last executing test programs: 7.051223629s ago: executing program 2 (id=409): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_to_bridge\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0x2, './file0\x00'}}) r1 = memfd_create(&(0x7f0000000600)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x19\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tdF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\x19cw\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn\x00\x00\x00\x00\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%f\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x13, 0x0, &(0x7f0000002400)) (async, rerun: 64) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x1c4) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) (async, rerun: 32) io_setup(0x7f, &(0x7f0000000100)=0x0) (async, rerun: 32) r4 = eventfd(0x8e) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) 2.263392018s ago: executing program 0 (id=465): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) (async) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') write$P9_RVERSION(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/mnt\x00') (async) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/mnt\x00') 1.843226218s ago: executing program 2 (id=468): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd07001000000028003b0060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe) 1.842721158s ago: executing program 1 (id=470): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x20) fsetxattr$system_posix_acl(r3, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000010000000000000000800060000000000100007000000000020"], 0x24, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c00f74fc8f25afb0d050000010101021d00000000001540000000039a78c82a15a565d10d7f253207df45ce7ff30bf5b3a84abac681b2ecb75e9085dbe036cd7fd9d2aebecc17f0e4bd2d496d36847cd1536c7ba6fe1b552806378035928cc15d3d8cc8250bb519"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x800007}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002240)=""/4066, 0xfe2}, {&(0x7f0000000780)=""/216, 0xd8}, {&(0x7f0000000980)=""/259, 0x103}, {&(0x7f0000000b40)=""/161, 0xa1}, {&(0x7f0000000880)=""/222, 0xde}, {&(0x7f0000000ac0)=""/109, 0x6d}, {&(0x7f0000000c00)=""/243, 0xf3}, {&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f00000003c0)=""/66, 0x42}], 0x9}, 0x120b}], 0x3, 0x0, 0x0) (async, rerun: 32) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x280449c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c736d61636bba3e66736861743d5b3a2c0088db473179e6ac16c46dbc3d85096a259f77214364d1bb99f9a8a57fd2c38f8a6dd3155468cf219c909ec0c2b9100629480a3c1f569f3225332eee59892a8ff5a1"]) (rerun: 32) read$FUSE(r0, &(0x7f00000042c0)={0x2020, 0x0, 0x0}, 0x2060) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}, 0x50) mremap(&(0x7f0000ff5000/0x4000)=nil, 0x7fffdf008002, 0x7fffdf008000, 0x0, &(0x7f0000ffc000/0x2000)=nil) (async) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0xfffffffe) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)) (async) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x10000004) (async, rerun: 32) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) (rerun: 32) getsockopt$packet_buf(r7, 0x107, 0x6, 0x0, 0x0) (async) write$cgroup_devices(r7, 0x0, 0xffdd) (async) write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="2d706572865f6576656e7420"], 0xc) (async) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) 1.779360989s ago: executing program 2 (id=471): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000001600)={0x1, 0x0, 0x0, &(0x7f00000016c0)=""/66, 0x0, 0xfec00000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x1) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000001540)=0x20c000000) 1.772044809s ago: executing program 2 (id=472): r0 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000040)='\xd8\xb1H\x17\xe4%\xdbjg\x8d\x19\xdf\x8dl\x17vsZ\xe6\xb2\xdc\x86\xfb\x98\x88<\x9eu\x04\xdfJQ\xbc\x16IS\xdbn\xdbx\xbc\xe4h2\xbd\xa5\x80uK\xa5\xe6:\"\xe4\x02\r\f\xa2\xf4j\x1a\xd3\x11', 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000000140)=""/64, 0x40) keyctl$set_timeout(0xf, r0, 0xdda0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000380)=ANY=[], 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020}, 0x2020) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x49, 0x0, &(0x7f00000000c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8c5c0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xad) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x1) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xdc, 0x0, 0x0, 0x1000, 0x81, 0x0, 0x0, 0x20}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r4, r8, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0x0, 0x35a, 0x0, r4}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x4000, 0x3, 0x7e, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20007682, 0x20000, 0xe, 0x2000008, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbea7, 0x8, 0x2, 0x4b, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6886, 0x5200, 0x2, 0x821b, 0x0, r4}}], 0x4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r3, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r0, 0x48, 0xa1}, &(0x7f00000001c0)=ANY=[@ANYBLOB="656eff7f706b63733120686173683d6362636d6163286165732d63652900000000000000000000000000000000000000000000000000000000000000000000000000002000"/79], &(0x7f0000002500)="3ec8140507baf21df5f015f09c6230878a6bee12979d65ef35c554bca15d17d421f6fcf3b16baa5d387e8e2c1525b2b8719c3b497ee4f3d4e3eb1a07a4a6329a3f0632219424cd1d", &(0x7f00000002c0)="1f41c0e1f7261372e4a24dc87ebee17985df941a2321868a9f16d8307d18c2eec14646491c1db4be986f3ec530fa96339a7ba208de109a9becb171be3f7351666e1560a73e341291a4d4d6f2a903976590d0161b3f7cef71371f250a560297dfee412a69a6675f30131806b5ae1a856c93a891b71257f5c935ae28a3aea5eb759250b4c85bb013391699fb17fd1a74454fa7cf567708be7bc995485d150d2a9cfa") 1.695146261s ago: executing program 1 (id=473): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f0000001ac0)={0x2020}, 0x2020) syz_ublk_setup_io_uring(0x20, &(0x7f0000000200)={0x0, 0x0, 0x80, 0x2, 0x52}, 0x0, 0x0, 0x0) r4 = inotify_init() read$FUSE(r4, 0x0, 0x0) close(0x3) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000000022, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0xc144c000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r6, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x1c, 0x17, {0x20, 0x8, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40000) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0xffffffffffffffff) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000036d000/0x400000)=nil) flock(r1, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.631099442s ago: executing program 0 (id=474): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$incfs(r0, &(0x7f0000000140)='.pending_reads\x00', 0x123841, 0x52) r1 = fsopen(&(0x7f0000000000)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) syz_io_uring_setup(0x2f8e, &(0x7f0000000540)={0x0, 0xc384, 0x1, 0x2, 0x306}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_modify_offsets$generic(r2, r3, 0x50, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000002440)={0x2020}, 0x7da) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000080)={0xa}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x5) 1.608609073s ago: executing program 0 (id=475): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$input_event(r1, &(0x7f0000000080)={{0x77359400}, 0x2, 0x3, 0x2}, 0x18) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce1c0000b807000000ba000000000f301b8154fea900b9b60a000076320000c4e28ddc8dcd000000c1823f0002c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301c4e1556ae4", 0x64}], 0x1, 0x10, 0x0, 0xfffffffffffffff5) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x43, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xfe, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.446997017s ago: executing program 3 (id=476): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f00000001c0)=0x5, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) lsetxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f00000004c0)=ANY=[@ANYBLOB="040be1411e569e1aef2a1bc029993eb875af1c315b0de0c7e95f33c11d64c95229c414f475eb394004e196470991d93b4518f69b4153bc45ed349b35e2a55c8ea9187c6541bb295105cab49b7226e84e04c967b48171b3b783d8a4a5adc580a991b93fccab773b7b0cd580083e2adfe1ee"], 0xa, 0x3) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000000)=0x1f4, 0x4) recvmmsg(r1, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x45833af92e4b39ff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000180)=""/27, 0x1b}], 0x2, 0x36, 0x7) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f00000002c0)='security.evm\x00', 0x20000, &(0x7f0000000300)={@_ha_fsid={[0x1, 0x8]}, {0x6, 0x9ca, 0x9, 0x3}}, 0x5, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0xfffffff8}) write$vga_arbiter(r3, &(0x7f0000000400)=ANY=[@ANYRESDEC=r3], 0xc) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e0001010000000000230000080041008e9d10283e"], 0x1c}], 0x1}, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='|ock io+mem\x00'], 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r4) 1.444174247s ago: executing program 3 (id=477): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1, &(0x7f00000000c0)="337ffa5d3dbf011644ae06683fabf7acf9196875636fbda4bc9bb0ee7a7f1a00794b9f87c6f4d0713b78ecf91b58f23a1051cc44cbe524") bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./file1\x00', 0xc0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x1000, 0xfffffffd}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x346342}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x2, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x2, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') utimensat(r7, 0x0, 0x0, 0x0) (async) utimensat(r7, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000d50000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="f081550100a000000f01a6b9fc0300000f324500a2be252f8a094d36420f705626002e660f3a176a4b00b9800100c035f70000000f22c067420f01c3460f79c20cb8b8010000000f01d945c194710a00000005c6828b44bcae0090", 0x5b}], 0x1, 0x0, 0x0, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000000)='0\x00', 0x2) (async) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000000)='0\x00', 0x2) 926.592258ms ago: executing program 3 (id=478): fsopen(&(0x7f0000000000)='ext3\x00', 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/65, 0x0, 0x7000}) openat$kvm(0xffffffffffffff9c, 0x0, 0x101901, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), 0x0, &(0x7f0000000140)) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) 917.325249ms ago: executing program 3 (id=479): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x2) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffa) shutdown(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/profiling', 0x149a82, 0x0) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110030000000835121482400001020301090269000301f0ff3f080b0002010120060904000000010120000924010e000c09000300000000000102200009040101010102200009050109200808067f0825010333090a0009040200000102200009040201010102200009058209080012008c082501026896"], 0x0) 839.287661ms ago: executing program 1 (id=480): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000001600)={0x1, 0x0, 0x0, &(0x7f00000016c0)=""/66, 0x0, 0xfec00000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x1) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000001540)=0x20c000000) 839.135791ms ago: executing program 1 (id=481): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd07001000000028003d0060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe) 830.757ms ago: executing program 1 (id=482): r0 = inotify_init() r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xfffffffffffffe00) inotify_add_watch(r0, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000100)={[], [{@subj_type={'subj_type', 0x3d, '$}&'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, '*,\x95{,)'}}]}) r2 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt(r2, 0x1, 0xc, 0x0, &(0x7f0000000240)) socket$can_bcm(0x1d, 0x2, 0x2) inotify_add_watch(r0, &(0x7f0000000300)='./file1\x00', 0xa0000006) 812.971241ms ago: executing program 1 (id=483): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="3303120081fd140000007ef52f555f2a0c09000000fd88a800f788a83baa89060f85892f32f4", 0x26, 0x40000, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0xcf}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f000000cb00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004804}}, {{&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x30, 0x4008000}}], 0x2, 0x810) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x810, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x0, 0xf, 0x28, {0x28, 0x21, "c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c554438"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 340.549002ms ago: executing program 3 (id=484): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x20) fsetxattr$system_posix_acl(r2, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000002000000000000000800060000000000100007000000000020"], 0x24, 0x0) getsockopt$bt_hci(r1, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000e) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0x401, 0x54d}, @timestamp, @sack_perm, @timestamp, @sack_perm], 0x5) r5 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000940)={@private2, 0x4, 0x0, 0x1, 0x9, 0x81, 0x8}, &(0x7f0000000980)=0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000440)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f00000004c0)={r8, 0x1, r4, 0x6}) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0xffffffff9673e35d]}}) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000040)=""/238, 0x111000, 0x0, 0x4, 0x2}, 0x20) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x3e, &(0x7f0000000000)=0x1, 0x4) write(r10, 0x0, 0x0) writev(r9, &(0x7f00000001c0)=[{&(0x7f0000000400)='\x00', 0x1}], 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) 340.265672ms ago: executing program 3 (id=485): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1a) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xfffc, 0x3ff, 0x8, 0x9}, 0x5, [0x3, 0x800, 0x200, 0x100, 0x2, 0x1e52, 0xa3, 0xb, 0x3, 0xfb8e, 0x9, 0x0, 0x3, 0x40, 0x8, 0x2, 0x1ff, 0x2, 0x6ed, 0x7b8, 0x8, 0x6, 0xffffffff, 0x1, 0x2, 0x1ff, 0x1938, 0x5ea5, 0x2, 0xff, 0x1, 0x7, 0x4, 0x0, 0x6, 0x1, 0x400, 0x4, 0xbf, 0x2, 0x80000000, 0x1, 0xfffffffc, 0x2, 0x80000000, 0x0, 0xfffffff7, 0x5, 0x7ed, 0x8, 0xfffffffb, 0x8, 0x7, 0xfffffff7, 0x2, 0x279, 0x7f, 0x80000000, 0x8, 0x2, 0x3, 0x4, 0x5, 0x8], [0x7, 0x9, 0x9, 0x36, 0x981d, 0x75, 0x9f, 0x0, 0x9, 0x4dc, 0x1, 0x4, 0x1, 0x9, 0xb, 0x1, 0x0, 0x4, 0x1, 0x0, 0x3, 0x1, 0xfffffffd, 0x0, 0x9, 0xfffffffb, 0x3, 0xfffff000, 0x2, 0x0, 0x3, 0x3, 0x3, 0x4, 0xff, 0x4, 0xb2c3, 0x15f9, 0xa, 0x4, 0x10001, 0x6, 0x9, 0xff, 0x7, 0x6, 0x9, 0x81, 0xfffffff3, 0x8001, 0x4, 0x9, 0x9, 0x6, 0x3, 0x7, 0xc86d, 0x200, 0x7, 0x7, 0x4, 0xffff3165, 0x9, 0x4], [0x1, 0x2, 0x2, 0xfffffffa, 0x0, 0x9, 0x200, 0x7f, 0x6, 0x2, 0xfffffff7, 0x6, 0x7, 0xca75, 0x6, 0x9, 0x81, 0x7, 0x81, 0x8, 0x1, 0xa, 0x100, 0xf2, 0x6, 0x7, 0x8c, 0x7, 0x10000000, 0x80, 0x81, 0x7, 0x5, 0x8, 0x1, 0x962, 0xf91d, 0x2, 0xae, 0x5, 0x1, 0x8, 0x5, 0x7, 0x0, 0x83b, 0xfff, 0x0, 0x2, 0x4, 0x27d0, 0x9, 0x5, 0x3, 0x4e6, 0x1947, 0x6, 0x6, 0x6, 0x5, 0x8, 0x9, 0x7, 0x10001], [0x20f7, 0x0, 0x101, 0x79e, 0x3, 0x82a, 0x10001, 0xe5, 0x2, 0x2a, 0x0, 0xa0c, 0x6, 0x8, 0x3, 0x1, 0x7ff, 0x5, 0x4, 0x58, 0x5, 0x2, 0x3, 0x81, 0x10000, 0x7f, 0x2, 0x10000, 0x7, 0x40000000, 0x200, 0x9, 0x1, 0x7, 0xfffffe00, 0x9, 0x100, 0x9, 0x2, 0x7, 0xde, 0x200, 0x1, 0xf9, 0x0, 0x53265f23, 0x7, 0x3, 0xe, 0xfffffffa, 0x0, 0x1ff, 0x3, 0x800, 0x931, 0x3, 0x5, 0x8000, 0x0, 0xe, 0x2, 0x1, 0x5]}, 0x45c) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x133e, 0x815, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x3, 0x0, 0x40, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xe, 0x7, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x6, 0x7f, {0x8, 0x25, 0x1, 0x0, 0x33, 0x9, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xab, 0x0, 0x8c, {0x8, 0x25, 0x1, 0x2, 0x0, 0x0, 0x3}}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = gettid() kcmp(r2, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c000280050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) creat(&(0x7f0000000040)='./file0\x00', 0x101) 24.364409ms ago: executing program 0 (id=486): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20040841, &(0x7f0000000240)={0xa, 0x4e20, 0x1, @mcast2, 0x4}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f00000002c0)=0x8, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)={0x18, 0x69, 0x15, 0x8000000, 0xffffffff, "", [@generic="fdee1438fa"]}, 0x18}], 0x1}, 0x8000) 12.523059ms ago: executing program 0 (id=487): fsopen(&(0x7f0000000000)='ext3\x00', 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/65, 0x0, 0x7000}) openat$kvm(0xffffffffffffff9c, 0x0, 0x101901, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), 0x0, &(0x7f0000000140)) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) 0s ago: executing program 0 (id=488): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000000022, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, 0x0, 0x40000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0xc144c000) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$khugepaged_scan(r1, &(0x7f0000000380), 0x8) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0xffffffffffffffff) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000036d000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): bridge0: port 1(bridge_slave_0) entered disabled state [ 36.097715][ T489] sit0: entered promiscuous mode [ 36.102862][ T489] netlink: 'syz.3.61': attribute type 1 has an invalid length. [ 36.110622][ T489] netlink: 1 bytes leftover after parsing attributes in process `syz.3.61'. [ 36.123018][ T489] kernel profiling enabled (shift: 9) [ 36.130167][ T489] overlayfs: conflicting lowerdir path [ 36.211315][ T499] fuse: Unknown parameter 'grou00000000000000000000' [ 36.437971][ T361] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 36.472438][ T514] netlink: 'syz.1.70': attribute type 13 has an invalid length. [ 36.587911][ T361] usb 3-1: device descriptor read/64, error -71 [ 36.607886][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 36.757913][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 36.764139][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.775356][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.785197][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 36.794276][ T399] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 36.801941][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.810548][ T9] usb 1-1: config 0 descriptor?? [ 36.816884][ T9] hub 1-1:0.0: USB hub found [ 36.827887][ T361] usb 3-1: device descriptor read/64, error -71 [ 36.907888][ T331] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 36.967864][ T399] usb 4-1: Using ep0 maxpacket: 8 [ 36.974184][ T399] usb 4-1: unable to get BOS descriptor or descriptor too short [ 36.982886][ T399] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.993040][ T399] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.003255][ T399] usb 4-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 37.012356][ T399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.020910][ T399] usb 4-1: Product: syz [ 37.025128][ T9] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 37.033206][ T399] usb 4-1: Manufacturer: syz [ 37.037795][ T399] usb 4-1: SerialNumber: syz [ 37.068902][ T331] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 37.077910][ T361] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 37.079841][ T331] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.098237][ T331] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64 [ 37.109323][ T331] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 37.123230][ T331] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.132297][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 37.140346][ T331] usb 2-1: SerialNumber: syz [ 37.147150][ T533] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 37.217911][ T361] usb 3-1: device descriptor read/64, error -71 [ 37.246691][ T399] usb 4-1: 0:1 : does not exist [ 37.252087][ T399] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 37.267084][ T399] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 37.276445][ T399] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 37.288003][ T399] usb 4-1: USB disconnect, device number 8 [ 37.298917][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.358733][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 37.358749][ T36] audit: type=1400 audit(1783490303.470:177): avc: denied { create } for pid=532 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 37.385673][ T36] audit: type=1400 audit(1783490303.480:178): avc: denied { create } for pid=532 comm="syz.1.77" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 37.406189][ T36] audit: type=1400 audit(1783490303.480:179): avc: denied { read } for pid=532 comm="syz.1.77" name="file0" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 37.428425][ T36] audit: type=1400 audit(1783490303.480:180): avc: denied { open } for pid=532 comm="syz.1.77" path="/17/file0" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 37.487895][ T361] usb 3-1: device descriptor read/64, error -71 [ 37.597979][ T361] usb usb3-port1: attempt power cycle [ 37.766802][ T537] fuse: Unknown parameter 'group_i00000000000000000000' [ 37.937903][ T361] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 37.966397][ T361] usb 3-1: device descriptor read/8, error -71 [ 38.041273][ T36] audit: type=1326 audit(1783490304.160:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=545 comm="syz.3.82" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57d099de59 code=0x0 [ 38.108840][ T361] usb 3-1: device descriptor read/8, error -71 [ 38.143158][ T36] audit: type=1400 audit(1783490304.260:182): avc: denied { ioctl } for pid=545 comm="syz.3.82" path="socket:[5139]" dev="sockfs" ino=5139 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.167665][ T36] audit: type=1400 audit(1783490304.260:183): avc: denied { ioctl } for pid=545 comm="syz.3.82" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5140 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.309552][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 38.315598][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 38.338418][ T9] usb 1-1: USB disconnect, device number 6 [ 38.347910][ T361] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 38.368885][ T361] usb 3-1: device descriptor read/8, error -71 [ 38.498873][ T361] usb 3-1: device descriptor read/8, error -71 [ 38.607988][ T361] usb usb3-port1: unable to enumerate USB device [ 38.836721][ T36] audit: type=1400 audit(1783490304.950:184): avc: denied { mount } for pid=548 comm="syz.0.83" name="/" dev="ramfs" ino=5143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 38.858673][ T36] audit: type=1400 audit(1783490304.950:185): avc: denied { read } for pid=548 comm="syz.0.83" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.881578][ T36] audit: type=1400 audit(1783490304.950:186): avc: denied { ioctl } for pid=548 comm="syz.0.83" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x450a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.943640][ T553] syzkaller1: entered promiscuous mode [ 38.949310][ T553] syzkaller1: entered allmulticast mode [ 38.993959][ T557] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=557 comm=syz.3.86 [ 39.007217][ T557] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=557 comm=syz.3.86 [ 39.069757][ T559] fuse: Unknown parameter 'group_i00000000000000000000' [ 39.387894][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 39.387894][ T311] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 39.540247][ T311] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 39.549505][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.557500][ T311] usb 1-1: Product: syz [ 39.557879][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 39.561932][ T311] usb 1-1: Manufacturer: syz [ 39.568320][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 39.571361][ T311] usb 1-1: SerialNumber: syz [ 39.580091][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.587901][ T357] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 39.595377][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.611966][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 39.621133][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.629161][ T9] usb 4-1: Product: syz [ 39.633410][ T9] usb 4-1: Manufacturer: syz [ 39.638031][ T9] usb 4-1: SerialNumber: syz [ 39.741532][ T331] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 39.748673][ T357] usb 3-1: Using ep0 maxpacket: 32 [ 39.754736][ T331] usb 2-1: USB disconnect, device number 8 [ 39.761517][ T357] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.773997][ T357] usb 3-1: too many endpoints for config 0 interface 0 altsetting 10: 254, using maximum allowed: 30 [ 39.787916][ T357] usb 3-1: config 0 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 39.801160][ T357] usb 3-1: config 0 interface 0 has no altsetting 0 [ 39.807991][ T357] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 39.817060][ T357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.825801][ T357] usb 3-1: config 0 descriptor?? [ 39.848466][ T9] usb 4-1: 0:1 : does not exist [ 39.853431][ T9] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 39.871515][ T9] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 39.882291][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 39.897886][ T9] usb 4-1: USB disconnect, device number 9 [ 39.905201][ T360] udevd[360]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.187892][ T331] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 40.234847][ T357] usb 3-1: string descriptor 0 read error: -71 [ 40.241440][ T357] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 40.249938][ T357] usb 3-1: USB disconnect, device number 9 [ 40.337878][ T331] usb 2-1: Using ep0 maxpacket: 32 [ 40.344100][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.355232][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.365110][ T331] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 40.374818][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.386665][ T331] usb 2-1: config 0 descriptor?? [ 40.395389][ T331] hub 2-1:0.0: USB hub found [ 40.572397][ T589] fuse: Unknown parameter 'group_i00000000000000000000' [ 40.594631][ T331] hub 2-1:0.0: 1 port detected [ 40.649843][ T311] rtl8150 1-1:1.0: couldn't reset the device [ 40.656101][ T311] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 41.373397][ T604] 9pnet_fd: Insufficient options for proto=fd [ 41.627883][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 41.692845][ T614] fuse: Unknown parameter 'group_id00000000000000000000' [ 41.777891][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 41.789734][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 41.798848][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.809548][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.820321][ T9] usb 3-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 41.829418][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.837541][ T9] usb 3-1: Product: syz [ 41.841748][ T9] usb 3-1: Manufacturer: syz [ 41.846361][ T9] usb 3-1: SerialNumber: syz [ 41.908576][ T331] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 41.914956][ T331] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 41.923685][ T331] usbhid 2-1:0.0: can't add hid device: -32 [ 41.929663][ T331] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 41.931394][ T64] usb 1-1: USB disconnect, device number 7 [ 42.055894][ T9] usb 3-1: 0:1 : does not exist [ 42.061164][ T9] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 42.076308][ T9] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 42.090343][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 42.101099][ T9] usb 3-1: USB disconnect, device number 10 [ 42.116817][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.137891][ T399] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 42.168617][ T627] syz.0.112 (627): /proc/626/oom_adj is deprecated, please use /proc/626/oom_score_adj instead. [ 42.296238][ T643] fuse: Unknown parameter 'group_id00000000000000000000' [ 42.303596][ T399] usb 4-1: Using ep0 maxpacket: 8 [ 42.310100][ T399] usb 4-1: unable to get BOS descriptor or descriptor too short [ 42.318613][ T399] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.328815][ T399] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.341248][ T399] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.350460][ T399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.358548][ T399] usb 4-1: Product: syz [ 42.362873][ T399] usb 4-1: Manufacturer: syz [ 42.367523][ T399] usb 4-1: SerialNumber: syz [ 42.416843][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 42.416854][ T36] audit: type=1400 audit(1783490308.530:202): avc: denied { read } for pid=645 comm="syz.0.116" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.445585][ T36] audit: type=1400 audit(1783490308.530:203): avc: denied { open } for pid=645 comm="syz.0.116" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.472569][ T36] audit: type=1400 audit(1783490308.530:204): avc: denied { write } for pid=645 comm="syz.0.116" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.495131][ T36] audit: type=1400 audit(1783490308.530:205): avc: denied { ioctl } for pid=645 comm="syz.0.116" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.599556][ T659] loop6: detected capacity change from 0 to 454 [ 42.696572][ T669] fuse: Unknown parameter 'group_id00000000000000000000' [ 42.749687][ T673] x_tables: duplicate underflow at hook 1 [ 42.757862][ T36] audit: type=1400 audit(1783490308.870:206): avc: denied { setopt } for pid=672 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.796025][ T36] audit: type=1400 audit(1783490308.910:207): avc: denied { create } for pid=675 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 42.815586][ T36] audit: type=1400 audit(1783490308.910:208): avc: denied { getopt } for pid=675 comm="syz.2.127" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.844117][ T36] audit: type=1400 audit(1783490308.910:209): avc: denied { ioctl } for pid=675 comm="syz.2.127" path="socket:[6287]" dev="sockfs" ino=6287 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.923968][ T36] audit: type=1400 audit(1783490309.040:210): avc: denied { write } for pid=685 comm="syz.2.131" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 42.950222][ T36] audit: type=1400 audit(1783490309.060:211): avc: denied { write } for pid=685 comm="syz.2.131" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.994835][ T399] usb 4-1: cannot find UAC_HEADER [ 43.001626][ T399] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 43.013464][ T399] usb 4-1: USB disconnect, device number 10 [ 43.022302][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.057924][ T331] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 43.138085][ T9] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 43.146206][ T9] usb 2-1: device reset changed ep0 maxpacket size! [ 43.153094][ T9] usb 2-1: USB disconnect, device number 9 [ 43.207866][ T331] usb 1-1: Using ep0 maxpacket: 8 [ 43.214421][ T331] usb 1-1: unable to get BOS descriptor or descriptor too short [ 43.222861][ T331] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.233030][ T331] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.243316][ T331] usb 1-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 43.252445][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.260563][ T331] usb 1-1: Product: syz [ 43.264789][ T331] usb 1-1: Manufacturer: syz [ 43.269478][ T331] usb 1-1: SerialNumber: syz [ 43.447875][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 43.479530][ T331] usb 1-1: 0:1 : does not exist [ 43.484474][ T331] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 43.499608][ T331] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 43.513825][ T331] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 43.516041][ T698] fuse: Bad value for 'user_id' [ 43.523964][ T331] usb 1-1: USB disconnect, device number 8 [ 43.529715][ T698] fuse: Bad value for 'user_id' [ 43.543470][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.607865][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 43.617708][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 43.634096][ T9] usb 2-1: config index 0 descriptor too short (expected 60735, got 63) [ 43.645128][ T9] usb 2-1: config 123 has too many interfaces: 123, using maximum allowed: 32 [ 43.659058][ T9] usb 2-1: config 123 has an invalid descriptor of length 172, skipping remainder of the config [ 43.671110][ T9] usb 2-1: config 123 has 0 interfaces, different from the descriptor's value: 123 [ 43.687942][ T9] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 43.704441][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.712550][ T9] usb 2-1: Product: syz [ 43.716780][ T9] usb 2-1: Manufacturer: syz [ 43.721404][ T9] usb 2-1: SerialNumber: syz [ 43.741671][ T708] netlink: 64 bytes leftover after parsing attributes in process `syz.2.140'. [ 43.918101][ T357] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 43.931239][ T9] usb 2-1: USB disconnect, device number 10 [ 44.047893][ T331] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 44.077916][ T357] usb 4-1: Using ep0 maxpacket: 