last executing test programs: 8.452888227s ago: executing program 2 (id=951): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd61a7000200442f00fe8000000000000000000000000000bbfe80000000000000000000000000008a0c2088be0000000201009900000086dd080088be000000031c0885140100000000007b40080022eb0000000223022309020000008000000300ebb41b"], 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x4000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.265747781s ago: executing program 2 (id=955): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x2, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000100)="66b8010000000f01d9f2ab6766c7442400000000006766c7442402d7a600006766c744240600000000670f011c2466b8010000000f01d90f015a00f375ec0f49290f209066b80500000066b9001800000f01c1f36d", 0x55}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.170902854s ago: executing program 2 (id=959): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 8.170541403s ago: executing program 2 (id=960): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x11c9cd6, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 8.156274424s ago: executing program 2 (id=962): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) listen(r0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 8.045277947s ago: executing program 2 (id=964): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001002abd70000000000014000000", @ANYRES32=0x0, @ANYBLOB="8123010000000000140003006e657464657673696d3000000000000008000d"], 0x3c}}, 0x4040000) 8.045210647s ago: executing program 32 (id=964): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001002abd70000000000014000000", @ANYRES32=0x0, @ANYBLOB="8123010000000000140003006e657464657673696d3000000000000008000d"], 0x3c}}, 0x4040000) 7.979254388s ago: executing program 0 (id=970): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) 7.9245465s ago: executing program 0 (id=971): r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x90) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000180)=0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000001c0)=r3) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50aba, 0x70823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20068080}, 0x24000800) 7.92399226s ago: executing program 0 (id=972): prctl$PR_SCHED_CORE(0x23, 0x3, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r1 = io_uring_setup(0x3772, &(0x7f0000000000)={0x0, 0x2331, 0x0, 0x1, 0xea}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000001400)={0x1, 0x0, &(0x7f00000013c0)=[r1]}, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0xda, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x31, 0x4, 0x3, 0x5, 0xcc, 0x64, 0x0, 0x1, 0x1, 0x0, @loopback, @remote, {[@end, @timestamp_prespec={0x44, 0x34, 0x1b, 0x3, 0x9, [{@loopback, 0x691}, {@multicast1, 0x3}, {@private=0xa010101, 0x1}, {@remote, 0x7}, {@multicast1, 0x2}, {@empty, 0x72}]}, @end, @timestamp_prespec={0x44, 0xc, 0x79, 0x3, 0x0, [{@local, 0xfffffff8}]}, @timestamp_addr={0x44, 0x4c, 0x1f, 0x1, 0xb, [{@rand_addr=0x64010100, 0x28}, {@broadcast, 0x80000000}, {@remote, 0xf}, {@loopback, 0x3}, {@empty, 0x435}, {@local, 0x9}, {@multicast1, 0xfffffff9}, {@broadcast, 0x5}, {@loopback}]}, @cipso={0x86, 0x15, 0x1, [{0xe, 0xa, "452f643f6e824943"}, {0x0, 0x5, "052f7d"}]}, @generic={0x86, 0xa, "5355dab8fdff5a8e"}]}}, @info_request={0xf, 0x0, 0x0, 0x7, 0xfffa}}}}}, 0x0) r2 = syz_io_uring_setup(0xec6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, 0x0, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r3) sendmsg$NET_DM_CMD_START(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r5, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, 0x0, 0x4000) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0x3c}}, 0x20000000) 7.849316701s ago: executing program 0 (id=973): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x11c9cd6, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 7.848009571s ago: executing program 0 (id=974): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x1000000, 0x515f3157, 0x13, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 7.733252654s ago: executing program 0 (id=975): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) futex(&(0x7f0000000000)=0x2, 0x80, 0x2, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 7.658278266s ago: executing program 33 (id=975): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) futex(&(0x7f0000000000)=0x2, 0x80, 0x2, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 6.149830822s ago: executing program 3 (id=985): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bind$unix(r2, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000ddff00fcdbdf2503000000140001800d0001006574683a6772653000000000ffedf30efd9947501eeae22a7f469a99d9f02da1ad15cd726c70ffa69a307d89507689075af217ed7c64be0a54e33981eadbbc2a3ef6881dc4f3d37d9107bf2c9e529ff54042023c1d85e85809f39a6b689426d3f3dc05fd71fd3f864d90a9a5c8fce0ed62a3ca40f0b683d3196c1c9d4d0c67f8ce8791c03337faab45"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000200)=""/179, 0xb3) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(&(0x7f0000000540)={0x81000000, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, &(0x7f0000000380)=""/209, &(0x7f0000000280)=[r0], 0x1}, 0x58) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 5.242777254s ago: executing program 3 (id=993): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x20004, 0x4) 5.189109215s ago: executing program 3 (id=995): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="200e0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x0, 0x13, 0x31, "7bb7e53c6ebe4ec3e36950fbc948aa0836df5b161cad4f84d0c1c9bed4b0a88db381c5217b66df21b8e2071a5724f8a020"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xcb}, 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x0, &(0x7f0000000480)={0x20, 0x84, 0x1, 'C'}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "f7d988"}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 3.696774921s ago: executing program 1 (id=1008): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./sys/class/udc/dummy_udc.0/state\x00', 0x0, 0x0) read(r0, &(0x7f0000001200), 0x100) 3.696285441s ago: executing program 1 (id=1009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) r4 = socket(0x10, 0x803, 0x0) write(r4, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7", 0x1d) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r4, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000a80)=[{{0x0, 0x3a, &(0x7f0000000680)=[{&(0x7f0000000700)=""/245, 0xf5}, {&(0x7f0000000800)=""/163, 0x96}, {&(0x7f0000000f00)=""/161, 0xa1}, {&(0x7f0000000fc0)=""/157, 0x9d}, {&(0x7f0000001f00)=""/4093, 0xffd}, {&(0x7f00000008c0)=""/124, 0x71}], 0x6}, 0xe}], 0x1, 0x10120, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) ioctl$NILFS_IOCTL_GET_BDESCS(r1, 0xc0186e87, &(0x7f0000000640)={&(0x7f0000000540)=[{0x4, 0x8000000000000001, 0x4, 0x91, 0x1}, {0x3, 0x9, 0x0, 0x0, 0x4}, {0x800, 0xfffffffffffffff8, 0x4, 0x800, 0x2}, {0xc, 0x5, 0xffffffffffffffff, 0x3, 0x1}, {0x89e, 0x4, 0x0, 0x7fffffffffffffff, 0x5}, {0x5, 0x3, 0x8, 0x5, 0x2}], 0x6, 0x28, 0x5, 0x3}) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sk_skb}, 0x94) getpgid(0x0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.013324317s ago: executing program 5 (id=1020): r0 = socket(0x2, 0x80805, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x277, 0x0, 0x6}]}) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) 2.960672449s ago: executing program 5 (id=1021): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000001600)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 2.949675639s ago: executing program 5 (id=1022): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.0/streaming/color_matching/my_color2/bMatrixCoefficients\x00', 0x2, 0x0) 2.89325306s ago: executing program 5 (id=1023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x448c1}, 0x4000000) 2.8931423s ago: executing program 5 (id=1024): syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) munlockall() 2.89307878s ago: executing program 5 (id=1025): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x20, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfab0100000011ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.843765502s ago: executing program 1 (id=1026): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000100)={0x14, 0x0, 0x0}, &(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0x2ce}, 0x0, 0x0}) 2.658008226s ago: executing program 3 (id=1027): setresuid(0x0, 0xee00, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2.637236377s ago: executing program 3 (id=1028): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$int_in(r1, 0x5452, 0x0) write(r1, &(0x7f0000000080)='g', 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 2.517315239s ago: executing program 3 (id=1029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_usb_connect(0x0, 0x164, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004000)={0x2020}, 0x2020) 2.401511702s ago: executing program 6 (id=1031): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) listen(r0, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x96) close(r0) read$FUSE(r1, &(0x7f0000005040)={0x2020}, 0x2020) 2.369013533s ago: executing program 6 (id=1032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44818}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.301186224s ago: executing program 6 (id=1033): sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1f1, 0x1) openat(0xffffffffffffff9c, 0x0, 0x301041, 0x41) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000001c0)) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0'}, 0xb) 2.200370127s ago: executing program 6 (id=1035): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) setuid(0xee01) 2.138731959s ago: executing program 6 (id=1037): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x0, 0xfffffe01, 0x0}) 2.138677839s ago: executing program 6 (id=1038): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, 0x0}, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x40, 0x18}, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}}) 1.161147872s ago: executing program 4 (id=1044): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18026800700000000700000000000000980000005000f1d69d294f"], 0x0, 0x0, 0x0, 0x0, 0x6dd30ecb6f81936c, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r0}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) 1.161056142s ago: executing program 4 (id=1045): sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1f1, 0x1) openat(0xffffffffffffff9c, 0x0, 0x301041, 0x41) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000001c0)) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0'}, 0xb) 1.072026644s ago: executing program 4 (id=1046): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) 1.050360244s ago: executing program 4 (id=1047): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) socket$inet(0x2, 0x2, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) 993.244126ms ago: executing program 4 (id=1048): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="05000000020800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000900f0000000000000000e4ff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x80}}, 0x4044) 993.138476ms ago: executing program 4 (id=1049): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xd4) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x0, 0xfffffe01, &(0x7f0000000340)="1b050d3cea5109b74c957b314041326aaf9f83ff29c6b7105abef96348f99dbbb71d8d17a22b9e"}) 196.972325ms ago: executing program 1 (id=1050): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) syz_emit_ethernet(0x22, &(0x7f00000003c0)={@broadcast, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@can={0xc, {{0x3, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "dc7e2056752e5fdb"}}}}, 0x0) 83.868078ms ago: executing program 1 (id=1051): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000300), &(0x7f0000000340)=r2}, 0x20) 0s ago: executing program 1 (id=1052): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x5}}]}}]}, 0x48}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7e, 0xffffffffffffffff, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) kernel console output (not intermixed with test programs): (NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.080366][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.088951][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.097490][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.105392][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.113808][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.121405][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.137130][ T287] device veth0_vlan entered promiscuous mode [ 25.144315][ T286] device veth0_vlan entered promiscuous mode [ 25.144941][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 25.161211][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.170986][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.179558][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.188425][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.196957][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.207807][ T289] device veth0_vlan entered promiscuous mode [ 25.216489][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.224994][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.232740][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.251551][ T287] device veth1_macvtap entered promiscuous mode [ 25.274396][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.284895][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.294028][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.303655][ T286] device veth1_macvtap entered promiscuous mode [ 25.312978][ T289] device veth1_macvtap entered promiscuous mode [ 25.326109][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.333863][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.342840][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.351748][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.364312][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.372765][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.406198][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.421834][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.431969][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.440764][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.450473][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.459585][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.468809][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.478029][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.541545][ T322] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.578962][ T327] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9'. [ 25.606727][ T331] UDC core: couldn't find an available UDC or it's busy: -16 [ 25.618378][ T331] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 25.646357][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.848999][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.876270][ T314] android_work: sent uevent USB_STATE=CONNECTED [ 26.226563][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 