last executing test programs: 5.507993268s ago: executing program 1 (id=228): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfa, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000240)='.\x00', 0x60000726) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000140)=""/207) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="551115ede3ddccd7e7b6d67228c861ee30652a7c6f776060ad109117bca66cbd60ddcc5badecba71c28f9c5a1183218a19f27eeddd2e7bea2b47417bcccf7f6a1772e48fa8410b7e4426c67751c1abf7813ce381c2270657402f5b311165d42507c7ed51d8adb186dc90d313ec9651124d081989a446dcb0f1505d09d3c40dfb619a9d75b1d0c44f89a0967007125de0892c80241c7902f6d62307b449a974da739726761e53ea421ac077bb52d07f5e35901c2b33499f2b5b053f3b46b9c96799c5e4c372c57ef68d0e3317881a0023fb", 0xd1}, {&(0x7f0000000040)="49518cd22509b6f91678e42bee744a6bb75bbf55c9cfd4013ed3e6a681cae793fc8864e8f371042ac7d4b8b05a", 0x2d}], 0x2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) 5.507832999s ago: executing program 1 (id=229): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) r3 = eventfd2(0xc2c5, 0x80000) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x1, r3}) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="24390000ef41a7ab064f2807581fa0c078d7c0a882d872923343860eb437206c7c6a958eacbc3caf66c8ca61ec9b4bde3e9497e939a2398619bcf7daa8b20d7b51c93b7b6100f1a67a03858819d5962e60dae4d503957941e063ba86761a7abe69eef4b489893adb4c3c54e9606321d384d39600000000000000"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) syz_usb_control_io(r4, &(0x7f0000000100)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="204405"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.335821316s ago: executing program 2 (id=241): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/wake_unlock', 0x40000, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/wake_unlock', 0x40000, 0x0) r2 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x30, 0x0, &(0x7f0000000300)=[@free_buffer={0x40086303, r2}, @dead_binder_done, @enter_looper, @request_death, @exit_looper], 0xf, 0x0, &(0x7f0000000380)="18e7c2c209b6f41bc06e6485880e17"}) r3 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$join(0x1, &(0x7f00000002c0)={'syz', 0x2}) (async) keyctl$join(0x1, &(0x7f00000002c0)={'syz', 0x2}) sendfile(r3, r3, 0x0, 0x8000002) (async) sendfile(r3, r3, 0x0, 0x8000002) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000080)='+\'-\\$\x00', 0x6, 0x1) r4 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x301, 0x3) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r4, &(0x7f0000000180)=r5, 0x12) connect$unix(r1, &(0x7f0000000540)=@file={0x1, './file2\x00'}, 0x6e) 4.335448996s ago: executing program 2 (id=242): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)={0x0, 0x21, 0x7, {0x7, 0xf, "702ad5580b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.824760392s ago: executing program 2 (id=243): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@mcast1, 0x8000000, 0x0, 0x2, 0x0, 0x44, 0x2, 0x10000000}, 0x20) 2.81290964s ago: executing program 2 (id=244): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000240)=0xad, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x82, 0x0, 0x4, 0x1, 0x0, 0xffff, 0x0}) 2.739919847s ago: executing program 2 (id=245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000400)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x6}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async, rerun: 32) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) (async, rerun: 32) r2 = syz_open_pts(r1, 0x2) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x16) (async, rerun: 64) execveat(r3, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000380)={[&(0x7f0000000140)='\x00', &(0x7f0000000180)=')+\x00', &(0x7f0000000240)='\xff\xff', &(0x7f00000002c0)='vlan0\x00', &(0x7f0000000340)='vlan0\x00']}, &(0x7f00000006c0)={[&(0x7f00000003c0)='vlan0\x00', &(0x7f0000000440)='vlan0\x00', &(0x7f0000000480)='/\x00', &(0x7f00000004c0)='+*&}}(\x00', &(0x7f0000000540)='\xb1\'\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='(\xd8@}^\x9d\\:!*-}#,\x00', &(0x7f0000000600)='}/@\x00', &(0x7f0000000640)='!&\x00', &(0x7f0000000680)='\xff\xff']}, 0x400) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r4 = fcntl$dupfd(r0, 0x0, r0) sendmmsg$inet(r4, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="21c6aa614c", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000880)="b9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)='o', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000780)=']', 0x1}], 0x1}}], 0x4, 0x80) 2.734644066s ago: executing program 2 (id=246): syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a000090513bb"], 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x0, 0x2, "f42a"}}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x103200, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000680)) listen(r1, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000200)='9', 0x1, 0x20008080, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000240)={0x0, 0xffffff3a, &(0x7f0000000100)={&(0x7f0000003180)=ANY=[], 0x588}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x32, 0x3, 0xfff, 0x41, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x80, 0x80, 0x3}}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setfsuid(0xee00) setresuid(0x0, 0x0, 0xee00) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r7, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e22, 0x3, @mcast2}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) sendto(r8, 0x0, 0x0, 0x4008044, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_buf(r5, 0x0, 0x30, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 2.522520018s ago: executing program 1 (id=248): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x2, 0x930, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x35, 0x1, 0x0, 0x0, "c075bfebcd0ba27d0241591616a6b1cb67d98ec29b60126a252d15082816668e112528aec50cd3705b13923c6b01ee331a6f97344bf7669085864df306abfaa0"}}, 0x80}}, 0x11) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x5, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x17) gettid() (async) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r5 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 2.37193861s ago: executing program 1 (id=249): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xffffffffbffffff7, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x800000000000002, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8001, 0xffffffff9673e35d]}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)={0x2c, 0x19, 0x15, 0x0, 0xfeffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x10, 0x9, 0x0, 0x1, [@nested={0x9, 0x88, 0x0, 0x1, [@generic="985098a0af"]}]}]}, 0x2c}], 0x1}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x17) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000500)) 2.37159055s ago: executing program 1 (id=250): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f000006b000)={{r1, r2+10000000}, {0x77359400}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x1000002, 0x3, 0x1, 0x459}, 0x10) write(r3, &(0x7f0000000080)="24000000794daf620545a439800904001f000000000100000000d6dd08001700010000002c5646e37238ad79f0d7c9ae7e760baabdece671d0a5288b734740bf0fc7", 0x42) timer_create(0x4, 0x0, &(0x7f0000001400)=0x0) timer_settime(r4, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x3) unshare(0x42000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af60, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x2, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x2, 0x7, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x40005, 0x3e, 0x7, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x80, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0xa, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x0, 0x8010, 0x5f31, 0x8, 0x1, 0x2, 0x202, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x2899f86e, 0x8d0, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x0, 0x5, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x9, 0xaaef, 0x4, 0xff], [0x9, 0x1, 0x3, 0x400, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0xa0000000, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x200005, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x1a9b42, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0x10000003) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x13, r8, 0x954c3000) remap_file_pages(&(0x7f0000a71000/0x2000)=nil, 0x2000, 0x0, 0xc, 0x1000) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) write$P9_RMKNOD(r6, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x40, 0x0, 0x7}}, 0x14) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000100)) 2.311947129s ago: executing program 1 (id=251): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x304000, 0x800, 0x700, 0x3}, 0x20) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r1 = getpgrp(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0xb, &(0x7f00000007c0)={0x83b, 0x8000006, 0x3}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) read$FUSE(r3, &(0x7f0000002bc0)={0x2020}, 0x2020) ptrace(0x10, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772904202404003057c20102030109022400010000100009040000090582020002000001755e2b9fbd6cdd9034a1108989b8af5eccd884b525b4d621c1f5932d3651e22925aa"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x8}, 0x5) syz_usb_control_io$uac1(r4, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000001000000450000002500000019000d000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="400305"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) 1.977646159s ago: executing program 0 (id=255): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) fcntl$setstatus(r0, 0x4, 0x460c0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.112194752s ago: executing program 0 (id=257): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000900)={0x6, 0x3f60b569, 0x3ff, 0x25, 0x1, "cf00", 0x4, 0xfffffffe}) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000140)="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", 0xfc) syz_usb_connect(0x0, 0x64, &(0x7f0000001e00)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000)) 932.759959ms ago: executing program 3 (id=258): r0 = socket$inet6(0x10, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0xfe, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "240b2f38576052c3", "c60a7e0a321eaf0db82c16eef55622e6", "b6e404e2", "675754c0a2249cb2"}, 0x28) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x200, 0xffffffff) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000200)=0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x10}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x14180, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'gre0\x00', 0x1000}) (async) write$tun(r4, 0x0, 0xfdef) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) (async) sendto$inet6(r1, &(0x7f0000000000)="1c0000001200050f0c1000000049b23e9b200a008368a1ec23000001f2358262a2255a3132d92104ab156d7f1866dfd0f388e615ffeafe656ca6d67bc8582e5ae1b9bed6974d47b4584f833c672f08d2b7845a54ad0204c5c7de83a50166db7bf4d226394f3eabeb9385d3f1e6b2f84cb29cf0c2cf7b5c5e0f8ae01d17b7c2cefb6e9200ab107d82c530", 0x8a, 0x2000c880, 0x0, 0x0) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140)) 870.392878ms ago: executing program 3 (id=259): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a2003c000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36268a3afff3d3666", 0xb8) ftruncate(r0, 0x398a0bdb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) move_mount(0xffffffffffffff9c, 0x0, r2, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r3, 0x40085875) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0xfffffffffffffffe) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x802) fsopen(&(0x7f00000001c0)='tracefs\x00', 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000440)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0x8}]}) r8 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) 870.217848ms ago: executing program 3 (id=260): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x1e, 0x1, 0x0) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000040)={0x0, 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4000814, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 869.878368ms ago: executing program 3 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x160) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x60) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500002c00004000c821"], 0x3e) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000100)={[{@index_off}, {@xino_on}, {@index_on}, {@verity_on}]}) r7 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r7, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r8, 0x0, 0x0, 0x20004001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4c0000, 0x244) getuid() chdir(&(0x7f00000003c0)='./bus\x00') ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x1}) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 858.778306ms ago: executing program 3 (id=262): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x432003) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x21, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1, 0xf3}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000300)={0x20, 0x13, 0x2, {0x2, 0x22}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7, "ef27cf76"}]}}, 0x0}, 0x0) 589.963287ms ago: executing program 0 (id=263): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000240)=@usbdevfs_driver={0x1, 0xfffffffe, &(0x7f0000000200)}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb240580403d000000000000000000195699b00090500"/38, @ANYRES32=r0], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) 267.914229ms ago: executing program 3 (id=264): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x4, 0x8, 0x7}) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x646083, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000180)={0x4, 0x8001, 0x0, 0x2, 0x1, "5761aee260aa6191498fdc8ab0b5b73b404809", 0x4, 0x1}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000140)) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000001c0)={0xcf47, 0x7ff, 0x0, 0x9e02, 0xc, "8003e3ffff072000"}) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) r4 = gettid() capset(&(0x7f0000000740)={0x20080522, r4}, &(0x7f0000000780)={0x8, 0xffff, 0xff, 0x4, 0x5, 0xcbf}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r5 = syz_open_pts(r1, 0x2800) r6 = dup3(r5, r0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000200)={{&(0x7f0000ffa000/0x1000)=nil, 0x1000}}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, 0x0, &(0x7f0000000100)) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xff) 72.306113ms ago: executing program 0 (id=265): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, &(0x7f0000001fc0)=[{0xfffffffffffffffc}], 0x1, 0x9, 0x0, 0x2, 0x0, 0x2}) 58.451241ms ago: executing program 0 (id=266): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000cc0)=""/142) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0xff, 0xec, 0x20, 0x789, 0x160, 0x2cd1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbf, 0x0, 0x2, 0xe6, 0xfb, 0x6a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x18}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x56e, 0xe6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x20, 0xf, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x0, 0x7a, 0x1, {0x22, 0x28d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3f, 0x6, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x3, 0x3, 0x3}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xffffffffffffff94, 0x6, 0x250, 0x0, 0x6, 0x40, 0xff, 0x3}, 0xef, &(0x7f0000000100)={0x5, 0xf, 0xef, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x34, 0xf2, 0x3, 0x7, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "bea417164081d9f9cd298f0f563cc0bc"}, @ptm_cap={0x3}, @generic={0xc8, 0x10, 0x3, "b9e6f69c6585b92af60835b19f552aee459cafd28eca31d4609551e92c3d9000b33fd6bddd0b64b00af7d5f4f90cc7595584216508bcc96111b59db8a3cae4595205711c3556ebfa01b75b2afb6794b7bfbec5645e90306be4a4ebf089b9f6b6bba40fa56d89b024a0acc6bebb9de884c53f701a40bab0d3a4e53750829bbf821f1e70074552322fb4d807cbbe211d82ac1ec6b8359d49c8bd15467c80c885689f1aa2c1a6e951a4c89e2fde0e1491e0527676a844f6d8660df6a5899562ca3195b10ab3ea"}]}}) syz_pidfd_open(0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x20, 0x15, 0x6, "a2941de81f37"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000002c0)={0x0, 0x17, 0x1b, "2b0955faa2266cc15a067a689a90f876b929c1c6e26cbedcc08471"}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) (async) prctl$PR_GET_NAME(0x10, &(0x7f0000000cc0)=""/142) (async) ioctl$RTC_AIE_ON(r0, 0x7001) (async) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0xff, 0xec, 0x20, 0x789, 0x160, 0x2cd1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbf, 0x0, 0x2, 0xe6, 0xfb, 0x6a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x18}}]}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x56e, 0xe6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x20, 0xf, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x0, 0x7a, 0x1, {0x22, 0x28d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3f, 0x6, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x3, 0x3, 0x3}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xffffffffffffff94, 0x6, 0x250, 0x0, 0x6, 0x40, 0xff, 0x3}, 0xef, &(0x7f0000000100)={0x5, 0xf, 0xef, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x34, 0xf2, 0x3, 0x7, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "bea417164081d9f9cd298f0f563cc0bc"}, @ptm_cap={0x3}, @generic={0xc8, 0x10, 0x3, "b9e6f69c6585b92af60835b19f552aee459cafd28eca31d4609551e92c3d9000b33fd6bddd0b64b00af7d5f4f90cc7595584216508bcc96111b59db8a3cae4595205711c3556ebfa01b75b2afb6794b7bfbec5645e90306be4a4ebf089b9f6b6bba40fa56d89b024a0acc6bebb9de884c53f701a40bab0d3a4e53750829bbf821f1e70074552322fb4d807cbbe211d82ac1ec6b8359d49c8bd15467c80c885689f1aa2c1a6e951a4c89e2fde0e1491e0527676a844f6d8660df6a5899562ca3195b10ab3ea"}]}}) (async) syz_pidfd_open(0xffffffffffffffff, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x20, 0x15, 0x6, "a2941de81f37"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000002c0)={0x0, 0x17, 0x1b, "2b0955faa2266cc15a067a689a90f876b929c1c6e26cbedcc08471"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 0s ago: executing program 0 (id=267): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000440)) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x74800) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x401, 0x4) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. [ 27.044053][ T36] audit: type=1400 audit(1772139597.200:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.047784][ T283] cgroup: Unknown subsys name 'net' [ 27.066781][ T36] audit: type=1400 audit(1772139597.210:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.094084][ T36] audit: type=1400 audit(1772139597.230:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.094652][ T283] cgroup: Unknown subsys name 'devices' [ 27.297320][ T283] cgroup: Unknown subsys name 'hugetlb' [ 27.302977][ T283] cgroup: Unknown subsys name 'rlimit' [ 27.398534][ T36] audit: type=1400 audit(1772139597.560:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.421740][ T36] audit: type=1400 audit(1772139597.560:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.446541][ T36] audit: type=1400 audit(1772139597.560:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.473459][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.482473][ T36] audit: type=1400 audit(1772139597.640:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.507976][ T36] audit: type=1400 audit(1772139597.640:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.527260][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.535677][ T36] audit: type=1400 audit(1772139597.680:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.567768][ T36] audit: type=1400 audit(1772139597.680:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.342116][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.349290][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.356732][ T290] bridge_slave_0: entered allmulticast mode [ 28.363377][ T290] bridge_slave_0: entered promiscuous mode [ 28.385035][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.392116][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.399313][ T290] bridge_slave_1: entered allmulticast mode [ 28.408185][ T290] bridge_slave_1: entered promiscuous mode [ 28.513293][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.520461][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.527642][ T295] bridge_slave_0: entered allmulticast mode [ 28.533891][ T295] bridge_slave_0: entered promiscuous mode [ 28.541868][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.548995][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.556175][ T295] bridge_slave_1: entered allmulticast mode [ 28.562426][ T295] bridge_slave_1: entered promiscuous mode [ 28.607833][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.614941][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.622048][ T294] bridge_slave_0: entered allmulticast mode [ 28.628429][ T294] bridge_slave_0: entered promiscuous mode [ 28.636730][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.643784][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.650938][ T294] bridge_slave_1: entered allmulticast mode [ 28.657281][ T294] bridge_slave_1: entered promiscuous mode [ 28.703876][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.710976][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.718104][ T296] bridge_slave_0: entered allmulticast mode [ 28.724470][ T296] bridge_slave_0: entered promiscuous mode [ 28.734529][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.741587][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.748728][ T296] bridge_slave_1: entered allmulticast mode [ 28.755084][ T296] bridge_slave_1: entered promiscuous mode [ 28.797914][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.805001][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.812347][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.819421][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.904480][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.911563][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.918884][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.925936][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.948432][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.955526][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.962817][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.969918][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.982557][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.989945][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.997586][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.005086][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.012341][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.019819][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.051144][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.058239][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.066151][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.073213][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.081017][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.088095][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.095870][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.102912][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.162000][ T295] veth0_vlan: entered promiscuous mode [ 29.170780][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.177853][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.186235][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.193292][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.205367][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.212448][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.226905][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.233971][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.259791][ T295] veth1_macvtap: entered promiscuous mode [ 29.271412][ T290] veth0_vlan: entered promiscuous mode [ 29.299399][ T290] veth1_macvtap: entered promiscuous mode [ 29.306597][ T294] veth0_vlan: entered promiscuous mode [ 29.341304][ T294] veth1_macvtap: entered promiscuous mode [ 29.353894][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.386865][ T296] veth0_vlan: entered promiscuous mode [ 29.407954][ T335] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.433863][ T296] veth1_macvtap: entered promiscuous mode [ 29.448370][ T335] tc_dump_action: action bad kind [ 29.479694][ T339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 29.712327][ T354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54016 sclass=netlink_route_socket pid=354 comm=syz.3.9 [ 29.864492][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.874650][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.024474][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 30.029266][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 30.031956][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.041380][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 30.052181][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.062878][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 30.073637][ T46] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 30.084248][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 30.094887][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.106082][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.117359][ T46] usb 1-1: config 0 descriptor?? [ 30.125204][ T349] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 30.144436][ T331] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.295885][ T331] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 30.304279][ T331] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 30.314692][ T331] usb 4-1: config 220 has no interface number 2 [ 30.321068][ T331] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 30.336398][ T331] usb 4-1: config 220 interface 0 has no altsetting 0 [ 30.343256][ T331] usb 4-1: config 220 interface 76 has no altsetting 0 [ 30.350234][ T331] usb 4-1: config 220 interface 1 has no altsetting 0 [ 30.358499][ T9] usb 3-1: USB disconnect, device number 2 [ 30.365595][ T331] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 30.375146][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.391317][ T331] usb 4-1: Product: syz [ 30.395663][ T331] usb 4-1: Manufacturer: syz [ 30.400312][ T331] usb 4-1: SerialNumber: syz [ 30.545016][ T46] elecom 0003:056E:00FE.0001: hidraw0: USB HID v0.03 Device [HID 056e:00fe] on usb-dummy_hcd.0-1/input0 [ 30.610124][ T331] usb 4-1: selecting invalid altsetting 0 [ 30.616490][ T331] usb 4-1: selecting invalid altsetting 0 [ 30.622396][ T331] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 30.629047][ T331] usb 4-1: No valid video chain found. [ 30.637433][ T331] usb 4-1: USB disconnect, device number 2 [ 30.654516][ T359] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.805930][ T359] usb 2-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00 [ 30.815156][ T359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.823894][ T359] usb 2-1: config 0 descriptor?? [ 31.124580][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.234061][ T359] wacom 0003:056A:0026.0002: unknown main item tag 0x2 [ 31.241251][ T359] wacom 0003:056A:0026.0002: Unknown device_type for 'HID 056a:0026'. Assuming pen. [ 31.251472][ T359] wacom 0003:056A:0026.0002: hidraw1: USB HID v0.02 Device [HID 056a:0026] on usb-dummy_hcd.1-1/input0 [ 31.263534][ T359] input: Wacom Intuos5 touch S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0026.0002/input/input4 [ 31.278918][ T9] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 31.295125][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 31.307882][ T9] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 31.317636][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.326601][ T9] usb 3-1: config 0 descriptor?? [ 31.332803][ T9] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 31.340802][ T9] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 31.349716][ T9] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 31.374499][ T64] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.436592][ T359] usb 2-1: USB disconnect, device number 2 [ 31.534943][ T367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.543584][ T367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.551665][ T64] usb 4-1: Using ep0 maxpacket: 16 [ 31.558545][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.568449][ T64] usb 4-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 31.577709][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.578548][ T46] usb 3-1: USB disconnect, device number 3 [ 31.592810][ T64] usb 4-1: config 0 descriptor?? [ 31.884470][ T46] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.027978][ T380] netlink: 'syz.1.16': attribute type 12 has an invalid length. [ 32.036917][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.047084][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.047549][ T36] kauditd_printk_skb: 97 callbacks suppressed [ 32.047622][ T36] audit: type=1400 audit(1772139602.210:171): avc: denied { ioctl } for pid=379 comm="syz.1.16" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.059022][ T46] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 32.063583][ T380] Zero length message leads to an empty skb [ 32.088154][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 32.110733][ T46] usb 3-1: SerialNumber: syz [ 32.130451][ T36] audit: type=1400 audit(1772139602.290:172): avc: denied { mounton } for pid=381 comm="syz.1.17" path="/6/bus" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.130861][ T382] overlayfs: failed to resolve './file0': -2 [ 32.189774][ T36] audit: type=1400 audit(1772139602.350:173): avc: denied { write } for pid=383 comm="syz.1.18" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 32.212897][ T36] audit: type=1400 audit(1772139602.350:174): avc: denied { read } for pid=383 comm="syz.1.18" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.236013][ T36] audit: type=1400 audit(1772139602.350:175): avc: denied { open } for pid=383 comm="syz.1.18" path="/dev/input/event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.260084][ T36] audit: type=1400 audit(1772139602.350:176): avc: denied { ioctl } for pid=383 comm="syz.1.18" path="/dev/input/event1" dev="devtmpfs" ino=193 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.324208][ T36] audit: type=1400 audit(1772139602.480:177): avc: denied { create } for pid=388 comm="syz.1.19" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.528029][ T362] usb 1-1: USB disconnect, device number 2 [ 32.545974][ T393] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.549187][ T36] audit: type=1400 audit(1772139602.700:178): avc: denied { append } for pid=392 comm="syz.0.21" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 32.594481][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.618026][ T396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.630204][ T36] audit: type=1400 audit(1772139602.730:179): avc: denied { validate_trans } for pid=390 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 32.637694][ T396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.662249][ T396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.672082][ T396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.691041][ T396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.694470][ T36] audit: type=1400 audit(1772139602.850:180): avc: denied { read } for pid=397 comm="syz.0.23" dev="nsfs" ino=4026532481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.702328][ T396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.774433][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 32.780957][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 32.789468][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 32.800443][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 32.810267][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 32.820416][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 32.831561][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 32.841592][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 32.851386][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 32801, setting to 1024 [ 32.859172][ T46] usb 3-1: 0:2 : does not exist [ 32.863383][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 32.877537][ T46] usb 3-1: unit 5: unexpected type 0x0a [ 32.894771][ T9] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 32.905102][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.915812][ T46] usb 3-1: USB disconnect, device number 4 [ 32.921092][ T9] usb 2-1: Product: syz [ 32.926096][ T9] usb 2-1: Manufacturer: syz [ 32.930745][ T9] usb 2-1: SerialNumber: syz [ 32.937265][ T9] usb 2-1: config 0 descriptor?? [ 32.942564][ T389] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 32.949862][ T389] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 32.954991][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.972839][ T9] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 32.995081][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.044460][ T362] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.162490][ T331] usb 2-1: USB disconnect, device number 3 [ 33.195700][ T362] usb 1-1: config 0 interface 0 has no altsetting 0 [ 33.202530][ T362] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 33.211809][ T362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.221253][ T362] usb 1-1: config 0 descriptor?? [ 33.280043][ T405] netlink: 96 bytes leftover after parsing attributes in process `syz.3.25'. [ 33.345473][ T407] overlayfs: failed to resolve './file0': -2 [ 33.354422][ T46] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.505572][ T46] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 33.513723][ T46] usb 3-1: config 0 has no interface number 0 [ 33.524650][ T46] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 33.537040][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.545503][ T415] ======================================================= [ 33.545503][ T415] WARNING: The mand mount option has been deprecated and [ 33.545503][ T415] and is ignored by this kernel. Remove the mand [ 33.545503][ T415] option from the mount to silence this warning. [ 33.545503][ T415] ======================================================= [ 33.580532][ T46] usb 3-1: Product: syz [ 33.585071][ T46] usb 3-1: Manufacturer: syz [ 33.589925][ T46] usb 3-1: SerialNumber: syz [ 33.595759][ T46] usb 3-1: config 0 descriptor?? [ 33.615073][ T419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.623654][ T419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.633852][ T362] logitech 0003:046D:C29C.0003: hidraw0: USB HID v0.04 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0 [ 33.832250][ T398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.840946][ T398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.984493][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 34.050262][ T362] logitech 0003:046D:C29C.0003: no inputs found [ 34.059276][ T362] usb 1-1: USB disconnect, device number 3 [ 34.136251][ T9] usb 2-1: config index 0 descriptor too short (expected 54277, got 36) [ 34.144767][ T9] usb 2-1: config 37 has too many interfaces: 198, using maximum allowed: 32 [ 34.153615][ T9] usb 2-1: config 37 has 1 interface, different from the descriptor's value: 198 [ 34.162936][ T9] usb 2-1: config 37 interface 0 altsetting 64 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 34.177550][ T9] usb 2-1: config 37 interface 0 has no altsetting 0 [ 34.185227][ T9] usb 2-1: New USB device found, idVendor=056e, idProduct=0005, bcdDevice= 0.00 [ 