32 [ 44.084068][ T357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.095107][ T357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.104943][ T357] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 44.114171][ T357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.118909][ T722] fuse: Bad value for 'user_id' [ 44.127423][ T357] usb 4-1: config 0 descriptor?? [ 44.130386][ T722] fuse: Bad value for 'user_id' [ 44.133366][ T357] hub 4-1:0.0: USB hub found [ 44.197892][ T331] usb 3-1: Using ep0 maxpacket: 8 [ 44.204088][ T331] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 44.212496][ T331] usb 3-1: config 0 has no interface number 1 [ 44.218757][ T331] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 44.233513][ T331] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 44.245210][ T331] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 44.256514][ T331] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 44.266695][ T331] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 44.279767][ T331] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 44.291249][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 1024 [ 44.302382][ T331] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 44.313834][ T331] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 44.322942][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.330964][ T331] usb 3-1: Product: syz [ 44.335132][ T331] usb 3-1: Manufacturer: syz [ 44.339783][ T331] usb 3-1: SerialNumber: syz [ 44.344634][ T357] hub 4-1:0.0: 1 port detected [ 44.349785][ T331] usb 3-1: config 0 descriptor?? [ 44.355065][ T712] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 44.474832][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 44.566358][ T311] usb 3-1: USB disconnect, device number 11 [ 44.629171][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 44.637306][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 44.645789][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.655965][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 44.664873][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 44.679182][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.688262][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.696249][ T9] usb 1-1: Product: syz [ 44.700434][ T9] usb 1-1: Manufacturer: syz [ 44.705027][ T9] usb 1-1: SerialNumber: syz [ 44.787891][ T331] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 44.911778][ T724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.920326][ T724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.929555][ T9] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 44.936349][ T9] cdc_ncm 1-1:1.0: bind() failure [ 44.944145][ T9] usb 1-1: USB disconnect, device number 9 [ 44.947886][ T331] usb 2-1: Using ep0 maxpacket: 8 [ 44.956472][ T331] usb 2-1: unable to get BOS descriptor or descriptor too short [ 44.964889][ T331] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.975126][ T331] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.985276][ T331] usb 2-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 44.994340][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.002357][ T331] usb 2-1: Product: syz [ 45.006521][ T331] usb 2-1: Manufacturer: syz [ 45.011139][ T331] usb 2-1: SerialNumber: syz [ 45.133954][ T735] ======================================================= [ 45.133954][ T735] WARNING: The mand mount option has been deprecated and [ 45.133954][ T735] and is ignored by this kernel. Remove the mand [ 45.133954][ T735] option from the mount to silence this warning. [ 45.133954][ T735] ======================================================= [ 45.221790][ T331] usb 2-1: 0:1 : does not exist [ 45.226706][ T331] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 45.228233][ T742] netlink: 'syz.2.154': attribute type 1 has an invalid length. [ 45.241784][ T331] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 45.249846][ T742] netlink: 'syz.2.154': attribute type 2 has an invalid length. [ 45.266551][ T331] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 45.278614][ T331] usb 2-1: USB disconnect, device number 11 [ 45.284707][ T744] fuse: Bad value for 'user_id' [ 45.289890][ T744] fuse: Bad value for 'user_id' [ 45.298652][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.385204][ T747] cgroup2: Unknown parameter 'memory_hugetlb_accountine' [ 45.467943][ T756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.480136][ T756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.588671][ T357] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 45.595156][ T357] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 45.603716][ T357] usbhid 4-1:0.0: can't add hid device: -32 [ 45.609744][ T357] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 45.690234][ T763] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 45.699656][ T765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.707917][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 45.708248][ T765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.778008][ T357] usb 4-1: USB disconnect, device number 11 [ 45.857872][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 45.864073][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 45.873690][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.882276][ T9] usb 3-1: config 0 descriptor?? [ 45.890144][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 45.927891][ T399] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 45.967905][ T361] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 46.078787][ T399] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.089069][ T399] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.098000][ T361] usb 2-1: device descriptor read/64, error -71 [ 46.104345][ T9] usb 3-1: Detected FT232A [ 46.109521][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 46.117929][ T399] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 46.126962][ T399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.135806][ T9] usb 3-1: USB disconnect, device number 12 [ 46.142004][ T399] usb 1-1: Product: syz [ 46.146342][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 46.155667][ T399] usb 1-1: Manufacturer: syz [ 46.160283][ T399] usb 1-1: SerialNumber: syz [ 46.165814][ T9] ftdi_sio 3-1:0.0: device disconnected [ 46.185849][ T769] fuse: Bad value for 'fd' [ 46.347876][ T361] usb 2-1: device descriptor read/64, error -71 [ 46.375642][ T399] usb 1-1: 0:1 : does not exist [ 46.380740][ T399] usb 1-1: unit 80 not found! [ 46.390368][ T399] usb 1-1: USB disconnect, device number 10 [ 46.416893][ T780] netlink: 104 bytes leftover after parsing attributes in process `syz.3.169'. [ 46.598014][ T361] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 46.609468][ T790] fuse: Bad value for 'fd' [ 46.727923][ T361] usb 2-1: device descriptor read/64, error -71 [ 46.767898][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 46.885817][ T800] process 'syz.0.179' launched './file0' with NULL argv: empty string added [ 46.895547][ T800] loop7: detected capacity change from 0 to 7 [ 46.902227][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 46.911398][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 46.919446][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 46.928612][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 46.936455][ T800] loop7: unable to read partition table [ 46.936560][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 46.942192][ T800] loop_reread_partitions: partition scan of loop7 (úųƒåĄ™‰üūCęjĖ–ãĒP=Ã―?ã}X‹šÐ œëÜ%õŦ`Éæրų…ˆ{íĐ֐˜Čĩ4FLQk݊) failed (rc=-5) [ 46.948728][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 46.969021][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 46.978172][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 46.986165][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 46.986245][ T361] usb 2-1: device descriptor read/64, error -71 [ 46.995324][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 47.009463][ T800] loop7: unable to read partition table [ 47.015235][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.017329][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.025387][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.034445][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 47.035165][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.047689][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 47.051242][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 47.060482][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.070054][ T357] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 47.077253][ T9] usb 4-1: Product: syz [ 47.096957][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.106070][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 47.113987][ T9] usb 4-1: Manufacturer: syz [ 47.118623][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.127715][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 47.135571][ T9] usb 4-1: SerialNumber: syz [ 47.136111][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.148199][ T361] usb usb2-port1: attempt power cycle [ 47.149293][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 47.237865][ T357] usb 3-1: Using ep0 maxpacket: 32 [ 47.244055][ T357] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 47.254905][ T357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.265798][ T357] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 47.278878][ T357] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 47.287875][ T399] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 47.295464][ T357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.304121][ T357] usb 3-1: config 0 descriptor?? [ 47.344186][ T9] usb 4-1: 0:1 : does not exist [ 47.349195][ T9] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 47.364553][ T9] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 47.373935][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 47.386486][ T9] usb 4-1: USB disconnect, device number 12 [ 47.393014][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.438909][ T399] usb 1-1: config 16 has an invalid interface number: 19 but max is 0 [ 47.447212][ T399] usb 1-1: config 16 has no interface number 0 [ 47.453497][ T399] usb 1-1: config 16 interface 19 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 47.464618][ T399] usb 1-1: config 16 interface 19 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 47.476106][ T399] usb 1-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 47.485214][ T399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.493270][ T399] usb 1-1: Product: syz [ 47.497448][ T399] usb 1-1: Manufacturer: syz [ 47.502086][ T361] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 47.509819][ T399] usb 1-1: SerialNumber: syz [ 47.512471][ T798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.523055][ T798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.532201][ T361] usb 2-1: device descriptor read/8, error -71 [ 47.668862][ T361] usb 2-1: device descriptor read/8, error -71 [ 47.715949][ T800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'. [ 47.733947][ T399] usb 1-1: USB disconnect, device number 11 [ 47.741158][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.841888][ T801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.850437][ T801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.869344][ T803] netlink: 'syz.3.180': attribute type 61 has an invalid length. [ 47.877209][ T804] netlink: 'syz.3.180': attribute type 61 has an invalid length. [ 47.890108][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 47.890124][ T36] audit: type=1400 audit(1783490314.010:228): avc: denied { write } for pid=802 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.908159][ T361] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 47.915583][ T36] audit: type=1400 audit(1783490314.010:229): avc: denied { read } for pid=802 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.959243][ T361] usb 2-1: device descriptor read/8, error -71 [ 47.992719][ T811] fuse: Bad value for 'fd' [ 48.098866][ T361] usb 2-1: device descriptor read/8, error -71 [ 48.182675][ T820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.191309][ T820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.207968][ T361] usb usb2-port1: unable to enumerate USB device [ 48.417880][ T399] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 48.487887][ T361] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 48.567869][ T399] usb 4-1: Using ep0 maxpacket: 8 [ 48.573985][ T399] usb 4-1: config 0 interface 0 altsetting 240 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 48.585364][ T399] usb 4-1: config 0 interface 0 altsetting 240 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.598454][ T399] usb 4-1: config 0 interface 0 has no altsetting 0 [ 48.605071][ T399] usb 4-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 48.614128][ T399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.622790][ T399] usb 4-1: config 0 descriptor?? [ 48.637877][ T361] usb 1-1: Using ep0 maxpacket: 8 [ 48.644359][ T361] usb 1-1: unable to get BOS descriptor or descriptor too short [ 48.652727][ T361] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.662912][ T361] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.673495][ T361] usb 1-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 48.682630][ T361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.690711][ T361] usb 1-1: Product: syz [ 48.694903][ T361] usb 1-1: Manufacturer: syz [ 48.699536][ T361] usb 1-1: SerialNumber: syz [ 48.832383][ T399] usbhid 4-1:0.0: can't add hid device: -71 [ 48.841932][ T399] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 48.853302][ T399] usb 4-1: USB disconnect, device number 13 [ 48.857058][ T830] fuse: Bad value for 'fd' [ 48.908830][ T361] usb 1-1: 0:1 : does not exist [ 48.913736][ T361] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 48.928777][ T361] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 48.938274][ T361] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 48.954434][ T361] usb 1-1: USB disconnect, device number 12 [ 48.962097][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.503339][ T842] raw_sendmsg: syz.3.197 forgot to set AF_INET. Fix it! [ 49.511154][ T36] audit: type=1400 audit(1783490315.630:230): avc: denied { bind } for pid=841 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.530572][ T36] audit: type=1400 audit(1783490315.630:231): avc: denied { listen } for pid=841 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.550025][ T36] audit: type=1400 audit(1783490315.630:232): avc: denied { read append } for pid=841 comm="syz.3.197" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 49.574824][ T36] audit: type=1400 audit(1783490315.630:233): avc: denied { open } for pid=841 comm="syz.3.197" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 49.599566][ T36] audit: type=1400 audit(1783490315.710:234): avc: denied { mounton } for pid=851 comm="syz.3.200" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.821187][ T357] usbhid 3-1:0.0: can't add hid device: -71 [ 49.827216][ T357] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 49.828265][ T854] fuse: Bad value for 'fd' [ 49.835311][ T568] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 49.852661][ T357] usb 3-1: USB disconnect, device number 13 [ 49.863284][ T856] netlink: 'syz.1.202': attribute type 27 has an invalid length. [ 49.871332][ T331] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 49.905489][ T36] audit: type=1400 audit(1783490316.020:235): avc: denied { create } for pid=857 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.937917][ T36] audit: type=1400 audit(1783490316.050:236): avc: denied { getopt } for pid=857 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.958968][ T858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=858 comm=syz.1.203 [ 49.972217][ T858] netlink: 'syz.1.203': attribute type 10 has an invalid length. [ 50.007863][ T568] usb 4-1: Using ep0 maxpacket: 32 [ 50.015341][ T568] usb 4-1: unable to get BOS descriptor or descriptor too short [ 50.024334][ T568] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 50.035613][ T331] usb 1-1: Using ep0 maxpacket: 16 [ 50.040993][ T568] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 50.056856][ T331] usb 1-1: unable to get BOS descriptor or descriptor too short [ 50.065990][ T568] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 50.075208][ T331] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 50.088941][ T568] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.097084][ T568] usb 4-1: Product: syz [ 50.101608][ T568] usb 4-1: Manufacturer: syz [ 50.106280][ T568] usb 4-1: SerialNumber: syz [ 50.112435][ T331] usb 1-1: string descriptor 0 read error: -22 [ 50.113935][ T852] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 50.118715][ T331] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 50.136622][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.147419][ T331] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 50.156092][ T331] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 50.256915][ T36] audit: type=1400 audit(1783490316.370:237): avc: denied { ioctl } for pid=874 comm="syz.1.210" path="socket:[6726]" dev="sockfs" ino=6726 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.347702][ T568] usb 4-1: MIDIStreaming interface descriptor not found [ 50.370084][ T568] usb 4-1: USB disconnect, device number 14 [ 50.384874][ T360] udevd[360]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 50.498409][ T882] fuse: Bad value for 'fd' [ 50.797904][ T399] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 50.957879][ T399] usb 3-1: Using ep0 maxpacket: 8 [ 50.963870][ T399] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.974179][ T399] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.984944][ T399] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 50.994456][ T399] usb 3-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 51.002561][ T399] usb 3-1: Product: syz [ 51.006749][ T399] usb 3-1: Manufacturer: syz [ 51.011350][ T399] usb 3-1: SerialNumber: syz [ 51.028672][ T900] FAULT_INJECTION: forcing a failure. [ 51.028672][ T900] name failslab, interval 1, probability 0, space 0, times 1 [ 51.041402][ T900] CPU: 0 UID: 0 PID: 900 Comm: syz.3.218 Not tainted syzkaller #0 c7f5503d26b438f3979f72c504038c741c73a5b1 [ 51.041429][ T900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 51.041443][ T900] Call Trace: [ 51.041447][ T900] [ 51.041451][ T900] __dump_stack+0x21/0x30 [ 51.041473][ T900] dump_stack_lvl+0x140/0x1c0 [ 51.041487][ T900] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.041501][ T900] dump_stack+0x19/0x20 [ 51.041513][ T900] should_fail_ex+0x3c2/0x510 [ 51.041528][ T900] should_failslab+0xac/0x100 [ 51.041541][ T900] kmem_cache_alloc_noprof+0x42/0x410 [ 51.041551][ T900] ? vm_area_dup+0x3f/0x560 [ 51.041563][ T900] vm_area_dup+0x3f/0x560 [ 51.041573][ T900] ? __split_vma+0x1bf/0xc10 [ 51.041584][ T900] __split_vma+0x1ce/0xc10 [ 51.041594][ T900] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 51.041606][ T900] ? find_vma+0xd3/0x120 [ 51.041615][ T900] ? can_vma_merge_left+0x184/0x4b0 [ 51.041629][ T900] vma_modify+0x60c/0x1540 [ 51.041641][ T900] vma_modify_flags+0x182/0x1c0 [ 51.041652][ T900] mlock_fixup+0x1c9/0x740 [ 51.041666][ T900] apply_vma_lock_flags+0x28a/0x3b0 [ 51.041680][ T900] ? do_mlock+0xa10/0xa10 [ 51.041694][ T900] ? __cfi_down_write_killable+0x10/0x10 [ 51.041708][ T900] ? __kasan_check_write+0x18/0x20 [ 51.041718][ T900] ? mutex_unlock+0x90/0x240 [ 51.041730][ T900] do_mlock+0x71d/0xa10 [ 51.041743][ T900] ? fput+0x1a4/0x230 [ 51.041755][ T900] ? lru_gen_add_folio+0x880/0x880 [ 51.041768][ T900] ? ksys_write+0x1f3/0x260 [ 51.041778][ T900] ? __cfi_ksys_write+0x10/0x10 [ 51.041788][ T900] ? __kasan_check_read+0x15/0x20 [ 51.041798][ T900] __x64_sys_mlock+0x64/0x80 [ 51.041810][ T900] x64_sys_call+0x670/0x2ee0 [ 51.041819][ T900] do_syscall_64+0x57/0xf0 [ 51.041829][ T900] ? clear_bhb_loop+0x50/0xa0 [ 51.041842][ T900] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.041854][ T900] RIP: 0033:0x7f57d099de59 [ 51.041866][ T900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.041880][ T900] RSP: 002b:00007f57d18b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 51.041895][ T900] RAX: ffffffffffffffda RBX: 00007f57d0c25fa0 RCX: 00007f57d099de59 [ 51.041902][ T900] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 51.041909][ T900] RBP: 00007f57d18b0090 R08: 0000000000000000 R09: 0000000000000000 [ 51.041916][ T900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.041922][ T900] R13: 00007f57d0c26038 R14: 00007f57d0c25fa0 R15: 00007ffd0a5685a8 [ 51.041930][ T900] [ 51.061348][ T568] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 51.078141][ T361] usb 1-1: USB disconnect, device number 13 [ 51.214488][ T912] fuse: Invalid rootmode [ 51.232220][ T399] usb 3-1: USB disconnect, device number 14 [ 51.270401][ T568] usb 2-1: unable to get BOS descriptor or descriptor too short [ 51.342103][ T568] usb 2-1: not running at top speed; connect to a high speed hub [ 51.342884][ T913] udevd[913]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.350720][ T568] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 4 [ 51.380897][ T568] usb 2-1: language id specifier not provided by device, defaulting to English [ 51.402002][ T568] usb 2-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40 [ 51.415148][ T568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.423367][ T568] usb 2-1: Product: syz [ 51.428916][ T568] usb 2-1: Manufacturer: éīŠę‹ūįŠŠäŒį”ĐîļžãŠ–ęŸ†ä‘•į‚—ęƒ—ãŊ‘ęš•ä„éš‡í…â―šä°ļ㰚힇îŊ…阚į”ĩ둰â‚ķí—’â·Ąė…Œå­ūįĻŪ⹗⟗îŋĩč―ˆí—īę„Ķí ã·―ęŪ“ኍ㞊噞āīãŊėĻ€čĄŒîģ–čĒĄá’æŠ§éžæūïŪąė‘݇äąŪęī™áŪ‹æą–á‚‹āĪéŒŽãœ‡äŠ â‘ąāšęĻĢčĄŸę­æ‚îžūįēˆčĩĪãķŊėķŽæ•§ [ 51.457594][ T568] usb 2-1: SerialNumber: syz [ 51.670767][ T891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.679315][ T891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.770164][ T568] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 51.785634][ T568] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 51.798403][ T331] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 51.817943][ T568] usb 2-1: USB disconnect, device number 16 [ 51.957902][ T331] usb 1-1: Using ep0 maxpacket: 32 [ 51.966570][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.977667][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.990220][ T331] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 51.999353][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.011055][ T331] usb 1-1: config 0 descriptor?? [ 52.020031][ T331] hub 1-1:0.0: USB hub found [ 52.187878][ T357] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 52.216936][ T331] hub 1-1:0.0: 1 port detected [ 52.315749][ T938] FAULT_INJECTION: forcing a failure. [ 52.315749][ T938] name failslab, interval 1, probability 0, space 0, times 0 [ 52.328450][ T938] CPU: 0 UID: 0 PID: 938 Comm: syz.1.229 Not tainted syzkaller #0 c7f5503d26b438f3979f72c504038c741c73a5b1 [ 52.328477][ T938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 52.328487][ T938] Call Trace: [ 52.328493][ T938] [ 52.328500][ T938] __dump_stack+0x21/0x30 [ 52.328529][ T938] dump_stack_lvl+0x140/0x1c0 [ 52.328552][ T938] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.328576][ T938] ? kasan_save_track+0x4f/0x80 [ 52.328596][ T938] ? kasan_save_alloc_info+0x3a/0x50 [ 52.328617][ T938] dump_stack+0x19/0x20 [ 52.328637][ T938] should_fail_ex+0x3c2/0x510 [ 52.328656][ T938] should_failslab+0xac/0x100 [ 52.328677][ T938] kmem_cache_alloc_noprof+0x42/0x410 [ 52.328695][ T938] ? mas_wr_store_type+0x13f3/0x1b40 [ 52.328718][ T938] ? mas_alloc_nodes+0x254/0x9d0 [ 52.328742][ T938] mas_alloc_nodes+0x254/0x9d0 [ 52.328764][ T938] mas_preallocate+0x79b/0xc90 [ 52.328778][ T938] ? __cfi_mas_preallocate+0x10/0x10 [ 52.328791][ T938] ? __kasan_check_read+0x15/0x20 [ 52.328807][ T938] ? anon_vma_name+0x51/0xa0 [ 52.328840][ T938] ? vm_area_dup+0x415/0x560 [ 52.328860][ T938] __split_vma+0x449/0xc10 [ 52.328878][ T938] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 52.328889][ T938] ? find_vma+0xd3/0x120 [ 52.328899][ T938] ? can_vma_merge_left+0x184/0x4b0 [ 52.328910][ T938] vma_modify+0x60c/0x1540 [ 52.328921][ T938] vma_modify_flags+0x182/0x1c0 [ 52.328933][ T938] mlock_fixup+0x1c9/0x740 [ 52.328958][ T938] apply_vma_lock_flags+0x28a/0x3b0 [ 52.328983][ T938] ? do_mlock+0xa10/0xa10 [ 52.329007][ T938] ? __cfi_down_write_killable+0x10/0x10 [ 52.329026][ T938] ? __kasan_check_write+0x18/0x20 [ 52.329035][ T938] ? mutex_unlock+0x90/0x240 [ 52.329047][ T938] do_mlock+0x71d/0xa10 [ 52.329060][ T938] ? fput+0x1a4/0x230 [ 52.329073][ T938] ? lru_gen_add_folio+0x880/0x880 [ 52.329096][ T938] ? ksys_write+0x1f3/0x260 [ 52.329114][ T938] ? __cfi_ksys_write+0x10/0x10 [ 52.329133][ T938] ? __kasan_check_read+0x15/0x20 [ 52.329150][ T938] __x64_sys_mlock+0x64/0x80 [ 52.329165][ T938] x64_sys_call+0x670/0x2ee0 [ 52.329175][ T938] do_syscall_64+0x57/0xf0 [ 52.329185][ T938] ? clear_bhb_loop+0x50/0xa0 [ 52.329197][ T938] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.329209][ T938] RIP: 0033:0x7fbe0379de59 [ 52.329222][ T938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.329237][ T938] RSP: 002b:00007fbe04724028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 52.329257][ T938] RAX: ffffffffffffffda RBX: 00007fbe03a25fa0 RCX: 00007fbe0379de59 [ 52.329272][ T938] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 52.329284][ T938] RBP: 00007fbe04724090 R08: 0000000000000000 R09: 0000000000000000 [ 52.329295][ T938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.329303][ T938] R13: 00007fbe03a26038 R14: 00007fbe03a25fa0 R15: 00007fffc950d8d8 [ 52.329312][ T938] [ 52.762475][ T357] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 52.770153][ T357] usb 3-1: can't read configurations, error -71 [ 53.008099][ T948] fuse: Invalid rootmode [ 53.437889][ T357] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 53.446065][ T331] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 53.452487][ T331] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 53.461224][ T331] usbhid 1-1:0.0: can't add hid device: -32 [ 53.467191][ T331] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 53.617907][ T357] usb 3-1: Using ep0 maxpacket: 8 [ 53.628220][ T357] usb 3-1: unable to get BOS descriptor or descriptor too short [ 53.636863][ T357] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.647050][ T357] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.657904][ T357] usb 3-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 53.667015][ T357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.675064][ T357] usb 3-1: Product: syz [ 53.679268][ T357] usb 3-1: Manufacturer: syz [ 53.683861][ T357] usb 3-1: SerialNumber: syz [ 53.708081][ T399] usb 1-1: USB disconnect, device number 14 [ 53.893567][ T357] usb 3-1: 0:1 : does not exist [ 53.898535][ T357] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 53.913981][ T357] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 53.923048][ T357] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 53.932970][ T357] usb 3-1: USB disconnect, device number 16 [ 53.939730][ T913] udevd[913]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.997893][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 54.147875][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 54.159728][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 54.168910][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.176911][ T9] usb 2-1: Product: syz [ 54.181207][ T9] usb 2-1: Manufacturer: syz [ 54.185833][ T9] usb 2-1: SerialNumber: syz [ 54.198499][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 54.204913][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 54.408743][ T969] fuse: Invalid rootmode [ 54.477756][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 54.477771][ T36] audit: type=1400 audit(1783490320.590:243): avc: denied { read } for pid=970 comm="syz.0.243" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.507306][ T36] audit: type=1400 audit(1783490320.630:244): avc: denied { open } for pid=970 comm="syz.0.243" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.530526][ T399] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 54.557938][ T36] audit: type=1400 audit(1783490320.630:245): avc: denied { ioctl } for pid=970 comm="syz.0.243" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.612168][ T36] audit: type=1400 audit(1783490320.730:246): avc: denied { write } for pid=981 comm="syz.0.246" path="socket:[8547]" dev="sockfs" ino=8547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.635794][ T36] audit: type=1400 audit(1783490320.730:247): avc: denied { ioctl } for pid=981 comm="syz.0.246" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 54.737882][ T399] usb 4-1: Using ep0 maxpacket: 16 [ 54.743365][ T399] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 54.757321][ T399] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 54.766471][ T399] usb 4-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 54.774853][ T399] usb 4-1: Product: syz [ 54.779075][ T399] usb 4-1: Manufacturer: syz [ 54.785271][ T399] r8152-cfgselector 4-1: Unknown version 0x0000 [ 54.791571][ T399] r8152-cfgselector 4-1: config 0 descriptor?? [ 54.857889][ T357] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 54.907915][ T568] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 54.999653][ T399] r8152-cfgselector 4-1: bad CDC descriptors [ 55.009029][ T357] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 55.019907][ T357] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 55.031655][ T357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 55.042830][ T357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 55.052639][ T357] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 55.066907][ T357] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 55.076075][ T357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.084103][ T357] usb 1-1: Product: syz [ 55.088392][ T357] usb 1-1: Manufacturer: syz [ 55.093011][ T357] usb 1-1: SerialNumber: syz [ 55.097966][ T568] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.108942][ T568] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.118951][ T357] usb 1-1: config 0 descriptor?? [ 55.124011][ T568] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 55.133084][ T568] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.137478][ T9] r8152-cfgselector 2-1: USB disconnect, device number 17 [ 55.142196][ T357] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input4 [ 55.160314][ T568] usb 3-1: config 0 descriptor?? [ 55.167082][ T36] audit: type=1400 audit(1783490321.280:248): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=576 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.212393][ T357] r8152-cfgselector 4-1: USB disconnect, device number 15 [ 55.216313][ T36] audit: type=1400 audit(1783490321.280:249): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=576 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.336907][ T994] FAULT_INJECTION: forcing a failure. [ 55.336907][ T994] name failslab, interval 1, probability 0, space 0, times 0 [ 55.349641][ T994] CPU: 1 UID: 0 PID: 994 Comm: syz.1.250 Not tainted syzkaller #0 c7f5503d26b438f3979f72c504038c741c73a5b1 [ 55.349674][ T994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 55.349685][ T994] Call Trace: [ 55.349694][ T994] [ 55.349699][ T994] __dump_stack+0x21/0x30 [ 55.349721][ T994] dump_stack_lvl+0x140/0x1c0 [ 55.349735][ T994] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.349749][ T994] dump_stack+0x19/0x20 [ 55.349762][ T994] should_fail_ex+0x3c2/0x510 [ 55.349774][ T994] should_failslab+0xac/0x100 [ 55.349787][ T994] kmem_cache_alloc_noprof+0x42/0x410 [ 55.349797][ T994] ? __anon_vma_prepare+0xa5/0x590 [ 55.349809][ T994] __anon_vma_prepare+0xa5/0x590 [ 55.349818][ T994] ? __pte_offset_map_lock+0x279/0x2f0 [ 55.349833][ T994] do_pte_missing+0x2dd9/0x4440 [ 55.349846][ T994] ? mlock_folio+0x25d/0x330 [ 55.349859][ T994] ? cgroup_rstat_updated+0x144/0x800 [ 55.349871][ T994] ? pte_marker_clear+0x1b0/0x1b0 [ 55.349883][ T994] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 55.349897][ T994] ? irqentry_exit+0x4a/0x60 [ 55.349911][ T994] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 55.349924][ T994] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 55.349939][ T994] handle_mm_fault+0x1189/0x1ba0 [ 55.349952][ T994] ? __cfi_handle_mm_fault+0x10/0x10 [ 55.349963][ T994] ? mlock_folio_batch+0x3162/0x31e0 [ 55.349977][ T994] ? __cfi_find_vma+0x10/0x10 [ 55.349986][ T994] ? vma_is_secretmem+0x11/0x50 [ 55.350000][ T994] ? check_vma_flags+0x36d/0x3a0 [ 55.350014][ T994] __get_user_pages+0x114b/0x22d0 [ 55.350029][ T994] ? populate_vma_page_range+0x220/0x220 [ 55.350041][ T994] ? down_read+0x7f/0xe0 [ 55.350054][ T994] ? __cfi_down_read+0x10/0x10 [ 55.350068][ T994] __mm_populate+0x300/0x440 [ 55.350080][ T994] do_mlock+0x7f3/0xa10 [ 55.350094][ T994] ? fput+0x1a4/0x230 [ 55.350106][ T994] ? lru_gen_add_folio+0x880/0x880 [ 55.350120][ T994] ? ksys_write+0x1f3/0x260 [ 55.350129][ T994] ? __cfi_ksys_write+0x10/0x10 [ 55.350140][ T994] ? __kasan_check_read+0x15/0x20 [ 55.350150][ T994] __x64_sys_mlock+0x64/0x80 [ 55.350163][ T994] x64_sys_call+0x670/0x2ee0 [ 55.350172][ T994] do_syscall_64+0x57/0xf0 [ 55.350182][ T994] ? clear_bhb_loop+0x50/0xa0 [ 55.350198][ T994] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.350209][ T994] RIP: 0033:0x7fbe0379de59 [ 55.350219][ T994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.350228][ T994] RSP: 