last executing test programs: 3m31.851068227s ago: executing program 1 (id=298): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./trace\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/usb/devices\x00', 0xe01, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000043c0)={0x2020}, 0x2020) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x808, 0x4) linkat(r0, &(0x7f0000004300)='./trace/set_event\x00', 0xffffffffffffff9c, &(0x7f0000004340)='./trace\x00', 0x600) mount(0x0, &(0x7f0000000200)='./trace/set_event\x00', &(0x7f0000004380)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/set_event\x00', 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000140)='[\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x206, 0x20982) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) write(r1, 0x0, 0x0) 3m31.699812633s ago: executing program 1 (id=299): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) nanosleep(&(0x7f0000001a80)={0x5}, 0x0) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r10, &(0x7f0000005000)=""/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00)=@ublk_io_fetch_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000000)=@buf_512="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}}, 0x0) 3m30.842955211s ago: executing program 1 (id=305): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(0xffffffffffffffff, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x3, 0xff, 0xe4, 0x0, 0x6, 0x1, 0x41, 0x5, 0x2, 0x1, 0xc, 0x2, 0xff, 0xc, 0x4, 0x10}}) futex(0x0, 0x1, 0x400000, 0x0, 0x0, 0xffffffec) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000004c0)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x8, 0x8000000000000, 0x80000004000080, 0x7, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc2000, 0x10) ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f0000000600)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x20201, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@snapshot={0x0, 0x2000, 0x0, 0x80, 'snapshot\x00', {@ram_num={'1:', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, 'P', 0x20, '8', ' 2 discard_zeroes_cow discard_passdown_origin'}}]}) 3m30.705903825s ago: executing program 1 (id=306): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount(&(0x7f00000001c0), &(0x7f0000000200)='.\x00', &(0x7f0000000240)='f2fs\x00', 0x0, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x4a10, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@striped={0x0, 0xc00, 0x0, 0x68, 'striped\x00', {0x2, 0x20, '32', [{0x20, {@ram_num={'1:', 0x0}, 0x20, '8'}}, {0x20, {@ram={'/dev/ram', 0x0}, 0x20, '128'}}]}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) unlink(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001680)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x5}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r5 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f00000001c0)=0x1, 0x4) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000001a00)=""/147, 0x93}], 0x1) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000001700)=0xd, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001740)={'veth0_macvtap\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000004c0)="14042bfdd3fc03fc010047ac0eef1a241b508090dc5a809ee3b3c688031c09100628", 0x22, 0x4, &(0x7f00000017c0)={0x11, 0x19, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r5, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001880)=""/35, 0x23}], 0x1}, 0x1}], 0x1, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000001900)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000001940)={'syzkaller1\x00'}) write$tun(r8, &(0x7f0000001980)=ANY=[@ANYBLOB="70000000ffffffff4500004d00004000002f9078ac1e0401ac1414180000655800399078a1030001aa8ff18d43fc364f02de5667c0884496445f12d4c926f96cb5a9c2918562c29699a10b04ca027899bc84e8b45a"], 0x5f) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@private2}, &(0x7f0000000400)=0x14) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0xfffffffffffffffa, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m30.135651264s ago: executing program 1 (id=311): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_channels={0x4a, 0x0, 0x7, 0xfffffffd, 0x4, 0x2, 0x1}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mlock(&(0x7f0000840000/0x4000)=nil, 0x4000) keyctl$update(0x2, 0x0, 0x0, 0x100000) munlockall() r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000180)) mremap(&(0x7f0000844000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000840000/0x1000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000001c0)={0x77359400}, 0xfffffffffffffffe) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) syz_clone(0x1000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0xfffffe16) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) write(r0, &(0x7f0000000440)='ha', 0x2) 3m30.083202179s ago: executing program 1 (id=312): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1000}) syz_ublk_setup_queues(r2, r0, &(0x7f0000000000)={0x0, 0xdeeb, 0x0, 0x0, 0x330}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0x2, 0x10000002, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2, 0x10040000, 0x254}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB=')'], 0x18}, 0x440e0) 3m15.017217853s ago: executing program 32 (id=312): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1000}) syz_ublk_setup_queues(r2, r0, &(0x7f0000000000)={0x0, 0xdeeb, 0x0, 0x0, 0x330}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0x2, 0x10000002, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2, 0x10040000, 0x254}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB=')'], 0x18}, 0x440e0) 5.599782832s ago: executing program 3 (id=1461): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) nanosleep(&(0x7f0000001a80)={0x5}, 0x0) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r10, &(0x7f0000005000)=""/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00)=@ublk_io_fetch_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000000)=@buf_512="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffff6000"}}, 0x0) 5.303276883s ago: executing program 0 (id=1462): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="8102") syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x6a, &(0x7f0000000040)="8103549709dde1752f6fdbd5eb7e4119da59f6f89a87f670350b4d1cf4794c6bd55d24c6908aae4a78a49d59a70f1c7518a20f0c24579eff8fcb9ebce54fd0dde90fb3cf45904d5d06139f422fe0f18aec295d795f864626d9b2720599b0f516eed28d41091de338ace7") syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000180)="8102") syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 4.628162292s ago: executing program 3 (id=1471): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x20, 0x7, 0x4, "60aadbbb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)={0x40, 0x0, 0x4, "82116383"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000380)={0x20, 0x18, 0x4, "8de22fa0"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000400)={0x20, 0x15, 0x4, "85b9fe4f"}, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000500)={0x0, 0x14, 0x4, "34ee2cea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000580)={0x20, 0x17, 0x4, "0f6dfedf"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x40, 0x15, 0x4, "c7fe4b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x87, 0x2, 0x800}, &(0x7f0000000800)={0x20, 0x89, 0x2}}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) 4.006942767s ago: executing program 3 (id=1474): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/mtrr\x00', 0x2, 0x30) write(r0, &(0x7f0000000280)='base=0x0 size=0x40000000 type=write-back', 0x28) syz_clone(0x28042000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000020732b23004000010203010902700003010480810904000000010100000a240100000a000201020904010000010200000904010101010200000924020105035403000324010405011009050109d0"], 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xc) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe}, 0xc) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x3000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) ioctl(r1, 0x800452d2, &(0x7f0000000140)) 3.265230613s ago: executing program 4 (id=1478): prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x13) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x103080, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xb, &(0x7f00000003c0)={0x0, 0x10003}, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f00000005c0)) timer_create(0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001100010400000000000000000a00000008000200", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24040800}, 0x44) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1df) mount(&(0x7f0000000400)=@sr0, &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480)='aufs\x00', 0x20002, &(0x7f00000004c0)='trusted.overlay.upper\x00') prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x15, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x110, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20004845, &(0x7f0000000640)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) 3.143223646s ago: executing program 4 (id=1480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = syz_clone(0x21014200, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000500)={0x11, 0xc, r4, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) bind$packet(r2, &(0x7f0000000540)={0x11, 0x3, 0x0, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) ptrace(0x10, r1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000680)=@any_dev={0x3, 0xc26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f00000006c0)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000700)={0x0, 0x1, 0x3000, 0x3, 0x255, 0x0, r8}, 0x0, 0x1, &(0x7f0000000780)={0x2e, 0xe, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r5, '\x00', {0xfff5, 0x5, 0x0, 0x0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) timer_create(0x1, &(0x7f0000000100)={0x0, 0x39, 0x4, @tid=r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x100, 0x5, 0x7, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xa) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace$peeksig(0x4209, r1, &(0x7f00000001c0)={0x0, 0x0, 0x1}, &(0x7f0000000480)=[{}]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x8000}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004624002c0064000009069078ac1414bbffffffff830342004e234e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9fb46ef57b5d1121804f20c5e8a020ac4d51ce9173ed690ca3d8e5d9f92ada5373c7c3b905a06fd002117a57327ffa4f7fa903f105cbc89caf266a9c9cee7d73"], 0x3e) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r10 = syz_open_dev$usbmon(&(0x7f0000000580), 0x5, 0x301800) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r10, 0x0) memfd_create(&(0x7f00000005c0)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) 2.71464431s ago: executing program 3 (id=1481): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x362c, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0}, 0x0) 2.190879864s ago: executing program 4 (id=1482): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4c}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000500)={0x2020}, 0x2020) syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0x57, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="a639d13928866365ca14cd23180e64ac40dd68c48ed95f45f93dac8059731b3d33e0bf147766c05f4c023caee7c56e33b4b4aaa18d92d9d3b9f032961c7197fef59642699a16dbb5056dfcf05040da1b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.895231784s ago: executing program 0 (id=1483): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x20, 0x7, 0x4, "60aadbbb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)={0x40, 0x0, 0x4, "82116383"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000380)={0x20, 0x18, 0x4, "8de22fa0"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000400)={0x20, 0x15, 0x4, "85b9fe4f"}, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000500)={0x0, 0x14, 0x4, "34ee2cea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000580)={0x20, 0x17, 0x4, "0f6dfedf"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x40, 0x15, 0x4, "c7fe4b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x87, 0x2, 0x800}, &(0x7f0000000800)={0x20, 0x89, 0x2}}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) 1.364160609s ago: executing program 0 (id=1486): symlink(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000dc0)='./file1\x00') mkdir(&(0x7f0000000e00)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x8, &(0x7f0000000f00)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000f80)='./file0/file2\x00', 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file2\x00', 0x2, 0x0) (fail_nth: 5) 1.055675381s ago: executing program 0 (id=1487): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) write$tun(r1, &(0x7f0000000300)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "2378ebf447c29612a253a73480d5c6234abe2d0a7eba534758bb9d10e9329c45", "00744a5830bf71b6f38f99ed298a1c9f7cd29e713ffaab9378092ef0529709889a72f7ed9e51a0798d7ff0c5233bae54", "e0c47a944e99b49492c20bc4596cb63553c116acb254362964ed8272", {"11c1a24456851019976d40161729fa2d", "ba731d3f107dc0acb0703242bf6ea9ea"}}}}}}}}, 0xc2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)) sendmsg$nl_xfrm(r2, 0x0, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x1, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x1, 0x0, 0xee01}, {0x9, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50, 0x6b4d}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.052566021s ago: executing program 3 (id=1488): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) nanosleep(&(0x7f0000001a80)={0x5}, 0x0) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r10, &(0x7f0000005000)=""/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00)=@ublk_io_fetch_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000000)=@buf_512="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"}}, 0x0) 1.029671564s ago: executing program 0 (id=1490): symlink(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000dc0)='./file1\x00') mkdir(&(0x7f0000000e00)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x8, &(0x7f0000000f00)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000f80)='./file0/file2\x00', 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file2\x00', 0x2, 0x700) 947.280362ms ago: executing program 0 (id=1491): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="8102") syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x6a, &(0x7f0000000040)="8103549709dde1752f6fdbd5eb7e4119da59f6f89a87f670350b4d1cf4794c6bd55d24c6908aae4a78a49d59a70f1c7518a20f0c24579eff8fcb9ebce54fd0dde90fb3cf45904d5d06139f422fe0f18aec295d795f864626d9b2720599b0f516eed28d41091de338ace7") syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000180)="8102") syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 947.130592ms ago: executing program 2 (id=1492): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x100) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) connect$inet(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)='ipvlan1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x0, 0x0) read(r1, 0x0, 0xeffd) 930.836744ms ago: executing program 2 (id=1493): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpriority(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) unshare(0x64000600) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 778.91698ms ago: executing program 2 (id=1494): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x20, 0x7, 0x4, "60aadbbb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)={0x40, 0x0, 0x4, "82116383"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000380)={0x20, 0x18, 0x4, "8de22fa0"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000400)={0x20, 0x15, 0x4, "85b9fe4f"}, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000500)={0x0, 0x14, 0x4, "34ee2cea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000580)={0x20, 0x17, 0x4, "0f6dfedf"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x40, 0x15, 0x4, "c7fe4b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x87, 0x2, 0x800}, &(0x7f0000000800)={0x20, 0x89, 0x2}}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) 179.252431ms ago: executing program 2 (id=1495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_ublk_setup_io_uring(0x3151, &(0x7f0000000080)={0x0, 0x5618, 0x4, 0x3, 0x29d}, 0x0, 0x0, &(0x7f0000000340)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7f, 0x68ff, 0x0, 0x8000000009, 0x803, 0x26c00, 0x9, 0x2], 0xffff1000, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 161.784893ms ago: executing program 2 (id=1496): syz_clone(0x28042000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x3000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) setreuid(0x0, 0xee01) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80090}, 0x4000) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000000}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x87}}}], 0x18}}], 0x2, 0x4000800) ioctl(r0, 0x800452d2, &(0x7f0000000140)) 131.688207ms ago: executing program 2 (id=1497): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x362c, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0}, 0x0) 131.260407ms ago: executing program 3 (id=1498): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) write$tun(r1, &(0x7f0000000300)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "2378ebf447c29612a253a73480d5c6234abe2d0a7eba534758bb9d10e9329c45", "00744a5830bf71b6f38f99ed298a1c9f7cd29e713ffaab9378092ef0529709889a72f7ed9e51a0798d7ff0c5233bae54", "e0c47a944e99b49492c20bc4596cb63553c116acb254362964ed8272", {"11c1a24456851019976d40161729fa2d", "ba731d3f107dc0acb0703242bf6ea9ea"}}}}}}}}, 0xc2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)) sendmsg$nl_xfrm(r2, 0x0, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x1, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x1, 0x0, 0xee01}, {0x9, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50, 0x6b4d}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 11.214629ms ago: executing program 4 (id=1499): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_REMOVE(r0, 0xc138fd04, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) r1 = epoll_create1(0x0) openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000180)='./dm0\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x4}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@nested={0x8, 0x10f, 0x0, 0x1, [@typed={0x4, 0xd8, 0x0, 0x0, @binary}]}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000600)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x100000, 0x0, 0x20201, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@snapshot={0x0, 0x2000, 0x0, 0x80, 'snapshot\x00', {@ram_num={'1:', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, 'P', 0x20, '8', ' 2 discard_zeroes_cow discard_passdown_origin'}}]}) 11.103749ms ago: executing program 4 (id=1500): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) fchmod(0xffffffffffffffff, 0xa) 0s ago: executing program 4 (id=1501): symlink(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000dc0)='./file1\x00') r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) wait4(r0, 0x0, 0xa, 0x0) mkdir(&(0x7f0000000e00)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1/file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000f80)='./file0/file2\x00', 0x1000) lsm_get_self_attr(0x66, &(0x7f00000001c0)={0x0, 0x0, 0x119, 0xf9, ""/249}, &(0x7f0000000340)=0x119, 0x1) truncate(&(0x7f0000000000)='./file0/file2\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file2\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./myproc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./myproc/interrupts\x00', 0x0, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000fc0)=""/4096, 0x1000}], 0x1, 0x6d7, 0x80000002) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000040)={0x9, 0x9}) syz_usb_connect(0x5, 0xb3, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a100df00008032080b00020903000009040000000e0100000d240100092700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002"], 0x0) rmdir(&(0x7f0000000080)='./file0\x00') kernel console output (not intermixed with test programs): 00.959509][ T1508] RIP: 0033:0x7f3076b9f559 [ 100.959529][ T1508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.959549][ T1508] RSP: 002b:00007f3077a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 100.959576][ T1508] RAX: ffffffffffffffda RBX: 00007f3076e25fa0 RCX: 00007f3076b9f559 [ 100.959594][ T1508] RDX: 0000000000020040 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 100.959611][ T1508] RBP: 00007f3076c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 100.959627][ T1508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.959641][ T1508] R13: 00007f3076e26038 R14: 00007f3076e25fa0 R15: 00007fff3841d648 [ 100.959662][ T1508] [ 101.298251][ T317] usb 3-1: Using ep0 maxpacket: 16 [ 101.308572][ T317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.319613][ T317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 101.330697][ T317] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 101.343694][ T317] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 101.352795][ T317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.362029][ T317] usb 3-1: config 0 descriptor?? [ 101.378206][ T36] audit: type=1326 audit(1793394780.130:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1510 comm="syz.3.374" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3076b9f559 code=0x0 [ 101.497144][ T36] audit: type=1400 audit(1793394780.240:326): avc: denied { create } for pid=1510 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 101.782982][ T317] nintendo 0003:057E:2019.0016: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 102.001317][ T1502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.011021][ T1502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.286685][ T1519] device-mapper: table: 252:1: snapshot: Snapshot cow pairing for exception table handover failed (-EINVAL) [ 102.298359][ T1519] device-mapper: ioctl: error adding target to table [ 102.423407][ T1502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.433155][ T1502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.273546][ T67] usb 1-1: USB disconnect, device number 18 [ 103.297082][ T36] audit: type=1400 audit(1793394782.050:327): avc: denied { mounton } for pid=1534 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 103.343353][ T36] audit: type=1400 audit(1793394782.080:328): avc: denied { create } for pid=1534 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.379215][ T317] nintendo 0003:057E:2019.0016: Failed to get joycon info; ret=-71 [ 103.392485][ T317] nintendo 0003:057E:2019.0016: Failed to retrieve controller info; ret=-71 [ 103.402364][ T650] bridge_slave_1: left allmulticast mode [ 103.408324][ T317] nintendo 0003:057E:2019.0016: Failed to initialize controller; ret=-71 [ 103.417080][ T650] bridge_slave_1: left promiscuous mode [ 103.424331][ T317] nintendo 0003:057E:2019.0016: probe - fail = -71 [ 103.431294][ T650] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.438819][ T317] nintendo 0003:057E:2019.0016: probe with driver nintendo failed with error -71 [ 103.453638][ T317] usb 3-1: USB disconnect, device number 42 [ 103.459770][ T352] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 103.473090][ T650] bridge_slave_0: left allmulticast mode [ 103.478921][ T650] bridge_slave_0: left promiscuous mode [ 103.484662][ T650] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.561252][ T1534] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.568461][ T1534] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.575659][ T1534] bridge_slave_0: entered allmulticast mode [ 103.582182][ T1534] bridge_slave_0: entered promiscuous mode [ 103.588949][ T1534] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.596292][ T1534] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.603610][ T1534] bridge_slave_1: entered allmulticast mode [ 103.610369][ T1534] bridge_slave_1: entered promiscuous mode [ 103.617486][ T650] veth1_macvtap: left promiscuous mode [ 103.618292][ T352] usb 4-1: Using ep0 maxpacket: 32 [ 103.624224][ T650] veth0_vlan: left promiscuous mode [ 103.638835][ T352] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 103.657942][ T352] usb 4-1: config 0 has no interface number 0 [ 103.669849][ T352] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 103.680466][ T1540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 103.688351][ T352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.707569][ T352] usb 4-1: Product: syz [ 103.717672][ T352] usb 4-1: Manufacturer: syz [ 103.727766][ T352] usb 4-1: SerialNumber: syz [ 103.738704][ T352] usb 4-1: config 0 descriptor?? [ 103.758569][ T352] smsc95xx v2.0.0 [ 103.766206][ T36] audit: type=1400 audit(1793394782.520:329): avc: denied { checkpoint_restore } for pid=1546 comm="syz.0.385" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.842963][ T36] audit: type=1400 audit(1793394782.600:330): avc: denied { setopt } for pid=1546 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.873474][ T1551] netlink: 60 bytes leftover after parsing attributes in process `syz.0.385'. [ 103.883529][ T1534] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.890629][ T1534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.898145][ T1534] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.905272][ T1534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.956572][ T647] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.958589][ T1553] device-mapper: table: 252:3: snapshot: Snapshot cow pairing for exception table handover failed (-EINVAL) [ 103.977559][ T647] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.985088][ T1553] device-mapper: ioctl: error adding target to table [ 104.012144][ T647] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.019258][ T647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.028958][ T647] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.036046][ T647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.075841][ T1534] veth0_vlan: entered promiscuous mode [ 104.092328][ T1534] veth1_macvtap: entered promiscuous mode [ 104.115996][ T36] audit: type=1400 audit(1793394782.870:331): avc: denied { mounton } for pid=1534 comm="syz-executor" path="/root/syzkaller.ESVMKj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 104.149650][ T352] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 104.162045][ T352] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 104.268240][ T331] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 104.308250][ T67] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 104.419450][ T331] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.430581][ T331] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.443666][ T331] usb 3-1: config 0 interface 0 has no altsetting 0 [ 104.450485][ T331] usb 3-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 104.459640][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.468256][ T332] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.469211][ T331] usb 3-1: config 0 descriptor?? [ 104.482814][ T67] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.493035][ T67] usb 1-1: config 0 has no interfaces? [ 104.500064][ T67] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 104.509329][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.517384][ T67] usb 1-1: Product: syz [ 104.521630][ T67] usb 1-1: Manufacturer: syz [ 104.526267][ T67] usb 1-1: SerialNumber: syz [ 104.531885][ T67] usb 1-1: config 0 descriptor?? [ 104.629462][ T332] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.640457][ T332] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.653471][ T332] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.660161][ T332] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 104.669301][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.678336][ T332] usb 5-1: config 0 descriptor?? [ 104.888960][ T331] usbhid 3-1:0.0: can't add hid device: -71 [ 104.894991][ T331] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 104.903845][ T331] usb 3-1: USB disconnect, device number 43 [ 105.090504][ T332] steelseries 0003:1038:1410.0017: bogus close delimiter [ 105.097715][ T332] steelseries 0003:1038:1410.0017: item 0 4 2 10 parsing failed [ 105.105775][ T332] steelseries 0003:1038:1410.0017: parse failed [ 105.112272][ T332] steelseries 0003:1038:1410.0017: probe with driver steelseries failed with error -22 [ 105.290912][ T331] usb 5-1: USB disconnect, device number 2 [ 105.519406][ T1575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.528049][ T1575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.812391][ T1579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'. [ 106.049303][ T1595] netlink: 60 bytes leftover after parsing attributes in process `syz.4.397'. [ 106.267665][ T36] audit: type=1400 audit(1793394785.020:332): avc: denied { write } for pid=1598 comm="syz.2.399" name="route" dev="proc" ino=4026532321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 106.348344][ T332] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.498247][ T332] usb 5-1: Using ep0 maxpacket: 8 [ 106.498247][ T67] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 106.513792][ T332] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 106.522996][ T332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.531232][ T332] usb 5-1: Product: syz [ 106.535577][ T332] usb 5-1: Manufacturer: syz [ 106.540318][ T332] usb 5-1: SerialNumber: syz [ 106.648232][ T67] usb 3-1: Using ep0 maxpacket: 8 [ 106.656363][ T67] usb 3-1: unable to get BOS descriptor or descriptor too short [ 106.664803][ T67] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 106.672466][ T67] usb 3-1: can't read configurations, error -71 [ 106.749945][ T332] usb 5-1: Unsupported UAC3 BADD profile [ 106.757401][ T332] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 106.768693][ T332] usb 5-1: USB disconnect, device number 3 [ 106.776649][ T352] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 106.789104][ T352] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 106.791508][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.078225][ T332] usb 1-1: USB disconnect, device number 19 [ 107.107379][ T1606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'. [ 107.138394][ T36] audit: type=1400 audit(1793394785.900:333): avc: denied { ioctl } for pid=1610 comm="syz.0.403" path="socket:[15874]" dev="sockfs" ino=15874 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.171454][ T36] audit: type=1400 audit(1793394785.930:334): avc: denied { connect } for pid=1610 comm="syz.0.