34.194394][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.205131][ T427] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 34.225140][ T430] usb usb1: check_ctrlrecip: process 430 (syz.3.33) requesting ep 01 but needs 81 [ 34.234507][ T430] usb usb1: usbfs: process 430 (syz.3.33) did not claim interface 0 before use [ 34.419329][ T9] hid-generic 0003:056E:0005.0004: item fetching failed at offset 1/3 [ 34.431774][ T9] hid-generic 0003:056E:0005.0004: probe with driver hid-generic failed with error -22 [ 34.449989][ T436] overlayfs: failed to resolve './file0': -2 [ 34.634618][ T362] usb 2-1: USB disconnect, device number 4 [ 34.834508][ T331] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.984425][ T331] usb 1-1: Using ep0 maxpacket: 16 [ 34.990843][ T331] usb 1-1: unable to get BOS descriptor set [ 34.997891][ T331] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 35.007838][ T331] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 64 [ 35.017719][ T331] usb 1-1: config 1 interface 0 has no altsetting 0 [ 35.026025][ T331] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.035204][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.043248][ T331] usb 1-1: Product: syz [ 35.047553][ T331] usb 1-1: Manufacturer: syz [ 35.052209][ T331] usb 1-1: SerialNumber: syz [ 35.058724][ T445] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 35.066673][ T445] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 35.276332][ T445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.284967][ T445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.302188][ T331] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 35.312678][ T331] usb 1-1: USB disconnect, device number 4 [ 35.484445][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.634487][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 35.640781][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.653058][ T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 35.662530][ T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 35.670997][ T9] usb 2-1: Product: syz [ 35.675460][ T9] usb 2-1: Manufacturer: syz [ 35.680154][ T9] usb 2-1: SerialNumber: syz [ 35.694761][ T9] usb 2-1: config 0 descriptor?? [ 35.702661][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 35.709219][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 35.825510][ T460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.43'. [ 35.909534][ T46] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 35.916106][ T46] usb 3-1: No valid video chain found. [ 35.925556][ T454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.934116][ T454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.951834][ T454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.960447][ T454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.973533][ T46] usb 3-1: USB disconnect, device number 5 [ 36.094452][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.134563][ T362] usb 2-1: USB disconnect, device number 5 [ 36.265258][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 36.277411][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.288566][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.295107][ T466] netlink: 11316 bytes leftover after parsing attributes in process `syz.3.46'. [ 36.298891][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 36.308208][ T46] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 36.317181][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.334685][ T9] usb 1-1: config 0 descriptor?? [ 36.353396][ T470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.362601][ T470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.426258][ T471] syz.3.47: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 36.441038][ T471] CPU: 0 UID: 0 PID: 471 Comm: syz.3.47 Not tainted syzkaller #0 f91b3f30cb7330a7f558b7a5adc554d01bdf7d6e [ 36.441077][ T471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 36.441095][ T471] Call Trace: [ 36.441104][ T471] [ 36.441112][ T471] __dump_stack+0x21/0x30 [ 36.441155][ T471] dump_stack_lvl+0x140/0x1c0 [ 36.441178][ T471] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.441203][ T471] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 36.441231][ T471] dump_stack+0x19/0x20 [ 36.441254][ T471] warn_alloc+0x1e7/0x2c0 [ 36.441274][ T471] ? stack_depot_save_flags+0x399/0x800 [ 36.441298][ T471] ? __cfi_warn_alloc+0x10/0x10 [ 36.441317][ T471] ? kasan_save_track+0x3e/0x80 [ 36.441343][ T471] ? kasan_save_alloc_info+0x40/0x50 [ 36.441365][ T471] ? xsk_init_queue+0xb2/0x120 [ 36.441385][ T471] ? xsk_setsockopt+0x42c/0x760 [ 36.441404][ T471] ? do_sock_setsockopt+0x27c/0x410 [ 36.441433][ T471] ? __x64_sys_setsockopt+0x1b7/0x250 [ 36.441460][ T471] ? x64_sys_call+0x2adc/0x2ee0 [ 36.441486][ T471] ? do_syscall_64+0x57/0xf0 [ 36.441503][ T471] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.441534][ T471] __vmalloc_node_range_noprof+0x132/0x1480 [ 36.441561][ T471] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 36.441583][ T471] ? kasan_save_alloc_info+0x40/0x50 [ 36.441603][ T471] ? __kasan_kmalloc+0x96/0xb0 [ 36.441630][ T471] ? __kmalloc_cache_noprof+0x23c/0x470 [ 36.441655][ T471] vmalloc_user_noprof+0x77/0x90 [ 36.441676][ T471] ? xskq_create+0xdb/0x290 [ 36.441696][ T471] xskq_create+0xdb/0x290 [ 36.441717][ T471] xsk_init_queue+0xb2/0x120 [ 36.441737][ T471] xsk_setsockopt+0x42c/0x760 [ 36.441756][ T471] ? __cfi_xsk_setsockopt+0x10/0x10 [ 36.441776][ T471] ? do_futex+0x32a/0x510 [ 36.441798][ T471] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 36.441826][ T471] ? security_socket_setsockopt+0x3d/0x100 [ 36.441854][ T471] ? __cfi_xsk_setsockopt+0x10/0x10 [ 36.441873][ T471] do_sock_setsockopt+0x27c/0x410 [ 36.441902][ T471] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 36.441930][ T471] ? xfd_validate_state+0x68/0x140 [ 36.441954][ T471] ? __kasan_check_read+0x15/0x20 [ 36.441979][ T471] __x64_sys_setsockopt+0x1b7/0x250 [ 36.442008][ T471] x64_sys_call+0x2adc/0x2ee0 [ 36.442034][ T471] do_syscall_64+0x57/0xf0 [ 36.442050][ T471] ? clear_bhb_loop+0x50/0xa0 [ 36.442068][ T471] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.442097][ T471] RIP: 0033:0x7f738099c799 [ 36.442118][ T471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.442134][ T471] RSP: 002b:00007f738184d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 36.442155][ T471] RAX: ffffffffffffffda RBX: 00007f7380c16090 RCX: 00007f738099c799 [ 36.442170][ T471] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 36.442182][ T471] RBP: 00007f7380a32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 36.442194][ T471] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.442206][ T471] R13: 00007f7380c16128 R14: 00007f7380c16090 R15: 00007ffeb2467508 [ 36.442230][ T471] [ 36.442269][ T471] Mem-Info: [ 36.757935][ T471] active_anon:7132 inactive_anon:0 isolated_anon:0 [ 36.757935][ T471] active_file:5873 inactive_file:2292 isolated_file:0 [ 36.757935][ T471] unevictable:0 dirty:1472 writeback:0 [ 36.757935][ T471] slab_reclaimable:3937 slab_unreclaimable:71081 [ 36.757935][ T471] mapped:24299 shmem:167 pagetables:899 [ 36.757935][ T471] sec_pagetables:3 bounce:0 [ 36.757935][ T471] kernel_misc_reclaimable:0 [ 36.757935][ T471] free:1538977 free_pcp:3353 free_cma:0 [ 36.803686][ T471] Node 0 active_anon:28528kB inactive_anon:0kB active_file:23492kB inactive_file:9168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97196kB dirty:5888kB writeback:0kB shmem:668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5228kB pagetables:3596kB sec_pagetables:12kB all_unreclaimable? no [ 36.835602][ T471] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963368kB mlocked:0kB bounce:0kB free_pcp:5204kB local_pcp:0kB free_cma:0kB [ 36.865479][ T471] lowmem_reserve[]: 0 3921 3921 [ 36.870396][ T471] Normal free:3197744kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27128kB inactive_anon:0kB active_file:23492kB inactive_file:9168kB unevictable:0kB writepending:5888kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:9652kB local_pcp:6896kB free_cma:0kB [ 36.901680][ T471] lowmem_reserve[]: 0 0 0 [ 36.906107][ T471] DMA32: 5*4kB (M) 2*8kB (M) 5*16kB (M) 5*32kB (M) 5*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 36.923291][ T471] Normal: 23*4kB (U) 15*8kB (U) 2*16kB (UM) 12*32kB (UE) 19*64kB (UME) 39*128kB (UME) 36*256kB (ME) 24*512kB (ME) 21*1024kB (ME) 15*2048kB (UME) 761*4096kB (M) = 3197620kB [ 36.940625][ T471] 8328 total pagecache pages [ 36.945370][ T471] 0 pages in swap cache [ 36.949740][ T471] Free swap = 124996kB [ 36.954032][ T471] Total swap = 124996kB [ 36.954961][ T470] netlink: 'syz.3.47': attribute type 4 has an invalid length. [ 36.958304][ T471] 2097051 pages RAM [ 36.965890][ T470] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.47'. [ 36.969775][ T471] 0 pages HighMem/MovableOnly [ 36.983658][ T471] 352243 pages reserved [ 36.987933][ T471] 0 pages cma reserved [ 36.995440][ T471] Memory allocations: [ 36.999514][ T471] 0 B 0 init/main.c:1477 func:do_initcalls [ 37.006795][ T471] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 37.014943][ T471] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 37.022663][ T471] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 37.030623][ T471] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 37.038595][ T471] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 37.047257][ T471] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 37.055338][ T471] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 37.063280][ T471] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 37.071243][ T471] 0 B 0 init/initramfs.c:101 func:find_link [ 37.102802][ T46] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.114028][ T46] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 37.124779][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 37.131474][ T46] usb 3-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 37.141137][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.157315][ T46] usb 3-1: config 0 descriptor?? [ 37.165582][ T464] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 37.194559][ T9] koneplus 0003:1E7D:2D51.0005: invalid report_count 39424 [ 37.201909][ T9] koneplus 0003:1E7D:2D51.0005: item 0 2 1 9 parsing failed [ 37.209736][ T9] koneplus 0003:1E7D:2D51.0005: parse failed [ 37.216259][ T9] koneplus 0003:1E7D:2D51.0005: probe with driver koneplus failed with error -22 [ 37.270521][ T481] netlink: 'syz.1.51': attribute type 27 has an invalid length. [ 37.279794][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 37.279811][ T36] audit: type=1400 audit(1772139607.440:225): avc: denied { read write } for pid=480 comm="syz.1.51" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.291506][ T481] netlink: 'syz.1.51': attribute type 16 has an invalid length. [ 37.311604][ T36] audit: type=1400 audit(1772139607.440:226): avc: denied { open } for pid=480 comm="syz.1.51" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.318704][ T481] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.51'. [ 37.342176][ T36] audit: type=1400 audit(1772139607.450:227): avc: denied { ioctl } for pid=480 comm="syz.1.51" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.405263][ T462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.413984][ T462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.422736][ T362] usb 1-1: USB disconnect, device number 5 [ 37.601718][ T36] audit: type=1400 audit(1772139607.760:228): avc: denied { mounton } for pid=463 comm="syz.2.45" path="/4/file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.607492][ T464] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.646626][ T36] audit: type=1400 audit(1772139607.810:229): avc: denied { getopt } for pid=463 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.675510][ T487] netlink: 57 bytes leftover after parsing attributes in process `syz.3.53'. [ 37.710122][ T489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.718789][ T489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.729555][ T46] usbhid 3-1:0.0: can't add hid device: -71 [ 37.735795][ T331] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 37.743607][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 37.753055][ T46] usb 3-1: USB disconnect, device number 6 [ 37.895654][ T331] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.905894][ T331] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.915681][ T331] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 37.924815][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 37.932844][ T331] usb 2-1: SerialNumber: syz [ 37.954596][ T36] audit: type=1400 audit(1772139608.120:230): avc: denied { execmem } for pid=490 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.153962][ T331] usb 2-1: 0:2 : does not exist [ 38.166871][ T331] usb 2-1: USB disconnect, device number 6 [ 38.192098][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.305029][ T36] audit: type=1400 audit(1772139608.460:231): avc: denied { bind } for pid=494 comm="syz.3.56" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.350783][ T36] audit: type=1400 audit(1772139608.470:232): avc: denied { name_bind } for pid=494 comm="syz.3.56" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 38.371708][ T36] audit: type=1400 audit(1772139608.470:233): avc: denied { node_bind } for pid=494 comm="syz.3.56" saddr=ff01::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 38.763257][ T503] netlink: 8568 bytes leftover after parsing attributes in process `syz.1.59'. [ 38.850122][ T36] audit: type=1400 audit(1772139609.010:234): avc: denied { map } for pid=505 comm="syz.0.60" path="socket:[3818]" dev="sockfs" ino=3818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.885233][ T508] netlink: 32 bytes leftover after parsing attributes in process `syz.0.61'. [ 38.927586][ T512] netlink: 8568 bytes leftover after parsing attributes in process `syz.0.63'. [ 38.999175][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.005666][ T331] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 39.154735][ T331] usb 2-1: Using ep0 maxpacket: 16 [ 39.161161][ T331] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 39.169962][ T331] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.180127][ T331] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.190780][ T331] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.199927][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.208000][ T331] usb 2-1: Product: syz [ 39.212199][ T331] usb 2-1: Manufacturer: syz [ 39.216871][ T331] usb 2-1: SerialNumber: syz [ 39.264447][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 39.284445][ T46] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.415575][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.424826][ T331] usb 2-1: 0:2 : does not exist [ 39.426864][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 39.440735][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.449669][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 39.451823][ T9] usb 3-1: config 0 descriptor?? [ 39.463846][ T46] usb 1-1: config 73 has too many interfaces: 109, using maximum allowed: 32 [ 39.474800][ T46] usb 1-1: config 73 has 1 interface, different from the descriptor's value: 109 [ 39.484420][ T46] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 39.493621][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.504286][ T331] usb 2-1: USB disconnect, device number 7 [ 39.523978][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.677571][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 39.683611][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 39.694172][ T9] usb 3-1: USB disconnect, device number 7 [ 39.771776][ T539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'. [ 40.114446][ T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 40.265830][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 40.276979][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 40.286100][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.295581][ T9] usb 3-1: config 0 descriptor?? [ 40.301926][ T9] hub 3-1:0.0: USB hub found [ 40.502521][ T9] hub 3-1:0.0: 1 port detected [ 40.654432][ T428] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 40.796909][ T9] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 40.803420][ T9] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 40.812524][ T428] usb 2-1: unable to get BOS descriptor or descriptor too short [ 40.821104][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 40.827288][ T428] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 40.836409][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 40.844420][ T428] usb 2-1: config 1 has no interface number 1 [ 40.850581][ T428] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 40.866331][ T428] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.875569][ T428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.883656][ T428] usb 2-1: Product: syz [ 40.888427][ T9] usb 3-1: USB disconnect, device number 8 [ 40.895523][ T428] usb 2-1: Manufacturer: syz [ 40.900864][ T428] usb 2-1: SerialNumber: syz [ 41.054476][ T519] Bluetooth: hci0: command 0x1003 tx timeout [ 41.054475][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.067040][ T517] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 41.112595][ T428] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 41.120581][ T428] usb 2-1: found format II with max.bitrate = 26774, frame size=65535 [ 41.128924][ T428] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 41.136879][ T428] usb 2-1: found format II with max.bitrate = 26774, frame size=65535 [ 41.150541][ T428] usb 2-1: USB disconnect, device number 8 [ 41.162351][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.375647][ T556] fuse: Unknown parameter ' ' [ 41.660206][ T581] syzkaller1: entered allmulticast mode [ 42.094956][ T64] usbhid 4-1:0.0: can't add hid device: -32 [ 42.100980][ T64] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 42.114317][ T596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.139569][ T46] usb 1-1: string descriptor 0 read error: -71 [ 42.153542][ T46] usb 1-1: Found UVC 0.00 device (2833:0201) [ 42.162125][ T46] usb 1-1: No valid video chain found. [ 42.168619][ T596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.179803][ T46] usb 1-1: USB disconnect, device number 6 [ 42.185250][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 42.294816][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 42.294836][ T36] audit: type=1400 audit(1772139612.460:250): avc: denied { map } for pid=617 comm="syz.1.95" path="socket:[5332]" dev="sockfs" ino=5332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.327376][ T10] usb 3-1: device descriptor read/64, error -71 [ 42.334811][ T36] audit: type=1400 audit(1772139612.490:251): avc: denied { bind } for pid=617 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.354685][ T36] audit: type=1400 audit(1772139612.490:252): avc: denied { mount } for pid=617 comm="syz.1.95" name="/" dev="ramfs" ino=5334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 42.376935][ T36] audit: type=1400 audit(1772139612.530:253): avc: denied { write } for pid=619 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.584492][ T10] usb 3-1: device descriptor read/64, error -71 [ 42.634435][ T428] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 42.644467][ T46] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 42.782453][ T627] 8021q: VLANs not supported on tunl0 [ 42.788238][ T428] usb 2-1: Using ep0 maxpacket: 16 [ 42.795909][ T46] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 42.798717][ T428] usb 2-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 42.808920][ T46] usb 1-1: config 0 has an invalid descriptor of length 98, skipping remainder of the config [ 42.827634][ T46] usb 1-1: config 0 has no interfaces? [ 42.831860][ T428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.841253][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 42.844636][ T46] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 42.860752][ T428] usb 2-1: config 0 descriptor?? [ 42.866645][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.875828][ T46] usb 1-1: config 0 descriptor?? [ 42.902509][ T635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.911148][ T635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.974550][ T10] usb 3-1: device descriptor read/64, error -71 [ 43.087344][ T36] audit: type=1400 audit(1772139613.250:254): avc: denied { name_bind } for pid=606 comm="syz.0.92" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 43.214526][ T10] usb 3-1: device descriptor read/64, error -71 [ 43.278383][ T428] nintendo 0003:057E:201E.0006: unknown main item tag 0x0 [ 43.285821][ T428] nintendo 0003:057E:201E.0006: unknown main item tag 0x0 [ 43.294273][ T428] nintendo 0003:057E:201E.0006: hidraw0: USB HID v90.00 Device [HID 057e:201e] on usb-dummy_hcd.1-1/input0 [ 43.324573][ T10] usb usb3-port1: attempt power cycle [ 43.364506][ T428] nintendo 0003:057E:201E.0006: Failed to get joycon info; ret=-38 [ 43.372493][ T428] nintendo 0003:057E:201E.0006: Failed to retrieve controller info; ret=-38 [ 43.381268][ T428] nintendo 0003:057E:201E.0006: Failed to initialize controller; ret=-38 [ 43.390719][ T428] nintendo 0003:057E:201E.0006: probe - fail = -38 [ 43.397511][ T428] nintendo 0003:057E:201E.0006: probe with driver nintendo failed with error -38 [ 43.437497][ T640] FAULT_INJECTION: forcing a failure. [ 43.437497][ T640] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.451038][ T640] CPU: 1 UID: 0 PID: 640 Comm: syz.3.102 Not tainted syzkaller #0 f91b3f30cb7330a7f558b7a5adc554d01bdf7d6e [ 43.451071][ T640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 43.451084][ T640] Call Trace: [ 43.451090][ T640] [ 43.451098][ T640] __dump_stack+0x21/0x30 [ 43.451128][ T640] dump_stack_lvl+0x140/0x1c0 [ 43.451151][ T640] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.451176][ T640] ? is_bpf_text_address+0x17b/0x1a0 [ 43.451201][ T640] dump_stack+0x19/0x20 [ 43.451224][ T640] should_fail_ex+0x3d7/0x530 [ 43.451244][ T640] should_fail+0xf/0x20 [ 43.451262][ T640] should_fail_usercopy+0x1e/0x30 [ 43.451284][ T640] _copy_from_user+0x20/0xa0 [ 43.451309][ T640] do_ipv6_setsockopt+0x318/0x3250 [ 43.451336][ T640] ? _parse_integer_limit+0x195/0x1e0 [ 43.451367][ T640] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 43.451394][ T640] ? avc_has_perm_noaudit+0x26c/0x360 [ 43.451419][ T640] ? __asan_memcpy+0x5a/0x80 [ 43.451442][ T640] ? avc_has_perm_noaudit+0x28a/0x360 [ 43.451468][ T640] ? avc_has_perm+0x155/0x240 [ 43.451491][ T640] ? __cfi_avc_has_perm+0x10/0x10 [ 43.451518][ T640] ? selinux_socket_setsockopt+0x324/0x3d0 [ 43.451545][ T640] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 43.451572][ T640] ? bpf_lsm_file_permission+0xd/0x20 [ 43.451591][ T640] ? vfs_write+0x9a4/0xf90 [ 43.451614][ T640] ipv6_setsockopt+0x5d/0x170 [ 43.451641][ T640] udpv6_setsockopt+0xa3/0xc0 [ 43.451661][ T640] sock_common_setsockopt+0xb8/0xd0 [ 43.451684][ T640] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 43.451706][ T640] do_sock_setsockopt+0x27c/0x410 [ 43.451736][ T640] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 43.451773][ T640] __x64_sys_setsockopt+0x1b7/0x250 [ 43.451803][ T640] x64_sys_call+0x2adc/0x2ee0 [ 43.451829][ T640] do_syscall_64+0x57/0xf0 [ 43.451847][ T640] ? clear_bhb_loop+0x50/0xa0 [ 43.451866][ T640] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.451896][ T640] RIP: 0033:0x7f738099c799 [ 43.451912][ T640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.451928][ T640] RSP: 002b:00007f738186e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 43.451956][ T640] RAX: ffffffffffffffda RBX: 00007f7380c15fa0 RCX: 00007f738099c799 [ 43.451972][ T640] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 43.451984][ T640] RBP: 00007f738186e090 R08: 0000000000000020 R09: 0000000000000000 [ 43.451997][ T640] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 43.452009][ T640] R13: 