151] ip6gre0: mtu less than device minimum [ 200.045111][ T5151] sit0: entered promiscuous mode [ 200.050361][ T5151] netlink: 'syz.0.1604': attribute type 1 has an invalid length. [ 200.058642][ T5151] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1604'. [ 200.158447][ T364] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 200.230203][ T5155] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1606'. [ 200.298034][ T364] usb 4-1: device descriptor read/64, error -71 [ 200.308072][ T360] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 200.458088][ T360] usb 2-1: Using ep0 maxpacket: 16 [ 200.464832][ T360] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.476229][ T360] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 200.489526][ T360] usb 2-1: config 0 interface 0 has no altsetting 0 [ 200.496187][ T360] usb 2-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 200.505884][ T360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.515139][ T360] usb 2-1: config 0 descriptor?? [ 200.548090][ T364] usb 4-1: device descriptor read/64, error -71 [ 200.788085][ T364] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 200.806621][ T5168] overlayfs: failed to resolve './cgroup': -2 [ 200.918092][ T364] usb 4-1: device descriptor read/64, error -71 [ 200.926193][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 200.934264][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 200.941745][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 200.948961][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 200.955916][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 200.963441][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 200.970565][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 200.977699][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 200.985081][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 200.992284][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 200.999319][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.006414][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.013497][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.020565][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.027505][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.034489][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.041658][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.048983][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.055977][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.064398][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.072841][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.118022][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.125309][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.132655][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.139780][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.146820][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.153890][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.160959][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.168160][ T364] usb 4-1: device descriptor read/64, error -71 [ 201.168331][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.181861][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.189089][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.196164][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.203404][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.210555][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.217641][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.224856][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.267853][ T5175] tipc: Enabling of bearer rejected, failed to enable media [ 201.285458][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.293135][ T360] waltop 0003:172F:0038.000F: unknown main item tag 0x0 [ 201.307522][ T360] waltop 0003:172F:0038.000F: hidraw0: USB HID v0.08 Device [HID 172f:0038] on usb-dummy_hcd.1-1/input0 [ 201.389338][ T364] usb usb4-port1: attempt power cycle [ 201.728019][ T364] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 201.749225][ T364] usb 4-1: device descriptor read/8, error -71 [ 201.879295][ T364] usb 4-1: device descriptor read/8, error -71 [ 201.912233][ T5186] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=96 sclass=netlink_xfrm_socket pid=5186 comm=syz.0.1615 [ 202.118035][ T364] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 202.139199][ T364] usb 4-1: device descriptor read/8, error -71 [ 202.269525][ T364] usb 4-1: device descriptor read/8, error -71 [ 202.378141][ T364] usb usb4-port1: unable to enumerate USB device [ 202.907608][ T36] audit: type=1400 audit(1775215038.790:87671): avc: denied { connect } for pid=5218 comm="syz.3.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.050670][ T5229] can0: slcan on ttyS3. [ 203.086908][ T360] usb 2-1: USB disconnect, device number 7 [ 203.110809][ T5235] overlayfs: failed to clone upperpath [ 203.129254][ T5240] netlink: 580 bytes leftover after parsing attributes in process `syz.1.1632'. [ 203.192505][ T5252] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1634'. [ 203.200843][ T5256] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1636'. [ 203.528023][ T360] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 203.678031][ T360] usb 2-1: Using ep0 maxpacket: 16 [ 203.684778][ T360] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.695096][ T360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.706096][ T360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.716003][ T360] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 203.725265][ T360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.734776][ T360] usb 2-1: config 0 descriptor?? [ 203.848859][ T5225] can0 (unregistered): slcan off ttyS3. [ 204.128039][ T363] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 204.200064][ T360] usbhid 2-1:0.0: can't add hid device: -71 [ 204.206044][ T360] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 204.215415][ T360] usb 2-1: USB disconnect, device number 8 [ 204.278101][ T363] usb 4-1: Using ep0 maxpacket: 16 [ 204.286433][ T363] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 251, changing to 7 [ 204.297603][ T363] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 25, changing to 7 [ 204.310335][ T363] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 204.319936][ T363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.327977][ T363] usb 4-1: Product: syz [ 204.332175][ T363] usb 4-1: Manufacturer: syz [ 204.336782][ T363] usb 4-1: SerialNumber: syz [ 204.545273][ T363] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 204.552456][ T363] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 204.564407][ T363] usb 4-1: USB disconnect, device number 97 [ 204.577596][ T3480] udevd[3480]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 204.770448][ T5307] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1644'. [ 204.780505][ T5307] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 204.948015][ T360] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 205.053643][ T5313] SELinux: security_context_str_to_sid (syste_u軬泄 :) failed with errno=-22 [ 205.107386][ T360] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 205.116563][ T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.124789][ T360] usb 2-1: Product: syz [ 205.129345][ T360] usb 2-1: Manufacturer: syz [ 205.138222][ T360] usb 2-1: SerialNumber: syz [ 205.186053][ T5318] binder: Unknown parameter 'context"狸' [ 205.192670][ T5318] incfs: Options parsing error. -22 [ 205.198300][ T5318] incfs: mount