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.259289][ T1621] netlink: 60 bytes leftover after parsing attributes in process `syz.0.406'. [ 107.283648][ T36] audit: type=1400 audit(1793394786.040:335): avc: denied { write } for pid=1622 comm="syz.4.407" path="socket:[15892]" dev="sockfs" ino=15892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.307173][ T36] audit: type=1400 audit(1793394786.040:336): avc: denied { accept } for pid=1622 comm="syz.4.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.327104][ T36] audit: type=1400 audit(1793394786.040:337): avc: denied { read } for pid=1622 comm="syz.4.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.348847][ T1623] FAULT_INJECTION: forcing a failure. [ 107.348847][ T1623] name failslab, interval 1, probability 0, space 0, times 0 [ 107.361823][ T1623] CPU: 1 UID: 0 PID: 1623 Comm: syz.4.407 Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 107.361862][ T1623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 107.361878][ T1623] Call Trace: [ 107.361885][ T1623] [ 107.361894][ T1623] __dump_stack+0x21/0x30 [ 107.361931][ T1623] dump_stack_lvl+0x140/0x1c0 [ 107.361963][ T1623] ? __cfi_dump_stack_lvl+0x10/0x10 [ 107.361999][ T1623] dump_stack+0x19/0x20 [ 107.362031][ T1623] should_fail_ex+0x3c2/0x510 [ 107.362052][ T1623] ? security_sk_alloc+0x65/0x260 [ 107.362079][ T1623] should_failslab+0xac/0x100 [ 107.362115][ T1623] __kmalloc_noprof+0x69/0x510 [ 107.362145][ T1623] ? kasan_save_alloc_info+0x3a/0x50 [ 107.362172][ T1623] ? security_sk_alloc+0x65/0x260 [ 107.362198][ T1623] ? __kasan_slab_alloc+0x73/0x90 [ 107.362221][ T1623] security_sk_alloc+0x65/0x260 [ 107.362250][ T1623] sk_prot_alloc+0x123/0x3a0 [ 107.362279][ T1623] ? bpf_lsm_inode_alloc_security+0xd/0x20 [ 107.362313][ T1623] sk_alloc+0x40/0x590 [ 107.362340][ T1623] ? inode_init_always_gfp+0x76e/0x9e0 [ 107.362361][ T1623] inet6_create+0x5a8/0x11c0 [ 107.362389][ T1623] __sock_create+0x3a2/0x810 [ 107.362416][ T1623] __sys_socket+0xe1/0x1c0 [ 107.362441][ T1623] __x64_sys_socket+0x7e/0x90 [ 107.362468][ T1623] x64_sys_call+0x2608/0x2ee0 [ 107.362491][ T1623] do_syscall_64+0x57/0xf0 [ 107.362515][ T1623] ? clear_bhb_loop+0x50/0xa0 [ 107.362547][ T1623] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 107.362578][ T1623] RIP: 0033:0x7f7061d9f559 [ 107.362596][ T1623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.362616][ T1623] RSP: 002b:00007f7062c73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 107.362639][ T1623] RAX: ffffffffffffffda RBX: 00007f7062025fa0 RCX: 00007f7061d9f559 [ 107.362657][ T1623] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 107.362671][ T1623] RBP: 00007f7061e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 107.362685][ T1623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.362700][ T1623] R13: 00007f7062026038 R14: 00007f7062025fa0 R15: 00007ffed8c516b8 [ 107.362721][ T1623] [ 107.638263][ T67] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 107.661625][ T1632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'. [ 107.788230][ T67] usb 3-1: Using ep0 maxpacket: 32 [ 107.794951][ T67] usb 3-1: unable to get BOS descriptor or descriptor too short [ 107.803658][ T67] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 191, changing to 7 [ 107.814325][ T352] usb 4-1: USB disconnect, device number 24 [ 107.817542][ T67] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 107.830560][ T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.838895][ T67] usb 3-1: Product: Óż [ 107.843235][ T67] usb 3-1: Manufacturer: ਸ਼ë©čˇŞč”´ěŹ˘âź‰äŤé«”狡Ⳕ䮉猡鞸í§ă±šę´ëĽĽéş¸éżąćť…輣훰䄡䌊㳲껕뗂⑦㽀âłçŽ¤ [ 107.858141][ T67] usb 3-1: SerialNumber: syz [ 108.065325][ T1639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.074567][ T1639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.084969][ T67] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 108.091992][ T67] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 108.102190][ T67] usb 3-1: USB disconnect, device number 45 [ 108.142798][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 108.168345][ T352] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 108.198710][ T1641] FAULT_INJECTION: forcing a failure. [ 108.198710][ T1641] name failslab, interval 1, probability 0, space 0, times 0 [ 108.211647][ T1641] CPU: 1 UID: 0 PID: 1641 Comm: syz.4.414 Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 108.211684][ T1641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 108.211701][ T1641] Call Trace: [ 108.211709][ T1641] [ 108.211725][ T1641] __dump_stack+0x21/0x30 [ 108.211754][ T1641] dump_stack_lvl+0x140/0x1c0 [ 108.211779][ T1641] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.211806][ T1641] dump_stack+0x19/0x20 [ 108.211828][ T1641] should_fail_ex+0x3c2/0x510 [ 108.211844][ T1641] should_failslab+0xac/0x100 [ 108.211860][ T1641] __kmalloc_cache_noprof+0x41/0x470 [ 108.211882][ T1641] ? tty_open+0x16b/0x10b0 [ 108.211901][ T1641] tty_open+0x16b/0x10b0 [ 108.211919][ T1641] ? kobject_get_unless_zero+0x163/0x1f0 [ 108.211937][ T1641] ? __cfi_tty_open+0x10/0x10 [ 108.211953][ T1641] ? selinux_file_open+0x46c/0x630 [ 108.211978][ T1641] chrdev_open+0x4eb/0x610 [ 108.212043][ T1641] ? __cfi_chrdev_open+0x10/0x10 [ 108.212079][ T1641] ? bpf_lsm_file_open+0xd/0x20 [ 108.212097][ T1641] ? __cfi_chrdev_open+0x10/0x10 [ 108.212120][ T1641] do_dentry_open+0x97c/0x1510 [ 108.212140][ T1641] vfs_open+0x86/0x240 [ 108.212156][ T1641] ? __cfi_vfs_open+0x10/0x10 [ 108.212174][ T1641] ? may_open+0x352/0x430 [ 108.212191][ T1641] path_openat+0x2c49/0x35a0 [ 108.212209][ T1641] ? kasan_save_alloc_info+0x3a/0x50 [ 108.212229][ T1641] ? getname+0x1b/0x30 [ 108.212251][ T1641] ? x64_sys_call+0xe69/0x2ee0 [ 108.212267][ T1641] ? do_syscall_64+0x57/0xf0 [ 108.212285][ T1641] ? do_filp_open+0x440/0x440 [ 108.212303][ T1641] do_filp_open+0x1f2/0x440 [ 108.212320][ T1641] ? __cfi_do_filp_open+0x10/0x10 [ 108.212339][ T1641] ? alloc_fd+0x4c1/0x570 [ 108.212364][ T1641] do_sys_openat2+0x134/0x1d0 [ 108.212382][ T1641] ? fput+0x1a4/0x230 [ 108.212397][ T1641] ? do_sys_open+0x100/0x100 [ 108.212415][ T1641] ? __cfi_ksys_write+0x10/0x10 [ 108.212438][ T1641] __x64_sys_openat+0x13a/0x170 [ 108.212457][ T1641] x64_sys_call+0xe69/0x2ee0 [ 108.212473][ T1641] do_syscall_64+0x57/0xf0 [ 108.212489][ T1641] ? clear_bhb_loop+0x50/0xa0 [ 108.212513][ T1641] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.212540][ T1641] RIP: 0033:0x7f7061d9f559 [ 108.212554][ T1641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.212568][ T1641] RSP: 002b:00007f7062c73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 108.212585][ T1641] RAX: ffffffffffffffda RBX: 00007f7062025fa0 RCX: 00007f7061d9f559 [ 108.212597][ T1641] RDX: 0000000000020040 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 108.212608][ T1641] RBP: 00007f7061e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 108.212618][ T1641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.212628][ T1641] R13: 00007f7062026038 R14: 00007f7062025fa0 R15: 00007ffed8c516b8 [ 108.212641][ T1641] [ 108.318312][ T352] usb 4-1: Using ep0 maxpacket: 16 [ 108.513112][ T352] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.524976][ T352] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.537984][ T352] usb 4-1: config 0 interface 0 has no altsetting 0 [ 108.544709][ T352] usb 4-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.00 [ 108.553851][ T352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.565866][ T352] usb 4-1: config 0 descriptor?? [ 108.583261][ T1645] device-mapper: table: 252:2: snapshot: Snapshot cow pairing for exception table handover failed (-EINVAL) [ 108.595014][ T1645] device-mapper: ioctl: error adding target to table [ 108.624265][ T1650] netlink: 1072 bytes leftover after parsing attributes in process `syz.2.417'. [ 108.633467][ T1650] netlink: 280 bytes leftover after parsing attributes in process `syz.2.417'. [ 108.643682][ T1650] netlink: 60 bytes leftover after parsing attributes in process `syz.2.417'. [ 108.703092][ T1653] netlink: 140 bytes leftover after parsing attributes in process `syz.0.418'. [ 108.748232][ T351] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.908328][ T351] usb 5-1: Using ep0 maxpacket: 16 [ 108.914739][ T351] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 108.922909][ T351] usb 5-1: config 0 has no interface number 0 [ 108.929244][ T351] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 108.939351][ T351] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 108.951024][ T351] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 108.960548][ T351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.968631][ T351] usb 5-1: Product: syz [ 108.972823][ T351] usb 5-1: Manufacturer: syz [ 108.977436][ T351] usb 5-1: SerialNumber: syz [ 108.982962][ T351] usb 5-1: config 0 descriptor?? [ 108.988282][ T1643] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 108.995587][ T1643] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 109.018243][ T331] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 109.091320][ T67] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 109.178223][ T331] usb 3-1: Using ep0 maxpacket: 32 [ 109.184588][ T331] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 109.192796][ T331] usb 3-1: config 0 has no interface number 0 [ 109.200503][ T331] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 109.209662][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.215981][ T1643] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 109.217752][ T331] usb 3-1: Product: syz [ 109.225577][ T1643] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 109.229529][ T331] usb 3-1: Manufacturer: syz [ 109.240869][ T331] usb 3-1: SerialNumber: syz [ 109.247482][ T331] usb 3-1: config 0 descriptor?? [ 109.252979][ T67] usb 1-1: Using ep0 maxpacket: 32 [ 109.259313][ T67] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 109.267453][ T67] usb 1-1: config 0 has no interface number 0 [ 109.274203][ T331] smsc95xx v2.0.0 [ 109.279455][ T67] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 109.288807][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.296859][ T67] usb 1-1: Product: syz [ 109.301081][ T67] usb 1-1: Manufacturer: syz [ 109.305720][ T67] usb 1-1: SerialNumber: syz [ 109.311411][ T67] usb 1-1: config 0 descriptor?? [ 109.317582][ T67] smsc95xx v2.0.0 [ 109.442202][ T351] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 109.453572][ T351] asix 5-1:0.34: probe with driver asix failed with error -71 [ 109.463768][ T351] usb 5-1: USB disconnect, device number 4 [ 109.670084][ T331] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 109.680927][ T331] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 109.719274][ T67] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 109.730925][ T67] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 110.025020][ T1670] FAULT_INJECTION: forcing a failure. [ 110.025020][ T1670] name failslab, interval 1, probability 0, space 0, times 0 [ 110.037871][ T1670] CPU: 1 UID: 0 PID: 1670 Comm: syz.4.423 Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 110.037915][ T1670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 110.037931][ T1670] Call Trace: [ 110.037938][ T1670] [ 110.037947][ T1670] __dump_stack+0x21/0x30 [ 110.037987][ T1670] dump_stack_lvl+0x140/0x1c0 [ 110.038020][ T1670] ? __cfi_dump_stack_lvl+0x10/0x10 [ 110.038055][ T1670] dump_stack+0x19/0x20 [ 110.038087][ T1670] should_fail_ex+0x3c2/0x510 [ 110.038110][ T1670] should_failslab+0xac/0x100 [ 110.038132][ T1670] __kmalloc_cache_noprof+0x41/0x470 [ 110.038164][ T1670] ? tty_open+0x16b/0x10b0 [ 110.038190][ T1670] tty_open+0x16b/0x10b0 [ 110.038217][ T1670] ? kobject_get_unless_zero+0x163/0x1f0 [ 110.038242][ T1670] ? __cfi_tty_open+0x10/0x10 [ 110.038264][ T1670] ? selinux_file_open+0x46c/0x630 [ 110.038296][ T1670] chrdev_open+0x4eb/0x610 [ 110.038327][ T1670] ? __cfi_chrdev_open+0x10/0x10 [ 110.038370][ T1670] ? bpf_lsm_file_open+0xd/0x20 [ 110.038395][ T1670] ? __cfi_chrdev_open+0x10/0x10 [ 110.038427][ T1670] do_dentry_open+0x97c/0x1510 [ 110.038456][ T1670] vfs_open+0x86/0x240 [ 110.038480][ T1670] ? __cfi_vfs_open+0x10/0x10 [ 110.038505][ T1670] ? may_open+0x352/0x430 [ 110.038528][ T1670] path_openat+0x2c49/0x35a0 [ 110.038554][ T1670] ? kasan_save_alloc_info+0x3a/0x50 [ 110.038582][ T1670] ? getname+0x1b/0x30 [ 110.038613][ T1670] ? x64_sys_call+0xe69/0x2ee0 [ 110.038636][ T1670] ? do_syscall_64+0x57/0xf0 [ 110.038662][ T1670] ? do_filp_open+0x440/0x440 [ 110.038689][ T1670] do_filp_open+0x1f2/0x440 [ 110.038715][ T1670] ? __cfi_do_filp_open+0x10/0x10 [ 110.038736][ T1670] ? alloc_fd+0x4c1/0x570 [ 110.038794][ T1670] do_sys_openat2+0x134/0x1d0 [ 110.038821][ T1670] ? fput+0x1a4/0x230 [ 110.038843][ T1670] ? do_sys_open+0x100/0x100 [ 110.038868][ T1670] ? __cfi_ksys_write+0x10/0x10 [ 110.038905][ T1670] __x64_sys_openat+0x13a/0x170 [ 110.038949][ T1670] x64_sys_call+0xe69/0x2ee0 [ 110.038974][ T1670] do_syscall_64+0x57/0xf0 [ 110.038996][ T1670] ? clear_bhb_loop+0x50/0xa0 [ 110.039028][ T1670] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.039052][ T1670] RIP: 0033:0x7f7061d9f559 [ 110.039083][ T1670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.039106][ T1670] RSP: 002b:00007f7062c73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.039129][ T1670] RAX: ffffffffffffffda RBX: 00007f7062025fa0 RCX: 00007f7061d9f559 [ 110.039146][ T1670] RDX: 0000000000020040 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 110.039166][ T1670] RBP: 00007f7061e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 110.039177][ T1670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.039187][ T1670] R13: 00007f7062026038 R14: 00007f7062025fa0 R15: 00007ffed8c516b8 [ 110.039202][ T1670] [ 110.658242][ T317] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.808225][ T317] usb 5-1: Using ep0 maxpacket: 32 [ 110.814731][ T317] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 110.827760][ T317] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.834513][ T317] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 110.843730][ T317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.852851][ T317] usb 5-1: config 0 descriptor?? [ 110.888127][ T352] usb 4-1: string descriptor 0 read error: -71 [ 110.898815][ T352] usbhid 4-1:0.0: can't add hid device: -71 [ 110.904844][ T352] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 110.917447][ T352] usb 4-1: USB disconnect, device number 25 [ 110.946129][ T1681] printk: legacy console [ttyS0] disabled syzkaller syzkaller login: [ 246.486477][ T3947] printk: legacy console [ttyS0] enabled [ 246.707039][ T67] usb 4-1: device descriptor read/64, error -71 [ 246.727497][ T352] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 246.738472][ T352] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 246.904468][ T45] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 246.966869][ T67] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 247.061858][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 247.070504][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.083037][ T45] usb 5-1: string descriptor 0 read error: -22 [ 247.089287][ T45] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 247.098610][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.106823][ T67] usb 4-1: device descriptor read/64, error -71 [ 247.134798][ T36] audit: type=1400 audit(2000000005.815:550): avc: denied { getopt } for pid=3950 comm="syz.2.