last executing test programs: 19.904879429s ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file2\x00', 0x8000, 0x5a1) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x5) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x2) r2 = syz_usb_connect(0x5, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000001c40), 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000340)={0x74, 0x0, 0x18}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000000c0)={0x2, 0x0, [{0x2, 0x9, 0x1, 0x6, 0x7f}, {0x40000000, 0x8, 0x2, 0xffff, 0x3}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f00000002c0)="362a89a7263e264d01818c513bd530ffb8ba1fa8c2f1c5df2b6d57c1fe9890c8c6cfdd35c43194ea85c1d8d3a4651cf9b0eaaff6331abe561776487ab4d3650b6b55e2", 0x43) pread64(r6, 0x0, 0x0, 0xd000) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) sendmsg$can_raw(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r8}, 0x10, &(0x7f0000000040)={&(0x7f0000000280)=@can={{0x0, 0x0, 0x0, 0x1}, 0x9, 0x1, 0x4}, 0x10}, 0x1, 0x0, 0x0, 0x240c408c}, 0xc008004) 18.130576732s ago: executing program 3 (id=15): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x302}, "77b40400", "bb6751bc8150e4a12117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r2 = epoll_create(0x7) r3 = epoll_create1(0x0) r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x201c}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0xa000001c}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006800"], 0x1c}], 0x1}, 0x4000080) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xdea}, {&(0x7f0000000240)="b0c089c1c3e1216756615dde8fd8e358908803df4459f506479ab9cf61eb0266", 0x20}], 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 18.068821624s ago: executing program 3 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="8fdf2cbd7000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xe2c3}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000c00)=""/163, 0xa3}, {&(0x7f0000001cc0)=""/240, 0xf0}, {&(0x7f0000000e00)=""/88, 0x58}, {&(0x7f0000000e80)=""/180, 0xb4}, {&(0x7f0000000600)=""/263, 0x107}, {&(0x7f0000001040)=""/57, 0x39}, {&(0x7f0000002040)=""/4092, 0xffc}], 0x7}, 0xe}, {{0x0, 0x0, 0x0}, 0x8000}], 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r2, 0x8948, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000740)=ANY=[@ANYBLOB="007945de", @ANYRES16=r4, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r5, @ANYBLOB="0c508c201295261c730f6238d0023560d98ac1a8cb8f81c2071a9c9113b1c0eb1dd6b172b6b25d11058335b6aa978a7d1212fe173cc4ad2d758d12b1b88a98e6808eda05e028ad2bee6e9aa4ba529db5738ba179f93de8f97c01ee2918aa8a0e2713815d67b3d764df0d4811956e0e59c529f23befdd9a26cc1727a2b45073eb4ef26003a8e1c0084efdb3197244d7413f21cb5a82a00908da20171ee81bc1c36b619555dc62ac0886ddcf"], 0x2c}}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000480)={{0x0, 0xfffe, 0x2}, 'syz0\x00', 0xa}) ioctl$UI_DEV_CREATE(r8, 0x5501) write$input_event(r8, &(0x7f0000000100)={{0x0, 0xea60}, 0x12, 0x203, 0x8200}, 0x18) r9 = dup(r7) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000001080)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@cache_readahead}]}}) 17.947138017s ago: executing program 32 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="8fdf2cbd7000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xe2c3}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000c00)=""/163, 0xa3}, {&(0x7f0000001cc0)=""/240, 0xf0}, {&(0x7f0000000e00)=""/88, 0x58}, {&(0x7f0000000e80)=""/180, 0xb4}, {&(0x7f0000000600)=""/263, 0x107}, {&(0x7f0000001040)=""/57, 0x39}, {&(0x7f0000002040)=""/4092, 0xffc}], 0x7}, 0xe}, {{0x0, 0x0, 0x0}, 0x8000}], 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r2, 0x8948, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000740)=ANY=[@ANYBLOB="007945de", @ANYRES16=r4, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r5, @ANYBLOB="0c508c201295261c730f6238d0023560d98ac1a8cb8f81c2071a9c9113b1c0eb1dd6b172b6b25d11058335b6aa978a7d1212fe173cc4ad2d758d12b1b88a98e6808eda05e028ad2bee6e9aa4ba529db5738ba179f93de8f97c01ee2918aa8a0e2713815d67b3d764df0d4811956e0e59c529f23befdd9a26cc1727a2b45073eb4ef26003a8e1c0084efdb3197244d7413f21cb5a82a00908da20171ee81bc1c36b619555dc62ac0886ddcf"], 0x2c}}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000480)={{0x0, 0xfffe, 0x2}, 'syz0\x00', 0xa}) ioctl$UI_DEV_CREATE(r8, 0x5501) write$input_event(r8, &(0x7f0000000100)={{0x0, 0xea60}, 0x12, 0x203, 0x8200}, 0x18) r9 = dup(r7) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000001080)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@cache_readahead}]}}) 8.807328402s ago: executing program 1 (id=98): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 7.863510215s ago: executing program 1 (id=104): sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x2c, 0x0, 0xc3219fe22fdf3a2b, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044014}, 0x4010) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$printer(r0, 0x0, 0x0) 7.764172728s ago: executing program 4 (id=108): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 5.017547486s ago: executing program 4 (id=113): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.277433724s ago: executing program 0 (id=115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4890}, 0x814) 4.277259344s ago: executing program 1 (id=116): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100000, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "d96f6ea9"}]}}, 0x0}, 0x0) 4.223591665s ago: executing program 0 (id=117): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fcffffffffffffff3f00000008000300", @ANYRES32=r1], 0x3c}}, 0x0) 4.223450996s ago: executing program 0 (id=118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 4.223387705s ago: executing program 0 (id=119): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000001c40), 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000340)="ab") 3.565075461s ago: executing program 4 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x102, 0x3010, 0x3, 0x3}, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.603752776s ago: executing program 1 (id=121): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendfile(r1, r0, 0x0, 0xf03a0005) 2.583691576s ago: executing program 4 (id=123): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0x9f, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='highspeed', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x714, 0x0, 0xfffffffffffffd25) 2.527256427s ago: executing program 2 (id=124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.496899788s ago: executing program 0 (id=125): r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@local, 0x4f23, 0xfffc, 0x4e20, 0x6, 0xa, 0x2a11bad3d5f03f34, 0x30, 0x73}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x4, 0x2, 0x6, 0x8, 0x40000000000000f6}, {0x9, 0xfffffffffffffffe, 0x4, 0x9}, 0xfffffffd, 0x0, 0x2, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x210000, 0x33}, 0x0, @in6=@mcast1, 0xffffffff, 0x1, 0x0, 0x7, 0xfffffc00, 0x0, 0x1}}, 0xe8) 2.137713436s ago: executing program 2 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) 2.137521847s ago: executing program 0 (id=127): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x6c, 0x0, 0x1, 0x20000002, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd9b9fafd212acc2a}], @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 2.137405727s ago: executing program 2 (id=128): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4) r3 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000001a00)={0xf, {"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", 0x1000}}, 0x1006) 1.894190433s ago: executing program 1 (id=129): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r1, 0x1, 0x4000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) 