26.259583][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 26.296697][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 26.313804][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 26.328793][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 26.359285][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 26.378097][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 26.386915][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 26.426287][ T39] usb 1-1: Dual-Role OTG device on HNP port [ 26.446212][ T39] usb 1-1: New USB device found, idVendor=17b3, idProduct=0004, bcdDevice= 5.15 [ 26.464795][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.484481][ T39] usb 1-1: Product: ACMESynth [ 26.517096][ T293] android_work: sent uevent USB_STATE=CONFIGURED [ 26.536168][ T6] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 26.551995][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.568877][ T6] usb 5-1: Product: syz [ 26.577565][ T6] usb 5-1: Manufacturer: syz [ 26.587774][ T6] usb 5-1: SerialNumber: syz [ 27.087681][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 27.133330][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.143950][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 27.152806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.161250][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.169868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.178633][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.197678][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.203163][ T360] capability: warning: `syz.3.20' uses 32-bit capabilities (legacy support in use) [ 27.272317][ T369] netlink: 52 bytes leftover after parsing attributes in process `syz.0.24'. [ 27.295853][ T373] UDC core: couldn't find an available UDC or it's busy: -16 [ 27.303604][ T373] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 27.498052][ T375] Invalid ELF header magic: != ELF [ 27.883442][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 27.883541][ T30] audit: type=1400 audit(1784927491.929:130): avc: denied { sys_module } for pid=370 comm="syz.3.25" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 28.010596][ T30] audit: type=1400 audit(1784927491.929:131): avc: denied { module_load } for pid=370 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 28.030204][ T30] audit: type=1400 audit(1784927492.209:132): avc: denied { create } for pid=370 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.056156][ T30] audit: type=1400 audit(1784927492.299:133): avc: denied { setattr } for pid=370 comm="syz.3.25" path="socket:[15943]" dev="sockfs" ino=15943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.093980][ T30] audit: type=1400 audit(1784927492.529:134): avc: denied { name_bind } for pid=381 comm="syz.1.29" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 28.143876][ T30] audit: type=1400 audit(1784927492.569:135): avc: denied { ioctl } for pid=383 comm="syz.1.30" path="socket:[16559]" dev="sockfs" ino=16559 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.227068][ T30] audit: type=1400 audit(1784927492.609:136): avc: denied { create } for pid=385 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.249795][ T30] audit: type=1400 audit(1784927492.609:137): avc: denied { setopt } for pid=385 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.273333][ T30] audit: type=1400 audit(1784927492.609:138): avc: denied { write } for pid=385 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.294364][ T30] audit: type=1400 audit(1784927492.609:139): avc: denied { nlmsg_write } for pid=385 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.324821][ T313] usb 5-1: USB disconnect, device number 2 [ 28.336105][ T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.370972][ T392] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 28.576207][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 28.856188][ T60] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 28.865733][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.873856][ T60] usb 3-1: Product: syz [ 28.878159][ T60] usb 3-1: Manufacturer: syz [ 28.882867][ T60] usb 3-1: SerialNumber: syz [ 28.888512][ T60] usb 3-1: config 0 descriptor?? [ 29.167310][ T409] loop1: detected capacity change from 0 to 1024 [ 29.217615][ T409] EXT4-fs (loop1): Ignoring removed nobh option [ 29.238396][ T409] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 29.603822][ T417] netlink: 36 bytes leftover after parsing attributes in process `syz.0.40'. [ 29.726653][ T427] ======================================================= [ 29.726653][ T427] WARNING: The mand mount option has been deprecated and [ 29.726653][ T427] and is ignored by this kernel. Remove the mand [ 29.726653][ T427] option from the mount to silence this warning. [ 29.726653][ T427] ======================================================= [ 29.936100][ T313] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 30.186194][ T313] usb 5-1: Using ep0 maxpacket: 8 [ 30.326465][ T313] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.367803][ T313] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 30.399840][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.546694][ T313] usb 5-1: config 0 descriptor?? [ 30.632594][ T451] binder: 450:451 ioctl 4018620d 0 returned -22 [ 30.662622][ T454] loop0: detected capacity change from 0 to 1024 [ 30.676157][ T454] EXT4-fs (loop0): Ignoring removed nobh option [ 30.699297][ T454] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 30.875614][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 30.886614][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 30.905214][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 30.914443][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 30.926608][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 30.936786][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 30.946950][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 30.960546][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.026079][ T20] usb 3-1: USB disconnect, device number 2 [ 31.046148][ T428] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.125752][ T485] process 'syz.0.67' launched './file0' with NULL argv: empty string added [ 31.240417][ T490] loop0: detected capacity change from 0 to 1024 [ 31.306753][ T490] EXT4-fs (loop0): Ignoring removed nobh option [ 31.314920][ T496] netlink: 52 bytes leftover after parsing attributes in process `syz.2.72'. [ 31.336299][ T490] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 31.399388][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 31.408621][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.418058][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 31.438313][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.447295][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.455852][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.465882][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.482503][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.046215][ T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.116193][ T428] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 32.125363][ T428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.133667][ T428] usb 2-1: Product: syz [ 32.139105][ T428] usb 2-1: Manufacturer: syz [ 32.143908][ T428] usb 2-1: SerialNumber: syz [ 32.186666][ T428] usb 2-1: UAS is ignored for this device, using usb-storage instead [ 32.195187][ T428] usb 2-1: UAS is ignored for this device, using usb-storage instead [ 32.203382][ T428] usb-storage 2-1:1.0: USB Mass Storage device detected [ 32.211135][ T428] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 32.219720][ T428] scsi host1: usb-storage 2-1:1.0 [ 32.286301][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 32.466512][ T26] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 32.474017][ T26] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 32.503602][ T26] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 32.521519][ T26] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 32.532804][ T26] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 32.549182][ T26] usb 4-1: config 168 interface 0 has no altsetting 0 [ 32.644380][ T314] usb 5-1: USB disconnect, device number 3 [ 32.826222][ T26] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 32.836245][ T26] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 32.863045][ T538] netlink: 52 bytes leftover after parsing attributes in process `syz.4.84'. [ 32.873459][ T26] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 32.890362][ T26] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 32.919040][ T26] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 32.937841][ T26] usb 4-1: config 168 interface 0 has no altsetting 0 [ 32.948410][ T540] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.996833][ T543] netlink: 36 bytes leftover after parsing attributes in process `syz.4.86'. [ 33.016378][ T26] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 33.031673][ T26] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 33.055867][ T26] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 33.080338][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 33.089508][ T26] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 33.103646][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.121723][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 33.131916][ T26] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 33.159342][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.169634][ T26] usb 4-1: config 168 interface 0 has no altsetting 0 [ 33.177239][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.223726][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.233409][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.243551][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.436973][ T428] usb 2-1: USB disconnect, device number 2 [ 33.456892][ T559] UDC core: couldn't find an available UDC or it's busy: -16 [ 33.464393][ T559] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 33.516212][ T26] usb 4-1: string descriptor 0 read error: -22 [ 33.526265][ T26] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 33.536601][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.604826][ T567] netlink: 52 bytes leftover after parsing attributes in process `syz.2.96'. [ 33.635385][ T569] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 33.816149][ T39] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 34.081780][ T20] usb 4-1: USB disconnect, device number 2 [ 34.127194][ T580] syz.0.100 (580) used greatest stack depth: 22152 bytes left [ 34.166407][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 34.281920][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 34.281935][ T30] audit: type=1400 audit(1784927498.719:176): avc: denied { create } for pid=592 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.315312][ T30] audit: type=1400 audit(1784927498.749:177): avc: denied { connect } for pid=592 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.346247][ T39] usb 5-1: config 0 has no interfaces? [ 34.352269][ T39] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 34.361942][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.376257][ T30] audit: type=1400 audit(1784927498.809:178): avc: denied { setopt } for pid=598 comm="syz.0.109" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.397644][ T39] usb 5-1: config 0 descriptor?? [ 34.408698][ T601] UDC core: couldn't find an available UDC or it's busy: -16 [ 34.416310][ T601] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.486095][ T603] tipc: Started in network mode [ 34.491106][ T603] tipc: Node identity , cluster identity 4711 [ 34.497255][ T603] tipc: Failed to obtain node identity [ 34.502831][ T603] tipc: Enabling of bearer rejected, failed to enable media [ 34.802699][ T607] pimreg: tun_chr_ioctl cmd 1074025678 [ 34.808562][ T607] pimreg: group set to 0 [ 35.031235][ T30] audit: type=1400 audit(1784927499.469:179): avc: denied { mount } for pid=616 comm="syz.3.116" name="/" dev="ramfs" ino=18570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 35.126140][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.294663][ T30] audit: type=1326 audit(1784927499.729:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=623 comm="syz.1.118" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 35.326165][ T30] audit: type=1326 audit(1784927499.739:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=623 comm="syz.1.118" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 35.415721][ T30] audit: type=1326 audit(1784927499.739:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=623 comm="syz.1.118" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 35.507757][ T30] audit: type=1326 audit(1784927499.739:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=623 comm="syz.1.118" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 35.533796][ T39] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 35.546879][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.591828][ T30] audit: type=1326 audit(1784927499.739:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=623 comm="syz.1.118" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 35.635817][ T633] loop1: detected capacity change from 0 to 1024 [ 35.647996][ T30] audit: type=1326 audit(1784927499.739:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=623 comm="syz.1.118" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 35.675002][ T39] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 35.693513][ T39] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 35.722539][ T633] EXT4-fs (loop1): Ignoring removed nobh option [ 35.725279][ T39] usb 3-1: Manufacturer: syz [ 35.782533][ T39] usb 3-1: config 0 descriptor?? [ 35.886607][ T633] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 36.488501][ T651] binder: 648:651 ioctl c0306201 0 returned -14 [ 36.572158][ T39] usb 5-1: USB disconnect, device number 4 [ 38.311417][ T428] usb 3-1: USB disconnect, device number 3 [ 38.492822][ T699] loop2: detected capacity change from 0 to 1024 [ 38.550287][ T701] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 38.658133][ T699] EXT4-fs (loop2): Ignoring removed nobh option [ 38.700074][ T699] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 39.258560][ T313] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 39.307854][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 39.307871][ T30] audit: type=1400 audit(1784927503.749:204): avc: denied { create } for pid=727 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 39.455956][ T30] audit: type=1400 audit(1784927503.889:205): avc: denied { create } for pid=733 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 39.481472][ T30] audit: type=1400 audit(1784927503.889:206): avc: denied { write } for pid=733 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 39.525248][ T30] audit: type=1400 audit(1784927503.959:207): avc: denied { ioctl } for pid=739 comm="syz.1.158" path="socket:[18828]" dev="sockfs" ino=18828 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.550944][ T313] usb 3-1: Using ep0 maxpacket: 16 [ 39.572460][ T30] audit: type=1400 