002b:00007fbe04724028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 55.350241][ T994] RAX: ffffffffffffffda RBX: 00007fbe03a25fa0 RCX: 00007fbe0379de59 [ 55.350249][ T994] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 55.350256][ T994] RBP: 00007fbe04724090 R08: 0000000000000000 R09: 0000000000000000 [ 55.350262][ T994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.350269][ T994] R13: 00007fbe03a26038 R14: 00007fbe03a25fa0 R15: 00007fffc950d8d8 [ 55.350277][ T994] [ 55.353035][ T31] usb 1-1: USB disconnect, device number 15 [ 55.368672][ T985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.668045][ T985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.807328][ T1000] fuse: Bad value for 'rootmode' [ 55.907909][ T331] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 56.067895][ T331] usb 2-1: Using ep0 maxpacket: 8 [ 56.074275][ T331] usb 2-1: unable to get BOS descriptor or descriptor too short [ 56.082211][ T568] usb 3-1: string descriptor 0 read error: -22 [ 56.089070][ T331] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.099237][ T331] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.109523][ T331] usb 2-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 56.118910][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.126934][ T331] usb 2-1: Product: syz [ 56.131151][ T331] usb 2-1: Manufacturer: syz [ 56.135757][ T331] usb 2-1: SerialNumber: syz [ 56.282792][ T568] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 56.290351][ T311] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 56.334651][ T1016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.343229][ T1016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.353410][ T331] usb 2-1: 0:1 : does not exist [ 56.354410][ T1016] usb usb8: usbfs: process 1016 (syz.2.247) did not claim interface 0 before use [ 56.358344][ T331] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 56.382598][ T331] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 56.387878][ T361] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 56.392293][ T331] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 56.408474][ T331] usb 2-1: USB disconnect, device number 18 [ 56.416184][ T913] udevd[913]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.469726][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 56.478055][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.488757][ T311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.499148][ T311] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 56.508272][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.516263][ T311] usb 4-1: Product: syz [ 56.520439][ T311] usb 4-1: Manufacturer: syz [ 56.525029][ T311] usb 4-1: SerialNumber: syz [ 56.532364][ T311] usb 4-1: selecting invalid altsetting 1 [ 56.538213][ T311] usb 4-1: unit 6 not found! [ 56.547885][ T361] usb 1-1: Using ep0 maxpacket: 32 [ 56.554184][ T361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.565154][ T361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.574925][ T361] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 56.584017][ T361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.592690][ T361] usb 1-1: config 0 descriptor?? [ 56.872276][ T1018] FAULT_INJECTION: forcing a failure. [ 56.872276][ T1018] name failslab, interval 1, probability 0, space 0, times 0 [ 56.885002][ T1018] CPU: 0 UID: 0 PID: 1018 Comm: syz.1.259 Not tainted syzkaller #0 c7f5503d26b438f3979f72c504038c741c73a5b1 [ 56.885032][ T1018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 56.885043][ T1018] Call Trace: [ 56.885050][ T1018] [ 56.885058][ T1018] __dump_stack+0x21/0x30 [ 56.885088][ T1018] dump_stack_lvl+0x140/0x1c0 [ 56.885112][ T1018] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.885136][ T1018] ? mas_prev+0x5f/0xa0 [ 56.885159][ T1018] dump_stack+0x19/0x20 [ 56.885172][ T1018] should_fail_ex+0x3c2/0x510 [ 56.885187][ T1018] should_failslab+0xac/0x100 [ 56.885201][ T1018] kmem_cache_alloc_noprof+0x42/0x410 [ 56.885211][ T1018] ? __anon_vma_prepare+0xec/0x590 [ 56.885226][ T1018] __anon_vma_prepare+0xec/0x590 [ 56.885243][ T1018] ? __pte_offset_map_lock+0x279/0x2f0 [ 56.885270][ T1018] do_pte_missing+0x2dd9/0x4440 [ 56.885291][ T1018] ? mlock_folio+0x25d/0x330 [ 56.885309][ T1018] ? cgroup_rstat_updated+0x144/0x800 [ 56.885321][ T1018] ? pte_marker_clear+0x1b0/0x1b0 [ 56.885333][ T1018] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 56.885347][ T1018] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 56.885363][ T1018] handle_mm_fault+0x1189/0x1ba0 [ 56.885385][ T1018] ? __cfi_handle_mm_fault+0x10/0x10 [ 56.885405][ T1018] ? mlock_folio_batch+0x3162/0x31e0 [ 56.885430][ T1018] ? __cfi_find_vma+0x10/0x10 [ 56.885444][ T1018] ? vma_is_secretmem+0x11/0x50 [ 56.885458][ T1018] ? check_vma_flags+0x36d/0x3a0 [ 56.885472][ T1018] __get_user_pages+0x114b/0x22d0 [ 56.885486][ T1018] ? populate_vma_page_range+0x220/0x220 [ 56.885498][ T1018] ? down_read+0x7f/0xe0 [ 56.885519][ T1018] ? __cfi_down_read+0x10/0x10 [ 56.885542][ T1018] __mm_populate+0x300/0x440 [ 56.885564][ T1018] do_mlock+0x7f3/0xa10 [ 56.885586][ T1018] ? lru_gen_add_folio+0x880/0x880 [ 56.885599][ T1018] ? irqtime_account_irq+0x51/0x1c0 [ 56.885613][ T1018] ? handle_softirqs+0x54c/0x620 [ 56.885623][ T1018] ? __kasan_check_read+0x15/0x20 [ 56.885633][ T1018] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 56.885649][ T1018] __x64_sys_mlock+0x64/0x80 [ 56.885672][ T1018] x64_sys_call+0x670/0x2ee0 [ 56.885695][ T1018] do_syscall_64+0x57/0xf0 [ 56.885713][ T1018] ? clear_bhb_loop+0x50/0xa0 [ 56.885730][ T1018] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.885742][ T1018] RIP: 0033:0x7fbe0379de59 [ 56.885752][ T1018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.885761][ T1018] RSP: 002b:00007fbe04724028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 56.885774][ T1018] RAX: ffffffffffffffda RBX: 00007fbe03a25fa0 RCX: 00007fbe0379de59 [ 56.885784][ T1018] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 56.885796][ T1018] RBP: 00007fbe04724090 R08: 0000000000000000 R09: 0000000000000000 [ 56.885809][ T1018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.885821][ T1018] R13: 00007fbe03a26038 R14: 00007fbe03a25fa0 R15: 00007fffc950d8d8 [ 56.885837][ T1018] [ 57.201526][ T311] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 57.214959][ T311] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 57.226850][ T311] usb 4-1: USB disconnect, device number 16 [ 57.239956][ T361] savu 0003:1E7D:2D5A.0002: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 57.260019][ T913] udevd[913]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.426082][ T1034] fuse: Bad value for 'rootmode' [ 57.461534][ T1015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.470074][ T1015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.517884][ T311] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 57.538709][ T1015] netlink: 108 bytes leftover after parsing attributes in process `syz.0.258'. [ 57.549813][ T331] usb 1-1: USB disconnect, device number 16 [ 57.667909][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 57.674501][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 57.682740][ T361] usb 3-1: USB disconnect, device number 17 [ 57.683269][ T311] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 57.696745][ T311] usb 4-1: can't read configurations, error -61 [ 57.703937][ T1050] FAULT_INJECTION: forcing a failure. [ 57.703937][ T1050] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 57.717336][ T1050] CPU: 0 UID: 0 PID: 1050 Comm: syz.2.269 Not tainted syzkaller #0 c7f5503d26b438f3979f72c504038c741c73a5b1 [ 57.717356][ T1050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 57.717363][ T1050] Call Trace: [ 57.717367][ T1050] [ 57.717371][ T1050] __dump_stack+0x21/0x30 [ 57.717390][ T1050] dump_stack_lvl+0x140/0x1c0 [ 57.717404][ T1050] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.717418][ T1050] dump_stack+0x19/0x20 [ 57.717431][ T1050] should_fail_ex+0x3c2/0x510 [ 57.717449][ T1050] should_fail_alloc_page+0xec/0x110 [ 57.717463][ T1050] __alloc_pages_noprof+0x1c0/0x7e0 [ 57.717478][ T1050] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 57.717493][ T1050] ? __kasan_check_write+0x18/0x20 [ 57.717503][ T1050] __folio_alloc_noprof+0x14/0x80 [ 57.717517][ T1050] folio_prealloc+0x46/0x220 [ 57.717529][ T1050] do_pte_missing+0x560/0x4440 [ 57.717541][ T1050] ? mlock_folio+0x25d/0x330 [ 57.717555][ T1050] ? cgroup_rstat_updated+0x144/0x800 [ 57.717567][ T1050] ? pte_marker_clear+0x1b0/0x1b0 [ 57.717579][ T1050] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 57.717593][ T1050] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 57.717607][ T1050] handle_mm_fault+0x1189/0x1ba0 [ 57.717620][ T1050] ? __cfi_handle_mm_fault+0x10/0x10 [ 57.717631][ T1050] ? mlock_folio_batch+0x3162/0x31e0 [ 57.717645][ T1050] ? __cfi_find_vma+0x10/0x10 [ 57.717654][ T1050] ? vma_is_secretmem+0x11/0x50 [ 57.717668][ T1050] ? check_vma_flags+0x36d/0x3a0 [ 57.717681][ T1050] __get_user_pages+0x114b/0x22d0 [ 57.717696][ T1050] ? populate_vma_page_range+0x220/0x220 [ 57.717708][ T1050] ? down_read+0x7f/0xe0 [ 57.717722][ T1050] ? __cfi_down_read+0x10/0x10 [ 57.717735][ T1050] __mm_populate+0x300/0x440 [ 57.717747][ T1050] do_mlock+0x7f3/0xa10 [ 57.717761][ T1050] ? fput+0x1a4/0x230 [ 57.717773][ T1050] ? lru_gen_add_folio+0x880/0x880 [ 57.717787][ T1050] ? ksys_write+0x1f3/0x260 [ 57.717797][ T1050] ? __cfi_ksys_write+0x10/0x10 [ 57.717807][ T1050] ? __kasan_check_read+0x15/0x20 [ 57.717820][ T1050] __x64_sys_mlock+0x64/0x80 [ 57.717840][ T1050] x64_sys_call+0x670/0x2ee0 [ 57.717855][ T1050] do_syscall_64+0x57/0xf0 [ 57.717872][ T1050] ? clear_bhb_loop+0x50/0xa0 [ 57.717891][ T1050] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.717910][ T1050] RIP: 0033:0x7f370ad9de59 [ 57.717925][ T1050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.717939][ T1050] RSP: 002b:00007f370bc93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 57.717959][ T1050] RAX: ffffffffffffffda RBX: 00007f370b025fa0 RCX: 00007f370ad9de59 [ 57.717971][ T1050] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 57.717982][ T1050] RBP: 00007f370bc93090 R08: 0000000000000000 R09: 0000000000000000 [ 57.717991][ T1050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.718000][ T1050] R13: 00007f370b026038 R14: 00007f370b025fa0 R15: 00007ffd33e50038 [ 57.718013][ T1050] [ 57.827891][ T311] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 57.912621][ T1052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.270'. [ 57.913132][ T568] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 57.942696][ T36] audit: type=1400 audit(1783490324.030:250): avc: denied { create } for pid=1051 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 58.057140][ T36] audit: type=1400 audit(1783490324.030:251): avc: denied { getopt } for pid=1051 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.095455][ T1060] fuse: Bad value for 'rootmode' [ 58.117896][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 58.123262][ T568] usb 2-1: Using ep0 maxpacket: 8 [ 58.129669][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 58.137523][ T568] usb 2-1: unable to get BOS descriptor or descriptor too short [ 58.145896][ T568] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.156272][ T568] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.167852][ T311] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 58.175427][ T311] usb 4-1: can't read configurations, error -61 [ 58.182407][ T311] usb usb4-port1: attempt power cycle [ 58.189068][ T568] usb 2-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 58.198371][ T568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.206382][ T568] usb 2-1: Product: syz [ 58.210880][ T568] usb 2-1: Manufacturer: syz [ 58.215481][ T568] usb 2-1: SerialNumber: syz [ 58.429302][ T568] usb 2-1: 0:1 : does not exist [ 58.434216][ T568] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 58.447514][ T1075] FAULT_INJECTION: forcing a failure. [ 58.447514][ T1075] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 58.449227][ T568] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 58.462652][ T1075] CPU: 0 UID: 0 PID: 1075 Comm: syz.2.279 Not tainted syzkaller #0 c7f5503d26b438f3979f72c504038c741c73a5b1 [ 58.462678][ T1075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 58.462689][ T1075] Call Trace: [ 58.462695][ T1075] [ 58.462701][ T1075] __dump_stack+0x21/0x30 [ 58.462729][ T1075] dump_stack_lvl+0x140/0x1c0 [ 58.462752][ T1075] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.462776][ T1075] dump_stack+0x19/0x20 [ 58.462797][ T1075] should_fail_ex+0x3c2/0x510 [ 58.462818][ T1075] should_fail_alloc_page+0xec/0x110 [ 58.462839][ T1075] __alloc_pages_noprof+0x1c0/0x7e0 [ 58.462863][ T1075] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 58.462887][ T1075] ? memcg1_commit_charge+0xf8/0x2b0 [ 58.462906][ T1075] pte_alloc_one+0x92/0x530 [ 58.462924][ T1075] ? __cfi_pte_alloc_one+0x10/0x10 [ 58.462941][ T1075] ? blk_cgroup_congested+0x120/0x130 [ 58.462963][ T1075] ? __folio_throttle_swaprate+0x97/0x160 [ 58.462994][ T1075] ? folio_prealloc+0xe5/0x220 [ 58.463015][ T1075] do_pte_missing+0x1eb9/0x4440 [ 58.463035][ T1075] ? mlock_folio+0x25d/0x330 [ 58.463058][ T1075] ? cgroup_rstat_updated+0x144/0x800 [ 58.463077][ T1075] ? pte_marker_clear+0x1b0/0x1b0 [ 58.463098][ T1075] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 58.463121][ T1075] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 58.463145][ T1075] handle_mm_fault+0x1189/0x1ba0 [ 58.463167][ T1075] ? __cfi_handle_mm_fault+0x10/0x10 [ 58.463187][ T1075] ? mlock_folio_batch+0x3162/0x31e0 [ 58.463211][ T1075] ? __cfi_find_vma+0x10/0x10 [ 58.463227][ T1075] ? vma_is_secretmem+0x11/0x50 [ 58.463250][ T1075] ? check_vma_flags+0x36d/0x3a0 [ 58.463273][ T1075] __get_user_pages+0x114b/0x22d0 [ 58.463299][ T1075] ? populate_vma_page_range+0x220/0x220 [ 58.463320][ T1075] ? down_read+0x7f/0xe0 [ 58.463341][ T1075] ? __cfi_down_read+0x10/0x10 [ 58.463364][ T1075] __mm_populate+0x300/0x440 [ 58.463385][ T1075] do_mlock+0x7f3/0xa10 [ 58.463408][ T1075] ? fput+0x1a4/0x230 [ 58.463428][ T1075] ? lru_gen_add_folio+0x880/0x880 [ 58.463451][ T1075] ? ksys_write+0x1f3/0x260 [ 58.463468][ T1075] ? __cfi_ksys_write+0x10/0x10 [ 58.463486][ T1075] ? __kasan_check_read+0x15/0x20 [ 58.463503][ T1075] __x64_sys_mlock+0x64/0x80 [ 58.463525][ T1075] x64_sys_call+0x670/0x2ee0 [ 58.463540][ T1075] do_syscall_64+0x57/0xf0 [ 58.463557][ T1075] ? clear_bhb_loop+0x50/0xa0 [ 58.463577][ T1075] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.463597][ T1075] RIP: 0033:0x7f370ad9de59 [ 58.463613][ T1075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.463628][ T1075] RSP: 002b:00007f370bc93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 58.463647][ T1075] RAX: ffffffffffffffda RBX: 00007f370b025fa0 RCX: 00007f370ad9de59 [ 58.463661][ T1075] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 58.463673][ T1075] RBP: 00007f370bc93090 R08: 0000000000000000 R09: 0000000000000000 [ 58.463685][ T1075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.463696][ T1075] R13: 00007f370b026038 R14: 00007f370b025fa0 R15: 00007ffd33e50038 [ 58.463711][ T1075] [ 58.506606][ T1083] fuse: Unknown parameter 'use00000000000000000000' [ 58.508941][ T568] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 58.667901][ T64] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 58.671552][ T311] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 58.814978][ T568] usb 2-1: USB disconnect, device number 19 [ 58.823308][ T913] udevd[913]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.838239][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 58.847805][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 58.847912][ T64] usb 1-1: Using ep0 maxpacket: 32 [ 58.856900][ T311] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 58.869334][ T311] usb 4-1: can't read configurations, error -61 [ 58.870835][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.891278][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.901790][ T64] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 58.910888][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.919414][ T64] usb 1-1: config 0 descriptor?? [ 58.925173][ T64] hub 1-1:0.0: USB hub found [ 58.997887][ T311] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 59.018214][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 59.024764][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 59.034493][ T311] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 59.042103][ T311] usb 4-1: can't read configurations, error -61 [ 59.048518][ T311] usb usb4-port1: unable to enumerate USB device [ 59.130337][ T64] hub 1-1:0.0: 1 port detected [ 59.148953][ T361] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 