1.894058253s ago: executing program 1 (id=130): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x4, 0x0, 0x5, 0x0, 0x100, &(0x7f00000000c0)="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"}) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$midi(0x0, 0x38, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x1, 0x8, 0x30, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x1, [@ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0x8, 0x0, 0x200, 0x92, 0xde, 0x7, {0x4}}}]}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.872377013s ago: executing program 4 (id=131): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) 979.013425ms ago: executing program 4 (id=132): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x20, 0xf, 0x6, "3914d77f99dd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000440)={0x20, 0x18, 0x3, "d5e9ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 851.493718ms ago: executing program 2 (id=133): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$IORING_OFF_SQ_RING(0xffffff400300, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 41.684059ms ago: executing program 2 (id=134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) 0s ago: executing program 2 (id=135): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000340)={0x0, 0x2, 0x201, 0x1d}) fcntl$lock(r1, 0x6, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) removexattr(0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.130' (ED25519) to the list of known hosts. [ 27.465062][ T36] audit: type=1400 audit(1786264891.070:64): avc: denied { mounton } for pid=285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.466186][ T285] cgroup: Unknown subsys name 'net' [ 27.488041][ T36] audit: type=1400 audit(1786264891.070:65): avc: denied { mount } for pid=285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.515474][ T36] audit: type=1400 audit(1786264891.100:66): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.515636][ T285] cgroup: Unknown subsys name 'devices' [ 27.623479][ T285] cgroup: Unknown subsys name 'hugetlb' [ 27.629259][ T285] cgroup: Unknown subsys name 'rlimit' [ 27.752730][ T36] audit: type=1400 audit(1786264891.360:67): avc: denied { setattr } for pid=285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.776042][ T36] audit: type=1400 audit(1786264891.360:68): avc: denied { mounton } for pid=285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.788500][ T287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.801359][ T36] audit: type=1400 audit(1786264891.360:69): avc: denied { mount } for pid=285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.832493][ T36] audit: type=1400 audit(1786264891.410:70): avc: denied { relabelto } for pid=287 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.858093][ T36] audit: type=1400 audit(1786264891.410:71): avc: denied { write } for pid=287 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.866152][ T285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.884056][ T36] audit: type=1400 audit(1786264891.470:72): avc: denied { read } for pid=285 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.918832][ T36] audit: type=1400 audit(1786264891.470:73): avc: denied { open } for pid=285 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.672268][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.679451][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.686658][ T292] bridge_slave_0: entered allmulticast mode [ 28.693439][ T292] bridge_slave_0: entered promiscuous mode [ 28.704840][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.712055][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.719169][ T292] bridge_slave_1: entered allmulticast mode [ 28.725644][ T292] bridge_slave_1: entered promiscuous mode [ 28.786280][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.793429][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.800508][ T294] bridge_slave_0: entered allmulticast mode [ 28.807043][ T294] bridge_slave_0: entered promiscuous mode [ 28.813618][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.820744][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.827907][ T294] bridge_slave_1: entered allmulticast mode [ 28.834319][ T294] bridge_slave_1: entered promiscuous mode [ 28.937990][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.945221][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.952867][ T297] bridge_slave_0: entered allmulticast mode [ 28.959440][ T297] bridge_slave_0: entered promiscuous mode [ 28.966515][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.973812][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.980890][ T297] bridge_slave_1: entered allmulticast mode [ 28.987240][ T297] bridge_slave_1: entered promiscuous mode [ 29.015760][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.022906][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.029986][ T298] bridge_slave_0: entered allmulticast mode [ 29.036424][ T298] bridge_slave_0: entered promiscuous mode [ 29.043379][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.050603][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.057728][ T298] bridge_slave_1: entered allmulticast mode [ 29.064472][ T298] bridge_slave_1: entered promiscuous mode [ 29.115369][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.122478][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.129772][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.136851][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.168738][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.176153][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.183673][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.192069][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.259238][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.266354][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.273693][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.280748][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.290439][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.297900][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.305267][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.313005][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.320331][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.327757][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.353058][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.360314][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.379198][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.386298][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.402629][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.410210][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.421880][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.429058][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.444207][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.451393][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.466858][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.474045][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.514830][ T292] veth0_vlan: entered promiscuous mode [ 29.540066][ T294] veth0_vlan: entered promiscuous mode [ 29.554184][ T297] veth0_vlan: entered promiscuous mode [ 29.563098][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.570242][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.587234][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.594333][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.607529][ T294] veth1_macvtap: entered promiscuous mode [ 29.617433][ T292] veth1_macvtap: entered promiscuous mode [ 29.645952][ T297] veth1_macvtap: entered promiscuous mode [ 29.683915][ T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.689023][ T298] veth0_vlan: entered promiscuous mode [ 29.732120][ T298] veth1_macvtap: entered promiscuous mode [ 29.752252][ T316] fuse: Invalid rootmode [ 29.799210][ T320] ======================================================= [ 29.799210][ T320] WARNING: The mand mount option has been deprecated and [ 29.799210][ T320] and is ignored by this kernel. Remove the mand [ 29.799210][ T320] option from the mount to silence this warning. [ 29.799210][ T320] ======================================================= [ 29.870557][ T326] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.081647][ T310] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.101982][ T324] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 30.121261][ T311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.126219][ T338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11'. [ 30.138780][ T338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11'. [ 30.242940][ T310] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 30.252819][ T310] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 30.265053][ T324] usb 2-1: config 0 interface 0 altsetting 31 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 30.276155][ T324] usb 2-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.282244][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.289581][ T324] usb 2-1: config 0 interface 0 has no altsetting 0 [ 30.307245][ T324] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 30.316942][ T311] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 30.316986][ T310] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 30.331146][ T311] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 30.335523][ T324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.354822][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.362869][ T311] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.363028][ T310] usb 4-1: Product: syz [ 30.373999][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.378823][ T324] usb 2-1: config 0 descriptor?? [ 30.390165][ T310] usb 4-1: Manufacturer: syz [ 30.394916][ T310] usb 4-1: SerialNumber: syz [ 30.397006][ T311] usb 1-1: Product: syz [ 30.399921][ T321] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 30.404846][ T311] usb 1-1: Manufacturer: syz [ 30.417395][ T324] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 30.425876][ T311] usb 1-1: SerialNumber: syz [ 30.615816][ T310] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 30.644939][ T311] usb 1-1: 1:1 : invalid UAC_AS_GENERAL desc [ 30.654825][ T311] usb 1-1: 0:2 : does not exist [ 30.664158][ T311] usb 1-1: USB disconnect, device number 2 [ 30.684081][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.836488][ T324] itetech 0003:258A:6A88.0001: unknown main item tag 0x0 [ 30.843893][ T324] itetech 0003:258A:6A88.0001: unknown main item tag 0x0 [ 30.851694][ T324] itetech 0003:258A:6A88.0001: unknown main item tag 0x0 [ 30.858838][ T324] itetech 0003:258A:6A88.0001: unknown main item tag 0x0 [ 30.866089][ T324] itetech 0003:258A:6A88.0001: unknown main item tag 0x0 [ 30.873229][ T324] itetech 0003:258A:6A88.0001: unknown main item tag 0x5 [ 30.880391][ T324] itetech 0003:258A:6A88.0001: item fetching failed at offset 20/40 [ 30.889179][ T324] itetech 0003:258A:6A88.0001: probe with driver itetech failed with error -22 [ 31.032248][ T324] usb 4-1: USB disconnect, device number 2 [ 31.039670][ T324] usblp0: removed [ 31.051540][ T321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.060227][ T321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.094385][ T45] usb 2-1: USB disconnect, device number 2 [ 31.401162][ T311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.551175][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 31.557775][ T311] usb 1-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1023 [ 31.568687][ T311] usb 1-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 16 [ 31.578775][ T311] usb 1-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 31.592549][ T311] usb 1-1: config 1 interface 0 has no altsetting 0 [ 31.600295][ T46] bridge_slave_1: left allmulticast mode [ 31.612441][ T311] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.616648][ T46] bridge_slave_1: left promiscuous mode [ 31.630712][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.644742][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.655577][ T311] usb 1-1: Product: syz [ 31.660259][ T311] usb 1-1: Manufacturer: syz [ 31.665674][ T311] usb 1-1: SerialNumber: syz [ 31.672750][ T46] bridge_slave_0: left allmulticast mode [ 31.681172][ T351] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 31.688478][ T46] bridge_slave_0: left promiscuous mode [ 31.698770][ T351] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 31.701241][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.854260][ T366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21'. [ 31.899492][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.906669][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.914423][ T367] bridge_slave_0: entered allmulticast mode [ 31.922715][ T367] bridge_slave_0: entered promiscuous mode [ 31.932217][ T46] veth1_macvtap: left promiscuous mode [ 31.937773][ T46] veth0_vlan: left promiscuous mode [ 31.998169][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.005592][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.013440][ T367] bridge_slave_1: entered allmulticast mode [ 32.021788][ T367] bridge_slave_1: entered promiscuous mode [ 32.053950][ T311] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 32.069350][ T311] usb 1-1: USB disconnect, device number 3 [ 32.108619][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.115729][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.125555][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.132645][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.165384][ T375] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=375 comm=syz.1.23 [ 32.178093][ T375] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=375 comm=syz.1.23 [ 32.185368][ T367] veth0_vlan: entered promiscuous mode [ 32.198840][ T375] netlink: 4100 bytes leftover after parsing attributes in process `syz.1.23'. [ 32.215789][ T367] veth1_macvtap: entered promiscuous mode [ 32.461167][ T324] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.501160][ T310] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 32.611426][ T324] usb 2-1: Using ep0 maxpacket: 32 [ 32.617862][ T324] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 32.626428][ T324] usb 2-1: config 0 has no interface number 0 [ 32.632834][ T324] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 32.644840][ T324] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 32.654400][ T324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.662647][ T324] usb 2-1: Product: syz [ 32.667178][ T324] usb 2-1: Manufacturer: syz [ 32.672510][ T324] usb 2-1: SerialNumber: syz [ 32.677811][ T310] usb 5-1: config 0 interface 0 altsetting 89 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 32.690240][ T324] usb 2-1: config 0 descriptor?? [ 32.696089][ T36] kauditd_printk_skb: 92 callbacks suppressed [ 32.696107][ T36] audit: type=1400 audit(1786264896.310:166): avc: denied { create } for pid=388 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.696221][ T310] usb 5-1: config 0 interface 0 altsetting 89 endpoint 0x8A has invalid maxpacket 1023, setting to 64 [ 32.702995][ T310] usb 5-1: config 0 interface 0 altsetting 89 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 32.722308][ T378] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 32.735885][ T310] usb 5-1: config 0 interface 0 has no altsetting 0 [ 32.747128][ T36] audit: type=1400 audit(1786264896.310:167): avc: denied { setopt } for pid=388 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.755104][ T310] usb 5-1: New USB device found, idVendor=0c16, idProduct=0002, bcdDevice= 0.00 [ 32.762618][ T36] audit: type=1400 audit(1786264896.340:168): avc: denied { read } for pid=388 comm="syz.0.28" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 32.783749][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.792215][ T36] audit: type=1400 audit(1786264896.340:169): avc: denied { open } for pid=388 comm="syz.0.28" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 32.814549][ T310] usb 5-1: config 0 descriptor?? [ 32.850428][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.860168][ T382] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 32.994964][ T378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.001137][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 33.004117][ T378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.010467][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 33.019780][ T378] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 33.041762][ T45] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 33.050087][ T45] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 33.058701][ T45] usb 3-1: config 14 has no interface number 0 [ 33.064949][ T45] usb 3-1: config 14 has no interface number 1 [ 33.071205][ T45] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 33.082427][ T45] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 33.094588][ T45] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 33.106136][ T45] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 33.117594][ T45] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 33.129116][ T45] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 33.142532][ T45] usb 3-1: config 14 interface 57 has no altsetting 0 [ 33.149357][ T45] usb 3-1: config 14 interface 228 has no altsetting 0 [ 33.157731][ T45] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 33.166827][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.175740][ T45] usb 3-1: Product: syz [ 33.179938][ T45] usb 3-1: Manufacturer: syz [ 33.181550][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 33.184591][ T45] usb 3-1: SerialNumber: syz [ 33.242758][ T324] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 33.253704][ T324] asix 2-1:0.188: probe with driver asix failed with error -61 [ 33.283113][ T382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.291883][ T382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.302702][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x2 [ 33.310031][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x6 [ 33.317297][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x0 [ 33.324542][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x1 [ 33.332462][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x0 [ 33.339848][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x0 [ 33.347155][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x0 [ 33.354428][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x0 [ 33.362289][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x0 [ 33.369472][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x0 [ 33.372642][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.376787][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x0 [ 33.385286][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 33.391615][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x0 [ 33.400787][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 4 [ 33.407037][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x0 [ 33.420121][ T9] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 33.427145][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x0 [ 33.435855][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.443006][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x0 [ 33.451628][ T9] usb 1-1: Product: syz [ 33.462334][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x0 [ 33.463025][ T36] audit: type=1400 audit(1786264897.070:170): avc: denied { create } for pid=377 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 33.470316][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x0 [ 33.489578][ T9] usb 1-1: Manufacturer: syz [ 33.497438][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x0 [ 33.505664][ T9] usb 1-1: SerialNumber: syz [ 33.509904][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x0 [ 33.513958][ T36] audit: type=1400 audit(1786264897.070:171): avc: denied { write } for pid=377 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 33.521521][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x0 [ 33.547371][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x0 [ 33.554636][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x0 [ 33.561910][ T310] gyration 0003:0C16:0002.0002: unknown main item tag 0x0 [ 33.569975][ T310] gyration 0003:0C16:0002.0002: hidraw0: USB HID v0.09 Device [HID 0c16:0002] on usb-dummy_hcd.4-1/input0 [ 33.585304][ T310] usb 5-1: USB disconnect, device number 2 [ 33.607214][ T394] fido_id[394]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 33.745065][ T9] usb 1-1: BAAD HEADSET c_chmask mismatch [ 33.753562][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 33.768366][ T9] usb 1-1: USB disconnect, device number 4 [ 33.776831][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.065756][ T36] audit: type=1400 audit(1786264897.670:172): avc: denied { name_bind } for pid=395 comm="syz.4.30" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.088002][ T36] audit: type=1400 audit(1786264897.670:173): avc: denied { node_bind } for pid=395 comm="syz.4.30" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 34.280021][ T398] netlink: 'syz.0.31': attribute type 4 has an invalid length. [ 34.325111][ T36] audit: type=1400 audit(1786264897.930:174): avc: denied { create } for pid=399 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 34.366874][ T36] audit: type=1400 audit(1786264897.970:175): avc: denied { read } for pid=401 comm="syz.0.33" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 34.392321][ T310] logitech-hidpp-device 0005:046D:B012.0003: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 34.437657][ T406] fido_id[406]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 34.671143][ T310] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.821115][ T310] usb 1-1: Using ep0 maxpacket: 8 [ 34.828040][ T310] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 34.836570][ T310] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 34.846761][ T310] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 34.858530][ T310] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 34.868749][ T310] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 34.882291][ T310] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 34.891587][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.232046][ T310] usb 2-1: USB disconnect, device number 3 [ 35.312568][ T417] rust_binder: 415:417 got transaction to invalid handle 3 [ 35.323661][ T417] rust_binder: 415:417 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 35.711151][ T311] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 35.764615][ T9] usb 3-1: USB disconnect, device number 2 [ 35.872433][ T311] usb 5-1: config 0 has no interfaces? [ 35.879195][ T311] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 35.888338][ T311] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 35.896732][ T311] usb 5-1: Product: syz [ 35.901186][ T311] usb 5-1: SerialNumber: syz [ 35.907172][ T311] usb 5-1: config 0 descriptor?? [ 36.082064][ T311] rust_binder: 415: undelivered TRANSACTION_ERROR: 29201 [ 36.111119][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 