audit(1784927504.009:208): avc: denied { read } for pid=741 comm="syz.4.160" name="/" dev="configfs" ino=13680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 39.594532][ T30] audit: type=1400 audit(1784927504.009:209): avc: denied { open } for pid=741 comm="syz.4.160" path="/26/config" dev="configfs" ino=13680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 39.618138][ T30] audit: type=1400 audit(1784927504.009:210): avc: denied { read } for pid=741 comm="syz.4.160" name="product" dev="configfs" ino=18837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 39.706132][ T313] usb 3-1: config 0 has no interfaces? [ 39.754250][ T30] audit: type=1400 audit(1784927504.189:211): avc: denied { ioctl } for pid=764 comm="syz.0.169" path="socket:[18015]" dev="sockfs" ino=18015 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.802511][ T30] audit: type=1400 audit(1784927504.239:212): avc: denied { read } for pid=767 comm="syz.0.170" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.845423][ T30] audit: type=1400 audit(1784927504.239:213): avc: denied { open } for pid=767 comm="syz.0.170" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.896199][ T313] usb 3-1: New USB device found, idVendor=0403, idProduct=7da9, bcdDevice= 8.3f [ 39.916328][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.938189][ T775] binder: BINDER_SET_CONTEXT_MGR already set [ 39.944430][ T777] netlink: 'syz.1.174': attribute type 46 has an invalid length. [ 39.944451][ T777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'. [ 39.965507][ T313] usb 3-1: Product: syz [ 39.971909][ T313] usb 3-1: Manufacturer: syz [ 39.977264][ T313] usb 3-1: SerialNumber: syz [ 39.987447][ T313] usb 3-1: config 0 descriptor?? [ 39.992893][ T775] binder: 774:775 ioctl 4018620d 200000004a80 returned -16 [ 40.266869][ T313] usb 3-1: USB disconnect, device number 4 [ 40.953779][ T803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.185'. [ 40.962858][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 40.971822][ T805] 9pnet: Insufficient options for proto=fd [ 40.988874][ T803] Zero length message leads to an empty skb [ 41.113249][ T816] loop4: detected capacity change from 0 to 1024 [ 41.161168][ T816] EXT4-fs (loop4): Ignoring removed nobh option [ 41.221133][ T816] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 41.535983][ T840] syz.3.199 (840) used greatest stack depth: 21864 bytes left [ 41.581549][ T845] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 41.646181][ T26] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 41.659084][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.667327][ T26] usb 2-1: Product: syz [ 41.671585][ T26] usb 2-1: Manufacturer: syz [ 41.676423][ T26] usb 2-1: SerialNumber: syz [ 41.684657][ T26] usb 2-1: config 0 descriptor?? [ 41.844527][ T851] syz.3.202 (851) used greatest stack depth: 21728 bytes left [ 42.122448][ T864] loop2: detected capacity change from 0 to 1024 [ 42.131900][ T866] UDC core: couldn't find an available UDC or it's busy: -16 [ 42.140372][ T866] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 42.149794][ T864] EXT4-fs (loop2): Ignoring removed nobh option [ 42.186761][ T864] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 42.232308][ T876] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 42.446065][ T800] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 42.741420][ T800] usb 4-1: Using ep0 maxpacket: 8 [ 43.225957][ T800] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.236236][ T800] usb 4-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 43.249169][ T800] usb 4-1: config 1 interface 0 has no altsetting 0 [ 43.305774][ T910] loop4: detected capacity change from 0 to 1024 [ 43.327092][ T910] EXT4-fs (loop4): Ignoring removed nobh option [ 43.356815][ T910] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 43.426253][ T800] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.447549][ T800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.463766][ T800] usb 4-1: Product: syz [ 43.464356][ T915] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.472491][ T800] usb 4-1: Manufacturer: syz [ 43.487697][ T800] usb 4-1: SerialNumber: syz [ 43.710757][ T60] usb 2-1: USB disconnect, device number 3 [ 43.786115][ T313] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 44.206597][ T800] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 44.214527][ T800] usb 4-1: USB disconnect, device number 3 [ 44.456432][ T20] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 44.516138][ T313] usb 5-1: unable to get BOS descriptor or descriptor too short [ 44.596133][ T313] usb 5-1: config 160 has an invalid interface number: 168 but max is 0 [ 44.604619][ T313] usb 5-1: config 160 has no interface number 0 [ 44.611062][ T313] usb 5-1: config 160 interface 168 has no altsetting 0 [ 44.696307][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 44.776247][ T313] usb 5-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 44.785561][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.793920][ T313] usb 5-1: Product: syz [ 44.798189][ T313] usb 5-1: Manufacturer: syz [ 44.802863][ T313] usb 5-1: SerialNumber: syz [ 44.816159][ T20] usb 3-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 44.827319][ T20] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 44.840461][ T20] usb 3-1: config 0 interface 0 has no altsetting 0 [ 44.847263][ T20] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a30, bcdDevice= 0.00 [ 44.856384][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.865226][ T20] usb 3-1: config 0 descriptor?? [ 45.179837][ T313] usb 5-1: USB disconnect, device number 5 [ 45.337126][ T20] hid (null): report_id 0 is invalid [ 45.348703][ T20] hid-generic 0003:1B1C:0A30.0001: report_id 0 is invalid [ 45.356184][ T20] hid-generic 0003:1B1C:0A30.0001: item 0 4 1 8 parsing failed [ 45.364641][ T20] hid-generic: probe of 0003:1B1C:0A30.0001 failed with error -22 [ 45.676872][ T20] usb 3-1: USB disconnect, device number 5 [ 46.946120][ T800] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 46.966062][ C1] raw-gadget.0 gadget: ignoring, device is not running [ 46.986064][ C1] raw-gadget.0 gadget: ignoring, device is not running [ 47.006063][ C1] raw-gadget.0 gadget: ignoring, device is not running [ 47.096552][ T961] netlink: 'syz.0.240': attribute type 21 has an invalid length. [ 47.143948][ T970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.246'. [ 47.156104][ T800] usb 2-1: device descriptor read/64, error -32 [ 47.272556][ T977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.246'. [ 47.542183][ T800] usb 2-1: Using ep0 maxpacket: 8 [ 47.601588][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 47.601606][ T30] audit: type=1326 audit(1784927512.029:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=990 comm="syz.4.254" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f89e5fe99 code=0x0 [ 47.696256][ T996] capability: warning: `syz.4.256' uses deprecated v2 capabilities in a way that may be insecure [ 47.707176][ T800] usb 2-1: config 1 interface 0 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 64 [ 47.717520][ T800] usb 2-1: config 1 interface 0 altsetting 10 bulk endpoint 0x3 has invalid maxpacket 32 [ 47.732664][ T800] usb 2-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 47.766115][ T800] usb 2-1: config 1 interface 0 has no altsetting 0 [ 47.974795][ T800] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.071760][ T800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.104313][ T800] usb 2-1: Product: syz [ 48.118626][ T800] usb 2-1: Manufacturer: syz [ 48.129419][ T800] usb 2-1: SerialNumber: syz [ 48.256731][ T957] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 48.268761][ T957] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 48.656995][ T800] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 48.711472][ T800] usb 2-1: USB disconnect, device number 4 [ 48.963951][ T1015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.262'. [ 49.116148][ T30] audit: type=1400 audit(1784927513.549:235): avc: denied { getopt } for pid=1026 comm="syz.3.268" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.184224][ T30] audit: type=1400 audit(1784927513.599:236): avc: denied { unlink } for pid=1030 comm="syz.2.270" name="#1" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 50.122475][ T30] audit: type=1400 audit(1784927514.559:237): avc: denied { write } for pid=1049 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.243808][ T30] audit: type=1400 audit(1784927514.659:238): avc: denied { create } for pid=1051 comm="syz.3.275" dev="anon_inodefs" ino=20632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.308862][ T1060] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 50.363683][ T1071] loop1: detected capacity change from 0 to 1024 [ 50.422223][ T1071] EXT4-fs (loop1): Ignoring removed nobh option [ 50.505549][ T1071] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 50.566120][ T26] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 50.573760][ T314] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 50.635725][ T30] audit: type=1400 audit(1784927515.069:239): avc: denied { ioctl } for pid=1081 comm="syz.1.285" path="socket:[19897]" dev="sockfs" ino=19897 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.836065][ T314] usb 5-1: Using ep0 maxpacket: 32 [ 50.956228][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.967376][ T26] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 50.976517][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.985453][ T26] usb 3-1: config 0 descriptor?? [ 51.116231][ T314] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 51.170233][ T314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.182706][ T314] usb 5-1: Product: syz [ 51.187283][ T314] usb 5-1: Manufacturer: syz [ 51.191920][ T314] usb 5-1: SerialNumber: syz [ 51.199842][ T314] usb 5-1: config 0 descriptor?? [ 51.336305][ T26] usbhid 3-1:0.0: can't add hid device: -71 [ 51.342567][ T26] usbhid: probe of 3-1:0.0 failed with error -71 [ 51.357270][ T26] usb 3-1: USB disconnect, device number 6 [ 52.156108][ T26] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 52.307257][ T1114] loop0: detected capacity change from 0 to 1024 [ 52.341885][ T1114] EXT4-fs (loop0): Ignoring removed nobh option [ 52.357578][ T1114] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 52.714155][ T30] audit: type=1400 audit(1784927517.149:240): avc: denied { create } for pid=1122 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.734043][ T30] audit: type=1400 audit(1784927517.159:241): avc: denied { write } for pid=1122 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.736728][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.764956][ T26] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 52.774354][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.783365][ T26] usb 3-1: config 0 descriptor?? [ 53.066136][ T1048] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 53.230183][ T1132] binder: 1130:1132 ioctl 4018620d 0 returned -22 [ 53.306152][ T800] usb 5-1: USB disconnect, device number 6 [ 53.316395][ T1048] usb 2-1: Using ep0 maxpacket: 16 [ 53.446142][ T1048] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.456630][ T1048] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 53.684128][ T1048] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 53.736161][ T26] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 53.738426][ T1048] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 53.753196][ T26] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 53.764223][ T30] audit: type=1400 audit(1784927518.189:242): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=639 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.786674][ T30] audit: type=1400 audit(1784927518.189:243): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=639 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.810457][ T1048] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.823736][ T30] audit: type=1400 audit(1784927518.189:244): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=639 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.906626][ T1048] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 53.918238][ T1048] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 53.930501][ T1048] usb 2-1: Manufacturer: syz [ 53.939238][ T1048] usb 2-1: config 0 descriptor?? [ 54.026075][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 54.212720][ T800] usb 3-1: USB disconnect, device number 7 [ 54.218673][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 54.249199][ T1149] syz.4.307 uses obsolete (PF_INET,SOCK_PACKET) [ 54.276143][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 54.396325][ T26] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 54.420850][ T1154] loop4: detected capacity change from 0 to 1024 [ 54.469848][ T1154] EXT4-fs (loop4): Ignoring removed nobh option [ 54.497899][ T1154] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 54.576270][ T26] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 54.588372][ T26] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 54.612241][ T26] usb 4-1: Product: syz [ 54.620024][ T26] usb 4-1: Manufacturer: syz [ 54.624692][ T26] usb 4-1: SerialNumber: syz [ 54.634900][ T26] usb 4-1: config 0 descriptor?? [ 54.656173][ T1143] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 54.676490][ T26] hub 4-1:0.0: bad descriptor, ignoring hub [ 54.682451][ T26] hub: probe of 4-1:0.0 failed with error -5 [ 54.728501][ T1172] netlink: 44 bytes leftover after parsing attributes in process `syz.0.315'. [ 54.739663][ T1172] netlink: 31 bytes leftover after parsing attributes in process `syz.0.315'. [ 54.749634][ T1172] netlink: 'syz.0.315': attribute type 5 has an invalid length. [ 54.757449][ T1172] netlink: 31 bytes leftover after parsing attributes in process `syz.0.315'. [ 54.850969][ T30] audit: type=1400 audit(1784927519.289:245): avc: denied { create } for pid=1176 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.996550][ T26] usb 4-1: USB disconnect, device number 4 [ 55.182873][ T30] audit: type=1400 audit(1784927519.619:246): avc: denied { create } for pid=1181 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.204782][ T30] audit: type=1400 audit(1784927519.639:247): avc: denied { bind } for pid=1181 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.224830][ T30] audit: type=1400 audit(1784927519.639:248): avc: denied { listen } for pid=1181 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.245406][ T30] audit: type=1400 audit(1784927519.639:249): avc: denied { connect } for pid=1181 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.424473][ T1187] loop3: detected capacity change from 0 to 1024 [ 55.436939][ T1187] EXT4-fs (loop3): Ignoring removed nobh option [ 55.468327][ T1187] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 55.640573][ T1208] tipc: Started in network mode [ 55.665318][ T1208] tipc: Node identity d6b8befc08cf, cluster identity 4711 [ 55.672988][ T1208] tipc: Enabled bearer , priority 0 [ 55.684203][ T1208] device syzkaller0 entered promiscuous mode [ 55.704512][ T1208] tipc: Resetting bearer [ 55.714952][ T1207] tipc: Resetting bearer [ 55.746851][ T1207] tipc: Disabling bearer [ 55.819087][ T800] usb 2-1: USB disconnect, device number 5 [ 55.827986][ T1217] loop2: detected capacity change from 0 to 1024 [ 55.866634][ T1217] EXT4-fs (loop2): Ignoring removed nobh option [ 55.899643][ T1217] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 55.936089][ T1048] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 55.996176][ T39] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 56.176405][ T1048] usb 5-1: Using ep0 maxpacket: 16 [ 56.246166][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 56.296162][ T1048] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.306456][ T1048] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.416187][ T39] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 56.424392][ T39] usb 4-1: config 0 has no interface number 0 [ 56.572677][ T1048] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.581806][ T1048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.590005][ T1048] usb 5-1: Product: syz [ 56.594245][ T1048] usb 5-1: Manufacturer: syz [ 56.598903][ T1048] usb 5-1: SerialNumber: syz [ 56.666199][ T39] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 56.675359][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.683467][ T39] usb 4-1: Product: syz [ 56.687710][ T39] usb 4-1: Manufacturer: syz [ 56.692359][ T39] usb 4-1: SerialNumber: syz [ 56.697949][ T39] usb 4-1: config 0 descriptor?? [ 56.908229][ T1048] usb 5-1: 0:2 : does not exist [ 56.913305][ T1048] usb 5-1: unit 6 not found! [ 56.936508][ T1048] usb 5-1: USB disconnect, device number 7 [ 58.298269][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 58.298352][ T30] audit: type=1400 audit(1784927522.739:265): avc: denied { connect } for pid=1278 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.636377][ T1287] UDC core: couldn't find an available UDC or it's busy: -16 [ 58.647010][ T1287] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 58.716214][ T20] usb 4-1: USB disconnect, device number 5 [ 58.791467][ T30] audit: type=1400 audit(1784927523.229:266): avc: denied { read } for pid=1307 comm="syz.2.367" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.839085][ T30] audit: type=1400 audit(1784927523.239:267): avc: denied { ioctl } for pid=1303 comm="syz.3.366" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21268 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.954414][ T1318] netlink: 592 bytes leftover after parsing attributes in process `syz.2.371'. [ 59.025397][ T30] audit: type=1400 audit(1784927523.459:268): avc: denied { block_suspend } for pid=1322 comm="syz.1.373" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.026891][ T1048] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 59.153311][ T1335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'. [ 59.206762][ T1346] UDC core: couldn't find an available UDC or it's busy: -16 [ 59.214368][ T1346] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 59.549201][ T1048] usb 5-1: config 0 has no interfaces? [ 59.556859][ T1048] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 59.567152][ T1048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.686855][ T1048] usb 5-1: config 0 descriptor?? [ 59.787593][ T1363] UDC core: couldn't find an available UDC or it's busy: -16 [ 59.795123][ T1363] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 59.929457][ T1300] UDC core: couldn't find an available UDC or it's busy: -16 [ 59.937072][ T1300] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 59.945157][ T1048] usb 5-1: USB disconnect, device number 8 [ 60.271217][ T1372] IPv6: NLM_F_CREATE should be specified when creating new route [ 60.302310][ T1373] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 60.339567][ T1373] EXT4-fs (loop3): unable to read superblock [ 60.490506][ T1370] overlayfs: failed to resolve './file2': -2 [ 60.497235][ T1370] overlayfs: unrecognized mount option "index=on:/" or missing value [ 60.507405][ T30] audit: type=1400 audit(1784927524.949:269): avc: denied { name_bind } for pid=1376 comm="syz.0.394" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 60.558243][ T1379] device syzkaller0 entered promiscuous mode [ 60.714529][ T1382] loop3: detected capacity change from 0 to 1024 [ 60.736135][ T26] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 60.758930][ T1382] EXT4-fs (loop3): Ignoring removed nobh option [ 60.783324][ T1382] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 61.066140][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 61.106152][ T1048] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 61.206155][ T26] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 61.216815][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 61.227935][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 61.246137][ T428] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 61.396187][ T26] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 61.405404][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.413674][ T26] usb 3-1: Product: syz [ 61.418125][ T26] usb 3-1: Manufacturer: syz [ 61.422998][ T26] usb 3-1: SerialNumber: syz [ 61.428629][ T26] usb 3-1: config 0 descriptor?? [ 61.486182][ T1048] usb 5-1: config 1 has an invalid interface number: 170 but max is 0 [ 61.494567][ T1048] usb 5-1: config 1 has no interface number 0 [ 61.500808][ T1048] usb 5-1: config 1 interface 170 has no altsetting 0 [ 61.536186][ T428] usb 4-1: too many configurations: 13, using maximum allowed: 8 [ 61.616136][ T428] usb 4-1: config 0 has no interfaces? [ 61.696158][ T428] usb 4-1: config 0 has no interfaces? [ 61.885335][ T1048] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f3.04 [ 61.894909][ T1048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.903028][ T1048] usb 5-1: Product: syz [ 61.907302][ T1048] usb 5-1: Manufacturer: syz [ 61.911939][ T1048] usb 5-1: SerialNumber: syz [ 61.926173][ T428] usb 4-1: config 0 has no interfaces? [ 61.936197][ T1048] usb 5-1: can't set config #1, error -71 [ 61.942896][ T1048] usb 5-1: USB disconnect, device number 9 [ 62.006200][ T428] usb 4-1: config 0 has no interfaces? [ 62.086209][ T428] usb 4-1: config 0 has no interfaces? [ 62.166151][ T428] usb 4-1: config 0 has no interfaces? [ 62.246221][ T428] usb 4-1: config 0 has no interfaces? [ 62.326230][ T428] usb 4-1: config 0 has no interfaces? [ 62.413599][ T1407] netlink: 'syz.1.405': attribute type 4 has an invalid length. [ 62.433190][ T30] audit: type=1400 audit(1784927526.869:270): avc: denied { read } for pid=1408 comm="syz.1.406" name="usbmon3" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.457506][ T30] audit: type=1400 audit(1784927526.899:271): avc: denied { open } for pid=1408 comm="syz.1.406" path="/dev/usbmon3" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.488565][ T30] audit: type=1400 audit(1784927526.919:272): avc: denied { ioctl } for pid=1408 comm="syz.1.406" path="/dev/usbmon3" dev="devtmpfs" ino=164 ioctlcmd=0x7009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.514118][ T428] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.523982][ T428] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.532386][ T428] usb 4-1: Product: syz [ 62.536714][ T428] usb 4-1: Manufacturer: syz [ 62.541415][ T428] usb 4-1: SerialNumber: syz [ 62.551645][ T428] usb 4-1: config 0 descriptor?? [ 62.641859][ T1417] loop0: detected capacity change from 0 to 1024 [ 62.736719][ T1417] EXT4-fs (loop0): Ignoring removed nobh option [ 62.750603][ T1417] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 62.799058][ T1392] UDC core: couldn't find an available UDC or it's busy: -16 [ 62.806872][ T1392] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 62.814828][ T1048] usb 4-1: USB disconnect, device number 6 [ 63.266793][ T1449] loop0: detected capacity change from 0 to 1024 [ 63.302193][ T1449] EXT4-fs (loop0): Ignoring removed nobh option [ 63.317858][ T1449] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 63.479134][ T60] usb 3-1: USB disconnect, device number 8 [ 63.526130][ T1048] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 63.606259][ T30] audit: type=1400 audit(1784927528.049:273): avc: denied { nlmsg_write } for pid=1468 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 63.966178][ T1048] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 63.977314][ T1048] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 63.988085][ T1048] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 64.015632][ T1480] loop1: detected capacity change from 0 to 1024 [ 64.053369][ T1486] netlink: 60 bytes leftover after parsing attributes in process `syz.4.435'. [ 64.063657][ T1480] EXT4-fs (loop1): Ignoring removed nobh option [ 64.081497][ T1480] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 64.086210][ T1490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'. [ 64.166243][ T1048] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 64.175903][ T1048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.236266][ T1048] usb 4-1: Product: syz [ 64.240563][ T1048] usb 4-1: Manufacturer: syz [ 64.245242][ T1048] usb 4-1: SerialNumber: syz [ 64.648046][ T1048] usb 4-1: config 0 descriptor?? [ 64.666145][ T1048] usb 4-1: can't set config #0, error -71 [ 64.679340][ T1048] usb 4-1: USB disconnect, device number 7 [ 64.740933][ T1510] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.748439][ T1510] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.835706][ T1510] syz.2.443 (1510) used greatest stack depth: 21544 bytes left [ 64.860923][ T1520] netlink: 40 bytes leftover after parsing attributes in process `syz.3.447'. [ 64.870374][ T1520] netlink: 40 bytes leftover after parsing attributes in process `syz.3.447'. [ 64.904732][ T1522] loop2: detected capacity change from 0 to 1024 [ 64.978342][ T1522] EXT4-fs (loop2): Ignoring removed nobh option [ 65.041906][ T30] audit: type=1400 audit(1784927529.479:274): avc: denied { setopt } for pid=1525 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.074784][ T1522] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 65.672076][ T1555] netlink: 48 bytes leftover after parsing attributes in process `syz.2.460'. [ 65.757558][ T1563] loop0: detected capacity change from 0 to 1024 [ 65.786134][ T1563] EXT4-fs (loop0): Ignoring removed nobh option [ 65.805304][ T1563] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 66.238505][ T1602] loop4: detected capacity change from 0 to 1024 [ 66.743510][ T1602] EXT4-fs (loop4): Ignoring removed nobh option [ 66.813548][ T26] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 66.990670][ T1602] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 67.206091][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 67.375868][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 107, changing to 10 [ 67.403947][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57417, setting to 1024 [ 67.619415][ T26] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 67.654504][ T1648] loop0: detected capacity change from 0 to 1024 [ 67.689895][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.723719][ T26] usb 3-1: config 0 descriptor?? [ 67.741535][ T1648] EXT4-fs (loop0): Ignoring removed nobh option [ 67.837625][ T1648] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,abort,data_err=ignore,max_batch_time=0x0000000000000800,user_xattr,grpid,,errors=continue. Quota mode: none. [ 67.895027][ T30] audit: type=1326 audit(1784927532.329:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1654 comm="syz.1.499" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 67.925477][ T30] audit: type=1326 audit(1784927532.339:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1654 comm="syz.1.499" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 67.959749][ T30] audit: type=1326 audit(1784927532.339:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1654 comm="syz.1.499" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 68.013443][ T30] audit: type=1326 audit(1784927532.339:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1654 comm="syz.1.499" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 68.041528][ T30] audit: type=1326 audit(1784927532.339:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1654 comm="syz.1.499" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 68.067068][ T30] audit: type=1326 audit(1784927532.339:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1654 comm="syz.1.499" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 68.093117][ T30] audit: type=1326 audit(1784927532.339:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1654 comm="syz.1.499" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 69.011451][ T1680] UDC core: couldn't find an available UDC or it's busy: -16 [ 69.027388][ T1680] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 69.703984][ T39] usb 3-1: USB disconnect, device number 9 [ 70.504956][ T514] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 70.671933][ T514] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 70.686270][ T514] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 70.816328][ T39] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 72.032769][ T514] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 72.082001][ T800] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 72.746221][ T514] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 72.755386][ T514] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.763597][ T514] usb 2-1: Product: syz [ 72.767894][ T514] usb 2-1: Manufacturer: syz [ 72.772534][ T514] usb 2-1: SerialNumber: syz [ 72.945977][ T1767] netlink: 'syz.3.538': attribute type 46 has an invalid length. [ 72.954123][ T1767] netlink: 'syz.3.538': attribute type 28 has an invalid length. [ 73.195162][ T1779] Invalid ELF header magic: != ELF [ 73.838281][ T1784] device veth0_vlan left promiscuous mode [ 73.844508][ T1784] device veth0_vlan entered promiscuous mode [ 73.852421][ T1784] device veth1_macvtap left promiscuous mode [ 73.859439][ T1784] device veth1_macvtap entered promiscuous mode [ 74.006062][ T1784] syz.2.541 (1784) used greatest stack depth: 20864 bytes left [ 74.013795][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.045000][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.089008][ T39] usb 2-1: USB disconnect, device number 6 [ 74.113176][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.124449][ T30] audit: type=1400 audit(1784927538.559:282): avc: denied { read } for pid=1791 comm="syz.1.547" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 74.148922][ T30] audit: type=1400 audit(1784927538.559:283): avc: denied { open } for pid=1791 comm="syz.1.547" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 74.172544][ T30] audit: type=1400 audit(1784927538.599:284): avc: denied { ioctl } for pid=1791 comm="syz.1.547" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 74.187075][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.204711][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.213183][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.221993][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.235983][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.243117][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.256060][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.265141][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 