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 247.154320][ T36] audit: type=1400 audit(2000000005.824:551): avc: denied { read } for pid=3950 comm="syz.2.1159" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 247.362050][ T67] usb 4-1: device descriptor read/64, error -71 [ 247.477730][ T67] usb usb4-port1: attempt power cycle [ 247.594207][ T352] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 247.605123][ T352] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 247.834553][ T67] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 247.856702][ T67] usb 4-1: device descriptor read/8, error -71 [ 247.993179][ T67] usb 4-1: device descriptor read/8, error -71 [ 248.027352][ T3956] syzkaller0: entered promiscuous mode [ 248.032911][ T3956] syzkaller0: entered allmulticast mode [ 248.090414][ T3958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.099027][ T3958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.244081][ T67] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 248.266068][ T67] usb 4-1: device descriptor read/8, error -71 [ 248.402843][ T67] usb 4-1: device descriptor read/8, error -71 [ 248.518248][ T67] usb usb4-port1: unable to enumerate USB device [ 248.648779][ T3961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.657368][ T3961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.038663][ T352] usb 1-1: USB disconnect, device number 80 [ 249.087109][ T3967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3967 comm=syz.0.1164 [ 249.428568][ T352] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 249.588968][ T352] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 249.597200][ T352] usb 1-1: config 0 has no interface number 0 [ 249.603395][ T352] usb 1-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 249.613300][ T352] usb 1-1: config 0 interface 41 has no altsetting 0 [ 249.621580][ T352] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 249.630694][ T352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.638726][ T352] usb 1-1: Product: syz [ 249.642950][ T352] usb 1-1: Manufacturer: syz [ 249.647581][ T352] usb 1-1: SerialNumber: syz [ 249.653029][ T352] usb 1-1: config 0 descriptor?? [ 249.659336][ T352] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 249.872517][ T352] usb 1-1: USB disconnect, device number 81 [ 250.150797][ T36] audit: type=1326 audit(2000000008.666:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.3.1169" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3076b9f559 code=0x0 [ 250.166447][ T3985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.184209][ T3985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.663688][ T352] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 250.757340][ T36] audit: type=1400 audit(2000000009.229:553): avc: denied { nlmsg_tty_audit } for pid=3991 comm="syz.2.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 250.824068][ T352] usb 1-1: Using ep0 maxpacket: 32 [ 250.832127][ T352] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 250.840319][ T352] usb 1-1: config 0 has no interface number 0 [ 250.849080][ T352] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 250.858248][ T352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.862308][ T3996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.866277][ T352] usb 1-1: Product: syz [ 250.878934][ T352] usb 1-1: Manufacturer: syz [ 250.882812][ T3996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.883559][ T352] usb 1-1: SerialNumber: syz [ 250.897029][ T352] usb 1-1: config 0 descriptor?? [ 250.903272][ T352] smsc95xx v2.0.0 [ 251.332612][ T352] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 251.345447][ T352] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 251.585317][ T4031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.594634][ T4031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.710633][ T4035] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 252.012422][ T67] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 252.160891][ T4041] validate_nla: 29 callbacks suppressed [ 252.160931][ T4041] netlink: 'syz.2.1184': attribute type 1 has an invalid length. [ 252.174496][ T67] usb 4-1: Using ep0 maxpacket: 8 [ 252.181528][ T67] usb 4-1: unable to get BOS descriptor or descriptor too short [ 252.190320][ T67] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 252.198780][ T67] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 252.207908][ T67] usb 4-1: config 4 has no interface number 0 [ 252.216880][ T67] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 252.226084][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.227074][ T352] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 252.235879][ T67] usb 4-1: Product: syz [ 252.247442][ T352] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 252.251565][ T67] usb 4-1: Manufacturer: syz [ 252.269918][ T67] usb 4-1: SerialNumber: syz [ 252.409857][ T4047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.418417][ T4047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.495661][ T67] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 252.502364][ T67] usb 4-1: No valid video chain found. [ 252.509137][ T67] usb 4-1: USB disconnect, device number 101 [ 252.903641][ T45] usb 5-1: 1:1: cannot get freq at ep 0x1 [ 252.923955][ T45] usb 5-1: USB disconnect, device number 62 [ 252.959266][ T36] audit: type=1400 audit(2000000011.291:554): avc: denied { create } for pid=4055 comm="syz.4.1188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 253.030809][ T4064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.045161][ T4064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.323062][ T346] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 253.484381][ T346] usb 4-1: Using ep0 maxpacket: 32 [ 253.490629][ T346] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 253.498975][ T45] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 253.506642][ T346] usb 4-1: config 0 has no interface number 0 [ 253.514319][ T346] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 253.523595][ T346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.531701][ T346] usb 4-1: Product: syz [ 253.535911][ T346] usb 4-1: Manufacturer: syz [ 253.540572][ T346] usb 4-1: SerialNumber: syz [ 253.545921][ T346] usb 4-1: config 0 descriptor?? [ 253.551958][ T346] smsc95xx v2.0.0 [ 253.649016][ T352] usb 1-1: USB disconnect, device number 82 [ 253.668833][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 253.678702][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.691048][ T4082] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 253.699906][ T4082] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 253.708831][ T4082] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 253.717908][ T4082] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 253.726935][ T4082] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 253.736057][ T4082] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 253.745202][ T45] usb 5-1: string descriptor 0 read error: -22 [ 253.751500][ T45] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 253.760766][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.760933][ T4082] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 253.780962][ T4084] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 253.790026][ T4082] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 253.803176][ T4082] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 253.995045][ T346] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 254.006009][ T346] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 254.878998][ T346] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 254.889939][ T346] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 256.223496][ T352] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 256.321311][ T9] usb 4-1: USB disconnect, device number 102 [ 256.396367][ T352] usb 1-1: Using ep0 maxpacket: 16 [ 256.409263][ T352] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.428767][ T352] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.442208][ T352] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 256.461124][ T352] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 256.475250][ T352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.492117][ T352] usb 1-1: config 0 descriptor?? [ 256.710588][ T36] audit: type=1400 audit(2000000014.769:555): avc: denied { sqpoll } for pid=4101 comm="syz.3.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 256.965511][ T352] nintendo 0003:057E:2019.003C: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 257.066439][ T352] nintendo 0003:057E:2019.003C: Failed to get joycon info; ret=-38 [ 257.082643][ T352] nintendo 0003:057E:2019.003C: Failed to retrieve controller info; ret=-38 [ 257.102256][ T352] nintendo 0003:057E:2019.003C: Failed to initialize controller; ret=-38 [ 257.121127][ T352] nintendo 0003:057E:2019.003C: probe - fail = -38 [ 257.134607][ T352] nintendo 0003:057E:2019.003C: probe with driver nintendo failed with error -38 [ 257.476444][ T4118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.486601][ T4118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.941938][ T352] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 258.116149][ T352] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 258.127227][ T352] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.140153][ T352] usb 4-1: config 0 interface 0 has no altsetting 0 [ 258.146834][ T352] usb 4-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 258.155973][ T352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.169298][ T352] usb 4-1: config 0 descriptor?? [ 258.185513][ T4127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.194126][ T4127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.615299][ T352] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0934.003D/input/input31 [ 258.634352][ T352] uclogic 0003:28BD:0934.003D: input,hidraw0: USB HID v36.2c Mouse [HID 28bd:0934] on usb-dummy_hcd.3-1/input0 [ 258.877962][ T36] audit: type=1400 audit(2000000016.776:556): avc: denied { getattr } for pid=4132 comm="syz.2.1209" name="/" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 259.002682][ T4140] device-mapper: table: 252:3: snapshot: Snapshot cow pairing for exception table handover failed (-EINVAL) [ 259.014266][ T4140] device-mapper: ioctl: error adding target to table [ 259.137111][ T4144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.145749][ T4144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.156085][ T4144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.164736][ T4144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.224430][ T352] usb 1-1: USB disconnect, device number 83 [ 259.586425][ T352] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 259.640583][ T45] usb 5-1: 1:1: cannot get freq at ep 0x1 [ 259.748779][ T352] usb 1-1: Using ep0 maxpacket: 32 [ 259.755402][ T352] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 259.763553][ T352] usb 1-1: config 0 has no interface number 0 [ 259.771341][ T352] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 259.780924][ T352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.789039][ T352] usb 1-1: Product: syz [ 259.793271][ T352] usb 1-1: Manufacturer: syz [ 259.797897][ T352] usb 1-1: SerialNumber: syz [ 259.803824][ T352] usb 1-1: config 0 descriptor?? [ 259.813716][ T352] smsc95xx v2.0.0 [ 259.875522][ T36] audit: type=1400 audit(2000000017.690:557): avc: denied { bind } for pid=4147 comm="syz.2.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 260.247796][ T352] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 260.258650][ T352] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 260.727732][ T4151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.736337][ T4151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.888666][ T9] usb 4-1: USB disconnect, device number 103 [ 261.136298][ T352] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 261.147158][ T352] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 261.166097][ T352] usb 5-1: USB disconnect, device number 63 [ 261.360552][ T4162] device-mapper: table: 252:3: snapshot: Snapshot cow pairing for exception table handover failed (-EINVAL) [ 261.372125][ T4162] device-mapper: ioctl: error adding target to table [ 261.660039][ T4176] overlayfs: missing 'lowerdir' [ 261.665104][ T352] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 261.769629][ T4180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1226'. [ 261.778683][ T4180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1226'. [ 261.827491][ T352] usb 5-1: Using ep0 maxpacket: 16 [ 261.833880][ T352] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.844238][ T352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.855305][ T352] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 261.868281][ T352] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 261.877379][ T352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.886361][ T352] usb 5-1: config 0 descriptor?? [ 262.329740][ T352] nintendo 0003:057E:2019.003E: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0 [ 262.401459][ T352] nintendo 0003:057E:2019.003E: Failed to get joycon info; ret=-38 [ 262.409480][ T352] nintendo 0003:057E:2019.003E: Failed to retrieve controller info; ret=-38 [ 262.416959][ T4188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 262.418522][ T352] nintendo 0003:057E:2019.003E: Failed to initialize controller; ret=-38 [ 262.436887][ T352] nintendo 0003:057E:2019.003E: probe - fail = -38 [ 262.444782][ T352] nintendo 0003:057E:2019.003E: probe with driver nintendo failed with error -38 [ 262.494283][ T346] usb 1-1: USB disconnect, device number 84 [ 262.515094][ T36] audit: type=1400 audit(2000000020.129:558): avc: denied { setopt } for pid=4191 comm="syz.0.