59.161425][ T1094] tmpfs: Cannot disable swap on remount [ 59.222801][ T36] audit: type=1400 audit(1783490325.340:252): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.302732][ T1097] 9pnet_fd: p9_fd_create_tcp (1097): problem connecting socket to 127.0.0.1 [ 59.317870][ T361] usb 3-1: Using ep0 maxpacket: 32 [ 59.323976][ T361] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 59.332120][ T361] usb 3-1: config 0 has no interface number 0 [ 59.339522][ T361] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 59.348612][ T361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.356656][ T361] usb 3-1: Product: syz [ 59.360827][ T361] usb 3-1: Manufacturer: syz [ 59.365465][ T361] usb 3-1: SerialNumber: syz [ 59.370947][ T361] usb 3-1: config 0 descriptor?? [ 59.377348][ T361] smsc95xx v2.0.0 [ 59.547872][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 59.577679][ T361] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 59.588433][ T361] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 59.697878][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 59.704214][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 59.712598][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.722708][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 59.731685][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 88, changing to 7 [ 59.743879][ T9] usb 2-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 59.752996][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.761021][ T9] usb 2-1: Product: syz [ 59.765173][ T9] usb 2-1: Manufacturer: syz [ 59.769779][ T9] usb 2-1: SerialNumber: syz [ 59.798584][ T361] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 59.809376][ T361] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 59.979644][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 59.990768][ T9] usb 2-1: USB disconnect, device number 20 [ 60.153015][ T361] usb 3-1: USB disconnect, device number 18 [ 60.279007][ T1108] fuse: Unknown parameter 'use00000000000000000000' [ 60.388896][ T64] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 60.395466][ T64] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 60.404919][ T64] usbhid 1-1:0.0: can't add hid device: -71 [ 60.411563][ T64] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 60.439586][ T64] usb 1-1: USB disconnect, device number 17 [ 60.657901][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 60.697712][ T1139] fuse: Unknown parameter 'use00000000000000000000' [ 60.737883][ T311] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 60.817881][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 60.828906][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 60.837357][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 60.844980][ T9] usb 4-1: can't read configurations, error -71 [ 60.899114][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 60.907583][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.919510][ T311] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 60.930522][ T311] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 60.941937][ T311] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 60.951380][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.959401][ T311] usb 3-1: Product: syz [ 60.963595][ T311] usb 3-1: Manufacturer: syz [ 60.968210][ T311] usb 3-1: SerialNumber: syz [ 61.067874][ T568] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 61.189245][ T36] audit: type=1400 audit(1783490327.310:253): avc: denied { shutdown } for pid=1130 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.217872][ T568] usb 2-1: Using ep0 maxpacket: 16 [ 61.223946][ T568] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.234088][ T568] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.243683][ T568] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 61.252770][ T568] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 61.257883][ T64] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 61.261293][ T568] usb 2-1: SerialNumber: syz [ 61.278636][ T568] usb 2-1: 0:2 : does not exist [ 61.345819][ T1160] fuse: Unknown parameter 'user_i00000000000000000000' [ 61.418943][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 61.430150][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 61.440947][ T64] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 61.457022][ T64] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 61.466100][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.474870][ T64] usb 1-1: config 0 descriptor?? [ 61.487250][ T1153] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 61.496815][ T568] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 61.506967][ T568] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 61.519182][ T568] usb 2-1: USB disconnect, device number 21 [ 61.531012][ T311] usb 3-1: USB disconnect, device number 19 [ 61.556357][ T913] udevd[913]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.639962][ T1171] fuse: Bad value for 'fd' [ 61.690347][ T1173] batadv_slave_1: entered promiscuous mode [ 61.708677][ T1174] batadv_slave_1: left promiscuous mode [ 61.857878][ T311] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 61.897892][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 61.905684][ T64] hid (null): unknown global tag 0xd [ 61.912318][ T64] uclogic 0003:5543:0004.0003: unknown main item tag 0x1 [ 61.919405][ T64] uclogic 0003:5543:0004.0003: unknown global tag 0xd [ 61.926181][ T64] uclogic 0003:5543:0004.0003: item 0 4 1 13 parsing failed [ 61.933643][ T64] uclogic 0003:5543:0004.0003: parse failed [ 61.939615][ T64] uclogic 0003:5543:0004.0003: probe with driver uclogic failed with error -22 [ 62.007898][ T399] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 62.008970][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.026377][ T311] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 62.036475][ T311] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 9216, setting to 1024 [ 62.047432][ T311] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 62.057870][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 62.064003][ T311] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.064079][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.073126][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.084488][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.092238][ T311] usb 3-1: Product: syz [ 62.102032][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 62.106680][ T1153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.116407][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.123411][ T311] usb 3-1: Manufacturer: syz [ 62.134816][ T9] usb 4-1: config 0 descriptor?? [ 62.135899][ T311] usb 3-1: SerialNumber: syz [ 62.141720][ T1153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.154687][ T311] cdc_mbim 3-1:1.0: skipping garbage [ 62.158721][ T9] hub 4-1:0.0: USB hub found [ 62.160190][ T311] cdc_mbim 3-1:1.0: skipping garbage [ 62.167910][ T399] usb 2-1: Using ep0 maxpacket: 8 [ 62.176352][ T399] usb 2-1: unable to get BOS descriptor or descriptor too short [ 62.184599][ T399] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 62.192189][ T399] usb 2-1: can't read configurations, error -71 [ 62.192240][ T331] usb 1-1: USB disconnect, device number 18 [ 62.268216][ T1188] fuse: Unknown parameter 'user_i00000000000000000000' [ 62.359009][ T36] audit: type=1400 audit(1783490328.480:254): avc: denied { bind } for pid=1161 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.379570][ T9] hub 4-1:0.0: 1 port detected [ 62.385341][ T36] audit: type=1400 audit(1783490328.480:255): avc: denied { connect } for pid=1161 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.410144][ T1158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.410360][ T36] audit: type=1326 audit(1783490328.480:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1189 comm="syz.0.321" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f943659de59 code=0x0 [ 62.419875][ T1158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.506043][ T36] audit: type=1326 audit(1783490328.620:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1189 comm="syz.0.321" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f943659de59 code=0x0 [ 62.825150][ T36] audit: type=1400 audit(1783490328.940:258): avc: denied { ioctl } for pid=1197 comm="syz.1.324" path="socket:[12526]" dev="sockfs" ino=12526 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.906249][ T36] audit: type=1326 audit(1783490329.020:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1204 comm="syz.1.326" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe0379de59 code=0x0 [ 62.962398][ T311] cdc_mbim 3-1:1.0: bind() failure [ 62.968550][ T311] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 62.978814][ T311] cdc_ncm 3-1:1.1: bind() failure [ 62.988956][ T311] usb 3-1: USB disconnect, device number 20 [ 63.087276][ T9] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 63.093703][ T9] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 63.106964][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 63.114739][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 63.116621][ T1215] fuse: Unknown parameter 'user_i00000000000000000000' [ 63.298362][ T9] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 63.428388][ T9] usb 4-1: device descriptor read/64, error -71 [ 63.517876][ T311] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 63.667876][ T311] usb 3-1: Using ep0 maxpacket: 8 [ 63.674878][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 63.683160][ T311] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 63.687871][ T9] usb 4-1: device descriptor read/64, error -71 [ 63.690879][ T311] usb 3-1: can't read configurations, error -71 [ 63.927893][ T9] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 64.057882][ T9] usb 4-1: device descriptor read/64, error -71 [ 64.091611][ T36] audit: type=1400 audit(1783490330.210:260): avc: denied { setopt } for pid=1229 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.183566][ T1238] fuse: Unknown parameter 'user_id00000000000000000000' [ 64.297975][ T9] usb 4-1: device descriptor read/64, error -71 [ 64.321973][ T36] audit: type=1400 audit(1783490330.440:261): avc: denied { read } for pid=1241 comm="syz.2.340" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 64.344661][ T36] audit: type=1400 audit(1783490330.440:262): avc: denied { open } for pid=1241 comm="syz.2.340" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 64.537891][ T9] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 64.559189][ T9] usb 4-1: device descriptor read/8, error -71 [ 64.689073][ T9] usb 4-1: device descriptor read/8, error -71 [ 64.717895][ T331] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 64.797910][ T568] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 64.817880][ T311] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 64.847900][ T331] usb 2-1: device descriptor read/64, error -71 [ 64.937937][ T9] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 64.948967][ T568] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.959894][ T568] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.969008][ T9] usb 4-1: device descriptor read/8, error -71 [ 64.969736][ T568] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 64.985035][ T568] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.993862][ T311] usb 3-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 65.004991][ T568] usb 1-1: config 0 descriptor?? [ 65.009976][ T311] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 181, changing to 11 [ 65.021265][ T311] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 65.034393][ T311] usb 3-1: config 0 interface 0 has no altsetting 0 [ 65.041684][ T311] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 65.050774][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.059377][ T311] usb 3-1: config 0 descriptor?? [ 65.098865][ T9] usb 4-1: device descriptor read/8, error -71 [ 65.127993][ T331] usb 2-1: device descriptor read/64, error -71 [ 65.208107][ T9] usb 4-1: USB disconnect, device number 22 [ 65.243276][ T568] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 65.250352][ T568] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 65.257306][ T568] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 65.264311][ T568] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 65.267212][ T1253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.271294][ T568] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 65.280320][ T1253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.286835][ T568] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 65.299603][ T1253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.301584][ T568] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 65.310515][ T1253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.325293][ T568] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 65.367902][ T331] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 65.446535][ T568] cp2112 0003:10C4:EA90.0004: error requesting version [ 65.454085][ T568] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -71 [ 65.465632][ T568] usb 1-1: USB disconnect, device number 19 [ 65.497906][ T331] usb 2-1: device descriptor read/64, error -71 [ 65.508025][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 65.538341][ T311] kovaplus 0003:1E7D:2D50.0005: ignoring exceeding usage max [ 65.547178][ T311] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.10 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 65.637926][ T9] usb 4-1: device descriptor read/64, error -71 [ 65.738920][ T331] usb 2-1: device descriptor read/64, error -71 [ 65.745618][ T568] usb 3-1: USB disconnect, device number 23 [ 65.847965][ T331] usb usb2-port1: attempt power cycle [ 65.887874][ T9] usb 4-1: device descriptor read/64, error -71 [ 66.117586][ T1266] fuse: Unknown parameter 'user_id00000000000000000000' [ 66.128010][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 66.197891][ T331] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 66.208025][ T568] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 66.218926][ T331] usb 2-1: device descriptor read/8, error -71 [ 66.273720][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 66.273734][ T36] audit: type=1400 audit(1783490332.390:264): avc: denied { add_name } for pid=1276 comm="syz.3.351" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.300494][ T36] audit: type=1400 audit(1783490332.390:265): avc: denied { create } for pid=1276 comm="syz.3.351" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 66.322817][ T36] audit: type=1400 audit(1783490332.390:266): avc: denied { associate } for pid=1276 comm="syz.3.351" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 66.344495][ T36] audit: type=1400 audit(1783490332.390:267): avc: denied { rename } for pid=1276 comm="syz.3.351" name="file2" dev="incremental-fs" ino=496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.367554][ T36] audit: type=1400 audit(1783490332.390:268): avc: denied { reparent } for pid=1276 comm="syz.3.351" name="file2" dev="incremental-fs" ino=496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.373546][ T331] usb 2-1: device descriptor read/8, error -71 [ 66.398017][ T568] usb 1-1: Using ep0 maxpacket: 8 [ 66.404480][ T568] usb 1-1: unable to get BOS descriptor or descriptor too short [ 66.415805][ T568] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.425994][ T568] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.439224][ T568] usb 1-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 66.443968][ T1288] fuse: Unknown parameter 'user_id00000000000000000000' [ 66.448382][ T568] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.463484][ T568] usb 1-1: Product: syz [ 66.467699][ T568] usb 1-1: Manufacturer: syz [ 66.472573][ T568] usb 1-1: SerialNumber: syz [ 66.647894][ T331] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 66.668979][ T331] usb 2-1: device descriptor read/8, error -71 [ 66.681026][ T568] usb 1-1: 0:1 : does not exist [ 66.685926][ T568] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 66.700918][ T568] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 66.710219][ T568] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 66.720358][ T568] usb 1-1: USB disconnect, device number 20 [ 66.727999][ T913] udevd[913]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.798831][ T331] usb 2-1: device descriptor read/8, error -71 [ 66.907982][ T331] usb usb2-port1: unable to enumerate USB device [ 67.259000][ T36] audit: type=1400 audit(1783490333.380:269): avc: denied { getopt } for pid=1300 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.407875][ T36] audit: type=1400 audit(1783490333.520:270): avc: denied { ioctl } for pid=1308 comm="syz.3.364" path="socket:[12898]" dev="sockfs" ino=12898 