74.274182][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.286641][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 74.295055][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.303437][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.315889][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.327748][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.337604][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.346303][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.354736][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.364155][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.385970][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.394685][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.403035][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.411515][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.419692][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.427921][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.436433][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.444905][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.452727][ T800] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 74.463737][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.476505][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.489069][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.500186][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.508602][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.892429][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.942544][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.106109][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 75.720326][ T39] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 75.742366][ T30] audit: type=1400 audit(1784927540.179:285): avc: denied { ioctl } for pid=1822 comm="syz.0.557" path="/dev/fuse" dev="devtmpfs" ino=91 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 75.826397][ T800] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.846289][ T800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.857733][ T800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.876078][ T800] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 75.885337][ T800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.906463][ T800] usb 5-1: config 0 descriptor?? [ 76.016081][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 76.138594][ T39] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 76.164708][ T39] usb 4-1: config 0 has no interface number 0 [ 76.376165][ T39] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 76.385541][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.395307][ T800] hid-picolcd 0003:04D8:F002.0002: unknown global tag 0xd [ 76.402766][ T39] usb 4-1: Product: syz [ 76.407301][ T800] hid-picolcd 0003:04D8:F002.0002: item 0 0 1 13 parsing failed [ 76.415222][ T39] usb 4-1: Manufacturer: syz [ 76.420147][ T39] usb 4-1: SerialNumber: syz [ 76.425119][ T800] hid-picolcd 0003:04D8:F002.0002: device report parse failed [ 76.437937][ T39] usb 4-1: config 0 descriptor?? [ 76.443208][ T800] hid-picolcd: probe of 0003:04D8:F002.0002 failed with error -22 [ 76.599479][ T60] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 76.608398][ T39] usb 5-1: USB disconnect, device number 10 [ 76.689308][ T800] usb 4-1: USB disconnect, device number 8 [ 76.966128][ T60] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 77.156196][ T60] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.165816][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.174819][ T60] usb 3-1: Product: syz [ 77.179383][ T60] usb 3-1: Manufacturer: syz [ 77.184043][ T60] usb 3-1: SerialNumber: syz [ 77.860169][ T30] audit: type=1400 audit(1784927542.299:286): avc: denied { create } for pid=1870 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 77.916685][ T60] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 77.946180][ T60] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 77.972795][ T60] usb 3-1: USB disconnect, device number 10 [ 78.733413][ T1888] UDC core: couldn't find an available UDC or it's busy: -16 [ 78.741051][ T800] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 78.749053][ T1888] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.106914][ T800] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.117510][ T800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 79.128610][ T800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.138479][ T800] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 79.147623][ T800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.177027][ T800] usb 2-1: config 0 descriptor?? [ 79.675208][ T800] hid-picolcd 0003:04D8:F002.0003: unknown global tag 0xd [ 79.684960][ T800] hid-picolcd 0003:04D8:F002.0003: item 0 0 1 13 parsing failed [ 79.693245][ T800] hid-picolcd 0003:04D8:F002.0003: device report parse failed [ 79.701115][ T800] hid-picolcd: probe of 0003:04D8:F002.0003 failed with error -22 [ 79.863460][ T39] usb 2-1: USB disconnect, device number 7 [ 79.996178][ T800] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 80.016229][ T1135] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 80.189747][ T1942] binder: 1940:1942 ioctl c0306201 0 returned -14 [ 80.236115][ T800] usb 3-1: Using ep0 maxpacket: 8 [ 80.356229][ T800] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 80.363756][ T800] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 80.375289][ T800] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 80.387779][ T800] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 80.399552][ T800] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 80.413369][ T800] usb 3-1: config 168 interface 0 has no altsetting 0 [ 80.516218][ T800] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 80.523746][ T800] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 80.535047][ T800] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 80.547097][ T800] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 80.558234][ T800] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 80.572193][ T1135] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 80.582239][ T800] usb 3-1: config 168 interface 0 has no altsetting 0 [ 80.589743][ T1135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.599516][ T1135] usb 4-1: Product: syz [ 80.603940][ T1135] usb 4-1: Manufacturer: syz [ 80.609773][ T1135] usb 4-1: SerialNumber: syz [ 80.650867][ T1135] usb 4-1: config 0 descriptor?? [ 80.716353][ T800] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 80.743412][ T800] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 80.755352][ T800] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 80.767309][ T800] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 80.778524][ T800] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 80.792486][ T800] usb 3-1: config 168 interface 0 has no altsetting 0 [ 81.036151][ T800] usb 3-1: string descriptor 0 read error: -22 [ 81.042545][ T800] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 81.051703][ T800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.246116][ T1135] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 81.315500][ T800] usb 3-1: USB disconnect, device number 11 [ 81.376657][ T1957] syz.0.612 (1957) used greatest stack depth: 20576 bytes left [ 81.676212][ T1135] usb 5-1: unable to get BOS descriptor or descriptor too short [ 81.766182][ T1135] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 81.774601][ T1135] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 81.784997][ T1135] usb 5-1: config 63 has no interface number 0 [ 81.791594][ T1135] usb 5-1: config 63 interface 66 has no altsetting 0 [ 81.874321][ T30] audit: type=1400 audit(1784927546.309:287): avc: denied { getopt } for pid=1967 comm="syz.2.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.966308][ T1135] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 81.979038][ T1135] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.989629][ T1135] usb 5-1: Product: syz [ 82.003288][ T1135] usb 5-1: Manufacturer: syz [ 82.008571][ T1135] usb 5-1: SerialNumber: syz [ 82.316100][ T514] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 82.456149][ T1135] usb 5-1: Found UVC 0.07 device syz (174f:8acf) [ 82.476104][ T1135] usb 5-1: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 82.496091][ T1135] usb 5-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 82.516123][ T1135] usb 5-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 82.536250][ T1135] usb 5-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 82.556146][ T1135] usb 5-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 82.565249][ T1135] usb 5-1: No streaming interface found for terminal 29. [ 82.572625][ T1135] uvcvideo 5-1:63.66: Entity type for entity Output 5 was not initialized! [ 82.591555][ T1135] usb 5-1: USB disconnect, device number 11 [ 83.026261][ T1979] Invalid ELF header magic: != ELF [ 83.483505][ T1135] usb 4-1: USB disconnect, device number 9 [ 83.576277][ T514] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 83.804462][ T1986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 83.816075][ T514] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.834163][ T1989] binder: BINDER_SET_CONTEXT_MGR already set [ 83.969879][ T514] usb 3-1: Product: syz [ 83.993265][ T1989] binder: 1988:1989 ioctl 4018620d 200000004a80 returned -16 [ 84.014558][ T514] usb 3-1: Manufacturer: syz [ 84.088648][ T514] usb 3-1: SerialNumber: syz [ 84.196751][ T514] usb 3-1: UAS is ignored for this device, using usb-storage instead [ 84.205163][ T514] usb 3-1: UAS is ignored for this device, using usb-storage instead [ 84.213557][ T514] usb-storage 3-1:1.0: USB Mass Storage device detected [ 84.221568][ T514] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 84.229812][ T514] scsi host1: usb-storage 3-1:1.0 [ 84.241092][ T1994] binder: 1988:1994 ioctl c0306201 0 returned -14 [ 84.426104][ T60] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 84.446103][ T1981] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 84.626145][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 84.696074][ T1981] usb 2-1: Using ep0 maxpacket: 8 [ 84.876215][ T1981] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 84.888383][ T2009] UDC core: couldn't find an available UDC or it's busy: -16 [ 84.896294][ T1981] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 84.909305][ T2009] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 84.921697][ T1981] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 84.934477][ T1981] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 84.946899][ T1981] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 84.961591][ T1981] usb 2-1: config 168 interface 0 has no altsetting 0 [ 85.046320][ T1981] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 85.054352][ T1981] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 85.067004][ T1981] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.079670][ T1981] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 85.089750][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.102344][ T1981] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 85.116162][ T1981] usb 2-1: config 168 interface 0 has no altsetting 0 [ 85.140281][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.150228][ T60] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.163608][ T60] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.173011][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.182156][ T60] usb 5-1: config 0 descriptor?? [ 85.196165][ T1981] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 85.203725][ T1981] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 85.215150][ T1981] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.226740][ T1981] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 85.237750][ T1981] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 85.251282][ T1981] usb 2-1: config 168 interface 0 has no altsetting 0 [ 85.403776][ T1048] usb 3-1: USB disconnect, device number 12 [ 85.496134][ T1981] usb 2-1: string descriptor 0 read error: -22 [ 85.502475][ T1981] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 85.512000][ T1981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.593572][ T2019] Invalid ELF header magic: != ELF [ 85.828291][ T1981] usb 2-1: USB disconnect, device number 8 [ 85.837189][ T60] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 85.851667][ T60] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 86.159624][ T1981] usb 5-1: USB disconnect, device number 12 [ 86.325209][ T2042] binder: 2038:2042 ioctl c0306201 0 returned -14 [ 86.350121][ T2044] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 86.389797][ T2046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 86.450594][ T2054] fuse: Bad value for 'fd' [ 87.136706][ T2068] Invalid ELF header magic: != ELF [ 87.855708][ T30] audit: type=1400 audit(1784927552.289:288): avc: denied { bind } for pid=2070 comm="syz.3.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 87.894511][ T2073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 87.941343][ T30] audit: type=1400 audit(1784927552.319:289): avc: denied { connect } for pid=2070 comm="syz.3.