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 262.670143][ T4205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.678825][ T4205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.867226][ T346] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 263.008025][ T346] usb 1-1: device descriptor read/64, error -71 [ 263.267975][ T346] usb 1-1: device descriptor read/64, error -71 [ 263.538785][ T346] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 263.679608][ T346] usb 1-1: device descriptor read/64, error -71 [ 263.722945][ T45] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 263.896275][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 263.902797][ T45] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 263.911355][ T45] usb 4-1: config 0 has no interface number 0 [ 263.923040][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 263.932302][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.940459][ T346] usb 1-1: device descriptor read/64, error -71 [ 263.946974][ T45] usb 4-1: Product: syz [ 263.951209][ T45] usb 4-1: Manufacturer: syz [ 263.955927][ T45] usb 4-1: SerialNumber: syz [ 263.961761][ T45] usb 4-1: config 0 descriptor?? [ 263.968312][ T45] smsc95xx v2.0.0 [ 263.976401][ T4223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.984983][ T4223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.069709][ T346] usb usb1-port1: attempt power cycle [ 264.402993][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 264.413865][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 264.438005][ T346] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 264.460577][ T346] usb 1-1: device descriptor read/8, error -71 [ 264.564697][ T4227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.573989][ T4227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.587662][ T2825] usb 5-1: USB disconnect, device number 64 [ 264.623210][ T346] usb 1-1: device descriptor read/8, error -71 [ 264.640386][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 264.651520][ T45] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 264.882188][ T346] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 264.905217][ T346] usb 1-1: device descriptor read/8, error -71 [ 265.001311][ T2825] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 265.045775][ T346] usb 1-1: device descriptor read/8, error -71 [ 265.153157][ T4238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.161887][ T4238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.164364][ T2825] usb 5-1: Using ep0 maxpacket: 16 [ 265.173034][ T4238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.175301][ T346] usb usb1-port1: unable to enumerate USB device [ 265.183897][ T4238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.198946][ T2825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.209998][ T2825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 265.220841][ T2825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 265.230630][ T2825] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 265.243606][ T2825] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 265.252692][ T2825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.261802][ T2825] usb 5-1: config 0 descriptor?? [ 265.705225][ T2825] nintendo 0003:057E:2019.003F: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0 [ 265.774965][ T4245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1250'. [ 265.792270][ T2825] nintendo 0003:057E:2019.003F: Failed to get joycon info; ret=-90 [ 265.800489][ T2825] nintendo 0003:057E:2019.003F: Failed to retrieve controller info; ret=-90 [ 265.810394][ T2825] nintendo 0003:057E:2019.003F: Failed to initialize controller; ret=-90 [ 265.820123][ T2825] nintendo 0003:057E:2019.003F: probe - fail = -90 [ 265.826986][ T2825] nintendo 0003:057E:2019.003F: probe with driver nintendo failed with error -90 [ 266.214801][ T45] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 266.330938][ T4257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.340260][ T4257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.377301][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 266.383555][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.394490][ T45] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 266.405242][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 266.418169][ T45] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 266.427243][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.435957][ T45] usb 1-1: config 0 descriptor?? [ 266.724770][ T2825] usb 4-1: USB disconnect, device number 104 [ 266.879587][ T45] nintendo 0003:057E:2019.0040: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 266.926676][ T36] audit: type=1400 audit(2000000024.199:559): avc: denied { mounton } for pid=4268 comm="syz.2.1259" path="/476/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 266.951798][ T45] nintendo 0003:057E:2019.0040: Failed to get joycon info; ret=-38 [ 266.959858][ T45] nintendo 0003:057E:2019.0040: Failed to retrieve controller info; ret=-38 [ 266.968709][ T45] nintendo 0003:057E:2019.0040: Failed to initialize controller; ret=-38 [ 266.977910][ T45] nintendo 0003:057E:2019.0040: probe - fail = -38 [ 266.984562][ T45] nintendo 0003:057E:2019.0040: probe with driver nintendo failed with error -38 [ 267.081613][ T2825] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 267.256390][ T2825] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 267.267628][ T2825] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.280575][ T2825] usb 4-1: config 0 interface 0 has no altsetting 0 [ 267.287326][ T2825] usb 4-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 267.296497][ T2825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.305441][ T2825] usb 4-1: config 0 descriptor?? [ 267.528790][ T4263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.537446][ T4263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.767445][ T2825] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0934.0041/input/input32 [ 267.785627][ T2825] uclogic 0003:28BD:0934.0041: input,hidraw0: USB HID v36.2c Mouse [HID 28bd:0934] on usb-dummy_hcd.3-1/input0 [ 267.921593][ T45] usb 5-1: USB disconnect, device number 65 [ 267.982070][ T2283] usb 4-1: USB disconnect, device number 105 [ 268.056388][ T4295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.065709][ T4295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.826267][ T45] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 268.988766][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 268.995201][ T45] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 269.003563][ T45] usb 4-1: config 0 has no interface number 0 [ 269.011242][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 269.020396][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.028486][ T45] usb 4-1: Product: syz [ 269.032724][ T45] usb 4-1: Manufacturer: syz [ 269.037337][ T45] usb 4-1: SerialNumber: syz [ 269.042962][ T45] usb 4-1: config 0 descriptor?? [ 269.048874][ T45] smsc95xx v2.0.0 [ 269.218183][ T346] usb 1-1: USB disconnect, device number 89 [ 269.235608][ T4313] ./dev/sda1: Can't lookup blockdev [ 269.242688][ T4313] rust_binder: 4312:4313 tried to use weak ref as strong ref [ 269.250171][ T4313] rust_binder: 4312:4313 got transaction to invalid handle 1 [ 269.257606][ T4313] rust_binder: 4312:4313 transaction call to 0:0 failed EINVAL, code 0 size 0-0 line process.rs:958 [ 269.276758][ T2825] rust_binder: 4312: undelivered TRANSACTION_ERROR: 29201 [ 269.486264][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 269.497347][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 269.545924][ T36] audit: type=1400 audit(2000000026.626:560): avc: denied { append } for pid=4321 comm="syz.4.1274" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 269.572458][ T4324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.581205][ T4324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.628102][ T346] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 269.724088][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 269.734979][ T45] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 269.790750][ T346] usb 1-1: Using ep0 maxpacket: 16 [ 269.797021][ T346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.808168][ T346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 269.819089][ T346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 269.828840][ T346] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 269.841910][ T346] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 269.851041][ T346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.859702][ T346] usb 1-1: config 0 descriptor?? [ 270.302914][ T346] nintendo 0003:057E:2019.0042: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 270.377854][ T346] nintendo 0003:057E:2019.0042: Failed to get joycon info; ret=-90 [ 270.385932][ T346] nintendo 0003:057E:2019.0042: Failed to retrieve controller info; ret=-90 [ 270.394702][ T346] nintendo 0003:057E:2019.0042: Failed to initialize controller; ret=-90 [ 270.404563][ T346] nintendo 0003:057E:2019.0042: probe - fail = -90 [ 270.411244][ T346] nintendo 0003:057E:2019.0042: probe with driver nintendo failed with error -90 [ 270.422439][ T45] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 270.592611][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 270.599026][ T45] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 270.607213][ T45] usb 5-1: config 0 has no interface number 0 [ 270.614759][ T45] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 270.623808][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.632097][ T45] usb 5-1: Product: syz [ 270.636431][ T45] usb 5-1: Manufacturer: syz [ 270.641042][ T45] usb 5-1: SerialNumber: syz [ 270.646641][ T45] usb 5-1: config 0 descriptor?? [ 270.652903][ T45] smsc95xx v2.0.0 [ 271.088359][ T45] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 271.099163][ T45] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 271.326081][ T45] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 271.336958][ T45] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 271.528417][ T4354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.537070][ T4354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.819466][ T45] usb 4-1: USB disconnect, device number 106 [ 272.547881][ T9] usb 1-1: USB disconnect, device number 90 [ 272.868405][ T9] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 273.030994][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 273.037524][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 273.045746][ T9] usb 1-1: config 0 has no interface number 0 [ 273.053649][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 273.062738][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.070787][ T9] usb 1-1: Product: syz [ 273.075166][ T9] usb 1-1: Manufacturer: syz [ 273.079961][ T9] usb 1-1: SerialNumber: syz [ 273.085510][ T9] usb 1-1: config 0 descriptor?? [ 273.091718][ T9] smsc95xx v2.0.0 [ 273.397885][ T4394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.407429][ T4394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.423753][ T2283] usb 5-1: USB disconnect, device number 67 [ 273.497368][ T4396] device-mapper: table: 252:9: snapshot: Snapshot cow pairing for exception table handover failed (-EINVAL) [ 273.509516][ T4396] device-mapper: ioctl: error adding target to table [ 273.526434][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 273.537463][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 273.764314][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 273.775192][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 273.919641][ T346] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 274.083301][ T346] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 274.094395][ T346] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.107227][ T346] usb 5-1: config 0 interface 0 has no altsetting 0 [ 274.113977][ T346] usb 5-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 274.123237][ T346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.132113][ T346] usb 5-1: config 0 descriptor?? [ 274.575701][ T346] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0934.0043/input/input33 [ 274.589539][ T346] uclogic 0003:28BD:0934.0043: input,hidraw0: USB HID v36.2c Mouse [HID 28bd:0934] on usb-dummy_hcd.4-1/input0 [ 274.791842][ T346] usb 5-1: USB disconnect, device number 68 [ 275.328749][ T4414] device-mapper: table: 252:1: snapshot: Snapshot cow pairing for exception table handover failed (-EINVAL) [ 275.340382][ T4414] device-mapper: ioctl: error adding target to table [ 275.361776][ T4419] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1303'. [ 275.372578][ T4419] device-mapper: table: 252:9: snapshot: Cannot get origin device (-ENOENT) [ 275.381317][ T4419] device-mapper: ioctl: error adding target to table [ 275.740647][ T31] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 275.823444][ T9] usb 1-1: USB disconnect, device number 91 [ 275.838338][ T4434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1309'. [ 275.858921][ T4436] FAULT_INJECTION: forcing a failure. [ 275.858921][ T4436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.872177][ T4436] CPU: 1 UID: 0 PID: 4436 Comm: syz.0.1310 Tainted: G W syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 275.872223][ T4436] Tainted: [W]=WARN [ 275.872229][ T4436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 275.872241][ T4436] Call Trace: [ 275.872247][ T4436] [ 275.872254][ T4436] __dump_stack+0x21/0x30 [ 275.872283][ T4436] dump_stack_lvl+0x140/0x1c0 [ 275.872315][ T4436] ? __cfi_dump_stack_lvl+0x10/0x10 [ 275.872341][ T4436] dump_stack+0x19/0x20 [ 275.872364][ T4436] should_fail_ex+0x3c2/0x510 [ 275.872380][ T4436] ? __cfi_table_load+0x10/0x10 [ 275.872489][ T4436] should_fail+0xf/0x20 [ 275.872503][ T4436] should_fail_usercopy+0x1e/0x30 [ 275.872520][ T4436] _copy_from_user+0x20/0xa0 [ 275.872539][ T4436] dm_ctl_ioctl+0x38c/0xde0 [ 275.872563][ T4436] ? selinux_file_ioctl+0x732/0x1480 [ 275.872586][ T4436] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 275.872613][ T4436] ? __fget_files+0x2bc/0x330 [ 275.872628][ T4436] ? bpf_lsm_file_ioctl+0xd/0x20 [ 275.872645][ T4436] ? security_file_ioctl+0x3e/0x110 [ 275.872706][ T4436] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 275.872728][ T4436] __se_sys_ioctl+0x123/0x1b0 [ 275.872744][ T4436] __x64_sys_ioctl+0x7f/0xa0 [ 275.872760][ T4436] x64_sys_call+0x1878/0x2ee0 [ 275.872776][ T4436] do_syscall_64+0x57/0xf0 [ 275.872794][ T4436] ? clear_bhb_loop+0x50/0xa0 [ 275.872820][ T4436] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 275.872842][ T4436] RIP: 0033:0x7fcd34d9f559 [ 275.872856][ T4436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.872871][ T4436] RSP: 002b:00007fcd35b81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.872889][ T4436] RAX: ffffffffffffffda RBX: 00007fcd35025fa0 RCX: 00007fcd34d9f559 [ 275.872901][ T4436] RDX: 0000200000000600 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 275.872913][ T4436] RBP: 00007fcd35b81090 R08: 0000000000000000 R09: 0000000000000000 [ 275.872923][ T4436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.872934][ T4436] R13: 00007fcd35026038 R14: 00007fcd35025fa0 R15: 00007ffe3490e428 [ 275.872948][ T4436] [ 276.095849][ T346] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 276.130482][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 276.137663][ T31] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 276.138576][ T4444] loop2: detected capacity change from 0 to 4 [ 276.146112][ T31] usb 4-1: config 0 has no interface number 0 [ 276.156584][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.167571][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 276.176002][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.185194][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 276.193277][ T4444] loop2: unable to read partition table [ 276.199874][ T4445] /dev/loop0: Can't lookup blockdev [ 276.202047][ T4444] loop_reread_partitions: partition scan of loop2 (úů塙‰üŤľCęjĚ–ă˘P=Ă˝?