ioctlcmd=0x943b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.787889][ T568] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 67.887894][ T378] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 67.938867][ T568] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.949028][ T568] usb 1-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 67.961932][ T568] usb 1-1: config 0 interface 0 has no altsetting 0 [ 67.968568][ T568] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 67.977613][ T568] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.986268][ T568] usb 1-1: config 0 descriptor?? [ 68.037876][ T378] usb 2-1: Using ep0 maxpacket: 32 [ 68.044064][ T378] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.054232][ T378] usb 2-1: config 0 has no interfaces? [ 68.061273][ T378] usb 2-1: string descriptor 0 read error: -71 [ 68.067542][ T378] usb 2-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 68.076687][ T378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.085338][ T378] usb 2-1: config 0 descriptor?? [ 68.090555][ T378] usb 2-1: can't set config #0, error -71 [ 68.096892][ T378] usb 2-1: USB disconnect, device number 28 [ 68.197285][ T36] audit: type=1400 audit(1783490334.310:271): avc: denied { relabelfrom } for pid=1320 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 68.217033][ T36] audit: type=1400 audit(1783490334.310:272): avc: denied { relabelto } for pid=1320 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 68.458845][ T568] usb 1-1: string descriptor 0 read error: -71 [ 68.465359][ T568] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 68.474199][ T568] usb 1-1: USB disconnect, device number 21 [ 68.852759][ T1340] netlink: 'syz.3.377': attribute type 13 has an invalid length. [ 68.862733][ T36] audit: type=1400 audit(1783490334.980:273): avc: denied { bind } for pid=1339 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.890041][ T399] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 68.981007][ T345] Bluetooth: hci0: Frame reassembly failed (-84) [ 69.050233][ T399] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.060538][ T399] usb 2-1: config 0 has no interfaces? [ 69.066090][ T399] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 69.075604][ T399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.086715][ T399] usb 2-1: config 0 descriptor?? [ 69.301453][ T568] usb 2-1: USB disconnect, device number 29 [ 69.517901][ T399] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 69.667900][ T399] usb 3-1: Using ep0 maxpacket: 32 [ 69.674744][ T399] usb 3-1: unable to get BOS descriptor or descriptor too short [ 69.683223][ T399] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.693362][ T399] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.703610][ T399] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 69.712703][ T399] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.720707][ T399] usb 3-1: Product: syz [ 69.724851][ T399] usb 3-1: Manufacturer: syz [ 69.729451][ T399] usb 3-1: SerialNumber: syz [ 69.936257][ T399] usb 3-1: unit 4 not found! [ 69.940909][ T399] usb 3-1: unit 0 not found! [ 69.990488][ T1369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.389'. [ 70.097893][ T568] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 70.257876][ T568] usb 2-1: Using ep0 maxpacket: 32 [ 70.264086][ T568] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 70.272415][ T568] usb 2-1: config 0 has no interface number 0 [ 70.278614][ T568] usb 2-1: config 0 interface 184 has no altsetting 0 [ 70.286724][ T568] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 70.295794][ T568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.303803][ T568] usb 2-1: Product: syz [ 70.307979][ T568] usb 2-1: Manufacturer: syz [ 70.312562][ T568] usb 2-1: SerialNumber: syz [ 70.317648][ T568] usb 2-1: config 0 descriptor?? [ 70.323336][ T568] smsc75xx v1.0.0 [ 70.337774][ T399] usb 3-1: USB disconnect, device number 24 [ 70.521570][ T1372] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.390'. [ 70.932284][ T568] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 70.943121][ T568] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 70.952678][ T568] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 70.963662][ T568] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 70.973333][ T568] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 70.983594][ T568] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 70.993039][ T568] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 71.027917][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 71.028095][ T1358] Bluetooth: hci0: command 0x1003 tx timeout [ 71.097886][ T357] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 71.155552][ T568] usb 2-1: USB disconnect, device number 30 [ 71.248868][ T357] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 71.257079][ T357] usb 3-1: config 0 has no interface number 0 [ 71.263249][ T357] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 71.274919][ T357] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 71.284921][ T357] usb 3-1: config 0 interface 200 has no altsetting 0 [ 71.293032][ T357] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 71.302102][ T357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.310114][ T357] usb 3-1: Product: syz [ 71.314254][ T357] usb 3-1: Manufacturer: syz [ 71.318851][ T357] usb 3-1: SerialNumber: syz [ 71.324322][ T357] usb 3-1: config 0 descriptor?? [ 71.531508][ T1386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.540090][ T1386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.550782][ T357] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input5 [ 71.563421][ T357] usb 3-1: USB disconnect, device number 25 [ 71.907898][ T31] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 72.059248][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 72.068634][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 72.077054][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.088419][ T31] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 72.097579][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.105620][ T31] usb 2-1: Product: syz [ 72.109950][ T31] usb 2-1: Manufacturer: syz [ 72.114521][ T31] usb 2-1: SerialNumber: syz [ 72.257874][ T378] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 72.334752][ T31] usb 2-1: USB disconnect, device number 31 [ 72.349720][ T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.377904][ T568] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 72.407893][ T378] usb 1-1: Using ep0 maxpacket: 16 [ 72.417784][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 72.417800][ T36] audit: type=1400 audit(1783490338.529:281): avc: denied { getopt } for pid=1411 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.444748][ T36] audit: type=1400 audit(1783490338.559:282): avc: denied { lock } for pid=1411 comm="syz.0.407" path="socket:[13883]" dev="sockfs" ino=13883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.485285][ T1422] netlink: 108 bytes leftover after parsing attributes in process `syz.3.411'. [ 72.527886][ T568] usb 3-1: device descriptor read/64, error -71 [ 72.692344][ T378] usb 1-1: unable to get BOS descriptor or descriptor too short [ 72.701207][ T378] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 72.708795][ T378] usb 1-1: can't read configurations, error -71 [ 72.777879][ T568] usb 3-1: device descriptor read/64, error -71 [ 72.890830][ T1426] overlayfs: missing 'workdir' [ 73.017913][ T568] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 73.057877][ T36] audit: type=1400 audit(1783490339.169:283): avc: denied { map } for pid=1439 comm="syz.1.419" path="socket:[13225]" dev="sockfs" ino=13225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.080936][ T36] audit: type=1400 audit(1783490339.169:284): avc: denied { read } for pid=1439 comm="syz.1.419" path="socket:[13225]" dev="sockfs" ino=13225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.106774][ T1445] fuse: Bad value for 'fd' [ 73.115773][ T36] audit: type=1400 audit(1783490339.229:285): avc: denied { wake_alarm } for pid=1444 comm="syz.0.415" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.137501][ T1445] netlink: 55 bytes leftover after parsing attributes in process `syz.0.415'. [ 73.175189][ T36] audit: type=1400 audit(1783490339.289:286): avc: denied { read } for pid=1448 comm="syz.0.421" path="socket:[13239]" dev="sockfs" ino=13239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.177881][ T568] usb 3-1: device descriptor read/64, error -71 [ 73.245496][ T1450] cgroup: fork rejected by pids controller in /syz0 [ 73.457907][ T568] usb 3-1: device descriptor read/64, error -71 [ 73.523434][ T36] audit: type=1400 audit(1783490339.639:287): avc: denied { ioctl } for pid=1520 comm="syz.3.423" path="socket:[14039]" dev="sockfs" ino=14039 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.568004][ T568] usb usb3-port1: attempt power cycle [ 73.907899][ T568] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 73.928866][ T568] usb 3-1: device descriptor read/8, error -71 [ 74.063148][ T568] usb 3-1: device descriptor read/8, error -71 [ 74.292054][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.299469][ T1537] netlink: 'syz.0.428': attribute type 1 has an invalid length. [ 74.307124][ T1537] netlink: 9 bytes leftover after parsing attributes in process `syz.0.428'. [ 74.307919][ T568] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 74.316752][ T1537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1537 comm=syz.0.428 [ 74.324007][ T1538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 74.344704][ T31] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 74.368905][ T568] usb 3-1: device descriptor read/8, error -71 [ 74.497957][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 74.503989][ T568] usb 3-1: device descriptor read/8, error -71 [ 74.510277][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.521171][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.530934][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 74.539979][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.548710][ T31] usb 2-1: config 0 descriptor?? [ 74.627950][ T568] usb usb3-port1: unable to enumerate USB device [ 74.670191][ T1605] fuse: Bad value for 'group_id' [ 74.675193][ T1605] fuse: Bad value for 'group_id' [ 74.688637][ T378] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 74.847910][ T378] usb 1-1: Using ep0 maxpacket: 8 [ 74.854341][ T378] usb 1-1: unable to get BOS descriptor or descriptor too short [ 74.862709][ T378] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.873421][ T378] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.883663][ T378] usb 1-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 74.892753][ T378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.900758][ T378] usb 1-1: Product: syz [ 74.904993][ T378] usb 1-1: Manufacturer: syz [ 74.909603][ T378] usb 1-1: SerialNumber: syz [ 74.957657][ T31] savu 0003:1E7D:2D5A.0006: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 75.118698][ T378] usb 1-1: 0:1 : does not exist [ 75.123650][ T378] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 75.138691][ T378] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 75.152254][ T378] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 75.163708][ T378] usb 1-1: USB disconnect, device number 24 [ 75.176191][ T913] udevd[913]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.185254][ T1529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.201510][ T1529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.268471][ T1529] netlink: 108 bytes leftover after parsing attributes in process `syz.1.426'. [ 75.279300][ T64] usb 2-1: USB disconnect, device number 32 [ 75.547887][ T399] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 75.629160][ T36] audit: type=1400 audit(1783490341.749:288): avc: denied { append } for pid=1636 comm="syz.0.445" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.658947][ T36] audit: type=1400 audit(1783490341.779:289): avc: denied { create } for pid=1638 comm="syz.0.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.697887][ T399] usb 3-1: Using ep0 maxpacket: 8 [ 75.704265][ T399] usb 3-1: unable to get BOS descriptor or descriptor too short [ 75.712609][ T399] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.722848][ T399] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 75.733547][ T399] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 75.742633][ T399] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.750645][ T399] usb 3-1: Product: syz [ 75.754805][ T399] usb 3-1: Manufacturer: syz [ 75.759522][ T399] usb 3-1: SerialNumber: syz [ 75.881816][ T1648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.890424][ T1648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.917950][ T64] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 75.968761][ T399] usb 3-1: USB disconnect, device number 30 [ 76.068985][ T64] usb 1-1: config 0 has no interfaces? [ 76.074478][ T64] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 76.083587][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.092176][ T64] usb 1-1: config 0 descriptor?? [ 76.299478][ T36] audit: type=1400 audit(1783490342.419:290): avc: denied { relabelfrom } for pid=1640 comm="syz.0.447" name="" dev="pipefs" ino=15484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 76.327921][ T311] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 76.354065][ T568] usb 1-1: USB disconnect, device number 25 [ 76.478078][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 76.489019][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 76.497806][ T1664] netlink: 56 bytes leftover after parsing attributes in process `syz.3.456'. [ 76.498568][ T1668] rust_binder: 262: no such ref 0 [ 76.506833][ T1664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.456'. [ 76.512472][ T1669] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 76.520933][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.529237][ T1669] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 76.538184][ T1664] netlink: 31 bytes leftover after parsing attributes in process `syz.3.456'. [ 76.554055][ T311] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.554888][ T1664] netlink: 'syz.3.456': attribute type 2 has an invalid length. [ 76.564542][ T311] usb 2-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 76.571011][ T1664] netlink: 31 bytes leftover after parsing attributes in process `syz.3.456'. [ 76.579908][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.596696][ T311] usb 2-1: Product: syz [ 76.600895][ T311] usb 2-1: Manufacturer: syz [ 76.605490][ T311] usb 2-1: SerialNumber: syz [ 76.617552][ T1676] incfs: Backing dir is not set, filesystem can't be mounted. [ 76.625198][ T1676] incfs: mount failed -2 [ 76.814048][ T311] usb 2-1: 0:1 : does not exist [ 76.819003][ T311] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 76.833996][ T311] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 76.843278][ T311] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 76.854130][ T311] usb 2-1: USB disconnect, device number 33 [ 76.860576][ T913] udevd[913]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.900353][ T1687] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.363818][ T1714] fuse: Unknown parameter 'smackš>fshat' [ 77.369665][ T1714] fuse: Unknown parameter 'smackš>fshat' [ 77.375381][ T1714] fuse: Unknown parameter 'smackš>fshat' [ 77.381154][ T1714] fuse: Unknown parameter 'smackš>fshat' [ 77.386892][ T1714] fuse: Unknown parameter 'smackš>fshat' [ 77.392670][ T1714] fuse: Unknown parameter 'smackš>fshat' [ 77.398380][ T1714] fuse: Unknown parameter 'smackš>fshat' [ 77.404055][ T1714] fuse: Unknown parameter 'smackš>fshat' [ 77.409779][ T1714] fuse: Unknown parameter 'smackš>fshat' [ 77.415512][ T1714] fuse: Unknown parameter 'smackš>fshat' [ 77.421286][ T1714] fuse: Unknown parameter 'smackš>fshat' [ 77.427015][ T1714] fuse: Unknown parameter 'smackš>fshat' [ 77.548501][ T1723] tipc: Enabling of bearer rejected, media not registered [ 77.557750][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 77.557765][ T36] audit: type=1400 audit(1783490343.669:297): avc: denied { lock } for pid=1721 comm="syz.1.473" path="socket:[14567]" dev="sockfs" ino=14567 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 77.687906][ T311] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 77.785164][ T1731] overlayfs: failed to clone upperpath [ 77.827995][ T311] usb 3-1: device descriptor read/64, error -71 [ 77.857901][ T31] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 78.008883][ T31] usb 1-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 78.020015][ T31] usb 1-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 78.030737][ T31] usb 1-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.043621][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.050243][ T31] usb 1-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 78.059290][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.067801][ T31] usb 1-1: config 0 descriptor?? [ 78.072804][ T311] usb 3-1: device descriptor read/64, error -71 [ 78.079333][ T1727] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 78.317933][ T311] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 78.400166][ T1742] overlay: Unknown parameter 'subj_type' [ 78.447901][ T311] usb 3-1: device descriptor read/64, error -71 [ 78.488056][ T31] acrux 0003:1A34:F705.0007: unknown main item tag 0x0 [ 78.494985][ T31] acrux 0003:1A34:F705.0007: unknown main item tag 0x0 [ 78.502025][ T31] acrux 0003:1A34:F705.0007: unknown main item tag 0x0 [ 78.509002][ T31] acrux 0003:1A34:F705.0007: unknown main item tag 0x0 [ 78.515878][ T31] acrux 0003:1A34:F705.0007: unknown main item tag 0x0 [ 78.522975][ T31] acrux 0003:1A34:F705.0007: unknown main item tag 0x0 [ 78.529873][ T31] acrux 0003:1A34:F705.0007: unknown main item tag 0x0 [ 78.536741][ T31] acrux 0003:1A34:F705.0007: unknown main item tag 0x0 [ 78.543625][ T31] acrux 0003:1A34:F705.0007: item fetching failed at offset 19/41 [ 78.551566][ T31] acrux 0003:1A34:F705.0007: parse failed [ 78.557292][ T31] acrux 0003:1A34:F705.0007: probe with driver acrux failed with error -22 [ 78.647933][ T357] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 78.689476][ T31] usb 1-1: USB disconnect, device number 26 [ 78.695422][ T311] usb 3-1: device descriptor read/64, error -71 [ 78.797927][ T357] usb 2-1: Using ep0 maxpacket: 16 [ 78.804111][ T357] usb 2-1: config 0 interface 0 has no altsetting 0 [ 78.811023][ T357] usb 2-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 78.820154][ T311] usb usb3-port1: attempt power cycle [ 78.826017][ T357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.837629][ T357] usb 2-1: config 0 descriptor?? [ 78.840710][ T36] audit: type=1400 audit(1783490344.949:298): avc: denied { bind } for pid=1747 comm="syz.3.