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.036954][ T2087] UDC core: couldn't find an available UDC or it's busy: -16 [ 88.046810][ T2087] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.099658][ T2089] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.107237][ T2089] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.670029][ T2097] fuse: Bad value for 'fd' [ 89.516947][ T2108] Invalid ELF header magic: != ELF [ 91.398328][ T2129] fuse: Bad value for 'fd' [ 91.420045][ T2131] UDC core: couldn't find an available UDC or it's busy: -16 [ 91.427762][ T2131] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 91.676293][ T293] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 91.965036][ T2145] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.972424][ T2145] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.050520][ T2147] UDC core: couldn't find an available UDC or it's busy: -16 [ 92.058168][ T2147] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 92.066322][ T293] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 92.075616][ T293] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 92.226316][ T514] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 92.236197][ T293] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 92.245367][ T293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.253798][ T293] usb 3-1: Product: syz [ 92.258199][ T293] usb 3-1: Manufacturer: syz [ 92.262864][ T293] usb 3-1: SerialNumber: syz [ 92.268393][ T293] usb 3-1: config 0 descriptor?? [ 92.606049][ T514] usb 4-1: Using ep0 maxpacket: 32 [ 92.695380][ T2154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.683'. [ 92.726218][ T514] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 92.742742][ T514] usb 4-1: config 0 has no interface number 0 [ 92.749809][ T2162] binder: BINDER_SET_CONTEXT_MGR already set [ 92.756883][ T2162] binder: 2158:2162 ioctl 4018620d 200000004a80 returned -16 [ 92.804869][ T2168] UDC core: couldn't find an available UDC or it's busy: -16 [ 92.812543][ T2168] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 92.966147][ T514] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 92.975507][ T514] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.983757][ T514] usb 4-1: Product: syz [ 92.988131][ T514] usb 4-1: Manufacturer: syz [ 92.992817][ T514] usb 4-1: SerialNumber: syz [ 93.002294][ T514] usb 4-1: config 0 descriptor?? [ 93.480869][ T2176] device veth1_macvtap left promiscuous mode [ 93.487527][ T2176] device veth1_macvtap entered promiscuous mode [ 93.494244][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.503163][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.510768][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.519042][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.526154][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.534049][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.542484][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.550702][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.557800][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.565307][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.573819][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 93.581931][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.590495][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 93.599079][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.600358][ T2179] UDC core: couldn't find an available UDC or it's busy: -16 [ 93.608301][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.614604][ T514] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 93.622845][ T2179] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 93.633056][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.645576][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.653804][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.662036][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.671313][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.680128][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.688454][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.697102][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.705411][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.713601][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.721600][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.729772][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.738326][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.746895][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.755138][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.763418][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.771610][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.016171][ T514] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.027377][ T514] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.037190][ T514] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.050125][ T514] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.059242][ T514] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.068118][ T514] usb 2-1: config 0 descriptor?? [ 94.384624][ T428] usb 3-1: USB disconnect, device number 13 [ 94.537188][ T514] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 94.546362][ T514] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 94.951249][ T428] usb 4-1: USB disconnect, device number 10 [ 94.966767][ T2197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.697'. [ 95.965968][ T2220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.707'. [ 95.992386][ T2220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.707'. [ 96.006088][ C1] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 [ 96.506912][ T2249] Invalid ELF header magic: != ELF [ 97.731346][ T2275] netlink: 220 bytes leftover after parsing attributes in process `syz.1.730'. [ 99.279004][ T2288] UDC core: couldn't find an available UDC or it's busy: -16 [ 99.287110][ T2288] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 99.375724][ T549] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 99.389608][ T2292] netem: change failed [ 99.586101][ T549] usb 2-1: device reset changed ep0 maxpacket size! [ 99.597664][ T514] usb 2-1: USB disconnect, device number 9 [ 99.693019][ T30] audit: type=1400 audit(1784927564.129:290): avc: denied { create } for pid=2295 comm="syz.4.737" name="uac2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 99.714272][ T2296] UDC core: couldn't find an available UDC or it's busy: -19 [ 99.786117][ T514] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 100.016111][ T6] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 100.046183][ T514] usb 2-1: Using ep0 maxpacket: 32 [ 100.376284][ T514] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 100.421160][ T514] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.469323][ T514] usb 2-1: config 0 has no interface number 0 [ 100.500021][ T514] usb 2-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 100.573050][ T514] usb 2-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 100.588725][ T514] usb 2-1: config 0 interface 8 has no altsetting 0 [ 100.609761][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.626601][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.636659][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.649914][ T6] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.659334][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.668406][ T6] usb 3-1: config 0 descriptor?? [ 100.741552][ T2331] netlink: 'syz.1.751': attribute type 21 has an invalid length. [ 100.756588][ T514] usb 2-1: string descriptor 0 read error: -71 [ 100.763136][ T514] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 100.774972][ T514] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.854751][ T514] usb 2-1: config 0 descriptor?? [ 100.886251][ T514] usb 2-1: can't set config #0, error -71 [ 100.898163][ T514] usb 2-1: USB disconnect, device number 10 [ 100.937014][ T2346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.758'. [ 100.956172][ T2346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.758'. [ 101.714795][ T2356] netlink: 220 bytes leftover after parsing attributes in process `syz.3.760'. [ 102.200996][ T6] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 102.219338][ T2358] fuse: Bad value for 'fd' [ 102.247192][ T6] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 102.352209][ T30] audit: type=1400 audit(1784927566.789:291): avc: denied { create } for pid=2375 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.646153][ T514] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 102.676077][ T1048] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 102.906116][ T514] usb 5-1: Using ep0 maxpacket: 32 [ 102.986064][ T1048] usb 4-1: Using ep0 maxpacket: 32 [ 103.026193][ T514] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.036594][ T514] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 32 [ 103.046405][ T514] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 103.056407][ T514] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.106102][ T1048] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 103.114241][ T1048] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.124689][ T1048] usb 4-1: config 0 has no interface number 0 [ 103.131047][ T1048] usb 4-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 103.142273][ T1048] usb 4-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 103.155683][ T1048] usb 4-1: config 0 interface 8 has no altsetting 0 [ 103.396378][ T514] usb 5-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 103.406128][ T514] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.414650][ T514] usb 5-1: Product: syz [ 103.419336][ T514] usb 5-1: Manufacturer: syz [ 103.424161][ T514] usb 5-1: SerialNumber: syz [ 103.563154][ T2393] fuse: Bad value for 'fd' [ 103.576206][ T2376] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 103.583242][ T2376] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 103.586544][ T1048] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 103.602947][ T1048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.611579][ T1048] usb 4-1: Product: syz [ 103.613852][ T293] usb 3-1: USB disconnect, device number 14 [ 103.616543][ T1048] usb 4-1: Manufacturer: syz [ 103.639125][ T2395] UDC core: couldn't find an available UDC or it's busy: -19 [ 103.646866][ T1048] usb 4-1: SerialNumber: syz [ 103.653444][ T1048] usb 4-1: config 0 descriptor?? [ 103.937628][ T1048] usb 4-1: USB disconnect, device number 11 [ 103.976503][ T514] usb 5-1: MIDIStreaming interface descriptor not found [ 103.987023][ T514] usb 5-1: USB disconnect, device number 13 [ 103.999515][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 104.041223][ T2403] fuse: Bad value for 'fd' [ 104.195535][ T2417] UDC core: couldn't find an available UDC or it's busy: -16 [ 104.203323][ T2417] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.341207][ T2431] device veth1_macvtap left promiscuous mode [ 105.348022][ T2431] device veth1_macvtap entered promiscuous mode [ 105.369521][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.418399][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.433415][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.442154][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.449308][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.456816][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.466471][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.475343][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.482450][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.490544][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.499695][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 105.508627][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.600146][ T2452] UDC core: couldn't find an available UDC or it's busy: -19 [ 105.608980][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 105.619078][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.627780][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.636514][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.644844][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.655722][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.665705][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.674334][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.683152][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.691762][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.700638][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.709080][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.725906][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.779441][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.787723][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.796268][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.804794][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.813331][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.821631][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.847562][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.278629][ T1048] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 106.295886][ T2461] binder: 2458:2461 ioctl 4018620d 0 returned -22 [ 106.350238][ T30] audit: type=1400 audit(1784927570.789:292): avc: denied { create } for pid=2476 comm="syz.4.806" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 106.386825][ T30] audit: type=1400 audit(1784927570.819:293): avc: denied { read write } for pid=2476 comm="syz.4.806" name="file0" dev="tmpfs" ino=900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 106.410519][ T30] audit: type=1400 audit(1784927570.819:294): avc: denied { open } for pid=2476 comm="syz.4.806" path="/172/file0" dev="tmpfs" ino=900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 106.546297][ T1048] usb 2-1: Using ep0 maxpacket: 32 [ 106.727266][ T30] audit: type=1400 audit(1784927571.169:295): avc: denied { mmap_zero } for pid=2485 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 106.765279][ T2490] UDC core: couldn't find an available UDC or it's busy: -19 [ 106.846138][ T1048] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 106.855569][ T1048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.864119][ T1048] usb 2-1: Product: syz [ 106.868905][ T1048] usb 2-1: Manufacturer: syz [ 106.873595][ T1048] usb 2-1: SerialNumber: syz [ 107.360189][ T1048] usb 2-1: config 0 descriptor?? [ 107.926602][ T60] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 108.021007][ T2522] binder: 2516:2522 ioctl 4018620d 0 returned -22 [ 108.321152][ T60] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 108.331562][ T60] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 108.342096][ T60] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 108.351213][ T60] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 108.351295][ T60] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 108.743495][ T60] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 108.753677][ T60] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 108.788174][ T60] usb 4-1: Product: syz [ 108.793470][ T60] usb 4-1: Manufacturer: syz [ 108.857210][ T514] usb 2-1: USB disconnect, device number 11 [ 108.896535][ T60] cdc_wdm 4-1:1.0: skipping garbage [ 108.906697][ T60] cdc_wdm 4-1:1.0: skipping garbage [ 108.916940][ T60] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 109.369212][ T293] usb 4-1: USB disconnect, device number 12 [ 109.396310][ T514] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 109.455360][ T30] audit: type=1400 audit(1784927573.889:296): avc: denied { create } for pid=2559 comm="syz.4.