00007f7380c16038 R14: 00007f7380c15fa0 R15: 00007ffeb2467508 [ 43.452027][ T640] [ 43.484062][ T622] process 'syz.1.97' launched '/dev/fd/4' with NULL argv: empty string added [ 43.628288][ T643] syz.3.103(643): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 43.631475][ T36] audit: type=1400 audit(1772139613.790:255): avc: denied { execute_no_trans } for pid=621 comm="syz.1.97" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.645160][ T622] overlay: Unknown parameter 'fsuuid' [ 43.685417][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 43.786969][ T46] usb 2-1: USB disconnect, device number 9 [ 43.816409][ T10] usb 3-1: device descriptor read/8, error -71 [ 43.945613][ T10] usb 3-1: device descriptor read/8, error -71 [ 43.968789][ T650] usb usb1: check_ctrlrecip: process 650 (syz.3.105) requesting ep 01 but needs 81 [ 43.978482][ T650] usb usb1: usbfs: process 650 (syz.3.105) did not claim interface 0 before use [ 44.001279][ T652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.009907][ T652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.020234][ T652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.028817][ T652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.082684][ T657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.091232][ T657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.184492][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 44.205701][ T10] usb 3-1: device descriptor read/8, error -71 [ 44.309210][ T36] audit: type=1400 audit(1772139614.470:256): avc: denied { sqpoll } for pid=659 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 44.345629][ T10] usb 3-1: device descriptor read/8, error -71 [ 44.454656][ T10] usb usb3-port1: unable to enumerate USB device [ 44.603109][ T693] usb usb1: check_ctrlrecip: process 693 (syz.1.111) requesting ep 01 but needs 81 [ 44.612590][ T693] usb usb1: usbfs: process 693 (syz.1.111) did not claim interface 0 before use [ 44.633255][ T36] audit: type=1400 audit(1772139614.790:257): avc: denied { write } for pid=694 comm="syz.1.112" name="001" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 44.813663][ T702] usb usb1: check_ctrlrecip: process 702 (syz.3.115) requesting ep 01 but needs 81 [ 44.823400][ T702] usb usb1: usbfs: process 702 (syz.3.115) did not claim interface 0 before use [ 44.874440][ T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 44.943116][ T710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.951897][ T710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.960913][ T710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.970303][ T710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.014402][ T10] usb 2-1: device descriptor read/64, error -71 [ 45.050612][ T36] audit: type=1400 audit(1772139615.210:258): avc: denied { append } for pid=719 comm="syz.2.121" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.241627][ T548] usb 1-1: USB disconnect, device number 7 [ 45.264590][ T10] usb 2-1: device descriptor read/64, error -71 [ 45.395914][ T36] audit: type=1400 audit(1772139615.560:259): avc: denied { getopt } for pid=724 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.405575][ T725] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=25 sclass=netlink_tcpdiag_socket pid=725 comm=syz.0.123 [ 45.445057][ T727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 45.468227][ T729] usb usb1: check_ctrlrecip: process 729 (syz.0.125) requesting ep 01 but needs 81 [ 45.477700][ T729] usb usb1: usbfs: process 729 (syz.0.125) did not claim interface 0 before use [ 45.510667][ T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 45.642668][ T745] mmap: syz.0.129 (745) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.654566][ T10] usb 2-1: device descriptor read/64, error -71 [ 45.697578][ T754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.706210][ T754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.716772][ T754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.725401][ T754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.894430][ T10] usb 2-1: device descriptor read/64, error -71 [ 45.900829][ T548] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 46.014536][ T10] usb usb2-port1: attempt power cycle [ 46.054418][ T548] usb 1-1: Using ep0 maxpacket: 8 [ 46.061314][ T548] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.069899][ T548] usb 1-1: config 9 has an invalid interface number: 5 but max is 1 [ 46.078010][ T548] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 46.088296][ T548] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 46.097635][ T548] usb 1-1: config 9 has no interface number 0 [ 46.103774][ T548] usb 1-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x81, skipping [ 46.114426][ T548] usb 1-1: config 9 interface 5 has no altsetting 0 [ 46.123486][ T548] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 46.132636][ T548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.140736][ T548] usb 1-1: Product: syz [ 46.144940][ T548] usb 1-1: Manufacturer: syz [ 46.149570][ T548] usb 1-1: SerialNumber: syz [ 46.349792][ T765] random: crng reseeded on system resumption [ 46.364497][ T10] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 46.385593][ T10] usb 2-1: device descriptor read/8, error -71 [ 46.515418][ T10] usb 2-1: device descriptor read/8, error -71 [ 46.754560][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 46.775633][ T10] usb 2-1: device descriptor read/8, error -71 [ 46.905554][ T10] usb 2-1: device descriptor read/8, error -71 [ 46.954443][ T331] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 47.014604][ T10] usb usb2-port1: unable to enumerate USB device [ 47.104485][ T331] usb 3-1: Using ep0 maxpacket: 32 [ 47.111074][ T331] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 47.119366][ T331] usb 3-1: config 0 has no interface number 0 [ 47.125576][ T331] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 47.137402][ T331] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 47.146551][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.154615][ T331] usb 3-1: Product: syz [ 47.158893][ T331] usb 3-1: Manufacturer: syz [ 47.163538][ T331] usb 3-1: SerialNumber: syz [ 47.169132][ T331] usb 3-1: config 0 descriptor?? [ 47.174562][ T770] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 47.382880][ T770] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 47.655763][ T774] overlayfs: missing 'lowerdir' [ 47.681367][ T776] netlink: 'syz.1.141': attribute type 1 has an invalid length. [ 47.691368][ T776] capability: warning: `syz.1.141' uses deprecated v2 capabilities in a way that may be insecure [ 47.702605][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 47.702624][ T36] audit: type=1400 audit(1772139617.860:268): avc: denied { setopt } for pid=775 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.758472][ T36] audit: type=1400 audit(1772139617.920:269): avc: denied { ioctl } for pid=777 comm="syz.1.142" path="socket:[6563]" dev="sockfs" ino=6563 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.821231][ T785] fuse: Bad value for 'rootmode' [ 47.849786][ T36] audit: type=1400 audit(1772139618.010:270): avc: denied { write } for pid=786 comm="syz.1.145" name="icmp" dev="proc" ino=4026532322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 47.993078][ T331] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 48.003768][ T331] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 48.034858][ T331] asix 3-1:0.188: probe with driver asix failed with error -71 [ 48.048987][ T331] usb 3-1: USB disconnect, device number 13 [ 48.070812][ T36] audit: type=1400 audit(1772139618.230:271): avc: denied { create } for pid=793 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 48.090020][ T36] audit: type=1400 audit(1772139618.230:272): avc: denied { write } for pid=793 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 48.364456][ T46] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 48.514408][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 48.521209][ T46] usb 2-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 48.530664][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.539764][ T46] usb 2-1: config 0 descriptor?? [ 48.575371][ T548] usb 1-1: USB disconnect, device number 8 [ 48.619019][ T36] audit: type=1400 audit(1772139618.780:273): avc: denied { append } for pid=800 comm="syz.0.150" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.795038][ T809] netlink: 'syz.0.152': attribute type 7 has an invalid length. [ 48.804596][ T331] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 48.824720][ T36] audit: type=1400 audit(1772139618.990:274): avc: denied { lock } for pid=810 comm="syz.0.153" path="socket:[5924]" dev="sockfs" ino=5924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 48.848025][ T811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=811 comm=syz.0.153 [ 48.875222][ T815] usb usb1: check_ctrlrecip: process 815 (syz.0.154) requesting ep 01 but needs 81 [ 48.884830][ T815] usb usb1: usbfs: process 815 (syz.0.154) did not claim interface 0 before use [ 48.952734][ T46] usbhid 2-1:0.0: can't add hid device: -71 [ 48.958765][ T331] usb 3-1: Using ep0 maxpacket: 16 [ 48.963976][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 48.973579][ T46] usb 2-1: USB disconnect, device number 14 [ 48.979596][ T331] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.991582][ T331] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 13 [ 49.003883][ T331] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.013141][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.021205][ T331] usb 3-1: Product: syz [ 49.025546][ T331] usb 3-1: Manufacturer: syz [ 49.030178][ T331] usb 3-1: SerialNumber: syz [ 49.037196][ T799] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 49.043015][ T819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.053732][ T819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.073886][ T36] audit: type=1400 audit(1772139619.230:275): avc: denied { mounton } for pid=818 comm="syz.3.156" path="/53/file0" dev="tmpfs" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 49.144468][ T548] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 49.295828][ T548] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.306841][ T548] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.316656][ T548] usb 1-1: config 0 interface 0 has no altsetting 0 [ 49.323295][ T548] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 49.332401][ T548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.341554][ T548] usb 1-1: config 0 descriptor?? [ 49.450507][ T799] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 49.458966][ T799] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 49.469060][ T799] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 49.477254][ T799] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 49.519026][ T821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 49.548038][ T36] audit: type=1400 audit(1772139619.710:276): avc: denied { create } for pid=816 comm="syz.0.155" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.607263][ T823] netlink: 'syz.3.158': attribute type 13 has an invalid length. [ 49.644481][ T36] audit: type=1400 audit(1772139619.800:277): avc: denied { write } for pid=824 comm="syz.3.160" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.773423][ T548] acrux 0003:1A34:0802.0007: item fetching failed at offset 0/1 [ 49.781474][ T548] acrux 0003:1A34:0802.0007: parse failed [ 49.826165][ T548] acrux 0003:1A34:0802.0007: probe with driver acrux failed with error -22 [ 49.889063][ T331] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 49.898607][ T331] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 49.917618][ T331] cdc_ncm 3-1:1.0: bind() failure [ 49.928833][ T331] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 49.944438][ T331] cdc_ncm 3-1:1.1: bind() failure [ 49.954513][ T331] usb 3-1: USB disconnect, device number 14 [ 49.971443][ T548] usb 1-1: USB disconnect, device