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.863252][ T36] audit: type=1400 audit(1783490344.959:299): avc: denied { setopt } for pid=1747 comm="syz.3.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.866766][ T1748] netlink: 36 bytes leftover after parsing attributes in process `syz.3.485'. [ 78.897198][ T1748] overlayfs: failed to clone upperpath [ 79.157893][ T311] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 79.178795][ T311] usb 3-1: device descriptor read/8, error -71 [ 79.265361][ T357] pantherlord 0003:0810:0002.0008: unknown main item tag 0x2 [ 79.273027][ T357] pantherlord 0003:0810:0002.0008: unknown main item tag 0x6 [ 79.283079][ T357] pantherlord 0003:0810:0002.0008: ignoring exceeding usage max [ 79.293503][ T357] pantherlord 0003:0810:0002.0008: hidraw0: USB HID v0.81 Device [HID 0810:0002] on usb-dummy_hcd.1-1/input0 [ 79.305213][ T357] pantherlord 0003:0810:0002.0008: no output reports found [ 79.313459][ T311] usb 3-1: device descriptor read/8, error -71 [ 79.318268][ T1756] ================================================================== [ 79.327685][ T1756] BUG: KASAN: slab-use-after-free in read_report_descriptor+0xb4/0x100 [ 79.335943][ T1756] Read of size 40 at addr ffff88811c4cad80 by task fido_id/1756 [ 79.343561][ T1756] [ 79.345890][ T1756] CPU: 0 UID: 0 PID: 1756 Comm: fido_id Not tainted syzkaller #0 c7f5503d26b438f3979f72c504038c741c73a5b1 [ 79.345917][ T1756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 79.345928][ T1756] Call Trace: [ 79.345935][ T1756] [ 79.345943][ T1756] __dump_stack+0x21/0x30 [ 79.345971][ T1756] dump_stack_lvl+0x140/0x1c0 [ 79.345995][ T1756] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.346022][ T1756] print_address_description+0x71/0x210 [ 79.346050][ T1756] print_report+0x4a/0x70 [ 79.346074][ T1756] kasan_report+0x162/0x1a0 [ 79.346098][ T1756] ? read_report_descriptor+0xb4/0x100 [ 79.346119][ T1756] ? read_report_descriptor+0xb4/0x100 [ 79.346139][ T1756] kasan_check_range+0x25a/0x2b0 [ 79.346162][ T1756] ? read_report_descriptor+0xb4/0x100 [ 79.346182][ T1756] __asan_memcpy+0x31/0x80 [ 79.346201][ T1756] read_report_descriptor+0xb4/0x100 [ 79.346221][ T1756] ? __cfi_read_report_descriptor+0x10/0x10 [ 79.346241][ T1756] sysfs_kf_bin_read+0x1c6/0x200 [ 79.346262][ T1756] ? __cfi_sysfs_kf_bin_read+0x10/0x10 [ 79.346282][ T1756] kernfs_fop_read_iter+0x2fa/0x570 [ 79.346309][ T1756] vfs_read+0x60b/0xc70 [ 79.346328][ T1756] ? __cfi_vfs_read+0x10/0x10 [ 79.346347][ T1756] ? __kasan_slab_free+0x6a/0x80 [ 79.346369][ T1756] ? putname+0x113/0x150 [ 79.346396][ T1756] ? putname+0x113/0x150 [ 79.346416][ T1756] ? __kasan_check_read+0x15/0x20 [ 79.346434][ T1756] ksys_read+0x145/0x260 [ 79.346453][ T1756] ? __cfi_ksys_read+0x10/0x10 [ 79.346473][ T1756] ? __kasan_check_read+0x15/0x20 [ 79.346492][ T1756] __x64_sys_read+0x7f/0x90 [ 79.346511][ T1756] x64_sys_call+0x2638/0x2ee0 [ 79.346529][ T1756] do_syscall_64+0x57/0xf0 [ 79.346549][ T1756] ? clear_bhb_loop+0x50/0xa0 [ 79.346573][ T1756] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.346595][ T1756] RIP: 0033:0x7f8c906a7407 [ 79.346612][ T1756] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 79.346629][ T1756] RSP: 002b:00007ffdc6c6fd40 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 79.346651][ T1756] RAX: ffffffffffffffda RBX: 00007f8c90e9b880 RCX: 00007f8c906a7407 [ 79.346667][ T1756] RDX: 0000000000001000 RSI: 00007ffdc6c6fd90 RDI: 0000000000000004 [ 79.346682][ T1756] RBP: 000055d325b2e2c0 R08: 0000000000000000 R09: 0000000000000000 [ 79.346696][ T1756] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d325b2d4c0 [ 79.346711][ T1756] R13: 00007ffdc6c6fd90 R14: 0000000000000004 R15: 000055d2eba484d8 [ 79.346728][ T1756] [ 79.346735][ T1756] [ 79.467627][ T31] usb 2-1: USB disconnect, device number 34 [ 79.468535][ T1756] Allocated by task 357: [ 79.468548][ T1756] kasan_save_track+0x3e/0x80 [ 79.468573][ T1756] kasan_save_alloc_info+0x3a/0x50 [ 79.557919][ T311] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 79.560433][ T1756] __kasan_kmalloc+0x96/0xb0 [ 79.588913][ T311] usb 3-1: device descriptor read/8, error -71 [ 79.592241][ T1756] __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 79.598036][ T357] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 79.603426][ T1756] kmemdup_noprof+0x31/0x80 [ 79.603458][ T1756] hid_open_report+0x200/0x1120 [ 79.658764][ T1756] pl_probe+0x88/0xb40 [ 79.662848][ T1756] hid_device_probe+0x2ce/0x5f0 [ 79.667695][ T1756] really_probe+0x2e1/0x8b0 [ 79.672186][ T1756] __driver_probe_device+0x193/0x280 [ 79.677461][ T1756] driver_probe_device+0x54/0x3f0 [ 79.682478][ T1756] __device_attach_driver+0x2f1/0x4b0 [ 79.687840][ T1756] bus_for_each_drv+0x264/0x300 [ 79.692691][ T1756] __device_attach+0x2c4/0x3c0 [ 79.697437][ T1756] device_initial_probe+0x1e/0x30 [ 79.702445][ T1756] bus_probe_device+0x18b/0x270 [ 79.707274][ T1756] device_add+0x7fd/0xbf0 [ 79.711587][ T1756] hid_add_device+0x3c4/0x5a0 [ 79.716240][ T1756] usbhid_probe+0xdca/0x1310 [ 79.718913][ T311] usb 3-1: device descriptor read/8, error -71 [ 79.720816][ T1756] usb_probe_interface+0x6a8/0xbf0 [ 79.732095][ T1756] really_probe+0x2e1/0x8b0 [ 79.736610][ T1756] __driver_probe_device+0x193/0x280 [ 79.741882][ T1756] driver_probe_device+0x54/0x3f0 [ 79.746909][ T1756] __device_attach_driver+0x2f1/0x4b0 [ 79.752276][ T1756] bus_for_each_drv+0x264/0x300 [ 79.757109][ T1756] __device_attach+0x2c4/0x3c0 [ 79.757899][ T357] usb 1-1: Using ep0 maxpacket: 32 [ 79.761853][ T1756] device_initial_probe+0x1e/0x30 [ 79.761883][ T1756] bus_probe_device+0x18b/0x270 [ 79.768502][ T357] usb 1-1: unable to get BOS descriptor or descriptor too short [ 79.771994][ T1756] device_add+0x7fd/0xbf0 [ 79.777700][ T357] usb 1-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 79.784438][ T1756] usb_set_configuration+0x1aad/0x2080 [ 79.784467][ T1756] usb_generic_driver_probe+0x95/0x160 [ 79.784484][ T1756] usb_probe_device+0x1f2/0x3b0 [ 79.784503][ T1756] really_probe+0x2e1/0x8b0 [ 79.789025][ T357] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 79.799028][ T1756] __driver_probe_device+0x193/0x280 [ 79.799061][ T1756] driver_probe_device+0x54/0x3f0 [ 79.799082][ T1756] __device_attach_driver+0x2f1/0x4b0 [ 79.799104][ T1756] bus_for_each_drv+0x264/0x300 [ 79.806513][ T357] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 79.809990][ T1756] __device_attach+0x2c4/0x3c0 [ 79.810019][ T1756] device_initial_probe+0x1e/0x30 [ 79.810040][ T1756] bus_probe_device+0x18b/0x270 [ 79.815253][ T357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.819348][ T1756] device_add+0x7fd/0xbf0 [ 79.819374][ T1756] usb_new_device+0x98d/0x1500 [ 79.819392][ T1756] hub_event+0x2dbd/0x4360 [ 79.830857][ T311] usb usb3-port1: unable to enumerate USB device [ 79.835650][ T1756] process_scheduled_works+0x7f7/0x1060 [ 79.841840][ T357] usb 1-1: Product: syz [ 79.846008][ T1756] worker_thread+0xc99/0x13f0 [ 79.851320][ T357] usb 1-1: Manufacturer: syz [ 79.859832][ T1756] kthread+0x2c7/0x360 [ 79.859856][ T1756] ret_from_fork+0x67/0xa0 [ 79.859879][ T1756] ret_from_fork_asm+0x1a/0x30 [ 79.865005][ T357] usb 1-1: SerialNumber: syz [ 79.869624][ T1756] [ 79.869632][ T1756] Freed by task 357: [ 79.869643][ T1756] kasan_save_track+0x3e/0x80 [ 79.869668][ T1756] kasan_save_free_info+0x44/0x50 [ 79.869692][ T1756] __kasan_slab_free+0x5f/0x80 [ 79.869710][ T1756] kfree+0x158/0x440 [ 79.963368][ T1756] hid_close_report+0x628/0x6f0 [ 79.968233][ T1756] hid_device_probe+0x538/0x5f0 [ 79.973092][ T1756] really_probe+0x2e1/0x8b0 [ 79.977606][ T1756] __driver_probe_device+0x193/0x280 [ 79.982905][ T1756] driver_probe_device+0x54/0x3f0 [ 79.987942][ T1756] __device_attach_driver+0x2f1/0x4b0 [ 79.993758][ T1756] bus_for_each_drv+0x264/0x300 [ 79.998612][ T1756] __device_attach+0x2c4/0x3c0 [ 80.003372][ T1756] device_initial_probe+0x1e/0x30 [ 80.008446][ T1756] bus_probe_device+0x18b/0x270 [ 80.013304][ T1756] device_add+0x7fd/0xbf0 [ 80.017648][ T1756] hid_add_device+0x3c4/0x5a0 [ 80.022316][ T1756] usbhid_probe+0xdca/0x1310 [ 80.026907][ T1756] usb_probe_interface+0x6a8/0xbf0 [ 80.032012][ T1756] really_probe+0x2e1/0x8b0 [ 80.036503][ T1756] __driver_probe_device+0x193/0x280 [ 80.041797][ T1756] driver_probe_device+0x54/0x3f0 [ 80.046843][ T1756] __device_attach_driver+0x2f1/0x4b0 [ 80.052221][ T1756] bus_for_each_drv+0x264/0x300 [ 80.057061][ T1756] __device_attach+0x2c4/0x3c0 [ 80.061815][ T1756] device_initial_probe+0x1e/0x30 [ 80.066863][ T1756] bus_probe_device+0x18b/0x270 [ 80.071704][ T1756] device_add+0x7fd/0xbf0 [ 80.076026][ T1756] usb_set_configuration+0x1aad/0x2080 [ 80.081479][ T1756] usb_generic_driver_probe+0x95/0x160 [ 80.086940][ T1756] usb_probe_device+0x1f2/0x3b0 [ 80.091799][ T1756] really_probe+0x2e1/0x8b0 [ 80.096313][ T1756] __driver_probe_device+0x193/0x280 [ 80.101590][ T1756] driver_probe_device+0x54/0x3f0 [ 80.106618][ T1756] __device_attach_driver+0x2f1/0x4b0 [ 80.112000][ T1756] bus_for_each_drv+0x264/0x300 [ 80.116854][ T1756] __device_attach+0x2c4/0x3c0 [ 80.121624][ T1756] device_initial_probe+0x1e/0x30 [ 80.126653][ T1756] bus_probe_device+0x18b/0x270 [ 80.131490][ T1756] device_add+0x7fd/0xbf0 [ 80.135814][ T1756] usb_new_device+0x98d/0x1500 [ 80.140569][ T1756] hub_event+0x2dbd/0x4360 [ 80.144976][ T1756] process_scheduled_works+0x7f7/0x1060 [ 80.150517][ T1756] worker_thread+0xc99/0x13f0 [ 80.155190][ T1756] kthread+0x2c7/0x360 [ 80.159238][ T1756] ret_from_fork+0x67/0xa0 [ 80.163649][ T1756] ret_from_fork_asm+0x1a/0x30 [ 80.168392][ T1756] [ 80.170710][ T1756] The buggy address belongs to the object at ffff88811c4cad80 [ 80.170710][ T1756] which belongs to the cache kmalloc-64 of size 64 [ 80.184590][ T1756] The buggy address is located 0 bytes inside of [ 80.184590][ T1756] freed 64-byte region [ffff88811c4cad80, ffff88811c4cadc0) [ 80.198135][ T1756] [ 80.200454][ T1756] The buggy address belongs to the physical page: [ 80.206870][ T1756] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811c4ca080 pfn:0x11c4ca [ 80.216998][ T1756] flags: 0x4000000000000000(zone=1) [ 80.222197][ T1756] page_type: f5(slab) [ 80.226170][ T1756] raw: 4000000000000000 ffff8881000418c0 ffffea00046dda40 dead000000000002 [ 80.234757][ T1756] raw: ffff88811c4ca080 000000000020001d 00000001f5000000 0000000000000000 [ 80.243333][ T1756] page dumped because: kasan: bad access detected [ 80.249730][ T1756] page_owner tracks the page as allocated [ 80.255431][ T1756] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 211, tgid 211 (dhcpcd-run-hook), ts 13101211336, free_ts 8288184579 [ 80.274720][ T1756] post_alloc_hook+0x37d/0x3b0 [ 80.279507][ T1756] prep_new_page+0x2d/0x180 [ 80.279703][ T1758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.284016][ T1756] get_page_from_freelist+0x4aea/0x4ba0 [ 80.284046][ T1756] __alloc_pages_noprof+0x35a/0x7e0 [ 80.293227][ T1758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.297879][ T1756] alloc_slab_page+0x6b/0x1e0 [ 80.307893][ T36] audit: type=1400 audit(1783490346.419:300): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 80.310755][ T1756] allocate_slab+0x69/0x430 [ 80.318875][ T36] audit: type=1400 audit(1783490346.419:301): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.337194][ T1756] ___slab_alloc+0x591/0x8c0 [ 80.337222][ T1756] __kmalloc_cache_noprof+0x2cd/0x470 [ 80.337237][ T1756] copy_dmabuf_info+0x385/0xf30 [ 80.337258][ T1756] copy_process+0x1adf/0x3350 [ 80.337278][ T1756] kernel_clone+0x233/0x810 [ 80.342341][ T36] audit: type=1400 audit(1783490346.419:302): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.363017][ T1756] __x64_sys_clone+0x1b7/0x230 [ 80.363045][ T1756] x64_sys_call+0x2b3c/0x2ee0 [ 80.363060][ T1756] do_syscall_64+0x57/0xf0 [ 80.363077][ T1756] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.368114][ T36] audit: type=1400 audit(1783490346.419:303): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.373010][ T1756] page last free pid 20 tgid 20 stack trace: [ 80.373022][ T1756] free_unref_page+0xbb8/0xf70 [ 80.378730][ T36] audit: type=1400 audit(1783490346.419:304): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.382514][ T1756] __free_pages+0x6b/0x3b0 [ 80.387055][ T36] audit: type=1400 audit(1783490346.419:305): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.408157][ T1756] free_pages+0x86/0x90 [ 80.408183][ T1756] tlb_remove_table_rcu+0x366/0x3d0 [ 80.408202][ T1756] rcu_do_batch+0x56a/0xcb0 [ 80.408216][ T1756] rcu_nocb_cb_kthread+0x533/0xb60 [ 80.408230][ T1756] kthread+0x2c7/0x360 [ 80.413616][ T36] audit: type=1400 audit(1783490346.419:306): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.417629][ T1756] ret_from_fork+0x67/0xa0 [ 80.429559][ T357] usb 1-1: unit 0 not found! [ 80.448361][ T1756] ret_from_fork_asm+0x1a/0x30 [ 80.448387][ T1756] [ 80.448392][ T1756] Memory state around the buggy address: [ 80.448402][ T1756] ffff88811c4cac80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 80.448413][ T1756] ffff88811c4cad00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 80.448424][ T1756] >ffff88811c4cad80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 80.448433][ T1756] ^ [ 80.509235][ T1776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.510846][ T1756] ffff88811c4cae00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 80.510861][ T1756] ffff88811c4cae80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 80.516884][ T1776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.520525][ T1756] ================================================================== [ 80.642346][ T1756] Disabling lock debugging due to kernel taint [ 80.656426][ T357] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 80.667409][ T357] usb 1-1: unit 0 not found! [ 80.673045][ T357] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 80.683444][ T357] usb 1-1: unit 0 not found! [ 80.691042][ T357] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 80.702227][ T357] usb 1-1: USB disconnect, device number 27 [ 80.710871][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.867925][ T311] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 81.018839][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 81.028623][ T311] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 81.038279][ T311] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.052553][ T311] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 81.061653][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 81.069744][ T311] usb 3-1: Product: syz [ 81.073887][ T311] usb 3-1: Manufacturer: syz [ 81.078496][ T311] usb 3-1: SerialNumber: syz [ 81.286164][ T311] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 81.298086][ T311] usb 3-1: USB disconnect, device number 35 [ 81.304887][ T311] usblp0: removed