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 109.766045][ T514] usb 2-1: Using ep0 maxpacket: 32 [ 109.813774][ T1135] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 109.826409][ T1135] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 109.847285][ T1135] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 109.962140][ T514] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.972813][ T514] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 32 [ 109.982877][ T514] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 109.993316][ T514] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.246867][ T293] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 111.279974][ T293] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 111.675821][ T514] usb 2-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 111.694797][ T514] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.703526][ T514] usb 2-1: Product: syz [ 111.708245][ T514] usb 2-1: Manufacturer: syz [ 111.712882][ T514] usb 2-1: SerialNumber: syz [ 111.742540][ T2600] UDC core: couldn't find an available UDC or it's busy: -16 [ 111.750289][ T2547] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.757556][ T2600] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 111.766495][ T2547] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.937225][ T30] audit: type=1326 audit(1784927576.379:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2614 comm="syz.2.861" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e87c57e99 code=0x7ffc0000 [ 111.975517][ T30] audit: type=1326 audit(1784927576.379:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2614 comm="syz.2.861" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e87c57e99 code=0x7ffc0000 [ 112.005983][ T30] audit: type=1326 audit(1784927576.379:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2614 comm="syz.2.861" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e87c57e99 code=0x7ffc0000 [ 112.126953][ T514] usb 2-1: MIDIStreaming interface descriptor not found [ 112.281400][ T514] usb 2-1: USB disconnect, device number 12 [ 112.386925][ T1048] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 112.394704][ T30] audit: type=1326 audit(1784927576.379:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2614 comm="syz.2.861" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f4e87c57e99 code=0x7ffc0000 [ 112.420744][ T30] audit: type=1326 audit(1784927576.379:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2614 comm="syz.2.861" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e87c57e99 code=0x7ffc0000 [ 112.452945][ T30] audit: type=1326 audit(1784927576.379:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2614 comm="syz.2.861" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4e87c57e99 code=0x7ffc0000 [ 112.480627][ T30] audit: type=1326 audit(1784927576.379:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2614 comm="syz.2.861" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4e87c57e99 code=0x7ffc0000 [ 113.046142][ T1048] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 113.057669][ T1048] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.064360][ T1048] usb 4-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 113.074053][ T1048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.088631][ T1048] usb 4-1: config 0 descriptor?? [ 113.106571][ T2597] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 113.659216][ T1048] apple 0003:05AC:022B.0007: unknown main item tag 0x2 [ 113.671963][ T1048] apple 0003:05AC:022B.0007: unknown main item tag 0x3 [ 113.686122][ T1048] apple 0003:05AC:022B.0007: collection stack underflow [ 113.693272][ T1048] apple 0003:05AC:022B.0007: item 0 1 0 12 parsing failed [ 113.701608][ T1048] apple 0003:05AC:022B.0007: parse failed [ 113.707607][ T1048] apple: probe of 0003:05AC:022B.0007 failed with error -22 [ 113.865716][ T1048] usb 4-1: USB disconnect, device number 13 [ 114.146088][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 114.307985][ T30] audit: type=1326 audit(1784927578.749:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2699 comm="syz.0.894" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450efbde99 code=0x7ffc0000 [ 114.362955][ T30] audit: type=1326 audit(1784927578.779:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2699 comm="syz.0.894" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450efbde99 code=0x7ffc0000 [ 114.404196][ T30] audit: type=1326 audit(1784927578.779:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2699 comm="syz.0.894" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450efbde99 code=0x7ffc0000 [ 114.449018][ T2713] UDC core: couldn't find an available UDC or it's busy: -16 [ 114.459684][ T2713] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 114.631093][ T514] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 114.642719][ T514] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 114.678679][ T549] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 114.806519][ T549] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 115.425402][ T549] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 115.708250][ T2738] UDC core: couldn't find an available UDC or it's busy: -16 [ 115.726748][ T2737] UDC core: couldn't find an available UDC or it's busy: -19 [ 115.774611][ T2738] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 116.821267][ T2767] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 116.901209][ T2772] UDC core: couldn't find an available UDC or it's busy: -16 [ 116.913340][ T2770] UDC core: couldn't find an available UDC or it's busy: -19 [ 116.922258][ T2772] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 117.137039][ T514] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 117.147793][ T2782] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.406088][ T549] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 117.506201][ T428] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 117.696642][ T1135] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 117.756105][ T428] usb 4-1: Using ep0 maxpacket: 8 [ 117.778895][ T549] usb 3-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 117.906701][ T549] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 117.945136][ T549] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 118.000262][ T549] usb 3-1: Manufacturer: syz [ 118.010657][ T549] usb 3-1: SerialNumber: syz [ 118.147804][ T428] usb 4-1: too many configurations: 249, using maximum allowed: 8 [ 118.306951][ T549] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 118.315312][ T549] usb 3-1: USB disconnect, device number 15 [ 118.670522][ T2807] UDC core: couldn't find an available UDC or it's busy: -19 [ 118.691104][ T2809] UDC core: couldn't find an available UDC or it's busy: -16 [ 118.698765][ T2809] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 118.791742][ T2811] 9pnet: Insufficient options for proto=fd [ 118.853935][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 118.853952][ T30] audit: type=1400 audit(1784927583.289:318): avc: denied { bind } for pid=2814 comm="syz.1.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.891902][ T30] audit: type=1326 audit(1784927583.329:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2816 comm="syz.1.938" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 118.943495][ T30] audit: type=1326 audit(1784927583.359:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2816 comm="syz.1.938" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 118.976091][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 118.981120][ T30] audit: type=1326 audit(1784927583.359:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2816 comm="syz.1.938" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 119.026209][ T428] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 119.040634][ T428] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 119.053820][ T428] usb 4-1: Product: syz [ 119.056679][ T30] audit: type=1326 audit(1784927583.359:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2816 comm="syz.1.938" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 119.060364][ T428] usb 4-1: Manufacturer: syz [ 119.088000][ T428] usb 4-1: SerialNumber: syz [ 119.133309][ T428] usb 4-1: config 0 descriptor?? [ 119.139746][ T30] audit: type=1326 audit(1784927583.359:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2816 comm="syz.1.938" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 119.167087][ T30] audit: type=1326 audit(1784927583.359:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2816 comm="syz.1.938" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 119.192543][ T30] audit: type=1326 audit(1784927583.359:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2816 comm="syz.1.938" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 119.237578][ T2830] UDC core: couldn't find an available UDC or it's busy: -19 [ 119.245119][ T30] audit: type=1326 audit(1784927583.359:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2816 comm="syz.1.938" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 119.277383][ T30] audit: type=1326 audit(1784927583.359:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2816 comm="syz.1.938" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcbcace99 code=0x7ffc0000 [ 120.995995][ C1] sched: RT throttling activated [ 121.986080][ T1135] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 121.997087][ T428] usb 4-1: USB disconnect, device number 14 [ 122.099247][ T514] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 122.483473][ T514] usb 3-1: Using ep0 maxpacket: 32 [ 122.586238][ T514] usb 3-1: device descriptor read/all, error -71 [ 122.786105][ T1135] usb 5-1: device not accepting address 14, error -71 [ 122.823334][ T2868] UDC core: couldn't find an available UDC or it's busy: -19 [ 122.836099][ T1048] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 122.896596][ T2878] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.903787][ T2878] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.941330][ T363] tipc: Left network mode [ 123.026076][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 123.076072][ T1048] usb 2-1: Using ep0 maxpacket: 16 [ 123.171621][ T2890] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.178890][ T2890] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.187165][ T2890] device bridge_slave_0 entered promiscuous mode [ 123.196192][ T1048] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 123.203455][ T2890] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.214298][ T2890] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.222721][ T2890] device bridge_slave_1 entered promiscuous mode [ 123.332413][ T2890] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.339557][ T2890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.346969][ T2890] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.354030][ T2890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.376144][ T1048] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 123.402673][ T1048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.413887][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.424013][ T1048] usb 2-1: Product: syz [ 123.431786][ T2594] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.437406][ T1048] usb 2-1: Manufacturer: syz [ 123.443803][ T2594] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.447133][ T1048] usb 2-1: SerialNumber: syz [ 123.462592][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.476824][ T1048] usb 2-1: config 0 descriptor?? [ 123.482213][ T2594] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.489313][ T2594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.531132][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.546116][ T2594] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.553409][ T2594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.561112][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.575937][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.590847][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.608427][ T2890] device veth0_vlan entered promiscuous mode [ 123.626464][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.637838][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.646689][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.655741][ T363] device bridge_slave_1 left promiscuous mode [ 123.662535][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.671442][ T363] device bridge_slave_0 left promiscuous mode [ 123.677883][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.688034][ T363] device veth1_macvtap left promiscuous mode [ 123.694237][ T363] device veth0_vlan left promiscuous mode [ 123.784888][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.798577][ T2890] device veth1_macvtap entered promiscuous mode [ 123.823192][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.831026][ T2905] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.839108][ T2905] device bridge_slave_0 entered promiscuous mode [ 123.846406][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.853564][ T2905] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.865583][ T2905] device bridge_slave_1 entered promiscuous mode [ 123.896907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.907326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.928004][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 123.928021][ T30] audit: type=1400 audit(1784927588.369:338): avc: denied { mounton } for pid=2890 comm="syz-executor" path="/root/syzkaller.Tm2U2p/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 124.052135][ T2905] device veth0_vlan entered promiscuous mode [ 124.064727][ T30] audit: type=1326 audit(1784927588.499:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2912 comm="syz.4.978" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f89e5fe99 code=0x0 [ 124.100553][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.111383][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.119876][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.128859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.137085][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.144609][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.152575][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.160939][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.168601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.176222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.184668][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.193005][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.200270][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.209243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.218191][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.226767][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.233872][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.242064][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.655386][ T2905] device veth1_macvtap entered promiscuous mode [ 124.702012][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.748124][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.819193][ T2930] UDC core: couldn't find an available UDC or it's busy: -19 [ 124.839962][ T1048] usb 2-1: USB disconnect, device number 13 [ 125.646584][ T30] audit: type=1400 audit(1784927589.459:340): avc: denied { checkpoint_restore } for pid=2940 comm="syz.3.985" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.842555][ T30] audit: type=1400 audit(1784927590.149:341): avc: denied { getopt } for pid=2950 comm="syz.5.