36.283236][ T437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 36.292616][ T437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 36.302580][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.319045][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 36.421329][ T420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.429892][ T420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.439883][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 36.454995][ T311] usb 5-1: USB disconnect, device number 3 [ 36.461639][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 36.639705][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 36.654593][ T9] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 36.664104][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 36.672658][ T9] usb 3-1: Product: syz [ 36.677005][ T9] usb 3-1: Manufacturer: syz [ 36.681875][ T9] usb 3-1: SerialNumber: syz [ 36.691957][ T9] usb 3-1: config 0 descriptor?? [ 36.902044][ T9] usb 3-1: USB disconnect, device number 3 [ 37.444459][ T464] netlink: 52 bytes leftover after parsing attributes in process `syz.2.59'. [ 37.456917][ T324] usb 1-1: USB disconnect, device number 5 [ 37.468835][ T464] tipc: Invalid UDP bearer configuration [ 37.468866][ T464] tipc: Enabling of bearer rejected, failed to enable media [ 37.731155][ T310] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.851146][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.882345][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.911324][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.921505][ T310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 37.935967][ T310] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.945099][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.954110][ T310] usb 2-1: config 0 descriptor?? [ 37.986047][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 37.986066][ T36] audit: type=1400 audit(1786264901.590:191): avc: denied { set_context_mgr } for pid=489 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 38.012359][ T36] audit: type=1400 audit(1786264901.590:192): avc: denied { map } for pid=489 comm="syz.4.71" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.032201][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.044267][ T36] audit: type=1400 audit(1786264901.590:193): avc: denied { call } for pid=489 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 38.055651][ T491] rust_binder: 489:491 got reply transaction with no transaction stack [ 38.075238][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.085957][ T45] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 38.095373][ T491] rust_binder: 489:491 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 38.104431][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.117907][ T45] usb 3-1: config 0 descriptor?? [ 38.192500][ T36] audit: type=1400 audit(1786264901.800:194): avc: denied { mount } for pid=497 comm="syz.0.74" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 38.220228][ T36] audit: type=1400 audit(1786264901.830:195): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 38.373411][ T310] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 38.388662][ T310] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 38.725902][ T45] usb 3-1: language id specifier not provided by device, defaulting to English [ 38.840271][ T9] rust_binder: 489: undelivered TRANSACTION_ERROR: 29201 [ 39.098207][ T310] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 39.134949][ T36] audit: type=1400 audit(1786264902.740:196): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.154953][ T45] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #100: -71 [ 39.164182][ T45] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 39.172895][ T45] uclogic 0003:256C:006D.0005: failed probing pen v1 parameters: -71 [ 39.181662][ T45] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 39.187640][ T36] audit: type=1400 audit(1786264902.790:197): avc: denied { write } for pid=508 comm="syz.0.78" name="packet" dev="proc" ino=4026532459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 39.189217][ T45] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 39.224211][ T45] usb 3-1: USB disconnect, device number 4 [ 39.251091][ T310] usb 5-1: Using ep0 maxpacket: 8 [ 39.258922][ T310] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 39.268432][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.277485][ T310] usb 5-1: Product: syz [ 39.281871][ T310] usb 5-1: Manufacturer: syz [ 39.286515][ T310] usb 5-1: SerialNumber: syz [ 39.291919][ T310] usb 5-1: config 0 descriptor?? [ 39.501116][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.652323][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.670229][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 39.679579][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.693608][ T9] usb 1-1: Product: syz [ 39.693800][ C1] plantronics 0003:047F:FFFF.0004: usb_submit_urb(ctrl) failed: -1 [ 39.697813][ T9] usb 1-1: Manufacturer: syz [ 39.712430][ T9] usb 1-1: SerialNumber: syz [ 39.720900][ T36] audit: type=1400 audit(1786264903.320:198): avc: denied { unlink } for pid=518 comm="syz.2.83" name="#3" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 39.742817][ T36] audit: type=1400 audit(1786264903.320:199): avc: denied { mount } for pid=518 comm="syz.2.83" name="/" dev="overlay" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.764879][ T36] audit: type=1400 audit(1786264903.320:200): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.491577][ T324] usb 2-1: USB disconnect, device number 4 [ 41.156783][ T442] rust_binder: get_current_thread was called from the wrong process. [ 41.156835][ T564] rust_binder: Write failure EINVAL in pid:66 [ 41.324822][ T324] rust_binder: 563: undelivered death notification, 0000000000000000 [ 41.897847][ T310] usb 5-1: USB disconnect, device number 4 [ 41.906668][ T584] capability: warning: `syz.2.107' uses 32-bit capabilities (legacy support in use) [ 42.001154][ T324] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 42.988342][ T393] usb 1-1: USB disconnect, device number 6 [ 43.051116][ T324] usb 2-1: Using ep0 maxpacket: 32 [ 43.057614][ T324] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 43.974523][ T324] usb 2-1: config 0 has no interface number 0 [ 43.980770][ T324] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 43.992158][ T324] usb 2-1: config 0 interface 85 has no altsetting 0 [ 44.000468][ T324] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 44.010094][ T324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.018457][ T324] usb 2-1: Product: syz [ 44.022700][ T324] usb 2-1: Manufacturer: syz [ 44.027319][ T324] usb 2-1: SerialNumber: syz [ 44.417072][ T324] usb 2-1: config 0 descriptor?? [ 44.701326][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 44.761149][ T356] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 44.837365][ T324] usb 2-1: USB disconnect, device number 5 [ 44.871148][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 44.877743][ T9] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.889135][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 44.895852][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 44.904986][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.913831][ T9] usb 3-1: config 0 descriptor?? [ 44.922276][ T356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.933362][ T356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.943460][ T356] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 44.952612][ T356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.961414][ T356] usb 5-1: config 0 descriptor?? [ 45.310109][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 45.310127][ T36] audit: type=1400 audit(1786264908.910:205): avc: denied { create } for pid=603 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.336332][ T36] audit: type=1400 audit(1786264908.920:206): avc: denied { connect } for pid=603 comm="syz.0.114" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.339043][ T9] uclogic 0003:28BD:0078.0006: interface is invalid, ignoring [ 45.367655][ T36] audit: type=1400 audit(1786264908.920:207): avc: denied { write } for pid=603 comm="syz.0.114" laddr=fe80::b lport=255 faddr=::1 fport=20128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.407722][ T610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.117'. [ 45.583225][ T393] usb 3-1: USB disconnect, device number 5 [ 45.594169][ T356] usb 5-1: string descriptor 0 read error: -71 [ 45.602399][ T356] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #200: -71 [ 45.611323][ T356] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 45.619518][ T356] uclogic 0003:256C:006D.0007: failed probing pen v2 parameters: -71 [ 45.627942][ T356] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 45.635486][ T356] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 45.644600][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 45.654494][ T356] usb 5-1: USB disconnect, device number 5 [ 45.681164][ T442] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 45.801168][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 45.807897][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.818962][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.829174][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 45.838265][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.847313][ T9] usb 2-1: config 0 descriptor?? [ 45.852387][ T442] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 45.862203][ T442] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 45.874059][ T442] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 45.883212][ T442] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.891880][ T442] usb 1-1: Product: syz [ 45.896132][ T442] usb 1-1: Manufacturer: syz [ 45.900765][ T442] usb 1-1: SerialNumber: syz [ 46.161655][ T442] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 46.286198][ T9] hid-generic 0003:0403:6030.0008: item fetching failed at offset 0/2 [ 46.296291][ T9] hid-generic 0003:0403:6030.0008: probe with driver hid-generic failed with error -22 [ 46.329632][ T36] audit: type=1400 audit(1786264909.930:208): avc: denied { read write } for pid=613 comm="syz.0.119" name="lp0" dev="devtmpfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 46.355267][ T36] audit: type=1400 audit(1786264909.930:209): avc: denied { open } for pid=613 comm="syz.0.119" path="/dev/usb/lp0" dev="devtmpfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 46.485229][ T393] usb 2-1: USB disconnect, device number 6 [ 46.534197][ T9] usb 1-1: USB disconnect, device number 7 [ 46.556008][ T9] usblp0: removed [ 47.057516][ T36] audit: type=1400 audit(1786264910.660:210): avc: denied { setopt } for pid=621 comm="syz.2.122" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.251014][ T36] audit: type=1400 audit(1786264910.850:211): avc: denied { mount } for pid=625 comm="syz.2.124" name="/" dev="ramfs" ino=5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 47.274819][ T626] process 'syz.2.124' launched './file0' with NULL argv: empty string added [ 47.347365][ T36] audit: type=1400 audit(1786264910.880:212): avc: denied { execute } for pid=625 comm="syz.2.124" name="file0" dev="ramfs" ino=5830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 47.468886][ T36] audit: type=1400 audit(1786264910.890:213): avc: denied { execute_no_trans } for pid=625 comm="syz.2.124" path="/file0" dev="ramfs" ino=5830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 47.540335][ T36] audit: type=1400 audit(1786264910.940:214): avc: denied { mount } for pid=633 comm="syz.2.126" name="/" dev="configfs" ino=2664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 47.651120][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 47.701107][ T442] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 47.821168][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 47.827829][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 47.837002][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 47.849142][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 47.860824][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 47.874589][ T9] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 47.883779][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.892173][ T442] usb 3-1: Using ep0 maxpacket: 16 [ 47.897384][ T9] usb 1-1: Product: syz [ 47.901745][ T9] usb 1-1: Manufacturer: syz [ 47.906953][ T9] usb 1-1: SerialNumber: syz [ 47.912880][ T442] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 47.921649][ T442] usb 3-1: config 0 has no interface number 0 [ 47.931128][ T9] usb 1-1: config 0 descriptor?? [ 47.936507][ T442] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 47.947847][ T442] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 47.948151][ T636] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 47.959042][ T442] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 47.974384][ T442] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 47.986285][ T356] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 47.998042][ T442] usb 3-1: Product: syz [ 48.002854][ T442] usb 3-1: SerialNumber: syz [ 48.010266][ T442] usb 3-1: config 0 descriptor?? [ 48.152837][ T356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.164569][ T356] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 48.174050][ T356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.185804][ T356] usb 2-1: config 0 descriptor?? [ 48.221922][ T638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.231705][ T638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.270733][ T442] usb 3-1: USB disconnect, device number 6 [ 48.408389][ T356] usbhid 2-1:0.0: can't add hid device: -71 [ 48.417901][ T356] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 48.430201][ T356] usb 2-1: USB disconnect, device number 7 [ 48.851847][ T310] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 48.941177][ T393] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 49.002417][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.014029][ T310] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 49.023327][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.032524][ T310] usb 2-1: config 0 descriptor?? [ 49.101125][ T393] usb 5-1: Using ep0 maxpacket: 16 [ 49.107703][ T393] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 49.116062][ T393] usb 5-1: config 0 has no interface number 0 [ 49.122297][ T393] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 49.132394][ T393] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 49.143747][ T393] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 49.152860][ T393] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.160971][ T393] usb 5-1: Product: syz [ 49.165179][ T393] usb 5-1: Manufacturer: syz [ 49.169797][ T393] usb 5-1: SerialNumber: syz [ 49.175246][ T393] usb 5-1: config 0 descriptor?? [ 49.180505][ T650] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 49.187847][ T650] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 49.397124][ T650] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 49.404589][ T650] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 49.616472][ T393] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 49.639628][ T642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.648377][ T642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.852096][ T310] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 49.864670][ T310] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input4 [ 49.932256][ C1] ------------[ cut here ]------------ [ 49.937968][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 49.946586][ C1] index 19545 is out of range for type 'const int[34]' [ 49.953607][ C1] CPU: 1 UID: 0 PID: 310 Comm: kworker/1:2 Not tainted syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 49.953641][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.953658][ C1] Workqueue: usb_hub_wq hub_event [ 49.953700][ C1] Call Trace: [ 49.953708][ C1] [ 49.953718][ C1] __dump_stack+0x21/0x30 [ 49.953757][ C1] dump_stack_lvl+0x140/0x1c0 [ 49.953790][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.953825][ C1] ? internal_create_group+0x66c/0xe80 [ 49.953852][ C1] ? __driver_probe_device+0x193/0x280 [ 49.953888][ C1] ? __device_attach_driver+0x2f1/0x4b0 [ 49.953920][ C1] dump_stack+0x19/0x20 [ 49.953948][ C1] ubsan_epilogue+0xe/0x40 [ 49.953968][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 49.954001][ C1] aiptek_irq+0x208d/0x2a00 [ 49.954032][ C1] ? _raw_spin_unlock+0x45/0x60 [ 49.954060][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 49.954085][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 49.954119][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 49.954152][ C1] dummy_timer+0xa3f/0x4900 [ 49.954184][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 49.954206][ C1] ? timerqueue_del+0xd7/0x130 [ 49.954229][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 49.954261][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 49.954282][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 49.954317][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 49.954349][ C1] ? read_tsc+0xd/0x20 [ 49.954378][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 49.954416][ C1] hrtimer_run_softirq+0x159/0x560 [ 49.954438][ C1] handle_softirqs+0x1aa/0x620 [ 49.954463][ C1] __irq_exit_rcu+0x47/0xb0 [ 49.954485][ C1] irq_exit_rcu+0xd/0x30 [ 49.954506][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 49.954540][ C1] [ 49.954548][ C1] [ 49.954556][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 49.954586][ C1] RIP: 0010:preempt_schedule_common+0x55/0x60 [ 49.954618][ C1] Code: ff ff 65 ff 0d 84 e4 5f 7a 65 48 8b 1d 74 e4 5f 7a 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 c9 48 89 df e8 ce 2e 3b fc eb bf 5b <41> 5e 5d c3 cc cc cc cc cc 66 90 b8 d2 25 fa b2 90 90 90 90 90 90 [ 49.954638][ C1] RSP: 0018:ffffc9000b766c28 EFLAGS: 00000246 [ 49.954660][ C1] RAX: 1ffff110211ea980 RBX: 1ffff920016ecd88 RCX: dffffc0000000000 [ 49.954678][ C1] RDX: 0000000040000002 RSI: 0000000000000000 RDI: ffff8881f6f4fa40 [ 49.954696][ C1] RBP: ffffc9000b766c30 R08: ffff888108f54c07 R09: 1ffff110211ea980 [ 49.954714][ C1] R10: dffffc0000000000 R11: ffffed10211ea981 R12: 000000000000f3d8 [ 49.954732][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff888101652401 [ 49.954753][ C1] preempt_schedule+0xc5/0xe0 [ 49.954781][ C1] ? __cfi_preempt_schedule+0x10/0x10 [ 49.954810][ C1] ? __kasan_check_write+0x18/0x20 [ 49.954833][ C1] ? _raw_spin_lock+0x92/0x120 [ 49.954858][ C1] preempt_schedule_thunk+0x1a/0x40 [ 49.954883][ C1] ? __kernfs_new_node+0x521/0x740 [ 49.954911][ C1] __kernfs_new_node+0x526/0x740 [ 49.954939][ C1] ? __kasan_check_write+0x18/0x20 [ 49.954962][ C1] ? kernfs_new_node+0x280/0x280 [ 49.954989][ C1] ? down_write+0xee/0x2b0 [ 49.955009][ C1] ? __cfi_down_write+0x10/0x10 [ 49.955030][ C1] ? __kasan_check_write+0x18/0x20 [ 49.955051][ C1] ? up_write+0x66/0x280 [ 49.955083][ C1] ? kernfs_activate+0x1ee/0x200 [ 49.955112][ C1] kernfs_new_node+0x154/0x280 [ 49.955140][ C1] __kernfs_create_file+0x52/0x280 [ 49.955174][ C1] sysfs_add_file_mode_ns+0x1d2/0x280 [ 49.955209][ C1] internal_create_group+0x66c/0xe80 [ 49.955233][ C1] ? asm_sysvec_reschedule_ipi+0x1f/0x30 [ 49.955265][ C1] ? asm_sysvec_reschedule_ipi+0x1f/0x30 [ 49.955295][ C1] ? sysfs_create_group+0x40/0x40 [ 49.955322][ C1] sysfs_create_groups+0x5c/0x130 [ 49.955347][ C1] device_add_groups+0x21/0x30 [ 49.955377][ C1] really_probe+0x63c/0x8b0 [ 49.955418][ C1] __driver_probe_device+0x193/0x280 [ 49.955450][ C1] driver_probe_device+0x54/0x3f0 [ 49.955482][ C1] ? __device_attach_driver+0x2db/0x4b0 [ 49.955516][ C1] __device_attach_driver+0x2f1/0x4b0 [ 49.955548][ C1] bus_for_each_drv+0x264/0x300 [ 49.955574][ C1] ? __cfi___device_attach_driver+0x10/0x10 [ 49.955608][ C1] ? __cfi_bus_for_each_drv+0x10/0x10 [ 49.955634][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 49.955696][ C1] __device_attach+0x2c4/0x3c0 [ 49.955730][ C1] ? device_attach+0x40/0x40 [ 49.955763][ C1] ? _raw_spin_lock+0x92/0x120 [ 49.955789][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 49.955817][ C1] device_initial_probe+0x1e/0x30 [ 49.955851][ C1] bus_probe_device+0x18b/0x270 [ 49.955880][ C1] device_add+0x7fd/0xbf0 [ 49.955912][ C1] usb_set_configuration+0x1aad/0x2080 [ 49.955950][ C1] usb_generic_driver_probe+0x95/0x160 [ 49.955973][ C1] usb_probe_device+0x1ef/0x3b0 [ 49.956003][ C1] ? __cfi_usb_probe_device+0x10/0x10 [ 49.956034][ C1] really_probe+0x2e1/0x8b0 [ 49.956067][ C1] __driver_probe_device+0x193/0x280 [ 49.956100][ C1] driver_probe_device+0x54/0x3f0 [ 49.956132][ C1] ? __device_attach_driver+0x2db/0x4b0 [ 49.956165][ C1] __device_attach_driver+0x2f1/0x4b0 [ 49.956199][ C1] bus_for_each_drv+0x264/0x300 [ 49.956223][ C1] ? __cfi___device_attach_driver+0x10/0x10 [ 49.956257][ C1] ? __cfi_bus_for_each_drv+0x10/0x10 [ 49.956283][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 49.956310][ C1] __device_attach+0x2c4/0x3c0 [ 49.956341][ C1] ? device_attach+0x40/0x40 [ 49.956370][ C1] ? _raw_spin_lock+0x92/0x120 [ 49.956402][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 49.956429][ C1] device_initial_probe+0x1e/0x30 [ 49.956459][ C1] bus_probe_device+0x18b/0x270 [ 49.956485][ C1] device_add+0x7fd/0xbf0 [ 49.956515][ C1] usb_new_device+0x98d/0x1500 [ 49.956543][ C1] ? __cfi_usb_new_device+0x10/0x10 [ 49.956571][ C1] hub_event+0x2dbd/0x4360 [ 49.956608][ C1] ? __cfi_hub_event+0x10/0x10 [ 49.956637][ C1] ? pwq_dec_nr_in_flight+0x943/0xba0 [ 49.956661][ C1] ? _raw_spin_lock_irq+0x93/0x120 [ 49.956686][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 49.956712][ C1] ? kick_pool+0xb9/0x540 [ 49.956739][ C1] process_scheduled_works+0x7f7/0x1060 [ 49.956767][ C1] worker_thread+0xc99/0x13f0 [ 49.956791][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 49.956816][ C1] ? __kasan_check_read+0x15/0x20 [ 49.956841][ C1] kthread+0x2c7/0x360 [ 49.956866][ C1] ? __cfi_worker_thread+0x10/0x10 [ 49.956888][ C1] ? __cfi_kthread+0x10/0x10 [ 49.956913][ C1] ret_from_fork+0x67/0xa0 [ 49.956945][ C1] ? __cfi_kthread+0x10/0x10 [ 49.956971][ C1] ret_from_fork_asm+0x1a/0x30 [ 49.956993][ C1] [ 49.957001][ C1] ---[ end trace ]--- [ 50.613646][ C1] ------------[ cut here ]------------ [ 50.619088][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 50.627750][ C1] index 19546 is out of range for type 'const int[34]' [ 50.634602][ C1] CPU: 1 UID: 0 PID: 310 Comm: kworker/1:2 Not tainted syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 50.634629][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.634640][ C1] Workqueue: usb_hub_wq hub_event [ 50.634666][ C1] Call Trace: [ 50.634673][ C1] [ 50.634679][ C1] __dump_stack+0x21/0x30 [ 50.634702][ C1] dump_stack_lvl+0x140/0x1c0 [ 50.634719][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.634736][ C1] ? input_event_dispose+0x2f5/0x6d0 [ 50.634756][ C1] dump_stack+0x19/0x20 [ 50.634772][ C1] ubsan_epilogue+0xe/0x40 [ 50.634783][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 50.634802][ C1] aiptek_irq+0x1f3c/0x2a00 [ 50.634819][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 50.634834][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 