failed -22 [ 205.350957][ T360] usb 2-1: MIDIStreaming interface descriptor not found [ 205.364727][ T360] usb 2-1: USB disconnect, device number 9 [ 205.598084][ T4614] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 205.749212][ T4614] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 205.757446][ T4614] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.767577][ T4614] usb 4-1: config 0 has no interface number 0 [ 205.773703][ T4614] usb 4-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 205.788348][ T4614] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 205.797513][ T4614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.805552][ T4614] usb 4-1: Product: syz [ 205.809753][ T4614] usb 4-1: Manufacturer: syz [ 205.814338][ T4614] usb 4-1: SerialNumber: syz [ 205.819679][ T4614] usb 4-1: config 0 descriptor?? [ 205.825440][ T4614] plusb 4-1:0.231: probe with driver plusb failed with error -22 [ 205.985153][ T36] audit: type=1400 audit(1775215041.870:87672): avc: denied { map } for pid=5335 comm="syz.1.1653" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 206.024846][ T36] audit: type=1400 audit(1775215041.910:87673): avc: denied { ioctl } for pid=5335 comm="syz.1.1653" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 206.052369][ T360] usb 4-1: USB disconnect, device number 98 [ 206.181417][ T5350] overlayfs: failed to resolve '/v卋尩鹔绷|1-槜酐u鑑k_喦&穴sゼ硹3[冩鰥稯瀔@RC7': -2 [ 206.338126][ T306] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 206.488075][ T306] usb 2-1: Using ep0 maxpacket: 32 [ 206.494738][ T306] usb 2-1: unable to get BOS descriptor or descriptor too short [ 206.503400][ T306] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 206.515879][ T306] usb 2-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 206.525688][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.533783][ T306] usb 2-1: Product: syz [ 206.538088][ T306] usb 2-1: Manufacturer: syz [ 206.542746][ T306] usb 2-1: SerialNumber: syz [ 206.753335][ T306] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 206.764717][ T306] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 206.783598][ T306] usb 2-1: USB disconnect, device number 10 [ 206.806016][ T3480] udevd[3480]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 207.038160][ T4614] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 207.065419][ T5377] 9pnet_fd: Insufficient options for proto=fd [ 207.072123][ T5376] overlayfs: failed to clone lowerpath [ 207.188163][ T4614] usb 4-1: Using ep0 maxpacket: 16 [ 207.194569][ T4614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.205580][ T4614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.215556][ T4614] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 207.224787][ T4614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.233429][ T4614] usb 4-1: config 0 descriptor?? [ 207.277889][ T5390] validate_nla: 1 callbacks suppressed [ 207.277914][ T5390] netlink: 'syz.1.1671': attribute type 64 has an invalid length. [ 207.291630][ T5390] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1671'. [ 207.558233][ T4612] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 207.642239][ T4614] apple 0003:05AC:024B.0010: unknown global tag 0xe [ 207.649177][ T4614] apple 0003:05AC:024B.0010: item 0 1 1 14 parsing failed [ 207.656524][ T4614] apple 0003:05AC:024B.0010: parse failed [ 207.662567][ T4614] apple 0003:05AC:024B.0010: probe with driver apple failed with error -22 [ 207.718208][ T4612] usb 2-1: Using ep0 maxpacket: 16 [ 207.724480][ T4612] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.735066][ T4612] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.746075][ T4612] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.755475][ T4612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.767422][ T4612] usb 2-1: Product: syz [ 207.777885][ T4612] usb 2-1: Manufacturer: syz [ 207.788362][ T4612] usb 2-1: SerialNumber: syz [ 208.052874][ T306] usb 4-1: USB disconnect, device number 99 [ 208.513711][ T4612] usb 2-1: 0:2 : does not exist [ 208.520925][ T4612] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 208.532634][ T36] audit: type=1400 audit(1775215044.420:87674): avc: denied { append } for pid=5439 comm="syz.1.1686" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 208.535039][ T4612] usb 2-1: USB disconnect, device number 11 [ 208.619803][ T5447] sit0: entered promiscuous mode [ 208.626895][ T5447] netlink: 'syz.1.1689': attribute type 1 has an invalid length. [ 208.635284][ T5447] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1689'. [ 208.644254][ T36] audit: type=1326 audit(1775215044.520:87675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5449 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7440f9c819 code=0x7ffc0000 [ 208.668423][ T36] audit: type=1326 audit(1775215044.520:87676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5449 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7440f9c819 code=0x7ffc0000 [ 208.778309][ T36] audit: type=1400 audit(1775215044.660:87677): avc: denied { mounton } for pid=5460 comm="syz.1.1693" path="/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 209.078382][ T4612] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 209.228377][ T4612] usb 2-1: Using ep0 maxpacket: 8 [ 209.234809][ T4612] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.245287][ T4612] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 209.254622][ T4612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.263685][ T4612] usb 2-1: config 0 descriptor?? [ 209.395254][ T5474] netlink: 'syz.2.1698': attribute type 9 has an invalid length. [ 209.475751][ T5466] usb usb7: usbfs: process 5466 (syz.1.1694) did not claim interface 0 before use [ 209.486162][ T4612] usb 2-1: USB disconnect, device number 12 [ 209.738496][ T360] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 209.888521][ T360] usb 4-1: Using ep0 maxpacket: 16 [ 209.894789][ T360] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 209.907788][ T360] usb 4-1: config 0 interface 0 has no altsetting 0 [ 209.915350][ T360] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 209.924555][ T360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.933264][ T360] usb 4-1: config 0 descriptor?? [ 210.042508][ T5479] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1700'. [ 210.051688][ T5479] tipc: Invalid UDP bearer configuration [ 210.051717][ T5479] tipc: Enabling of bearer rejected, failed to enable media [ 210.067570][ T36] audit: type=1400 audit(1775215045.960:87678): avc: denied { create } for pid=5478 comm="syz.1.