number 9 [ 49.987973][ T859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.997366][ T859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.100638][ T864] fuse: Bad value for 'user_id' [ 50.105702][ T864] fuse: Bad value for 'user_id' [ 50.157854][ T866] netlink: 88 bytes leftover after parsing attributes in process `syz.1.172'. [ 50.166885][ T866] netlink: 48 bytes leftover after parsing attributes in process `syz.1.172'. [ 50.426766][ T878] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19993 sclass=netlink_xfrm_socket pid=878 comm=syz.2.175 [ 50.452921][ T880] netlink: 'syz.1.176': attribute type 27 has an invalid length. [ 50.506699][ T887] netlink: 148 bytes leftover after parsing attributes in process `syz.0.178'. [ 50.845784][ T364] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 50.874465][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 50.994440][ T548] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 51.005698][ T364] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 51.014147][ T364] usb 2-1: config 179 has no interface number 0 [ 51.020494][ T364] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 51.031810][ T364] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 51.034505][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 51.043065][ T364] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 51.050723][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.059477][ T364] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 51.070855][ T10] usb 3-1: New USB device found, idVendor=0e8d, idProduct=0003, bcdDevice= 0.00 [ 51.079651][ T364] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 51.089461][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.101975][ T364] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 51.113256][ T10] usb 3-1: config 0 descriptor?? [ 51.119136][ T364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.134749][ T895] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 51.142789][ T364] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 51.164425][ T548] usb 1-1: Using ep0 maxpacket: 8 [ 51.171072][ T548] usb 1-1: unable to get BOS descriptor or descriptor too short [ 51.179681][ T548] usb 1-1: config 9 has an invalid interface number: 5 but max is 0 [ 51.187965][ T548] usb 1-1: config 9 has no interface number 0 [ 51.194192][ T548] usb 1-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0x2C, changing to 0xC [ 51.205875][ T548] usb 1-1: config 9 interface 5 altsetting 9 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 51.216865][ T548] usb 1-1: config 9 interface 5 altsetting 9 endpoint 0xC has invalid wMaxPacketSize 0 [ 51.226576][ T548] usb 1-1: config 9 interface 5 has no altsetting 0 [ 51.234918][ T548] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 51.244015][ T548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.252107][ T548] usb 1-1: Product: syz [ 51.256347][ T548] usb 1-1: Manufacturer: syz [ 51.260954][ T548] usb 1-1: SerialNumber: syz [ 51.353254][ T10] usb 2-1: USB disconnect, device number 15 [ 51.474060][ T548] usb 1-1: USB disconnect, device number 10 [ 51.837123][ T364] usb 3-1: USB disconnect, device number 15 [ 51.989616][ T909] overlay: ./file0 is not a directory [ 51.995284][ T910] overlay: ./file0 is not a directory [ 52.560085][ T923] capability: warning: `syz.0.190' uses 32-bit capabilities (legacy support in use) [ 52.660565][ T10] hid (null): global environment stack underflow [ 52.667821][ T10] hid (null): global environment stack underflow [ 52.676029][ T10] hid (null): report_id 107109262 is invalid [ 52.682176][ T10] hid (null): invalid report_count 63288 [ 52.688735][ T10] hid-generic 0401:0106:0002.0008: global environment stack underflow [ 52.697018][ T10] hid-generic 0401:0106:0002.0008: item 0 4 1 11 parsing failed [ 52.704930][ T10] hid-generic 0401:0106:0002.0008: probe with driver hid-generic failed with error -22 [ 52.914469][ T548] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 52.953466][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 52.953485][ T36] audit: type=1400 audit(1772139623.110:303): avc: denied { write } for pid=935 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 52.991182][ T940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.999862][ T940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.064484][ T548] usb 3-1: Using ep0 maxpacket: 16 [ 53.071081][ T548] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 53.080219][ T548] usb 3-1: too many endpoints for config 0 interface 0 altsetting 255: 254, using maximum allowed: 30 [ 53.092016][ T548] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 53.105523][ T548] usb 3-1: config 0 interface 0 has no altsetting 0 [ 53.114446][ T364] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 53.124802][ T548] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 53.133981][ T548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.142121][ T548] usb 3-1: Product: syz [ 53.146372][ T548] usb 3-1: Manufacturer: syz [ 53.154423][ T548] usb 3-1: SerialNumber: syz [ 53.159845][ T548] usb 3-1: config 0 descriptor?? [ 53.170133][ T36] audit: type=1326 audit(1772139623.330:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=943 comm="syz.0.198" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efde7d9c799 code=0x0 [ 53.264437][ T364] usb 2-1: Using ep0 maxpacket: 16 [ 53.271845][ T364] usb 2-1: config 1 interface 0 has no altsetting 0 [ 53.280391][ T364] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.40 [ 53.289606][ T364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.297720][ T364] usb 2-1: Product: syz [ 53.301915][ T364] usb 2-1: Manufacturer: syz [ 53.306942][ T364] usb 2-1: SerialNumber: syz [ 53.368145][ T548] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 53.376791][ T548] usb 3-1: Detected FT232R [ 53.381623][ T548] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 53.389025][ T548] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 53.396658][ T548] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 53.404311][ T548] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 53.416473][ T548] usb 3-1: USB disconnect, device number 16 [ 53.424964][ T548] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 53.437796][ T548] ftdi_sio 3-1:0.0: device disconnected [ 53.516262][ T934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.524969][ T934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.534954][ T934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.543667][ T934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.558505][ T364] usbhid 2-1:1.0: can't add hid device: -71 [ 53.564627][ T364] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 53.573664][ T364] usb 2-1: USB disconnect, device number 16 [ 53.637481][ T949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.646423][ T949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.659115][ T36] audit: type=1400 audit(1772139623.820:305): avc: denied { create } for pid=948 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 53.680667][ T36] audit: type=1400 audit(1772139623.820:306): avc: denied { sys_admin } for pid=948 comm="syz.3.199" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 53.785470][ T960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.793977][ T960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.902120][ T963] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 53.913556][ T963] usb usb1: check_ctrlrecip: process 963 (syz.2.202) requesting ep 01 but needs 81 [ 53.923429][ T963] usb usb1: usbfs: process 963 (syz.2.202) did not claim interface 0 before use [ 54.037288][ T36] audit: type=1400 audit(1772139624.200:307): avc: denied { mount } for pid=970 comm="syz.0.205" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.142505][ T978] incfs: Options parsing error. -22 [ 54.148055][ T978] incfs: mount failed -22 [ 54.190087][ T36] audit: type=1400 audit(1772139624.350:308): avc: denied { mount } for pid=981 comm="syz.1.209" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 54.235148][ T976] overlayfs: failed to clone lowerpath [ 54.240023][ T36] audit: type=1400 audit(1772139624.380:309): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 54.260655][ T36] audit: type=1400 audit(1772139624.400:310): avc: denied { mount } for pid=970 comm="syz.0.205" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 54.283574][ T36] audit: type=1400 audit(1772139624.430:311): avc: denied { create } for pid=989 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 54.374639][ T994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.383664][ T994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.554449][ T364] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 54.704439][ T364] usb 2-1: Using ep0 maxpacket: 16 [ 54.711435][ T364] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 54.722191][ T364] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 54.731379][ T364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.739432][ T364] usb 2-1: Product: syz [ 54.743729][ T364] usb 2-1: Manufacturer: syz [ 54.748402][ T364] usb 2-1: SerialNumber: syz [ 54.753729][ T364] usb 2-1: config 0 descriptor?? [ 54.760194][ T364] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 54.768099][ T364] usb 2-1: Detected FT232R [ 54.928047][ T1002] netlink: 312 bytes leftover after parsing attributes in process `syz.3.217'. [ 54.937786][ T1002] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 54.962139][ T36] audit: type=1400 audit(1772139625.120:312): avc: denied { mounton } for pid=991 comm="syz.1.212" path="/72/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 54.985754][ T1005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.994269][ T1005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.032693][ T364] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 55.054910][ T364] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 55.083294][ T364] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 55.103914][ T364] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 55.123321][ T364] usb 2-1: USB disconnect, device number 17 [ 55.133449][ T364] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 55.144283][ T364] ftdi_sio 2-1:0.0: device disconnected [ 55.294768][ T10] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 55.372267][ T1041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.381456][ T1041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.455817][ T10] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.465815][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 55.472434][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 55.481586][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.490377][ T10] usb 3-1: config 0 descriptor?? [ 55.604517][ T364] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 55.734455][ T364] usb 2-1: device descriptor read/64, error -71 [ 55.903893][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 55.910089][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 55.919042][ T10] usb 3-1: USB disconnect, device number 17 [ 55.984479][ T364] usb 2-1: device descriptor read/64, error -71 [ 56.170084][ T1053] netlink: 32 bytes leftover after parsing attributes in process `syz.3.235'. [ 56.224640][ T364] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 56.354539][ T364] usb 2-1: device descriptor read/64, error -71 [ 56.416254][ T1068] netlink: 288 bytes leftover after parsing attributes in process `syz.2.239'. [ 56.604553][ T364] usb 2-1: device descriptor read/64, error -71 [ 56.694538][ T331] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 56.714576][ T364] usb usb2-port1: attempt power cycle [ 56.844466][ T331] usb 3-1: Using ep0 maxpacket: 16 [ 56.851952][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.861793][ T331] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 56.870919][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.879707][ T331] usb 3-1: config 0 descriptor?? [ 57.054455][ T364] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 57.075462][ T364] usb 2-1: device descriptor read/8, error -71 [ 57.205866][ T364] usb 2-1: device descriptor read/8, error -71 [ 57.291224][ T331] apple 0003:05AC:0241.0009: hidraw0: USB HID v0.00 Device [HID 05ac:0241] on usb-dummy_hcd.2-1/input0 [ 57.454520][ T364] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 57.475652][ T364] usb 2-1: device descriptor read/8, error -71 [ 57.490142][ T331] usb 3-1: USB disconnect, device number 18 [ 57.605942][ T364] usb 2-1: device descriptor read/8, error -71 [ 57.714687][ T364] usb usb2-port1: unable to enumerate USB device [ 58.017533][ T1081] usb usb1: check_ctrlrecip: process 1081 (syz.2.244) requesting ep 01 but needs 81 [ 58.027383][ T1081] usb usb1: usbfs: process 1081 (syz.2.244) did not claim interface 0 before use [ 58.225145][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 58.225166][ T36] audit: type=1400 audit(1772139628.390:322): avc: denied { create } for pid=1089 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 58.304431][ T331] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 58.429813][ T1098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19833 sclass=netlink_route_socket pid=1098 comm=syz.1.250 [ 58.454427][ T331] usb 3-1: Using ep0 maxpacket: 16 [ 58.460842][ T331] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x13, changing to 0x3 [ 58.472747][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 58.483716][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 58.493635][ T331] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 58.503672][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.519061][ T519] Bluetooth: hci0: command 0x1003 tx timeout [ 58.525706][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.540715][ T331] usb 3-1: config 0 descriptor?? [ 58.556375][ T331] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 58.630691][ T36] audit: type=1400 audit(1772139628.790:323): avc: denied { read } for pid=1101 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 58.719204][ T1111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.728612][ T1111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.738138][ T1111] usb usb1: check_ctrlrecip: process 1111 (syz.3.254) requesting ep 01 but needs 81 [ 58.749785][ T1111] usb usb1: usbfs: process 1111 (syz.3.254) did not claim interface 0 before use [ 58.762309][ T36] audit: type=1400 audit(1772139628.930:324): avc: denied { bind } for pid=1087 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.763888][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 58.787276][ T36] audit: type=1400 audit(1772139628.950:325): avc: denied { listen } for pid=1087 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.841156][ T36] audit: type=1400 audit(1772139629.000:326): avc: denied { write } for pid=1087 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.934445][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 58.940850][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.951287][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 58.965854][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=3000, bcdDevice=c2.57 [ 58.975384][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.983628][ T10] usb 2-1: Product: syz [ 58.994592][ T10] usb 2-1: Manufacturer: syz [ 58.999287][ T10] usb 2-1: SerialNumber: syz [ 59.005401][ T10] usb 2-1: config 0 descriptor?? Stopping sshd: stopped /usr/sbin/sshd (pid 203) OK Stopping crond: stopped /usr/sbin/crond (pid 195) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 149) [ 59.127539][ T36] audit: type=1400 audit(1772139629.290:327): avc: denied { search } for pid=1126 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 59.225065][ T36] audit: type=1400 audit(1772139629.390:328): avc: denied { read write } for pid=1134 comm="ip" path="/dev/console" dev="rootfs" ino=58 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 59.271813][ T36] audit: type=1400 audit(1772139629.430:329): avc: denied { write } for pid=150 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.300069][ T36] audit: type=1400 audit(1772139629.430:330): avc: denied { remove_name } for pid=150 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.328023][ T36] audit: type=1400 audit(1772139629.430:331): avc: denied { unlink } for pid=150 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 59.364733][ T1139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.373854][ T1139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 OK Stopping iptables: OK Stopping system message bus: done Stopping klogd: OK Stopping acpid: [ 59.717187][ T1159] netlink: 188 bytes leftover after parsing attributes in process `syz.0.257'. [ 59.937105][ T1171] x_tables: duplicate underflow at hook 1 [ 59.944223][ T1171] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 59.952621][ T1171] overlayfs: missing 'lowerdir' [ 59.970112][ T1173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.978968][ T1173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.988104][ T1173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.996587][ T1173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.279065][ T1176] netlink: 'syz.1.251': attribute type 13 has an invalid length. OK Stopping syslogd: stopped /sbin/syslogd (pid 93) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.1.32 closed by remote host. [ 60.963737][ T359] usb 4-1: USB disconnect, device number 3 Sent SIGTERM to all processes [ 61.175795][ T678] bridge_slave_1: left allmulticast mode [ 61.181501][ T678] bridge_slave_1: left promiscuous mode [ 61.187224][ T678] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.195112][ T678] bridge_slave_0: left allmulticast mode [ 61.200793][ T678] bridge_slave_0: left promiscuous mode [ 61.206540][ T678] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.207120][ T428] usb 2-1: USB disconnect, device number 22 [ 61.222759][ T548] usb 3-1: USB disconnect, device number 19 [ 61.327350][ T678] veth1_macvtap: left promiscuous mode [ 61.332899][ T678] veth0_vlan: left promiscuous mode [ 61.548659][ T678] bridge_slave_1: left allmulticast mode [ 61.554332][ T678] bridge_slave_1: left promiscuous mode [ 61.560042][ T678] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.567709][ T678] bridge_slave_0: left allmulticast mode [ 61.573353][ T678] bridge_slave_0: left promiscuous mode [ 61.579083][ T678] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.586943][ T678] bridge_slave_1: left allmulticast mode [ 61.592592][ T678] bridge_slave_1: left promiscuous mode [ 61.598245][ T678] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.605806][ T678] bridge_slave_0: left allmulticast mode [ 61.611452][ T678] bridge_slave_0: left promiscuous mode [ 61.617148][ T678] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.624962][ T678] bridge_slave_1: left allmulticast mode [ 61.630612][ T678] bridge_slave_1: left promiscuous mode [ 61.636253][ T678] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.643760][ T678] bridge_slave_0: left allmulticast mode [ 61.649487][ T678] bridge_slave_0: left promiscuous mode [ 61.655178][ T678] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.880892][ T678] veth1_macvtap: left promiscuous mode [ 61.886632][ T678] veth0_vlan: left promiscuous mode [ 61.892294][ T678] veth1_macvtap: left promiscuous mode [ 61.897875][ T678] veth0_vlan: left promiscuous mode [ 61.903664][ T678] veth1_macvtap: left promiscuous mode [ 61.909294][ T678] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 62.617791][ T678] ------------[ cut here ]------------ [ 62.623302][ T678] WARNING: CPU: 1 PID: 678 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 62.633401][ T678] Modules linked in: [ 62.637348][ T678] CPU: 1 UID: 0 PID: 678 Comm: kworker/u8:20 Not tainted syzkaller #0 f91b3f30cb7330a7f558b7a5adc554d01bdf7d6e [ 62.649213][ T678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 62.659330][ T678] Workqueue: netns cleanup_net [ 62.664118][ T678] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 62.670151][ T678] Code: e8 21 9d db fc 4b 83 3c 3e 00 75 19 e8 f5 ba 83 fc 49 81 ff f8 07 00 00 74 1b e8 e7 ba 83 fc 49 83 c7 08 eb c9 e8 dc ba 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 62.689802][ T678] RSP: 0018:ffffc9000ebb7b90 EFLAGS: 00010293 [ 62.695948][ T678] RAX: ffffffff8503e144 RBX: ffff888120043540 RCX: ffff88811a482600 [ 62.703941][ T678] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888103b88000 [ 62.711954][ T678] RBP: ffffc9000ebb7bb0 R08: ffffffff87d358c7 R09: 1ffffffff0fa6b18 [ 62.719942][ T678] R10: dffffc0000000000 R11: fffffbfff0fa6b19 R12: dffffc0000000000 [ 62.727936][ T678] R13: dffffc0000000000 R14: ffff888103b88000 R15: 0000000000000000 [ 62.735929][ T678] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 62.744913][ T678] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.751653][ T678] CR2: 0000555576b4b908 CR3: 000000010b72c000 CR4: 00000000003526b0 [ 62.759830][ T678] Call Trace: [ 62.763106][ T678] [ 62.766063][ T678] cleanup_net+0x6bd/0xc90 [ 62.770507][ T678] ? __cfi_cleanup_net+0x10/0x10 [ 62.775464][ T678] ? kick_pool+0xb9/0x550 [ 62.779795][ T678] process_scheduled_works+0x7d4/0x1020 [ 62.785369][ T678] worker_thread+0xc70/0x10b0 [ 62.790077][ T678] kthread+0x2c9/0x370 [ 62.794142][ T678] ? __cfi_worker_thread+0x10/0x10 [ 62.799324][ T678] ? __cfi_kthread+0x10/0x10 [ 62.803936][ T678] ret_from_fork+0x64/0xa0 [ 62.808441][ T678] ? __cfi_kthread+0x10/0x10 [ 62.813044][ T678] ret_from_fork_asm+0x1a/0x30 [ 62.817849][ T678] [ 62.820869][ T678] ---[ end trace 0000000000000000 ]--- [ 62.826554][ T678] ------------[ cut here ]------------ [ 62.832090][ T678] WARNING: CPU: 1 PID: 678 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 62.842275][ T678] Modules linked in: [ 62.846181][ T678] CPU: 1 UID: 0 PID: 678 Comm: kworker/u8:20 Tainted: G W syzkaller #0 f91b3f30cb7330a7f558b7a5adc554d01bdf7d6e [ 62.859389][ T678] Tainted: [W]=WARN [ 62.863191][ T678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 62.873275][ T678] Workqueue: netns cleanup_net [ 62.878062][ T678] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 62.884137][ T678] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 a0 ba 83 fc 49 81 ff f8 07 00 00 74 1b e8 92 ba 83 fc 49 83 c7 08 eb c5 e8 87 ba 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 77 ba 83 fc 5b 41 5c 41 5e 41 [ 62.903773][ T678] RSP: 0018:ffffc9000ebb7b90 EFLAGS: 00010293 [ 62.909853][ T678] RAX: ffffffff8503e199 RBX: ffff888103b88800 RCX: ffff88811a482600 [ 62.917839][ T678] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888103b88808 [ 62.925825][ T678] RBP: ffffc9000ebb7bb0 R08: ffffffff87d358c7 R09: 1ffffffff0fa6b18 [ 62.933799][ T678] R10: dffffc0000000000 R11: fffffbfff0fa6b19 R12: dffffc0000000000 [ 62.941794][ T678] R13: dffffc0000000000 R14: ffff888103b88000 R15: 0000000000000008 [ 62.949811][ T678] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 62.958788][ T678] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.965393][ T678] CR2: 0000555576b4b908 CR3: 000000010b72c000 CR4: 00000000003526b0 [ 62.973371][ T678] Call Trace: [ 62.976673][ T678] [ 62.979602][ T678] cleanup_net+0x6bd/0xc90 [ 62.984022][ T678] ? __cfi_cleanup_net+0x10/0x10 [ 62.988977][ T678] ? kick_pool+0xb9/0x550 [ 62.993310][ T678] process_scheduled_works+0x7d4/0x1020 [ 62.998885][ T678] worker_thread+0xc70/0x10b0 [ 63.003573][ T678] kthread+0x2c9/0x370 [ 63.007714][ T678] ? __cfi_worker_thread+0x10/0x10 [ 63.012903][ T678] ? __cfi_kthread+0x10/0x10 [ 63.017584][ T678] ret_from_fork+0x64/0xa0 [ 63.022024][ T678] ? __cfi_kthread+0x10/0x10 [ 63.026661][ T678] ret_from_fork_asm+0x1a/0x30 [ 63.031528][ T678] [ 63.034607][ T678] ---[ end trace 0000000000000000 ]--- [ 63.041687][ T1196] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 63.048722][ T1196] ACPI: PM: Preparing to enter system sleep state S5 [ 63.055767][ T1196] kvm: exiting hardware virtualization [ 63.061290][ T1196] reboot: Power down serialport: VM disconnected.