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 125.905906][ T30] audit: type=1400 audit(1784927590.309:342): avc: denied { map } for pid=2968 comm="syz.4.996" path="socket:[31126]" dev="sockfs" ino=31126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.941327][ T30] audit: type=1400 audit(1784927590.309:343): avc: denied { read } for pid=2968 comm="syz.4.996" path="socket:[31126]" dev="sockfs" ino=31126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.076315][ T1135] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 126.126679][ T363] device bridge_slave_1 left promiscuous mode [ 126.132877][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.148390][ T30] audit: type=1400 audit(1784927590.589:344): avc: denied { map } for pid=2978 comm="syz.1.999" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.172025][ T549] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 126.206286][ T363] device bridge_slave_0 left promiscuous mode [ 126.212554][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.219857][ T30] audit: type=1400 audit(1784927590.639:345): avc: denied { search } for pid=2980 comm="syz.1.1000" name="/" dev="configfs" ino=13680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.236285][ T6] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 126.256265][ T363] device veth1_macvtap left promiscuous mode [ 126.326106][ T1135] usb 4-1: Using ep0 maxpacket: 32 [ 126.446061][ T549] usb 6-1: Using ep0 maxpacket: 8 [ 126.460178][ T1135] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 126.476076][ T1135] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 126.485965][ T1135] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.690936][ T549] usb 6-1: config 1 interface 0 has no altsetting 0 [ 126.898147][ T1135] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 126.952419][ T1135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.960806][ T549] usb 6-1: New USB device found, idVendor=18d1, idProduct=5044, bcdDevice= 0.40 [ 126.966375][ T6] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 126.970240][ T1135] usb 4-1: Product: syz [ 126.984057][ T549] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.992156][ T1135] usb 4-1: Manufacturer: syz [ 126.996881][ T6] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 127.002217][ T549] usb 6-1: Product: syz [ 127.014061][ T1135] usb 4-1: SerialNumber: syz [ 127.018927][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 127.020924][ T549] usb 6-1: Manufacturer: syz [ 127.034816][ T1135] usb 4-1: config 0 descriptor?? [ 127.040046][ T549] usb 6-1: SerialNumber: syz [ 127.050507][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.261036][ T30] audit: type=1400 audit(1784927591.699:346): avc: denied { shutdown } for pid=2999 comm="syz.1.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.344728][ T30] audit: type=1400 audit(1784927591.779:347): avc: denied { create } for pid=3005 comm="syz.6.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 127.397042][ T3012] device veth1_macvtap left promiscuous mode [ 127.403150][ T3012] device macsec0 entered promiscuous mode [ 127.525775][ T3023] loop4: detected capacity change from 0 to 7 [ 127.566091][ T549] usbhid 6-1:1.0: can't add hid device: -71 [ 127.572212][ T549] usbhid: probe of 6-1:1.0 failed with error -71 [ 127.605660][ T549] usb 6-1: USB disconnect, device number 2 [ 128.146088][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 128.316740][ T6] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 128.324442][ T6] usb 5-1: USB disconnect, device number 16 [ 128.371039][ T60] usb 4-1: USB disconnect, device number 15 [ 128.386316][ T428] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 128.446076][ T1048] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 128.806131][ T1048] usb 2-1: Using ep0 maxpacket: 32 [ 128.866399][ T428] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 128.875353][ T428] usb 6-1: config 0 has no interface number 0 [ 128.881965][ T428] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 128.893908][ T428] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 128.926098][ T1048] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 128.934349][ T1048] usb 2-1: config 2 has no interface number 0 [ 128.940679][ T1048] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 128.951167][ T1048] usb 2-1: config 2 interface 88 has no altsetting 0 [ 129.016148][ T428] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 129.025426][ T428] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 129.033771][ T428] usb 6-1: Manufacturer: syz [ 129.038717][ T428] usb 6-1: SerialNumber: syz [ 129.044443][ T428] usb 6-1: config 0 descriptor?? [ 129.116121][ T1048] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 129.125385][ T1048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 129.133609][ T1048] usb 2-1: Product: syz [ 129.136268][ T1135] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 129.145596][ T1048] usb 2-1: Manufacturer: syz [ 129.150309][ T1048] usb 2-1: SerialNumber: syz [ 129.176114][ T3047] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 129.376072][ T1135] usb 7-1: Using ep0 maxpacket: 8 [ 129.398067][ T3047] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 129.496129][ T1135] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 129.505384][ T1135] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 129.676125][ T1135] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 129.685458][ T1135] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.694072][ T1135] usb 7-1: Product: syz [ 129.698559][ T1135] usb 7-1: Manufacturer: syz [ 129.703249][ T1135] usb 7-1: SerialNumber: syz [ 129.719219][ T1135] usb 7-1: config 0 descriptor?? [ 129.736150][ T3077] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 129.753540][ T3086] syz.4.1041 (3086) used obsolete PPPIOCDETACH ioctl [ 129.956516][ T3098] fuse: Unknown parameter 'grou00000000000000000000' [ 130.276278][ T1048] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 130.286845][ T1048] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 130.298422][ T1048] asix: probe of 2-1:2.88 failed with error -71 [ 130.318849][ T1048] usb 2-1: USB disconnect, device number 14 [ 130.975043][ T3113] ================================================================== [ 130.983367][ T3113] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3200 [ 130.991657][ T3113] Read of size 8 at addr ffff88811e20dec0 by task syz.1.1052/3113 [ 130.999511][ T3113] [ 131.001861][ T3113] CPU: 0 PID: 3113 Comm: syz.1.1052 Not tainted syzkaller #0 [ 131.009342][ T3113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 131.019433][ T3113] Call Trace: [ 131.022748][ T3113] [ 131.025711][ T3113] __dump_stack+0x21/0x30 [ 131.030075][ T3113] dump_stack_lvl+0x110/0x170 [ 131.034889][ T3113] ? show_regs_print_info+0x20/0x20 [ 131.035780][ T3115] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1053'. [ 131.040125][ T3113] ? load_image+0x3f0/0x3f0 [ 131.040155][ T3113] print_address_description+0x7f/0x2c0 [ 131.040187][ T3113] ? tc_setup_flow_action+0x88e/0x3200 [ 131.040209][ T3113] kasan_report+0x10f/0x150 [ 131.040230][ T3113] ? tc_setup_flow_action+0x88e/0x3200 [ 131.040251][ T3113] __asan_report_load8_noabort+0x14/0x20 [ 131.040272][ T3113] tc_setup_flow_action+0x88e/0x3200 [ 131.085821][ T3113] mall_replace_hw_filter+0x2db/0x8d0 [ 131.091370][ T3113] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 131.097481][ T3113] ? mall_set_parms+0x520/0x520 [ 131.102371][ T3113] ? tcf_exts_destroy+0xb0/0xb0 [ 131.107408][ T3113] ? pcpu_alloc+0x1118/0x16f0 [ 131.112141][ T3113] ? mall_set_parms+0x1e4/0x520 [ 131.117131][ T3113] mall_change+0x544/0x760 [ 131.121642][ T3113] ? __kasan_check_write+0x14/0x20 [ 131.126795][ T3113] ? mall_get+0xa0/0xa0 [ 131.130988][ T3113] ? tcf_chain_tp_insert_unique+0x946/0xa70 [ 131.136925][ T3113] ? mall_get+0xa0/0xa0 [ 131.141115][ T3113] tc_new_tfilter+0x13df/0x1990 [ 131.146024][ T3113] ? tcf_gate_entry_destructor+0x20/0x20 [ 131.151785][ T3113] ? 0xffffffffa0028000 [ 131.155966][ T3113] ? security_capable+0x87/0xb0 [ 131.160848][ T3113] ? ns_capable+0x8c/0xf0 [ 131.165226][ T3113] ? netlink_net_capable+0x125/0x160 [ 131.170555][ T3113] ? tcf_gate_entry_destructor+0x20/0x20 [ 131.176235][ T3113] rtnetlink_rcv_msg+0x83c/0xcb0 [ 131.181289][ T3113] ? 0xffffffffa0028000 [ 131.185505][ T3113] ? rtnetlink_bind+0x80/0x80 [ 131.190219][ T3113] ? avc_has_perm_noaudit+0x390/0x490 [ 131.195635][ T3113] ? memcpy+0x56/0x70 [ 131.199665][ T3113] ? avc_has_perm_noaudit+0x30a/0x490 [ 131.205085][ T3113] ? arch_stack_walk+0xee/0x140 [ 131.209988][ T3113] ? avc_denied+0x1b0/0x1b0 [ 131.214550][ T3113] ? stack_trace_save+0xa6/0xf0 [ 131.219438][ T3113] ? avc_has_perm+0x163/0x250 [ 131.224128][ T3113] ? avc_has_perm_noaudit+0x490/0x490 [ 131.229596][ T3113] ? x64_sys_call+0x4b/0x9a0 [ 131.234206][ T3113] ? selinux_nlmsg_lookup+0x39d/0x440 [ 131.239675][ T3113] netlink_rcv_skb+0x1e9/0x430 [ 131.244459][ T3113] ? rtnetlink_bind+0x80/0x80 [ 131.249148][ T3113] ? netlink_ack+0xb10/0xb10 [ 131.253765][ T3113] ? _copy_from_iter+0x4a4/0x10a0 [ 131.258938][ T3113] ? __netlink_lookup+0x387/0x3b0 [ 131.264091][ T3113] rtnetlink_rcv+0x1c/0x20 [ 131.268528][ T3113] netlink_unicast+0x86c/0xa30 [ 131.273307][ T3113] netlink_sendmsg+0x879/0xb80 [ 131.278085][ T3113] ? netlink_getsockopt+0x530/0x530 [ 131.283606][ T3113] ? security_socket_sendmsg+0x82/0xa0 [ 131.289072][ T3113] ? netlink_getsockopt+0x530/0x530 [ 131.294280][ T3113] ____sys_sendmsg+0x5be/0x8f0 [ 131.299060][ T3113] ? __sys_sendmsg_sock+0x40/0x40 [ 131.304115][ T3113] ? import_iovec+0x7c/0xb0 [ 131.308636][ T3113] ___sys_sendmsg+0x236/0x2e0 [ 131.313332][ T3113] ? __sys_sendmsg+0x280/0x280 [ 131.318125][ T3113] ? sock_show_fdinfo+0xa0/0xa0 [ 131.323017][ T3113] ? __fdget+0x1a1/0x230 [ 131.327272][ T3113] __x64_sys_sendmsg+0x201/0x2d0 [ 131.332225][ T3113] ? ___sys_sendmsg+0x2e0/0x2e0 [ 131.337083][ T3113] ? __kasan_check_write+0x14/0x20 [ 131.342218][ T3113] ? switch_fpu_return+0x15d/0x2c0 [ 131.347729][ T3113] x64_sys_call+0x4b/0x9a0 [ 131.352176][ T3113] do_syscall_64+0x4c/0xa0 [ 131.356628][ T3113] ? clear_bhb_loop+0x50/0xa0 [ 131.361357][ T3113] ? clear_bhb_loop+0x50/0xa0 [ 131.366074][ T3113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.372262][ T3113] RIP: 0033:0x7f5dcbcace99 [ 131.376696][ T3113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.396334][ T3113] RSP: 002b:00007f5dca706028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.404972][ T3113] RAX: ffffffffffffffda RBX: 00007f5dcbf34fa0 RCX: 00007f5dcbcace99 [ 131.412979][ T3113] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 131.420985][ T3113] RBP: 00007f5dcbd42eaf R08: 0000000000000000 R09: 0000000000000000 [ 131.429061][ T3113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.437215][ T3113] R13: 00007f5dcbf35038 R14: 00007f5dcbf34fa0 R15: 00007ffcbb29ad08 [ 131.445493][ T3113] [ 131.446241][ T549] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 131.448530][ T3113] [ 131.448536][ T3113] Allocated by task 3113: [ 131.462852][ T3113] __kasan_kmalloc+0xd4/0x100 [ 131.467545][ T3113] __kmalloc+0x13d/0x2c0 [ 131.471825][ T3113] tcf_idr_create+0x5f/0x790 [ 131.476467][ T3113] tcf_idr_create_from_flags+0x61/0x70 [ 131.481962][ T3113] tcf_gact_init+0x342/0x570 [ 131.486577][ T3113] tcf_action_init_1+0x3fd/0x6b0 [ 131.491530][ T3113] tcf_action_init+0x233/0x7a0 [ 131.496307][ T3113] tcf_exts_validate+0x24a/0x580 [ 131.501269][ T3113] mall_set_parms+0x48/0x520 [ 131.505865][ T3113] mall_change+0x478/0x760 [ 131.510307][ T3113] tc_new_tfilter+0x13df/0x1990 [ 131.515270][ T3113] rtnetlink_rcv_msg+0x83c/0xcb0 [ 131.520306][ T3113] netlink_rcv_skb+0x1e9/0x430 [ 131.525078][ T3113] rtnetlink_rcv+0x1c/0x20 [ 131.529493][ T3113] netlink_unicast+0x86c/0xa30 [ 131.534287][ T3113] netlink_sendmsg+0x879/0xb80 [ 131.539102][ T3113] ____sys_sendmsg+0x5be/0x8f0 [ 131.543890][ T3113] ___sys_sendmsg+0x236/0x2e0 [ 131.548604][ T3113] __x64_sys_sendmsg+0x201/0x2d0 [ 131.553610][ T3113] x64_sys_call+0x4b/0x9a0 [ 131.558055][ T3113] do_syscall_64+0x4c/0xa0 [ 131.562479][ T3113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.568407][ T3113] [ 131.570766][ T3113] The buggy address belongs to the object at ffff88811e20de00 [ 131.570766][ T3113] which belongs to the cache kmalloc-192 of size 192 [ 131.584915][ T3113] The buggy address is located 0 bytes to the right of [ 131.584915][ T3113] 192-byte region [ffff88811e20de00, ffff88811e20dec0) [ 131.598548][ T3113] The buggy address belongs to the page: [ 131.604308][ T3113] page:ffffea0004788340 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e20d [ 131.614561][ T3113] flags: 0x4000000000000200(slab|zone=1) [ 131.620210][ T3113] raw: 4000000000000200 0000000000000000 0000000100000001 ffff888100042c00 [ 131.628807][ T3113] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 131.637410][ T3113] page dumped because: kasan: bad access detected [ 131.643823][ T3113] page_owner tracks the page as allocated [ 131.649549][ T3113] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 277, ts 22132397267, free_ts 0 [ 131.664658][ T3113] post_alloc_hook+0x192/0x1b0 [ 131.669542][ T3113] prep_new_page+0x1c/0x110 [ 131.674241][ T3113] get_page_from_freelist+0x2c3a/0x2cd0 [ 131.679817][ T3113] __alloc_pages+0x1a2/0x460 [ 131.684429][ T3113] new_slab+0xa0/0x4d0 [ 131.688542][ T3113] ___slab_alloc+0x3ac/0x840 [ 131.693157][ T3113] __slab_alloc+0x49/0x90 [ 131.696149][ T549] usb 5-1: Using ep0 maxpacket: 32 [ 131.697495][ T3113] kmem_cache_alloc_trace+0x146/0x270 [ 131.697522][ T3113] kernfs_fop_open+0x375/0xbb0 [ 131.711078][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 131.711112][ T30] audit: type=1400 audit(1784927596.149:350): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 131.712942][ T3113] do_dentry_open+0x82a/0x1010 [ 131.723594][ T30] audit: type=1400 audit(1784927596.159:351): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.740814][ T3113] vfs_open+0x73/0x80 [ 131.740847][ T3113] path_openat+0x26e6/0x2f80 [ 131.740864][ T3113] do_filp_open+0x1df/0x400 [ 131.740881][ T3113] do_sys_openat2+0x15e/0x7f0 [ 131.740896][ T3113] __x64_sys_openat+0x136/0x160 [ 131.740911][ T3113] x64_sys_call+0x219/0x9a0 [ 131.740929][ T3113] page_owner free stack trace missing [ 131.740936][ T3113] [ 131.740939][ T3113] Memory state around the buggy address: [ 131.740949][ T3113] ffff88811e20dd80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 131.748036][ T30] audit: type=1400 audit(1784927596.159:352): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.767136][ T3113] ffff88811e20de00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 131.767154][ T3113] >ffff88811e20de80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 131.767163][ T3113] ^ [ 131.767174][ T3113] ffff88811e20df00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.767186][ T3113] ffff88811e20df80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 131.767195][ T3113] ================================================================== [ 131.767203][ T3113] Disabling lock debugging due to kernel taint [ 131.800105][ T428] usb 6-1: USB disconnect, device number 3 [ 131.808530][ T30] audit: type=1400 audit(1784927596.159:353): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.910651][ T1048] usb 7-1: USB disconnect, device number 2 [ 131.917736][ T549] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 131.934366][ T30] audit: type=1400 audit(1784927596.159:354): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.953141][ T549] usb 5-1: config 0 has no interface number 0 [ 131.963397][ T30] audit: type=1400 audit(1784927596.159:355): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.986684][ T30] audit: type=1400 audit(1784927596.159:356): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.126146][ T549] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 132.135348][ T549] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.143446][ T549] usb 5-1: Product: syz [ 132.147690][ T549] usb 5-1: Manufacturer: syz [ 132.152300][ T549] usb 5-1: SerialNumber: syz [ 132.157702][ T549] usb 5-1: config 0 descriptor?? [ 134.188375][ T549] usb 5-1: USB disconnect, device number 17 [ 139.026422][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!