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 210.140977][ T5477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1699'. [ 210.283938][ T5484] netlink: 'syz.1.1702': attribute type 4 has an invalid length. [ 210.291914][ T5484] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1702'. [ 210.354680][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.362454][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.370500][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.377930][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.385291][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.392647][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.400317][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.407652][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.415288][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.422630][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.429970][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.437265][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.444598][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.451917][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.459263][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.466580][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.473914][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.481531][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.488947][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.496256][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.503670][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.510990][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.518274][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.525602][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.533016][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.540437][ T363] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 210.548057][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.555437][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.562964][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.570502][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.577816][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.585436][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.592812][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.600135][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.607425][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.614831][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.622289][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.630078][ T360] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 210.638838][ T360] magicmouse 0003:05AC:0324.0011: hidraw0: USB HID v0.07 Device [HID 05ac:0324] on usb-dummy_hcd.3-1/input0 [ 210.652918][ T360] usb 4-1: USB disconnect, device number 100 [ 210.710234][ T363] usb 2-1: unable to get BOS descriptor or descriptor too short [ 210.720382][ T363] usb 2-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 210.729643][ T363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.737643][ T363] usb 2-1: Product: syz [ 210.741980][ T363] usb 2-1: Manufacturer: syz [ 210.746587][ T363] usb 2-1: SerialNumber: syz [ 210.955546][ T363] usb 2-1: __uac_clock_find_source(): recursive clock topology detected, id 8. [ 210.965337][ T363] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 210.975492][ T363] usb 2-1: failed to enable PITCH for EP 0x1 [ 210.981625][ T363] usb 2-1: __uac_clock_find_source(): recursive clock topology detected, id 8. [ 210.990784][ T363] usb 2-1: __uac_clock_find_source(): recursive clock topology detected, id 8. [ 211.000201][ T363] usb 2-1: unit 2 not found! [ 211.004805][ T363] usb 2-1: unit 8: unexpected type 0x0c [ 211.014526][ T363] usb 2-1: USB disconnect, device number 13 [ 211.029030][ T3378] udevd[3378]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 211.318708][ T360] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 211.476948][ T360] usb 4-1: Using ep0 maxpacket: 8 [ 211.485595][ T360] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 211.500755][ T360] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 211.509893][ T360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.517901][ T360] usb 4-1: Product: 彀 [ 211.522128][ T360] usb 4-1: Manufacturer: 袓 [ 211.527523][ T360] usb 4-1: SerialNumber: 袊 [ 212.323874][ T36] audit: type=1400 audit(1775215048.220:87679): avc: denied { setattr } for pid=5543 comm="syz.0.1724" name="RAW" dev="sockfs" ino=25107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 212.324285][ T5544] 9pnet_fd: Insufficient options for proto=fd [ 212.796776][ T5550] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1727'. [ 212.809507][ T5550] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1727'. [ 212.818921][ T5550] 0{X功: renamed from z00猉功 [ 212.824913][ T5550] 0{X功: left promiscuous mode [ 212.830112][ T5550] 0{X功: entered allmulticast mode [ 212.836381][ T5550] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 212.878813][ T5552] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1735'. [ 212.904233][ T5550] netlink: 'syz.2.1727': attribute type 1 has an invalid length. [ 212.955382][ T5557] input input17: cannot allocate more than FF_MAX_EFFECTS effects [ 212.965641][ T5557] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 213.536205][ T5566] netlink: 'syz.1.1733': attribute type 29 has an invalid length. [ 213.544184][ T5566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'. [ 214.098078][ T360] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 214.113539][ T360] usb 4-1: USB disconnect, device number 101 [ 214.127212][ T3480] udevd[3480]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 214.170984][ T5583] /dev/rnullb0: Can't open blockdev [ 214.432936][ T36] audit: type=1400 audit(1775215050.329:87680): avc: denied { listen } for pid=5608 comm="syz.1.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.535498][ T5620] SELinux: security_context_str_to_sid (syste_u軬泄 :) failed with errno=-22 [ 214.859158][ T360] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 215.009087][ T360] usb 2-1: Using ep0 maxpacket: 32 [ 215.015320][ T360] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 215.039079][ T360] usb 2-1: config 0 has no interface number 0 [ 215.045228][ T360] usb 2-1: config 0 interface 184 has no altsetting 0 [ 215.072989][ T360] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 215.089129][ T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.097357][ T360] usb 2-1: Product: syz [ 215.101707][ T360] usb 2-1: Manufacturer: syz [ 215.106679][ T360] usb 2-1: SerialNumber: syz [ 215.117030][ T360] usb 2-1: config 0 descriptor?? [ 215.125274][ T360] smsc75xx v1.0.0 [ 215.141315][ T5657] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1761'. [ 215.279153][ T4611] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 215.331361][ T360] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 215.351444][ T360] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 215.362270][ T360] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 215.372612][ T360] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 215.382864][ T360] usb 2-1: USB disconnect, device number 14 [ 215.440698][ T4611] usb 4-1: unable to get BOS descriptor or descriptor too short [ 215.448941][ T4611] usb 4-1: not running at top speed; connect to a high speed hub [ 215.457482][ T4611] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 215.470532][ T4611] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 215.479661][ T4611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.487883][ T4611] usb 4-1: Product: syz [ 215.492128][ T4611] usb 4-1: Manufacturer: syz [ 215.496768][ T4611] usb 4-1: SerialNumber: syz [ 215.648849][ T5673] veth1_macvtap: left promiscuous mode [ 215.654481][ T5673] macsec0: entered allmulticast mode [ 215.661786][ T5673] veth1_macvtap: entered promiscuous mode [ 215.667602][ T5673] veth1_macvtap: entered allmulticast mode [ 215.673740][ T5673] macsec0: left allmulticast mode [ 215.678817][ T5673] veth1_macvtap: left allmulticast mode [ 215.695316][ T5675] process '/newroot/520/file0' started with executable stack [ 215.704238][ T5650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1759'. [ 215.713876][ T5650] netlink: 'syz.3.1759': attribute type 4 has an invalid length. [ 215.722110][ T5650] netlink: 'syz.3.1759': attribute type 5 has an invalid length. [ 215.730064][ T5650] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1759'. [ 215.743818][ T4611] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 215.752377][ T4611] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 215.761928][ T4611] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 215.770918][ T4611] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 215.779669][ T4611] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 215.792402][ T4611] usb 4-1: USB disconnect, device number 102 [ 215.801735][ T3378] udevd[3378]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 215.946269][ T5695] netlink: 'syz.0.1773': attribute type 4 has an invalid length. [ 215.955884][ T5695] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1773'. [ 215.995453][ T36] audit: type=1400 audit(1775215051.889:87681): avc: denied { bind } for pid=5698 comm="syz.0.