50.634853][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 50.634870][ C1] dummy_timer+0xa3f/0x4900 [ 50.634887][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 50.634899][ C1] ? timerqueue_del+0xd7/0x130 [ 50.634912][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 50.634931][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 50.634942][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 50.634960][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 50.634977][ C1] ? read_tsc+0xd/0x20 [ 50.634994][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 50.635010][ C1] hrtimer_run_softirq+0x159/0x560 [ 50.635022][ C1] handle_softirqs+0x1aa/0x620 [ 50.635036][ C1] __irq_exit_rcu+0x47/0xb0 [ 50.635047][ C1] irq_exit_rcu+0xd/0x30 [ 50.635058][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 50.635078][ C1] [ 50.635082][ C1] [ 50.635086][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 50.635104][ C1] RIP: 0010:preempt_schedule_common+0x55/0x60 [ 50.635122][ C1] Code: ff ff 65 ff 0d 84 e4 5f 7a 65 48 8b 1d 74 e4 5f 7a 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 c9 48 89 df e8 ce 2e 3b fc eb bf 5b <41> 5e 5d c3 cc cc cc cc cc 66 90 b8 d2 25 fa b2 90 90 90 90 90 90 [ 50.635132][ C1] RSP: 0018:ffffc9000b766c28 EFLAGS: 00000246 [ 50.635143][ C1] RAX: 1ffff110211ea980 RBX: 1ffff920016ecd88 RCX: dffffc0000000000 [ 50.635153][ C1] RDX: 0000000040000002 RSI: 0000000000000000 RDI: ffff8881f6f4fa40 [ 50.635161][ C1] RBP: ffffc9000b766c30 R08: ffff888108f54c07 R09: 1ffff110211ea980 [ 50.635170][ C1] R10: dffffc0000000000 R11: ffffed10211ea981 R12: 000000000000f3d8 [ 50.635179][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff888101652401 [ 50.635190][ C1] preempt_schedule+0xc5/0xe0 [ 50.635205][ C1] ? __cfi_preempt_schedule+0x10/0x10 [ 50.635220][ C1] ? __kasan_check_write+0x18/0x20 [ 50.635233][ C1] ? _raw_spin_lock+0x92/0x120 [ 50.635247][ C1] preempt_schedule_thunk+0x1a/0x40 [ 50.635260][ C1] ? __kernfs_new_node+0x521/0x740 [ 50.635277][ C1] __kernfs_new_node+0x526/0x740 [ 50.635292][ C1] ? __kasan_check_write+0x18/0x20 [ 50.635303][ C1] ? kernfs_new_node+0x280/0x280 [ 50.635318][ C1] ? down_write+0xee/0x2b0 [ 50.635328][ C1] ? __cfi_down_write+0x10/0x10 [ 50.635338][ C1] ? __kasan_check_write+0x18/0x20 [ 50.635349][ C1] ? up_write+0x66/0x280 [ 50.635368][ C1] ? kernfs_activate+0x1ee/0x200 [ 50.635383][ C1] kernfs_new_node+0x154/0x280 [ 50.635397][ C1] __kernfs_create_file+0x52/0x280 [ 50.635415][ C1] sysfs_add_file_mode_ns+0x1d2/0x280 [ 50.635434][ C1] internal_create_group+0x66c/0xe80 [ 50.635447][ C1] ? asm_sysvec_reschedule_ipi+0x1f/0x30 [ 50.635464][ C1] ? asm_sysvec_reschedule_ipi+0x1f/0x30 [ 50.635485][ C1] ? sysfs_create_group+0x40/0x40 [ 50.635499][ C1] sysfs_create_groups+0x5c/0x130 [ 50.635512][ C1] device_add_groups+0x21/0x30 [ 50.635529][ C1] really_probe+0x63c/0x8b0 [ 50.635547][ C1] __driver_probe_device+0x193/0x280 [ 50.635564][ C1] driver_probe_device+0x54/0x3f0 [ 50.635581][ C1] ? __device_attach_driver+0x2db/0x4b0 [ 50.635598][ C1] __device_attach_driver+0x2f1/0x4b0 [ 50.635616][ C1] bus_for_each_drv+0x264/0x300 [ 50.635629][ C1] ? __cfi___device_attach_driver+0x10/0x10 [ 50.635647][ C1] ? __cfi_bus_for_each_drv+0x10/0x10 [ 50.635660][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 50.635675][ C1] __device_attach+0x2c4/0x3c0 [ 50.635692][ C1] ? device_attach+0x40/0x40 [ 50.635707][ C1] ? _raw_spin_lock+0x92/0x120 [ 50.635720][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 50.635733][ C1] device_initial_probe+0x1e/0x30 [ 50.635750][ C1] bus_probe_device+0x18b/0x270 [ 50.635763][ C1] device_add+0x7fd/0xbf0 [ 50.635779][ C1] usb_set_configuration+0x1aad/0x2080 [ 50.635798][ C1] usb_generic_driver_probe+0x95/0x160 [ 50.635812][ C1] usb_probe_device+0x1ef/0x3b0 [ 50.635828][ C1] ? __cfi_usb_probe_device+0x10/0x10 [ 50.635844][ C1] really_probe+0x2e1/0x8b0 [ 50.635861][ C1] __driver_probe_device+0x193/0x280 [ 50.635878][ C1] driver_probe_device+0x54/0x3f0 [ 50.635895][ C1] ? __device_attach_driver+0x2db/0x4b0 [ 50.635913][ C1] __device_attach_driver+0x2f1/0x4b0 [ 50.635930][ C1] bus_for_each_drv+0x264/0x300 [ 50.635943][ C1] ? __cfi___device_attach_driver+0x10/0x10 [ 50.635961][ C1] ? __cfi_bus_for_each_drv+0x10/0x10 [ 50.635974][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 50.635989][ C1] __device_attach+0x2c4/0x3c0 [ 50.636005][ C1] ? device_attach+0x40/0x40 [ 50.636020][ C1] ? _raw_spin_lock+0x92/0x120 [ 50.636033][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 50.636047][ C1] device_initial_probe+0x1e/0x30 [ 50.636063][ C1] bus_probe_device+0x18b/0x270 [ 50.636076][ C1] device_add+0x7fd/0xbf0 [ 50.636092][ C1] usb_new_device+0x98d/0x1500 [ 50.636107][ C1] ? __cfi_usb_new_device+0x10/0x10 [ 50.636121][ C1] hub_event+0x2dbd/0x4360 [ 50.636141][ C1] ? __cfi_hub_event+0x10/0x10 [ 50.636156][ C1] ? pwq_dec_nr_in_flight+0x943/0xba0 [ 50.636169][ C1] ? _raw_spin_lock_irq+0x93/0x120 [ 50.636182][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 50.636195][ C1] ? kick_pool+0xb9/0x540 [ 50.636210][ C1] process_scheduled_works+0x7f7/0x1060 [ 50.636224][ C1] worker_thread+0xc99/0x13f0 [ 50.636237][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 50.636251][ C1] ? __kasan_check_read+0x15/0x20 [ 50.636263][ C1] kthread+0x2c7/0x360 [ 50.636277][ C1] ? __cfi_worker_thread+0x10/0x10 [ 50.636289][ C1] ? __cfi_kthread+0x10/0x10 [ 50.636302][ C1] ret_from_fork+0x67/0xa0 [ 50.636319][ C1] ? __cfi_kthread+0x10/0x10 [ 50.636332][ C1] ret_from_fork_asm+0x1a/0x30 [ 50.636344][ C1] [ 50.636349][ C1] ---[ end trace ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 51.318302][ T310] usb 2-1: USB disconnect, device number 8 [ 51.324247][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 51.333244][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 51.333265][ T36] audit: type=1400 audit(1786264914.920:221): avc: denied { write } for pid=285 comm="syz-executor" path="pipe:[3026]" dev="pipefs" ino=3026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 51.351250][ T9] usb 1-1: USB disconnect, device number 8 [ 51.533248][ T12] bridge_slave_1: left allmulticast mode [ 51.539591][ T12] bridge_slave_1: left promiscuous mode [ 51.561265][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.571819][ T12] bridge_slave_0: left allmulticast mode [ 51.577601][ T12] bridge_slave_0: left promiscuous mode [ 51.590485][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.714226][ T12] veth1_macvtap: left promiscuous mode [ 51.719788][ T12] veth0_vlan: left promiscuous mode [ 51.751700][ T393] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 51.762477][ T393] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 51.791219][ T393] asix 5-1:0.34: probe with driver asix failed with error -71 [ 51.805564][ T393] usb 5-1: USB disconnect, device number 6 [ 51.973010][ T12] bridge_slave_1: left allmulticast mode [ 51.978682][ T12] bridge_slave_1: left promiscuous mode [ 51.984449][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.992154][ T12] bridge_slave_0: left allmulticast mode [ 51.998061][ T12] bridge_slave_0: left promiscuous mode [ 52.004132][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.011897][ T12] bridge_slave_1: left allmulticast mode [ 52.017558][ T12] bridge_slave_1: left promiscuous mode [ 52.023252][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.030761][ T12] bridge_slave_0: left allmulticast mode [ 52.036512][ T12] bridge_slave_0: left promiscuous mode [ 52.042147][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.144485][ T12] veth1_macvtap: left promiscuous mode [ 52.150032][ T12] veth0_vlan: left promiscuous mode [ 52.155835][ T12] veth1_macvtap: left promiscuous mode [ 52.161423][ T12] veth0_vlan: left promiscuous mode