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 216.016942][ T360] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 216.180277][ T360] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.190483][ T360] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.200678][ T360] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 216.210163][ T360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 216.218316][ T360] usb 2-1: SerialNumber: syz [ 216.226176][ T360] usb 2-1: 0:2 : does not exist [ 216.312065][ T36] audit: type=1400 audit(1775215052.209:87682): avc: denied { map } for pid=5716 comm="syz.3.1781" path="socket:[25368]" dev="sockfs" ino=25368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 216.512975][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1784'. [ 216.627831][ T306] usb 2-1: USB disconnect, device number 15 [ 216.799388][ T360] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 216.952291][ T360] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 216.961501][ T360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.969549][ T360] usb 4-1: Product: syz [ 216.973896][ T360] usb 4-1: Manufacturer: syz [ 216.978510][ T360] usb 4-1: SerialNumber: syz [ 217.084614][ T36] audit: type=1107 audit(1775215052.979:87683): pid=5768 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 217.191198][ T360] usb 4-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 217.291746][ T360] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 217.309681][ T360] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 217.321575][ T360] usb 4-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 217.333881][ T360] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 217.340429][ T360] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 217.356709][ T360] usb 4-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 217.365491][ T360] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 217.381310][ T360] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 217.391953][ T360] usb 4-1: USB disconnect, device number 103 [ 217.410958][ T3480] udevd[3480]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 217.429436][ T5783] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 217.606804][ T5787] incfs: Error accessing: ./file0/file0. [ 217.620566][ T5787] incfs: mount failed -2 [ 217.637838][ T5789] 9pnet_fd: Insufficient options for proto=fd [ 217.638221][ T4987] tipc: Subscription rejected, illegal request [ 217.689468][ T306] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 217.706521][ T36] audit: type=1400 audit(1775215053.599:87684): avc: denied { associate } for pid=5793 comm="syz.3.1807" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 217.850595][ T306] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 217.858852][ T306] usb 2-1: config 0 has no interface number 0 [ 217.865216][ T306] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 217.876413][ T306] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 217.886518][ T306] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid maxpacket 25665, setting to 64 [ 217.899118][ T306] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 217.908540][ T306] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 217.916573][ T306] usb 2-1: Product: syz [ 217.920783][ T306] usb 2-1: Manufacturer: syz [ 217.925421][ T306] usb 2-1: SerialNumber: syz [ 217.930677][ T306] usb 2-1: config 0 descriptor?? [ 217.935886][ T5785] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 217.944022][ T306] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 217.954311][ T306] xpad 2-1:0.237: probe with driver xpad failed with error -5 [ 218.059500][ T4611] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 218.145971][ T306] usb 2-1: USB disconnect, device number 16 [ 218.210671][ T4611] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 218.222297][ T4611] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 218.236407][ T4611] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.245791][ T4611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 218.254083][ T4611] usb 4-1: SerialNumber: syz [ 218.260705][ T5799] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 218.469578][ T5798] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 218.469913][ T5799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.486132][ T5799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.502548][ T4611] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 218.510371][ T5808] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1810'. [ 218.512454][ T4611] usb 4-1: USB disconnect, device number 104 [ 218.781179][ T36] audit: type=1400 audit(1775215054.679:87685): avc: denied { accept } for pid=5819 comm="syz.2.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 218.899567][ T306] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 219.050898][ T306] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.063594][ T306] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.079223][ T306] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 219.088270][ T306] usb 2-1: Product: syz [ 219.092518][ T306] usb 2-1: SerialNumber: syz [ 219.309668][ T4611] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 219.459714][ T4611] usb 4-1: Using ep0 maxpacket: 16 [ 219.466164][ T4611] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 219.474657][ T4611] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.485017][ T4611] usb 4-1: config 0 has no interface number 0 [ 219.492704][ T4611] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 219.501860][ T4611] usb 4-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 219.502875][ T36] audit: type=1400 audit(1775215055.399:87686): avc: denied { nlmsg_write } for pid=5814 comm="syz.1.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 219.509899][ T4611] usb 4-1: Product: syz [ 219.509921][ T4611] usb 4-1: Manufacturer: syz [ 219.532472][ T36] audit: type=1400 audit(1775215055.429:87687): avc: denied { audit_write } for pid=5814 comm="syz.1.1813" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 219.535082][ T4611] usb 4-1: SerialNumber: syz [ 219.540819][ T36] audit: type=1107 audit(1775215055.429:87688): pid=5814 uid=0 auid=1 ses=2 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 219.566283][ T4611] usb 4-1: config 0 descriptor?? [ 219.664586][ T4611] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 219.671116][ T4611] uvcvideo 4-1:0.105: Entity type for entity Output 1 was not initialized! [ 219.679843][ T4611] usb 4-1: Failed to create links for entity 1 [ 219.686147][ T4611] usb 4-1: Failed to register entities (-22). [ 219.732908][ T5815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.741571][ T5815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.873153][ T5840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.881799][ T5840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.892382][ T4611] usb 4-1: USB disconnect, device number 105 [ 220.022613][ T5859] : renamed from veth1_vlan [ 220.151703][ T5815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.160341][ T5815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.168935][ T5815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.177863][ T5815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.187089][ T306] cdc_ncm 2-1:1.0: failed to get mac address [ 220.193373][ T306] cdc_ncm 2-1:1.0: bind() failure [ 220.199355][ T306] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 220.207868][ T306] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 220.218811][ T306] usb 2-1: USB disconnect, device number 17 [ 220.402244][ T36] audit: type=1400 audit(1775215056.299:87689): avc: denied { sys_module } for pid=5864 comm="syz.3.1830" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 220.669792][ T306] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 220.822892][ T306] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 220.830550][ T306] usb 4-1: can't read configurations, error -71 [ 220.979833][ T4611] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 221.046645][ T5889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'. [ 221.131451][ T4611] usb 2-1: unable to get BOS descriptor or descriptor too short [ 221.148218][ T4611] usb 2-1: not running at top speed; connect to a high speed hub [ 221.157108][ T4611] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.171560][ T4611] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 221.180968][ T4611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.189280][ T4611] usb 2-1: Product: syz [ 221.195236][ T4611] usb 2-1: Manufacturer: syz [ 221.200025][ T4611] usb 2-1: SerialNumber: syz [ 221.409958][ T4611] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 221.420049][ T4611] usb 2-1: failed to enable PITCH for EP 0x1 [ 221.426536][ T4611] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 221.436484][ T4611] usb 2-1: 1:1 : bogus bTerminalLink 3 [ 221.442235][ T4611] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 221.452135][ T4611] usb 2-1: 1:1 : bogus bTerminalLink 3 [ 221.459146][ T4611] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 221.471558][ T4611] usb 2-1: USB disconnect, device number 18 [ 221.483568][ T3480] udevd[3480]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 221.506126][ T36] audit: type=1326 audit(1775215057.398:87690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.0.1841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f303659c819 code=0x0 [ 221.669947][ T306] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 221.819915][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 221.826444][ T306] usb 4-1: unable to get BOS descriptor or descriptor too short [ 221.835221][ T306] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 221.848674][ T306] usb 4-1: string descriptor 0 read error: -22 [ 221.855076][ T306] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 221.864281][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.927312][ T5900] 9pnet: Could not find request transport: e泑云K =0x0000000000000007 [ 221.943830][ T5900] netlink: 'syz.1.1843': attribute type 33 has an invalid length. [ 222.076159][ T4611] usb 4-1: USB disconnect, device number 107 [ 222.260019][ T306] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 222.410079][ T306] usb 2-1: Using ep0 maxpacket: 16 [ 222.416565][ T306] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 222.426608][ T306] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 222.436482][ T306] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.449540][ T306] usb 2-1: config 1 interface 0 has no altsetting 0 [ 222.457557][ T306] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 222.466874][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.475090][ T306] usb 2-1: Product: syz [ 222.479248][ T306] usb 2-1: Manufacturer: syz [ 222.483887][ T306] usb 2-1: SerialNumber: syz [ 222.529607][ T5906] overlayfs: failed to clone lowerpath [ 222.535786][ T5906] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1845'. [ 222.545079][ T5906] gretap0: entered promiscuous mode [ 222.550732][ T5906] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1845'. [ 222.559745][ T5906] 0{X功: renamed from gretap0 [ 222.565570][ T5906] 0{X功: left promiscuous mode [ 222.570692][ T5906] 0{X功: entered allmulticast mode [ 222.576524][ T5906] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 222.691295][ T306] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 222.850089][ T360] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 222.893236][ T306] usb 2-1: USB disconnect, device number 19 [ 223.001268][ T360] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 223.009659][ T360] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 223.020179][ T360] usb 4-1: config 8 has no interface number 0 [ 223.026273][ T360] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 223.041165][ T360] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 223.050434][ T360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.058506][ T360] usb 4-1: Product: syz [ 223.063171][ T360] usb 4-1: Manufacturer: syz [ 223.067868][ T360] usb 4-1: SerialNumber: syz [ 223.093720][ T5904] usblp0: removed [ 223.170144][ T5926] netlink: 'syz.2.1851': attribute type 27 has an invalid length. [ 223.184685][ T5926] 0{X功: left allmulticast mode [ 223.203287][ T4986] ip6_tunnel: G勷l xmit: Local address not yet configured! [ 223.210939][ T4986] ip6_tunnel: G勷l xmit: Local address not yet configured! [ 223.228801][ T5929] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5929 comm=syz.2.1852 [ 223.250170][ T4611] ip6_tunnel: G勷l xmit: Local address not yet configured! [ 223.259335][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1853'. [ 223.274562][ T5913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.285254][ T5913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.294720][ T5913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.304360][ T5913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.313781][ T5913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.329171][ T5913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.338852][ T5913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.348299][ T5913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.357664][ T5913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.367210][ T5913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.380206][ T360] usb 4-1: USB disconnect, device number 108 [ 223.657734][ T5940] netlink: 'syz.1.1856': attribute type 27 has an invalid length. [ 223.668448][ T5940] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 223.977438][ T36] audit: type=1400 audit(1775215059.868:87691): avc: denied { create } for pid=5971 comm="syz.2.1864" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 224.020223][ T364] ip6_tunnel: G勷l xmit: Local address not yet configured! [ 224.180327][ T364] ip6_tunnel: G勷l xmit: Local address not yet configured! [ 224.196817][ T36] audit: type=1400 audit(1775215060.088:87692): avc: denied { read } for pid=5989 comm="syz.3.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 224.331457][ T5981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.340012][ T5981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.533017][ T6003] overlayfs: failed to clone upperpath [ 224.559599][ T6007] netlink: 'syz.0.1876': attribute type 4 has an invalid length. [ 224.567588][ T306] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 224.575449][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1876'. [ 224.713784][ T6009] overlayfs: failed to clone upperpath [ 224.731377][ T306] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 224.741318][ T306] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 224.751086][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.962183][ T306] usb 2-1: string descriptor 0 read error: -71 [ 224.970160][ T306] hub 2-1:32.0: bad descriptor, ignoring hub [ 224.976242][ T306] hub 2-1:32.0: probe with driver hub failed with error -5 [ 225.000625][ T306] usb 2-1: USB disconnect, device number 20 [ 225.296885][ T6020] : renamed from bond_slave_0 [ 225.559748][ T6029] netlink: 'syz.1.1884': attribute type 27 has an invalid length. [ 225.569139][ T6029] sit0: left promiscuous mode [ 225.955038][ T36] audit: type=1400 audit(1775215061.848:87693): avc: denied { nlmsg_read } for pid=6039 comm="syz.1.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 226.450558][ T360] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 226.601604][ T360] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 226.609901][ T360] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 226.618929][ T360] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 226.629255][ T360] usb 2-1: config 220 has no interface number 2 [ 226.635668][ T360] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 226.648860][ T360] usb 2-1: config 220 interface 0 has no altsetting 0 [ 226.656105][ T360] usb 2-1: config 220 interface 76 has no altsetting 0 [ 226.663373][ T360] usb 2-1: config 220 interface 1 has no altsetting 0 [ 226.671928][ T360] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 226.681090][ T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.689258][ T360] usb 2-1: Product: syz [ 226.693849][ T360] usb 2-1: Manufacturer: syz [ 226.698505][ T360] usb 2-1: SerialNumber: syz [ 226.907383][ T360] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 226.914445][ T360] usb 2-1: No valid video chain found. [ 226.920105][ T360] usb 2-1: selecting invalid altsetting 0 [ 226.928656][ T360] usb 2-1: USB disconnect, device number 21 [ 227.501031][ T363] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 227.540714][ C0] ip6_tunnel: G勷l xmit: Local address not yet configured! [ 227.650616][ T363] usb 4-1: Using ep0 maxpacket: 16 [ 227.656901][ T363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.680614][ T363] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 227.693796][ T363] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 227.709049][ T363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.737672][ T363] usb 4-1: config 0 descriptor?? [ 227.794099][ T6131] 9pnet_fd: Insufficient options for proto=fd [ 227.860169][ T6139] overlayfs: failed to clone upperpath [ 227.866570][ T6139] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 227.949294][ T363] samsung 0003:0419:0600.0012: unknown main item tag 0x0 [ 227.956745][ T363] samsung 0003:0419:0600.0012: unknown main item tag 0x0 [ 227.963866][ T363] samsung 0003:0419:0600.0012: unknown main item tag 0x0 [ 227.971051][ T363] samsung 0003:0419:0600.0012: unknown main item tag 0x0 [ 227.978110][ T363] samsung 0003:0419:0600.0012: unknown main item tag 0x0 [ 227.985260][ T363] samsung 0003:0419:0600.0012: unknown main item tag 0x0 [ 227.992346][ T363] samsung 0003:0419:0600.0012: unexpected long global item [ 227.999718][ T363] samsung 0003:0419:0600.0012: parse failed [ 228.005681][ T363] samsung 0003:0419:0600.0012: probe with driver samsung failed with error -22 [ 228.154069][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1926'. [ 228.158410][ T363] usb 4-1: USB disconnect, device number 109 [ 228.410711][ T4612] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 228.562408][ T4612] usb 2-1: unable to get BOS descriptor or descriptor too short [ 228.570639][ T4612] usb 2-1: not running at top speed; connect to a high speed hub [ 228.579209][ T4612] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 228.590266][ T4612] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 236, changing to 4 [ 228.602793][ T4612] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 228.611935][ T4612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.619947][ T4612] usb 2-1: Product: syz [ 228.624181][ T4612] usb 2-1: Manufacturer: syz [ 228.628881][ T4612] usb 2-1: SerialNumber: syz [ 228.663260][ T36] audit: type=1400 audit(1775215064.558:87694): avc: denied { map } for pid=6161 comm="syz.2.1930" path="socket:[28907]" dev="sockfs" ino=28907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 228.690959][ T36] audit: type=1400 audit(1775215064.558:87695): avc: denied { accept } for pid=6161 comm="syz.2.1930" path="socket:[28907]" dev="sockfs" ino=28907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 228.725635][ T36] audit: type=1400 audit(1775215064.618:87696): avc: denied { shutdown } for pid=6164 comm="syz.3.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 228.838452][ T4612] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3) [ 228.846359][ T4612] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 228.857945][ T4612] usb 2-1: USB disconnect, device number 22 [ 228.871096][ T3480] udevd[3480]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 229.584498][ T6218] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1950'. [ 229.714707][ T6219] kvm: pic: non byte write [ 229.719254][ T6219] kvm: pic: non byte write [ 230.278905][ T6252] x_tables: duplicate underflow at hook 1 [ 230.545208][ T6284] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1974'. [ 230.761069][ T4612] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 230.912302][ T4612] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 230.923361][ T4612] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 230.934508][ T4612] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 230.944417][ T4612] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 230.958385][ T4612] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.967547][ T4612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 230.975617][ T4612] usb 4-1: SerialNumber: syz [ 231.182911][ T4612] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 231.192866][ T4612] usb 4-1: USB disconnect, device number 110 [ 231.451846][ T36] audit: type=1400 audit(1775215067.347:87697): avc: denied { setcurrent } for pid=6300 comm="syz.1.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 231.472148][ T36] audit: type=1401 audit(1775215067.347:87698): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 231.501102][ T6312] netlink: 'syz.1.1984': attribute type 20 has an invalid length. [ 231.914353][ T6337] netlink: 'syz.0.1993': attribute type 1 has an invalid length. [ 231.924933][ T6337] overlayfs: failed to resolve './file0': -2 [ 231.993010][ T6341] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1995'. [ 232.101267][ T360] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 232.141239][ T363] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 232.263835][ T360] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=ab.79 [ 232.273043][ T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.281382][ T360] usb 2-1: Product: syz [ 232.285581][ T360] usb 2-1: Manufacturer: syz [ 232.290171][ T360] usb 2-1: SerialNumber: syz [ 232.297827][ T360] ftdi_sio 2-1:4.0: FTDI USB Serial Device converter detected [ 232.305867][ T360] ftdi_sio ttyUSB0: unknown device type: 0xab79 [ 232.312706][ T363] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 232.326110][ T363] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.336098][ T363] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.349522][ T363] usb 4-1: config 0 interface 0 has no altsetting 0 [ 232.356212][ T363] usb 4-1: New USB device found, idVendor=056a, idProduct=10df, bcdDevice= 0.00 [ 232.365279][ T363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.374091][ T363] usb 4-1: config 0 descriptor?? [ 232.496664][ T360] usb 2-1: USB disconnect, device number 23 [ 232.504699][ T360] ftdi_sio 2-1:4.0: device disconnected [ 232.535334][ T36] audit: type=1326 audit(1775215068.427:87699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2839c819 code=0x7ffc0000 [ 232.559106][ T36] audit: type=1326 audit(1775215068.427:87700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2839c819 code=0x7ffc0000 [ 232.584369][ T36] audit: type=1326 audit(1775215068.427:87701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba2835d04e code=0x7ffc0000 [ 232.608254][ T36] audit: type=1326 audit(1775215068.427:87702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba2835d04e code=0x7ffc0000 [ 232.631876][ T36] audit: type=1326 audit(1775215068.427:87703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2839c819 code=0x7ffc0000 [ 232.655988][ T36] audit: type=1326 audit(1775215068.427:87704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fba2839c819 code=0x7ffc0000 [ 232.679799][ T36] audit: type=1326 audit(1775215068.427:87705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2839c819 code=0x7ffc0000 [ 232.703478][ T36] audit: type=1326 audit(1775215068.427:87706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba2839c819 code=0x7ffc0000 [ 232.788757][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.795769][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.802838][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.809734][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.816864][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.823852][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.830809][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.837819][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.845089][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.852023][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.858907][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.865915][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.872827][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.879687][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.886601][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.893554][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.900422][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.907435][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.914370][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.921305][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.928185][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.935135][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.942201][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.949098][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.956024][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.962924][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.969783][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.976697][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.983854][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.990763][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 232.997923][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 233.005089][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 233.012380][ T363] wacom 0003:056A:10DF.0013: unknown main item tag 0x0 [ 233.019598][ T363] wacom 0003:056A:10DF.0013: Unknown device_type for 'HID 056a:10df'. Ignoring. [ 233.089834][ T6377] fuse: Unknown parameter '偘' [ 233.110431][ T6379] overlayfs: failed to clone upperpath [ 233.160353][ T6381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2009'. [ 233.471420][ T363] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 233.572702][ T4611] usb 4-1: USB disconnect, device number 111 [ 233.622228][ T363] usb 2-1: Using ep0 maxpacket: 32 [ 233.641191][ T363] usb 2-1: unable to get BOS descriptor or descriptor too short [ 233.649816][ T363] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 233.670979][ T363] usb 2-1: string descriptor 0 read error: -22 [ 233.677443][ T363] usb 2-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 233.686624][ T363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.715687][ T6391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2012'. [ 233.726583][ T6391] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2012'. [ 234.390883][ T6411] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.406893][ T6411] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.415449][ T6411] bridge_slave_0: entered allmulticast mode [ 234.422628][ T6411] bridge_slave_0: entered promiscuous mode [ 234.429428][ T6411] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.441252][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.448595][ T6411] bridge_slave_1: entered allmulticast mode [ 234.456622][ T6411] bridge_slave_1: entered promiscuous mode [ 234.559515][ T6411] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.566743][ T6411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.574100][ T6411] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.581167][ T6411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.597219][ T4620] bridge_slave_1: left allmulticast mode [ 234.602950][ T4620] bridge_slave_1: left promiscuous mode [ 234.608663][ T4620] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.616925][ T4620] bridge_slave_0: left allmulticast mode [ 234.623065][ T4620] bridge_slave_0: left promiscuous mode [ 234.628872][ T4620] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.803049][ T4987] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.810529][ T4987] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.820191][ T4986] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.827303][ T4986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.836560][ T4986] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.843639][ T4986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.860597][ T4620] tipc: Left network mode [ 234.868431][ T4620] veth1_macvtap: left promiscuous mode [ 234.874165][ T4620] 换换换: left promiscuous mode [ 234.957259][ T6411] veth0_vlan: entered promiscuous mode [ 234.983869][ T6411] veth1_macvtap: entered promiscuous mode [ 235.048163][ T6438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.059446][ T6438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.194414][ T4620] ------------[ cut here ]------------ [ 235.199969][ T4620] WARNING: CPU: 0 PID: 4620 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 235.210265][ T4620] Modules linked in: [ 235.214229][ T4620] CPU: 0 UID: 0 PID: 4620 Comm: kworker/u8:5 Not tainted syzkaller #0 a40991d314adffa3075cd603e5b19eadab4cccf0 [ 235.226012][ T4620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.236123][ T4620] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 235.240957][ T4620] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 235.247087][ T4620] Code: e8 91 47 d9 fc 4b 83 3c 3e 00 75 19 e8 05 11 81 fc 49 81 ff f8 07 00 00 74 1b e8 f7 10 81 fc 49 83 c7 08 eb c9 e8 ec 10 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 235.267075][ T4620] RSP: 0018:ffffc9000e7f7b90 EFLAGS: 00010293 [ 235.273781][ T4620] RAX: ffffffff850699f4 RBX: ffff888103f2d8c0 RCX: ffff88811abc0000 [ 235.281901][ T4620] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881047cc000 [ 235.282083][ T360] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 235.289902][ T4620] RBP: ffffc9000e7f7bb0 R08: 0000000000000003 R09: 0000000000000004 [ 235.289926][ T4620] R10: dffffc0000000000 R11: fffff52001cfef04 R12: dffffc0000000000 [ 235.289943][ T4620] R13: dffffc0000000000 R14: ffff8881047cc000 R15: 0000000000000000 [ 235.289958][ T4620] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 235.330903][ T4620] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.337809][ T4620] CR2: 00007fc8f8f1bff8 CR3: 0000000124bee000 CR4: 00000000003526b0 [ 235.345946][ T4620] Call Trace: [ 235.349250][ T4620] [ 235.352259][ T4620] cleanup_net+0x6bd/0xc90 [ 235.356706][ T4620] ? __cfi_cleanup_net+0x10/0x10 [ 235.361691][ T4620] ? kick_pool+0xb9/0x550 [ 235.366044][ T4620] process_scheduled_works+0x7d1/0x1020 [ 235.371681][ T4620] worker_thread+0xc70/0x10b0 [ 235.376402][ T4620] ? __cfi_try_to_wake_up+0x10/0x10 [ 235.381723][ T4620] kthread+0x2c6/0x370 [ 235.385838][ T4620] ? __cfi_worker_thread+0x10/0x10 [ 235.390992][ T4620] ? __cfi_kthread+0x10/0x10 [ 235.395751][ T4620] ret_from_fork+0x67/0xa0 [ 235.400205][ T4620] ? __cfi_kthread+0x10/0x10 [ 235.404876][ T4620] ret_from_fork_asm+0x1a/0x30 [ 235.409687][ T4620] [ 235.412956][ T4620] ---[ end trace 0000000000000000 ]--- [ 235.419623][ T4620] ------------[ cut here ]------------ [ 235.425417][ T4620] WARNING: CPU: 0 PID: 4620 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 235.435651][ T4620] Modules linked in: [ 235.439589][ T4620] CPU: 0 UID: 0 PID: 4620 Comm: kworker/u8:5 Tainted: G W syzkaller #0 a40991d314adffa3075cd603e5b19eadab4cccf0 [ 235.453051][ T4620] Tainted: [W]=WARN [ 235.456892][ T4620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.467097][ T4620] Workqueue: netns cleanup_net [ 235.472095][ T4620] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 235.478210][ T4620] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 b0 10 81 fc 49 81 ff f8 07 00 00 74 1b e8 a2 10 81 fc 49 83 c7 08 eb c5 e8 97 10 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 87 10 81 fc 5b 41 5c 41 5e 41 [ 235.497977][ T4620] RSP: 0018:ffffc9000e7f7b90 EFLAGS: 00010293 [ 235.501584][ T360] usb 3-1: device descriptor read/64, error -71 [ 235.504117][ T4620] RAX: ffffffff85069a49 RBX: ffff8881047cc800 RCX: ffff88811abc0000 [ 235.518347][ T4620] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881047cc808 [ 235.526465][ T4620] RBP: ffffc9000e7f7bb0 R08: 0000000000000003 R09: 0000000000000004 [ 235.534655][ T4620] R10: dffffc0000000000 R11: fffff52001cfef04 R12: dffffc0000000000 [ 235.542703][ T4620] R13: dffffc0000000000 R14: ffff8881047cc000 R15: 0000000000000008 [ 235.550878][ T4620] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 235.559978][ T4620] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.566622][ T4620] CR2: 00007fc8f8f1bff8 CR3: 0000000124bee000 CR4: 00000000003526b0 [ 235.574650][ T4620] Call Trace: [ 235.577951][ T4620] [ 235.580904][ T4620] cleanup_net+0x6bd/0xc90 [ 235.585397][ T4620] ? __cfi_cleanup_net+0x10/0x10 [ 235.590364][ T4620] ? kick_pool+0xb9/0x550 [ 235.594776][ T4620] process_scheduled_works+0x7d1/0x1020 [ 235.600355][ T4620] worker_thread+0xc70/0x10b0 [ 235.605103][ T4620] ? __cfi_try_to_wake_up+0x10/0x10 [ 235.610338][ T4620] kthread+0x2c6/0x370 [ 235.614575][ T4620] ? __cfi_worker_thread+0x10/0x10 [ 235.619727][ T4620] ? __cfi_kthread+0x10/0x10 [ 235.624377][ T4620] ret_from_fork+0x67/0xa0 [ 235.628829][ T4620] ? __cfi_kthread+0x10/0x10 [ 235.633483][ T4620] ret_from_fork_asm+0x1a/0x30 [ 235.638373][ T4620] [ 235.641413][ T4620] ---[ end trace 0000000000000000 ]--- [ 235.693880][ T4620] ------------[ cut here ]------------ [ 235.699479][ T4620] WARNING: CPU: 0 PID: 4620 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 235.709115][ T4620] Modules linked in: [ 235.713093][ T4620] CPU: 0 UID: 0 PID: 4620 Comm: kworker/u8:5 Tainted: G W syzkaller #0 a40991d314adffa3075cd603e5b19eadab4cccf0 [ 235.726440][ T4620] Tainted: [W]=WARN [ 235.730261][ T4620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.740399][ T4620] Workqueue: netns cleanup_net [ 235.745224][ T4620] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 235.750802][ T4620] Code: 3c 20 00 74 08 48 89 df e8 8f 13 f4 fc 48 8b 3b e8 f7 3b df fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 dc 9b fc <0f> 0b e9 b0 fd ff ff e8 e6 dc 9b fc 0f 0b e9 18 fe ff ff e8 da dc [ 235.770495][ T4620] RSP: 0018:ffffc9000e7f7b70 EFLAGS: 00010293 [ 235.776632][ T4620] RAX: ffffffff84ebcdee RBX: ffff888103f2d8c0 RCX: ffff88811abc0000 [ 235.784705][ T4620] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88811abc0000 [ 235.792735][ T4620] RBP: ffffc9000e7f7b98 R08: ffffffff87d38c07 R09: 1ffffffff0fa7180 [ 235.800821][ T4620] R10: dffffc0000000000 R11: fffffbfff0fa7181 R12: 1ffffffff0fa6ed0 [ 235.808849][ T4620] R13: dffffc0000000000 R14: ffff888103f2e4c0 R15: dffffc0000000000 [ 235.812247][ T363] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 235.817331][ T4620] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 235.835278][ T4620] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.841925][ T4620] CR2: 00007fc8f8f1bff8 CR3: 000000010cf3e000 CR4: 00000000003526b0 [ 235.850018][ T4620] Call Trace: [ 235.853446][ T4620] [ 235.853469][ T363] usb 2-1: USB disconnect, device number 24 [ 235.856391][ T4620] xfrm_net_exit+0x31/0x80 [ 235.866761][ T4620] cleanup_net+0x6bd/0xc90 [ 235.871222][ T4620] ? __cfi_cleanup_net+0x10/0x10 [ 235.876318][ T4620] ? kick_pool+0xb9/0x550 [ 235.880675][ T4620] process_scheduled_works+0x7d1/0x1020 [ 235.886393][ T4620] worker_thread+0xc70/0x10b0 [ 235.891197][ T4620] ? __cfi_try_to_wake_up+0x10/0x10 [ 235.896460][ T4620] kthread+0x2c6/0x370 [ 235.900648][ T4620] ? __cfi_worker_thread+0x10/0x10 [ 235.906042][ T4620] ? __cfi_kthread+0x10/0x10 [ 235.910676][ T4620] ret_from_fork+0x67/0xa0 [ 235.915295][ T4620] ? __cfi_kthread+0x10/0x10 [ 235.919916][ T4620] ret_from_fork_asm+0x1a/0x30 [ 235.924766][ T4620] [ 235.927811][ T4620] ---[ end trace 0000000000000000 ]--- [ 235.936757][ T3480] udevd[3480]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 236.153151][ T4620] bridge_slave_1: left allmulticast mode [ 236.158993][ T4620] bridge_slave_1: left promiscuous mode [ 236.165092][ T4620] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.173017][ T4620] bridge_slave_0: left allmulticast mode [ 236.178828][ T4620] bridge_slave_0: left promiscuous mode [ 236.184717][ T4620] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.294543][ T4620] veth1_macvtap: left promiscuous mode [ 236.300232][ T4620] veth0_vlan: left promiscuous mode [ 236.574822][ T4620] bridge_slave_1: left allmulticast mode [ 236.580601][ T4620] bridge_slave_1: left promiscuous mode [ 236.586327][ T4620] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.593938][ T4620] bridge_slave_0: left allmulticast mode [ 236.599573][ T4620] bridge_slave_0: left promiscuous mode [ 236.605532][ T4620] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.613536][ T4620] bridge_slave_1: left allmulticast mode [ 236.619364][ T4620] bridge_slave_1: left promiscuous mode [ 236.625229][ T4620] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.632756][ T4620] bridge_slave_0: left allmulticast mode [ 236.638394][ T4620] bridge_slave_0: left promiscuous mode [ 236.644209][ T4620] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.946014][ T4620] veth1_macvtap: left promiscuous mode [ 236.951618][ T4620] veth0_vlan: left promiscuous mode [ 236.957310][ T4620] veth1_macvtap: left promiscuous mode [ 236.962844][ T4620] veth0_vlan: left promiscuous mode