ă}X‹şĐ śëÜ%ő«`ÉćÖ€ů…{í©Öȵ4FLQkÝŠ) failed (rc=-5) [ 276.208086][ T4445] No source specified [ 276.223931][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.233145][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 276.241595][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.250794][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 276.260763][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 276.270071][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.271234][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.278648][ T31] usb 4-1: Product: syz [ 276.287376][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 276.289752][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.291981][ T31] usb 4-1: Manufacturer: syz [ 276.299455][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 276.303558][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.308681][ T346] usb 5-1: unable to get BOS descriptor or descriptor too short [ 276.313303][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 276.321275][ T31] usb 4-1: SerialNumber: syz [ 276.351796][ T346] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.367704][ T346] usb 5-1: string descriptor 0 read error: -22 [ 276.374260][ T346] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 276.387114][ T31] usb 4-1: config 0 descriptor?? [ 276.392512][ T346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.402418][ T31] smsc95xx v2.0.0 [ 276.557576][ T4458] batadv_slave_0: entered promiscuous mode [ 276.565697][ T647] Bluetooth: hci0: Frame reassembly failed (-84) [ 276.661540][ T9] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 276.824111][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 276.830556][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 276.838751][ T9] usb 1-1: config 0 has no interface number 0 [ 276.842976][ T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 276.847799][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 276.856723][ T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 276.865392][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.882218][ T9] usb 1-1: Product: syz [ 276.886423][ T9] usb 1-1: Manufacturer: syz [ 276.892076][ T9] usb 1-1: SerialNumber: syz [ 276.897677][ T9] usb 1-1: config 0 descriptor?? [ 276.904568][ T9] smsc95xx v2.0.0 [ 277.093234][ T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 277.104224][ T31] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 277.338960][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 277.349933][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 277.576579][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 277.587665][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 277.600420][ T346] usb 5-1: USB disconnect, device number 69 [ 278.212008][ T4466] device-mapper: table: 252:9: snapshot: Snapshot cow pairing for exception table handover failed (-EINVAL) [ 278.223565][ T4466] device-mapper: ioctl: error adding target to table [ 278.340014][ T4473] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 278.352501][ T36] audit: type=1400 audit(2000000034.756:561): avc: denied { shutdown } for pid=4472 comm="syz.4.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 278.381309][ T4479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1324'. [ 278.688165][ T31] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 278.753327][ T2283] usb 4-1: USB disconnect, device number 107 [ 278.796575][ T3420] Bluetooth: hci0: command 0x1003 tx timeout [ 278.796668][ T3904] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 278.810783][ T4457] batadv_slave_0: left promiscuous mode [ 278.834808][ T4491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.843644][ T4491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.861577][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 278.868283][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.880182][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 278.891467][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 278.904740][ T31] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 278.914060][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.923852][ T31] usb 5-1: config 0 descriptor?? [ 278.929875][ T4496] FAULT_INJECTION: forcing a failure. [ 278.929875][ T4496] name fail_futex, interval 1, probability 0, space 0, times 0 [ 278.943131][ T4496] CPU: 0 UID: 0 PID: 4496 Comm: syz.3.1331 Tainted: G W syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 278.943175][ T4496] Tainted: [W]=WARN [ 278.943183][ T4496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 278.943199][ T4496] Call Trace: [ 278.943207][ T4496] [ 278.943217][ T4496] __dump_stack+0x21/0x30 [ 278.943261][ T4496] dump_stack_lvl+0x140/0x1c0 [ 278.943298][ T4496] ? __cfi_dump_stack_lvl+0x10/0x10 [ 278.943338][ T4496] dump_stack+0x19/0x20 [ 278.943371][ T4496] should_fail_ex+0x3c2/0x510 [ 278.943411][ T4496] should_fail+0xf/0x20 [ 278.943434][ T4496] get_futex_key+0x178/0x940 [ 278.943540][ T4496] ? __cfi___futex_wait+0x10/0x10 [ 278.943573][ T4496] ? __cfi_get_futex_key+0x10/0x10 [ 278.943597][ T4496] ? __cfi_futex_wake_mark+0x10/0x10 [ 278.943627][ T4496] futex_wake+0x150/0x950 [ 278.943658][ T4496] ? futex_wait+0x2b8/0x7c0 [ 278.943690][ T4496] ? __cfi_futex_wake+0x10/0x10 [ 278.943724][ T4496] ? security_file_alloc+0x49/0x220 [ 278.943760][ T4496] do_futex+0x37d/0x510 [ 278.943787][ T4496] ? errseq_sample+0x48/0x70 [ 278.943819][ T4496] ? __cfi_do_futex+0x10/0x10 [ 278.943849][ T4496] __se_sys_futex+0x13c/0x320 [ 278.943876][ T4496] ? __x64_sys_futex+0x110/0x110 [ 278.943900][ T4496] ? fdget+0x188/0x1e0 [ 278.943985][ T4496] __x64_sys_futex+0xe9/0x110 [ 278.944014][ T4496] x64_sys_call+0x227f/0x2ee0 [ 278.944040][ T4496] do_syscall_64+0x57/0xf0 [ 278.944067][ T4496] ? clear_bhb_loop+0x50/0xa0 [ 278.944105][ T4496] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 278.944143][ T4496] RIP: 0033:0x7f3076b9f559 [ 278.944164][ T4496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.944187][ T4496] RSP: 002b:00007f3077a570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 278.944214][ T4496] RAX: ffffffffffffffda RBX: 00007f3076e25fa8 RCX: 00007f3076b9f559 [ 278.944234][ T4496] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3076e25fac [ 278.944251][ T4496] RBP: 00007f3076e25fa0 R08: 4000000000000000 R09: 0000000000000000 [ 278.944269][ T4496] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 278.944288][ T4496] R13: 00007f3076e26038 R14: 00007fff3841d560 R15: 00007fff3841d648 [ 278.944309][ T4496] [ 279.263444][ T4504] FAULT_INJECTION: forcing a failure. [ 279.263444][ T4504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.276683][ T4504] CPU: 1 UID: 0 PID: 4504 Comm: syz.3.1333 Tainted: G W syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 279.276726][ T4504] Tainted: [W]=WARN [ 279.276732][ T4504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 279.276743][ T4504] Call Trace: [ 279.276750][ T4504] [ 279.276757][ T4504] __dump_stack+0x21/0x30 [ 279.276788][ T4504] dump_stack_lvl+0x140/0x1c0 [ 279.276812][ T4504] ? __cfi_dump_stack_lvl+0x10/0x10 [ 279.276838][ T4504] ? check_stack_object+0x138/0x150 [ 279.276927][ T4504] dump_stack+0x19/0x20 [ 279.276953][ T4504] should_fail_ex+0x3c2/0x510 [ 279.276970][ T4504] should_fail+0xf/0x20 [ 279.276984][ T4504] should_fail_usercopy+0x1e/0x30 [ 279.277001][ T4504] _copy_to_user+0x24/0xa0 [ 279.277020][ T4504] simple_read_from_buffer+0xed/0x160 [ 279.277059][ T4504] proc_fail_nth_read+0x1aa/0x220 [ 279.277098][ T4504] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 279.277117][ T4504] ? selinux_socket_setsockopt+0x324/0x3d0 [ 279.277138][ T4504] ? bpf_lsm_file_permission+0xd/0x20 [ 279.277155][ T4504] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 279.277174][ T4504] vfs_read+0x28b/0xc70 [ 279.277197][ T4504] ? __cfi_vfs_read+0x10/0x10 [ 279.277218][ T4504] ? __kasan_check_write+0x18/0x20 [ 279.277240][ T4504] ? mutex_lock+0x97/0x1d0 [ 279.277262][ T4504] ? __cfi_mutex_lock+0x10/0x10 [ 279.277285][ T4504] ksys_read+0x145/0x260 [ 279.277306][ T4504] ? __fget_files+0x2bc/0x330 [ 279.277322][ T4504] ? __cfi_ksys_read+0x10/0x10 [ 279.277344][ T4504] ? __kasan_check_write+0x18/0x20 [ 279.277369][ T4504] ? __kasan_check_read+0x15/0x20 [ 279.277391][ T4504] __x64_sys_read+0x7f/0x90 [ 279.277413][ T4504] x64_sys_call+0x2638/0x2ee0 [ 279.277430][ T4504] do_syscall_64+0x57/0xf0 [ 279.277452][ T4504] ? clear_bhb_loop+0x50/0xa0 [ 279.277475][ T4504] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 279.277498][ T4504] RIP: 0033:0x7f3076b5fd8e [ 279.277512][ T4504] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 279.277526][ T4504] RSP: 002b:00007f3077a56fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 279.277544][ T4504] RAX: ffffffffffffffda RBX: 00007f3077a576c0 RCX: 00007f3076b5fd8e [ 279.277557][ T4504] RDX: 000000000000000f RSI: 00007f3077a570a0 RDI: 0000000000000004 [ 279.277567][ T4504] RBP: 00007f3077a57090 R08: 0000000000000000 R09: 0000000000000000 [ 279.277578][ T4504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.277588][ T4504] R13: 00007f3076e26038 R14: 00007f3076e25fa0 R15: 00007fff3841d648 [ 279.277603][ T4504] [ 279.547888][ T2283] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 279.558410][ T2283] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 279.671393][ T346] usb 1-1: USB disconnect, device number 92 [ 279.806135][ T4520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1339'. [ 279.880948][ T4522] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd20 [ 279.904930][ T4524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.913519][ T4524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.032020][ T346] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 280.195713][ T346] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.206688][ T346] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.219569][ T346] usb 1-1: config 0 interface 0 has no altsetting 0 [ 280.226219][ T346] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 280.235335][ T346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.244007][ T346] usb 1-1: config 0 descriptor?? [ 280.493411][ T4531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.502099][ T4531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.685753][ T346] usbhid 1-1:0.0: can't add hid device: -71 [ 280.691885][ T346] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 280.700968][ T346] usb 1-1: USB disconnect, device number 93 [ 280.739741][ T4537] can0: slcan on ttynull. [ 281.065311][ T2283] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 281.174022][ T4559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.182700][ T4559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.242198][ T2283] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 281.251383][ T2283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.259707][ T2283] usb 4-1: Product: syz [ 281.263974][ T2283] usb 4-1: Manufacturer: syz [ 281.268851][ T2283] usb 4-1: SerialNumber: syz [ 281.286465][ T4563] device-mapper: table: 252:2: snapshot: Cannot get origin device (-ENOENT) [ 281.295340][ T4563] device-mapper: ioctl: error adding target to table [ 281.321219][ T4565] syzkaller1: entered promiscuous mode [ 281.326961][ T4565] syzkaller1: entered allmulticast mode [ 281.334075][ T4565] bridge0: port 3(gretap0) entered blocking state [ 281.340577][ T4565] bridge0: port 3(gretap0) entered disabled state [ 281.347149][ T4565] gretap0: entered allmulticast mode [ 281.353030][ T4565] gretap0: entered promiscuous mode [ 281.358747][ T4565] bridge0: port 3(gretap0) entered blocking state [ 281.365278][ T4565] bridge0: port 3(gretap0) entered forwarding state [ 281.373547][ T4565] hub 8-0:1.0: USB hub found [ 281.378431][ T4565] hub 8-0:1.0: 1 port detected [ 281.495369][ T4537] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1345'. [ 281.505671][ T346] usb 4-1: USB disconnect, device number 108 [ 281.541031][ T4536] can0 (unregistered): slcan off ttynull. [ 281.680367][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 281.686423][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 281.705745][ T31] usb 5-1: USB disconnect, device number 70 [ 282.103789][ T4616] FAULT_INJECTION: forcing a failure. [ 282.103789][ T4616] name failslab, interval 1, probability 0, space 0, times 0 [ 282.116742][ T4616] CPU: 0 UID: 0 PID: 4616 Comm: syz.3.1360 Tainted: G W syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 282.116789][ T4616] Tainted: [W]=WARN [ 282.116796][ T4616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 282.116808][ T4616] Call Trace: [ 282.116814][ T4616] [ 282.116821][ T4616] __dump_stack+0x21/0x30 [ 282.116850][ T4616] dump_stack_lvl+0x140/0x1c0 [ 282.116874][ T4616] ? __cfi_dump_stack_lvl+0x10/0x10 [ 282.116900][ T4616] dump_stack+0x19/0x20 [ 282.116922][ T4616] should_fail_ex+0x3c2/0x510 [ 282.116944][ T4616] should_failslab+0xac/0x100 [ 282.116962][ T4616] __kmalloc_cache_noprof+0x41/0x470 [ 282.116985][ T4616] ? dm_table_create+0x94/0x530 [ 282.117002][ T4616] dm_table_create+0x94/0x530 [ 282.117017][ T4616] ? __kasan_check_write+0x18/0x20 [ 282.117039][ T4616] table_load+0x15a/0x7d0 [ 282.117067][ T4616] ? __check_object_size+0x99/0x870 [ 282.117092][ T4616] ? __cfi_table_load+0x10/0x10 [ 282.117118][ T4616] ? __kasan_check_write+0x18/0x20 [ 282.117139][ T4616] ? __cfi_table_load+0x10/0x10 [ 282.117163][ T4616] dm_ctl_ioctl+0x8f3/0xde0 [ 282.117186][ T4616] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 282.117213][ T4616] ? __fget_files+0x2bc/0x330 [ 282.117230][ T4616] ? bpf_lsm_file_ioctl+0xd/0x20 [ 282.117246][ T4616] ? security_file_ioctl+0x3e/0x110 [ 282.117268][ T4616] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 282.117291][ T4616] __se_sys_ioctl+0x123/0x1b0 [ 282.117307][ T4616] __x64_sys_ioctl+0x7f/0xa0 [ 282.117322][ T4616] x64_sys_call+0x1878/0x2ee0 [ 282.117338][ T4616] do_syscall_64+0x57/0xf0 [ 282.117356][ T4616] ? clear_bhb_loop+0x50/0xa0 [ 282.117382][ T4616] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 282.117404][ T4616] RIP: 0033:0x7f3076b9f559 [ 282.117418][ T4616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.117432][ T4616] RSP: 002b:00007f3077a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.117449][ T4616] RAX: ffffffffffffffda RBX: 00007f3076e25fa0 RCX: 00007f3076b9f559 [ 282.117466][ T4616] RDX: 0000200000000600 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 282.117478][ T4616] RBP: 00007f3077a57090 R08: 0000000000000000 R09: 0000000000000000 [ 282.117489][ T4616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.117499][ T4616] R13: 00007f3076e26038 R14: 00007f3076e25fa0 R15: 00007fff3841d648 [ 282.117513][ T4616] [ 282.134710][ T31] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 282.377202][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 282.427192][ T2283] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 282.536661][ T31] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.547801][ T31] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.560781][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 282.567474][ T31] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 282.576609][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.585365][ T31] usb 5-1: config 0 descriptor?? [ 282.600637][ T2283] usb 4-1: Using ep0 maxpacket: 16 [ 282.607082][ T2283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.618213][ T2283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 282.629225][ T2283] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 282.642184][ T2283] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 282.651283][ T2283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.660284][ T2283] usb 4-1: config 0 descriptor?? [ 282.665590][ T352] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 282.829587][ T352] usb 1-1: unable to get BOS descriptor or descriptor too short [ 282.838112][ T352] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.850562][ T352] usb 1-1: string descriptor 0 read error: -22 [ 282.856798][ T352] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 282.866111][ T352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.026857][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 283.033163][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 283.042618][ T31] usb 5-1: USB disconnect, device number 71 [ 283.216513][ T36] audit: type=1326 audit(2000000039.231:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4636 comm="syz.2.1368" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbec3f9f559 code=0x0 [ 283.329956][ T4638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.338659][ T4638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.599185][ T4641] device-mapper: table: 252:9: snapshot: Snapshot cow pairing for exception table handover failed (-EINVAL) [ 283.610783][ T4641] device-mapper: ioctl: error adding target to table [ 283.747049][ T10] usb 1-1: USB disconnect, device number 94 [ 283.987833][ T352] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 284.150374][ T352] usb 5-1: Using ep0 maxpacket: 16 [ 284.158274][ T352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.169222][ T352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 284.180076][ T352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 284.189795][ T352] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 284.202749][ T352] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 284.211837][ T352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.220699][ T352] usb 5-1: config 0 descriptor?? [ 284.594733][ T10] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 284.665516][ T352] nintendo 0003:057E:2019.0045: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0 [ 284.735739][ T352] nintendo 0003:057E:2019.0045: Failed to get joycon info; ret=-90 [ 284.743864][ T352] nintendo 0003:057E:2019.0045: Failed to retrieve controller info; ret=-90 [ 284.752659][ T352] nintendo 0003:057E:2019.0045: Failed to initialize controller; ret=-90 [ 284.761242][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 284.767552][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 284.776581][ T10] usb 1-1: config 179 has no interface number 0 [ 284.783858][ T352] nintendo 0003:057E:2019.0045: probe - fail = -90 [ 284.790628][ T352] nintendo 0003:057E:2019.0045: probe with driver nintendo failed with error -90 [ 284.800629][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 284.813709][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 284.825168][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 284.836378][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 284.847829][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 284.861094][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 284.870213][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.880508][ T4655] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 285.341615][ T4655] cgroup2: Unknown parameter 'size' [ 285.348436][ T10] usb 1-1: USB disconnect, device number 95 [ 285.348490][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 285.348526][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 285.410461][ T2283] usbhid 4-1:0.0: can't add hid device: -71 [ 285.417117][ T2283] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 285.428910][ T2283] usb 4-1: USB disconnect, device number 109 [ 285.910632][ T4672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1379'. [ 285.927752][ T31] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 285.938827][ T4674] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.8192.0), cmd(9) [ 286.091482][ T31] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.102497][ T31] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.115691][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 286.122525][ T31] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 286.131655][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.140449][ T31] usb 4-1: config 0 descriptor?? [ 286.220396][ T346] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 286.384316][ T346] usb 1-1: unable to get BOS descriptor or descriptor too short [ 286.392832][ T346] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.405409][ T346] usb 1-1: string descriptor 0 read error: -22 [ 286.411641][ T346] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 286.420861][ T346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.483159][ T4678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.491796][ T4678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.582946][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 286.589035][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 286.597890][ T31] usb 4-1: USB disconnect, device number 110 [ 286.984389][ T31] usb 5-1: USB disconnect, device number 72 [ 287.060820][ T4689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.069454][ T4689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.137462][ T36] audit: type=1326 audit(2000000042.857:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.3.1388" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3076b9f559 code=0x0 [ 287.281797][ T4696] device-mapper: table: 252:9: snapshot: Snapshot cow pairing for exception table handover failed (-EINVAL) [ 287.293383][ T4696] device-mapper: ioctl: error adding target to table [ 287.302474][ T31] usb 1-1: USB disconnect, device number 96 [ 287.403847][ T36] audit: type=1400 audit(2000000043.106:564): avc: denied { accept } for pid=4699 comm="syz.4.1390" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 287.438969][ T4702] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.536870912.0), cmd(9) [ 287.468102][ T4704] FAULT_INJECTION: forcing a failure. [ 287.468102][ T4704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.481326][ T4704] CPU: 1 UID: 0 PID: 4704 Comm: syz.4.1392 Tainted: G W syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 287.481365][ T4704] Tainted: [W]=WARN [ 287.481371][ T4704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 287.481383][ T4704] Call Trace: [ 287.481404][ T4704] [ 287.481414][ T4704] __dump_stack+0x21/0x30 [ 287.481457][ T4704] dump_stack_lvl+0x140/0x1c0 [ 287.481482][ T4704] ? __cfi_dump_stack_lvl+0x10/0x10 [ 287.481507][ T4704] ? __kasan_kmalloc_large+0x2e/0x50 [ 287.481525][ T4704] dump_stack+0x19/0x20 [ 287.481547][ T4704] should_fail_ex+0x3c2/0x510 [ 287.481564][ T4704] should_fail+0xf/0x20 [ 287.481578][ T4704] should_fail_usercopy+0x1e/0x30 [ 287.481595][ T4704] _copy_to_user+0x24/0xa0 [ 287.481614][ T4704] rfcomm_dev_ioctl+0x124b/0x2170 [ 287.481636][ T4704] ? __cfi_rfcomm_dev_ioctl+0x10/0x10 [ 287.481656][ T4704] ? has_cap_mac_admin+0xd0/0xd0 [ 287.481750][ T4704] ? proc_fail_nth_write+0x184/0x220 [ 287.481773][ T4704] ? bt_sock_ioctl+0xf0/0x290 [ 287.481794][ T4704] rfcomm_sock_ioctl+0x7c/0xa0 [ 287.481812][ T4704] sock_do_ioctl+0x115/0x330 [ 287.481853][ T4704] ? sock_show_fdinfo+0xd0/0xd0 [ 287.481869][ T4704] ? __cfi_vfs_write+0x10/0x10 [ 287.481892][ T4704] ? __kasan_check_write+0x18/0x20 [ 287.481913][ T4704] ? mutex_unlock+0x90/0x240 [ 287.481935][ T4704] sock_ioctl+0x568/0x7e0 [ 287.481951][ T4704] ? __cfi_sock_ioctl+0x10/0x10 [ 287.481966][ T4704] ? __fget_files+0x2bc/0x330 [ 287.481981][ T4704] ? bpf_lsm_file_ioctl+0xd/0x20 [ 287.481998][ T4704] ? security_file_ioctl+0x3e/0x110 [ 287.482020][ T4704] ? __cfi_sock_ioctl+0x10/0x10 [ 287.482034][ T4704] __se_sys_ioctl+0x123/0x1b0 [ 287.482072][ T4704] __x64_sys_ioctl+0x7f/0xa0 [ 287.482093][ T4704] x64_sys_call+0x1878/0x2ee0 [ 287.482121][ T4704] do_syscall_64+0x57/0xf0 [ 287.482138][ T4704] ? clear_bhb_loop+0x50/0xa0 [ 287.482161][ T4704] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 287.482184][ T4704] RIP: 0033:0x7f7061d9f559 [ 287.482198][ T4704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.482212][ T4704] RSP: 002b:00007f7062c73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.482230][ T4704] RAX: ffffffffffffffda RBX: 00007f7062025fa0 RCX: 00007f7061d9f559 [ 287.482243][ T4704] RDX: 0000200000000140 RSI: 00000000800452d2 RDI: 0000000000000004 [ 287.482261][ T4704] RBP: 00007f7062c73090 R08: 0000000000000000 R09: 0000000000000000 [ 287.482272][ T4704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.482282][ T4704] R13: 00007f7062026038 R14: 00007f7062025fa0 R15: 00007ffed8c516b8 [ 287.482297][ T4704] [ 287.509928][ T4706] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=285 sclass=netlink_xfrm_socket pid=4706 comm=syz.4.1393 [ 287.774309][ T4716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.783020][ T4716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.052300][ T4726] netlink: 'syz.3.1399': attribute type 11 has an invalid length. [ 288.062923][ T31] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 288.165518][ T4736] device-mapper: table: 252:1: snapshot: Snapshot cow pairing for exception table handover failed (-EINVAL) [ 288.177172][ T4736] device-mapper: ioctl: error adding target to table [ 288.237341][ T31] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.248713][ T31] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.261932][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 288.268782][ T31] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 288.277909][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.290280][ T31] usb 5-1: config 0 descriptor?? [ 288.347853][ T4746] FAULT_INJECTION: forcing a failure. [ 288.347853][ T4746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.361017][ T4746] CPU: 0 UID: 0 PID: 4746 Comm: syz.3.1407 Tainted: G W syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 288.361056][ T4746] Tainted: [W]=WARN [ 288.361064][ T4746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 288.361078][ T4746] Call Trace: [ 288.361086][ T4746] [ 288.361095][ T4746] __dump_stack+0x21/0x30 [ 288.361136][ T4746] dump_stack_lvl+0x140/0x1c0 [ 288.361168][ T4746] ? __cfi_dump_stack_lvl+0x10/0x10 [ 288.361201][ T4746] ? check_stack_object+0x138/0x150 [ 288.361233][ T4746] dump_stack+0x19/0x20 [ 288.361267][ T4746] should_fail_ex+0x3c2/0x510 [ 288.361290][ T4746] should_fail+0xf/0x20 [ 288.361310][ T4746] should_fail_usercopy+0x1e/0x30 [ 288.361334][ T4746] _copy_to_user+0x24/0xa0 [ 288.361361][ T4746] simple_read_from_buffer+0xed/0x160 [ 288.361387][ T4746] proc_fail_nth_read+0x1aa/0x220 [ 288.361416][ T4746] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 288.361442][ T4746] ? bt_sock_ioctl+0xf0/0x290 [ 288.361473][ T4746] ? bpf_lsm_file_permission+0xd/0x20 [ 288.361496][ T4746] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 288.361524][ T4746] vfs_read+0x28b/0xc70 [ 288.361557][ T4746] ? __cfi_vfs_read+0x10/0x10 [ 288.361587][ T4746] ? __kasan_check_write+0x18/0x20 [ 288.361618][ T4746] ? mutex_lock+0x97/0x1d0 [ 288.361646][ T4746] ? __cfi_mutex_lock+0x10/0x10 [ 288.361689][ T4746] ksys_read+0x145/0x260 [ 288.361718][ T4746] ? __cfi_ksys_read+0x10/0x10 [ 288.361746][ T4746] ? __kasan_check_write+0x18/0x20 [ 288.361773][ T4746] ? fput+0x1a4/0x230 [ 288.361796][ T4746] ? __kasan_check_read+0x15/0x20 [ 288.361828][ T4746] __x64_sys_read+0x7f/0x90 [ 288.361857][ T4746] x64_sys_call+0x2638/0x2ee0 [ 288.361879][ T4746] do_syscall_64+0x57/0xf0 [ 288.361902][ T4746] ? clear_bhb_loop+0x50/0xa0 [ 288.361935][ T4746] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 288.361966][ T4746] RIP: 0033:0x7f3076b5fd8e [ 288.361985][ T4746] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 288.362004][ T4746] RSP: 002b:00007f3077a56fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 288.362028][ T4746] RAX: ffffffffffffffda RBX: 00007f3077a576c0 RCX: 00007f3076b5fd8e [ 288.362045][ T4746] RDX: 000000000000000f RSI: 00007f3077a570a0 RDI: 0000000000000003 [ 288.362059][ T4746] RBP: 00007f3077a57090 R08: 0000000000000000 R09: 0000000000000000 [ 288.362073][ T4746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.362086][ T4746] R13: 00007f3076e26038 R14: 00007f3076e25fa0 R15: 00007fff3841d648 [ 288.362104][ T4746] [ 288.691361][ T2283] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 288.735920][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 288.741962][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 288.750934][ T31] usb 5-1: USB disconnect, device number 73 [ 288.815073][ T36] audit: type=1400 audit(2000000044.407:565): avc: denied { map } for pid=4755 comm="syz.3.1410" path="socket:[40114]" dev="sockfs" ino=40114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 288.839260][ T36] audit: type=1400 audit(2000000044.407:566): avc: denied { accept } for pid=4755 comm="syz.3.1410" path="socket:[40114]" dev="sockfs" ino=40114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 288.898779][ T2283] usb 1-1: unable to get BOS descriptor or descriptor too short [ 288.907473][ T2283] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.920374][ T2283] usb 1-1: string descriptor 0 read error: -22 [ 288.926653][ T2283] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 288.936104][ T2283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.244183][ T10] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 289.273399][ T4770] FAULT_INJECTION: forcing a failure. [ 289.273399][ T4770] name failslab, interval 1, probability 0, space 0, times 0 [ 289.286613][ T4770] CPU: 0 UID: 0 PID: 4770 Comm: syz.2.1417 Tainted: G W syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 289.286653][ T4770] Tainted: [W]=WARN [ 289.286664][ T4770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 289.286678][ T4770] Call Trace: [ 289.286686][ T4770] [ 289.286695][ T4770] __dump_stack+0x21/0x30 [ 289.286731][ T4770] dump_stack_lvl+0x140/0x1c0 [ 289.286764][ T4770] ? __cfi_dump_stack_lvl+0x10/0x10 [ 289.286795][ T4770] ? __kasan_check_write+0x18/0x20 [ 289.286824][ T4770] ? proc_fail_nth_write+0x184/0x220 [ 289.286851][ T4770] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 289.286878][ T4770] dump_stack+0x19/0x20 [ 289.286907][ T4770] should_fail_ex+0x3c2/0x510 [ 289.286930][ T4770] should_failslab+0xac/0x100 [ 289.286952][ T4770] kmem_cache_alloc_noprof+0x42/0x410 [ 289.286983][ T4770] ? getname_flags+0xcc/0x6b0 [ 289.287013][ T4770] ? __cfi_vfs_write+0x10/0x10 [ 289.287043][ T4770] getname_flags+0xcc/0x6b0 [ 289.287075][ T4770] getname+0x1b/0x30 [ 289.287115][ T4770] do_sys_openat2+0xda/0x1d0 [ 289.287140][ T4770] ? fput+0x1a4/0x230 [ 289.287163][ T4770] ? do_sys_open+0x100/0x100 [ 289.287189][ T4770] ? ksys_write+0x1f3/0x260 [ 289.287219][ T4770] ? __cfi_ksys_write+0x10/0x10 [ 289.287251][ T4770] __x64_sys_openat+0x13a/0x170 [ 289.287278][ T4770] x64_sys_call+0xe69/0x2ee0 [ 289.287300][ T4770] do_syscall_64+0x57/0xf0 [ 289.287324][ T4770] ? clear_bhb_loop+0x50/0xa0 [ 289.287356][ T4770] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 289.287390][ T4770] RIP: 0033:0x7fbec3f9f559 [ 289.287408][ T4770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.287426][ T4770] RSP: 002b:00007fbec4daa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 289.287450][ T4770] RAX: ffffffffffffffda RBX: 00007fbec4225fa0 RCX: 00007fbec3f9f559 [ 289.287467][ T4770] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 289.287482][ T4770] RBP: 00007fbec4daa090 R08: 0000000000000000 R09: 0000000000000000 [ 289.287497][ T4770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.287510][ T4770] R13: 00007fbec4226038 R14: 00007fbec4225fa0 R15: 00007ffc4542cf98 [ 289.287529][ T4770] [ 289.591572][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 289.598365][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.609405][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 289.620256][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 289.633201][ T10] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 289.642285][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.651133][ T10] usb 4-1: config 0 descriptor?? [ 289.707792][ T4790] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1424'. [ 289.746124][ T4794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.758023][ T4792] netlink: 'syz.4.1425': attribute type 32 has an invalid length. [ 289.760998][ T4794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.956579][ T31] usb 1-1: USB disconnect, device number 97 [ 290.035971][ T4806] overlayfs: conflicting lowerdir path [ 290.181251][ T4811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1433'. [ 290.206492][ T36] audit: type=1400 audit(2000000045.680:567): avc: denied { write } for pid=4813 comm="syz.4.1434" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 290.335114][ T4822] FAULT_INJECTION: forcing a failure. [ 290.335114][ T4822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.348303][ T4822] CPU: 0 UID: 0 PID: 4822 Comm: syz.2.1436 Tainted: G W syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 290.348345][ T4822] Tainted: [W]=WARN [ 290.348357][ T4822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 290.348369][ T4822] Call Trace: [ 290.348375][ T4822] [ 290.348383][ T4822] __dump_stack+0x21/0x30 [ 290.348443][ T4822] dump_stack_lvl+0x140/0x1c0 [ 290.348483][ T4822] ? __cfi_dump_stack_lvl+0x10/0x10 [ 290.348556][ T4822] dump_stack+0x19/0x20 [ 290.348644][ T4822] should_fail_ex+0x3c2/0x510 [ 290.348661][ T4822] should_fail+0xf/0x20 [ 290.348675][ T4822] should_fail_usercopy+0x1e/0x30 [ 290.348691][ T4822] strncpy_from_user+0x29/0x280 [ 290.348770][ T4822] getname_flags+0x106/0x6b0 [ 290.348795][ T4822] getname+0x1b/0x30 [ 290.348818][ T4822] do_sys_openat2+0xda/0x1d0 [ 290.348837][ T4822] ? fput+0x1a4/0x230 [ 290.348853][ T4822] ? do_sys_open+0x100/0x100 [ 290.348871][ T4822] ? ksys_write+0x1f3/0x260 [ 290.348893][ T4822] ? __cfi_ksys_write+0x10/0x10 [ 290.348916][ T4822] __x64_sys_openat+0x13a/0x170 [ 290.348936][ T4822] x64_sys_call+0xe69/0x2ee0 [ 290.348980][ T4822] do_syscall_64+0x57/0xf0 [ 290.348998][ T4822] ? clear_bhb_loop+0x50/0xa0 [ 290.349022][ T4822] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 290.349044][ T4822] RIP: 0033:0x7fbec3f9f559 [ 290.349059][ T4822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.349073][ T4822] RSP: 002b:00007fbec4daa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 290.349090][ T4822] RAX: ffffffffffffffda RBX: 00007fbec4225fa0 RCX: 00007fbec3f9f559 [ 290.349104][ T4822] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 290.349116][ T4822] RBP: 00007fbec4daa090 R08: 0000000000000000 R09: 0000000000000000 [ 290.349127][ T4822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.349137][ T4822] R13: 00007fbec4226038 R14: 00007fbec4225fa0 R15: 00007ffc4542cf98 [ 290.349152][ T4822] [ 290.677041][ T36] audit: type=1400 audit(2000000046.123:568): avc: denied { create } for pid=4828 comm="syz.0.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 290.786486][ T4834] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1440'. [ 290.920020][ T4844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.929356][ T4844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.180941][ T4854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4854 comm=syz.4.1448 [ 291.205726][ T31] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 291.249648][ T36] audit: type=1400 audit(2000000046.649:569): avc: denied { map } for pid=4853 comm="syz.4.1448" path="socket:[39808]" dev="sockfs" ino=39808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 291.369851][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 291.378396][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.390860][ T31] usb 1-1: string descriptor 0 read error: -22 [ 291.397137][ T31] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 291.406277][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.523305][ T4859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.531966][ T4859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.137007][ T4861] FAULT_INJECTION: forcing a failure. [ 292.137007][ T4861] name failslab, interval 1, probability 0, space 10, times 0 [ 292.149951][ T4861] CPU: 1 UID: 0 PID: 4861 Comm: syz.2.1451 Tainted: G W syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 292.149993][ T4861] Tainted: [W]=WARN [ 292.150002][ T4861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 292.150017][ T4861] Call Trace: [ 292.150024][ T4861] [ 292.150033][ T4861] __dump_stack+0x21/0x30 [ 292.150073][ T4861] dump_stack_lvl+0x140/0x1c0 [ 292.150107][ T4861] ? __cfi_dump_stack_lvl+0x10/0x10 [ 292.150141][ T4861] dump_stack+0x19/0x20 [ 292.150172][ T4861] should_fail_ex+0x3c2/0x510 [ 292.150195][ T4861] should_failslab+0xac/0x100 [ 292.150221][ T4861] kmem_cache_alloc_noprof+0x42/0x410 [ 292.150250][ T4861] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 292.150429][ T4861] ? alloc_empty_file+0xbf/0x270 [ 292.150453][ T4861] ? arch_stack_walk+0x10a/0x170 [ 292.150479][ T4861] alloc_empty_file+0xbf/0x270 [ 292.150503][ T4861] path_openat+0xf4/0x35a0 [ 292.150528][ T4861] ? stack_depot_save_flags+0x38/0x800 [ 292.150557][ T4861] ? kasan_save_track+0x4f/0x80 [ 292.150618][ T4861] ? kasan_save_track+0x3e/0x80 [ 292.150649][ T4861] ? kasan_save_alloc_info+0x3a/0x50 [ 292.150675][ T4861] ? __kasan_slab_alloc+0x73/0x90 [ 292.150696][ T4861] ? getname+0x1b/0x30 [ 292.150727][ T4861] ? do_sys_openat2+0xda/0x1d0 [ 292.150753][ T4861] ? __x64_sys_openat+0x13a/0x170 [ 292.150780][ T4861] ? x64_sys_call+0xe69/0x2ee0 [ 292.150803][ T4861] ? do_syscall_64+0x57/0xf0 [ 292.150831][ T4861] ? do_filp_open+0x440/0x440 [ 292.150857][ T4861] do_filp_open+0x1f2/0x440 [ 292.150882][ T4861] ? __cfi_do_filp_open+0x10/0x10 [ 292.150910][ T4861] ? alloc_fd+0x4c1/0x570 [ 292.150944][ T4861] do_sys_openat2+0x134/0x1d0 [ 292.150969][ T4861] ? fput+0x1a4/0x230 [ 292.150993][ T4861] ? do_sys_open+0x100/0x100 [ 292.151018][ T4861] ? ksys_write+0x1f3/0x260 [ 292.151047][ T4861] ? __cfi_ksys_write+0x10/0x10 [ 292.151080][ T4861] __x64_sys_openat+0x13a/0x170 [ 292.151107][ T4861] x64_sys_call+0xe69/0x2ee0 [ 292.151132][ T4861] do_syscall_64+0x57/0xf0 [ 292.151155][ T4861] ? clear_bhb_loop+0x50/0xa0 [ 292.151186][ T4861] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 292.151214][ T4861] RIP: 0033:0x7fbec3f9f559 [ 292.151232][ T4861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.151250][ T4861] RSP: 002b:00007fbec4daa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 292.151275][ T4861] RAX: ffffffffffffffda RBX: 00007fbec4225fa0 RCX: 00007fbec3f9f559 [ 292.151293][ T4861] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 292.151309][ T4861] RBP: 00007fbec4daa090 R08: 0000000000000000 R09: 0000000000000000 [ 292.151323][ T4861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.151347][ T4861] R13: 00007fbec4226038 R14: 00007fbec4225fa0 R15: 00007ffc4542cf98 [ 292.151366][ T4861] [ 292.299316][ T2283] usb 1-1: USB disconnect, device number 98 [ 292.448456][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 292.454509][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 292.463719][ T10] usb 4-1: USB disconnect, device number 111 [ 292.502671][ T4879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.514017][ T4879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.777214][ T352] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 292.940977][ T352] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.952037][ T352] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 292.965116][ T352] usb 5-1: config 0 interface 0 has no altsetting 0 [ 292.971760][ T352] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 292.981015][ T352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.989979][ T352] usb 5-1: config 0 descriptor?? [ 293.091013][ T4893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4893 comm=syz.2.1463 [ 293.104443][ T4893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4893 comm=syz.2.1463 [ 293.117016][ T346] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 293.124682][ T36] audit: type=1400 audit(2000000048.375:570): avc: denied { map } for pid=4892 comm="syz.2.1463" path="socket:[40777]" dev="sockfs" ino=40777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 293.180054][ T4897] device-mapper: table: 252:3: integrity: unknown target type [ 293.187639][ T4897] device-mapper: ioctl: error adding target to table [ 293.271740][ T4906] netlink: 'syz.2.1468': attribute type 4 has an invalid length. [ 293.279581][ T4906] netlink: 'syz.2.1468': attribute type 21 has an invalid length. [ 293.287540][ T4906] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1468'. [ 293.313778][ T4908] FAULT_INJECTION: forcing a failure. [ 293.313778][ T4908] name failslab, interval 1, probability 0, space 10, times 0 [ 293.319188][ T346] usb 1-1: Using ep0 maxpacket: 16 [ 293.327260][ T4908] CPU: 0 UID: 0 PID: 4908 Comm: syz.2.1469 Tainted: G W syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 293.327380][ T4908] Tainted: [W]=WARN [ 293.327402][ T4908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 293.327443][ T4908] Call Trace: [ 293.327471][ T4908] [ 293.327493][ T4908] __dump_stack+0x21/0x30 [ 293.327596][ T4908] dump_stack_lvl+0x140/0x1c0 [ 293.327696][ T4908] ? __cfi_dump_stack_lvl+0x10/0x10 [ 293.327797][ T4908] dump_stack+0x19/0x20 [ 293.327878][ T4908] should_fail_ex+0x3c2/0x510 [ 293.327948][ T4908] should_failslab+0xac/0x100 [ 293.328010][ T4908] kmem_cache_alloc_noprof+0x42/0x410 [ 293.328092][ T4908] ? security_file_alloc+0x49/0x220 [ 293.328175][ T4908] ? kasan_save_alloc_info+0x3a/0x50 [ 293.328256][ T4908] security_file_alloc+0x49/0x220 [ 293.328330][ T4908] init_file+0x9e/0x210 [ 293.328398][ T4908] alloc_empty_file+0xd9/0x270 [ 293.328461][ T4908] path_openat+0xf4/0x35a0 [ 293.328530][ T4908] ? stack_depot_save_flags+0x38/0x800 [ 293.328602][ T4908] ? kasan_save_track+0x4f/0x80 [ 293.328691][ T4908] ? kasan_save_track+0x3e/0x80 [ 293.328774][ T4908] ? kasan_save_alloc_info+0x3a/0x50 [ 293.328852][ T4908] ? __kasan_slab_alloc+0x73/0x90 [ 293.328906][ T4908] ? getname+0x1b/0x30 [ 293.328989][ T4908] ? do_sys_openat2+0xda/0x1d0 [ 293.329061][ T4908] ? __x64_sys_openat+0x13a/0x170 [ 293.329138][ T4908] ? x64_sys_call+0xe69/0x2ee0 [ 293.329206][ T4908] ? do_syscall_64+0x57/0xf0 [ 293.329279][ T4908] ? do_filp_open+0x440/0x440 [ 293.329342][ T4908] do_filp_open+0x1f2/0x440 [ 293.329413][ T4908] ? __cfi_do_filp_open+0x10/0x10 [ 293.329492][ T4908] ? alloc_fd+0x4c1/0x570 [ 293.329584][ T4908] do_sys_openat2+0x134/0x1d0 [ 293.329663][ T4908] ? fput+0x1a4/0x230 [ 293.329725][ T4908] ? do_sys_open+0x100/0x100 [ 293.329820][ T4908] ? ksys_write+0x1f3/0x260 [ 293.329905][ T4908] ? __cfi_ksys_write+0x10/0x10 [ 293.329995][ T4908] __x64_sys_openat+0x13a/0x170 [ 293.330067][ T4908] x64_sys_call+0xe69/0x2ee0 [ 293.330125][ T4908] do_syscall_64+0x57/0xf0 [ 293.330194][ T4908] ? clear_bhb_loop+0x50/0xa0 [ 293.330276][ T4908] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 293.330359][ T4908] RIP: 0033:0x7fbec3f9f559 [ 293.330418][ T4908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.330471][ T4908] RSP: 002b:00007fbec4daa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 293.330541][ T4908] RAX: ffffffffffffffda RBX: 00007fbec4225fa0 RCX: 00007fbec3f9f559 [ 293.330591][ T4908] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 293.330635][ T4908] RBP: 00007fbec4daa090 R08: 0000000000000000 R09: 0000000000000000 [ 293.330684][ T4908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.330718][ T4908] R13: 00007fbec4226038 R14: 00007fbec4225fa0 R15: 00007ffc4542cf98 [ 293.330776][ T4908] [ 293.440318][ T352] usbhid 5-1:0.0: can't add hid device: -71 [ 293.448214][ T346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.453941][ T352] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 293.458670][ T346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 293.467413][ T352] usb 5-1: USB disconnect, device number 74 [ 293.489516][ T346] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 293.508921][ T4910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.530697][ T346] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 293.556813][ T4910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.578032][ T346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.706643][ T346] usb 1-1: config 0 descriptor?? [ 294.151510][ T4917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.162497][ T4917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.446253][ T2825] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 294.620783][ T2825] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.630963][ T2825] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 294.640018][ T2825] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint descriptor of length 4, skipping [ 294.651034][ T2825] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 294.662079][ T2825] usb 4-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.677871][ T2825] usb 4-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40 [ 294.687030][ T2825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.695767][ T2825] usb 4-1: Product: syz [ 294.699971][ T2825] usb 4-1: Manufacturer: syz [ 294.704582][ T2825] usb 4-1: SerialNumber: syz [ 294.900386][ T36] audit: type=1326 audit(2000000050.017:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.1472" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7061d9f559 code=0x7fc00000 [ 294.931603][ T2825] usb 4-1: 1:1 : invalid UAC_AS_GENERAL desc [ 294.938288][ T2825] usb 4-1: 0:2 : does not exist [ 294.949271][ T2825] usb 4-1: USB disconnect, device number 112 [ 294.968623][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 295.062950][ T36] audit: type=1326 audit(2000000050.165:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.1480" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7061d9f559 code=0x0 [ 295.070946][ T45] kernel read not supported for file /vga_arbiter (pid: 45 comm: kworker/1:1) [ 295.098534][ T4936] overlay: ./file0 is not a directory [ 295.118365][ T36] audit: type=1326 audit(2000000050.220:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.1480" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7061d9f559 code=0x0 [ 295.746749][ T2825] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 295.910404][ T2825] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.921590][ T2825] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.934547][ T2825] usb 4-1: config 0 interface 0 has no altsetting 0 [ 295.941314][ T2825] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 295.950535][ T2825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.960361][ T2825] usb 4-1: config 0 descriptor?? [ 296.245486][ T346] usbhid 1-1:0.0: can't add hid device: -71 [ 296.251533][ T346] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 296.265179][ T346] usb 1-1: USB disconnect, device number 99 [ 296.271394][ T45] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 296.403145][ T2825] usbhid 4-1:0.0: can't add hid device: -71 [ 296.409200][ T2825] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 296.418091][ T2825] usb 4-1: USB disconnect, device number 113 [ 296.441900][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 296.450380][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.463580][ T45] usb 5-1: string descriptor 0 read error: -22 [ 296.469842][ T45] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 296.479260][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.556501][ T4950] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 296.565494][ T4950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.574184][ T4950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.839714][ T4952] FAULT_INJECTION: forcing a failure. [ 296.839714][ T4952] name failslab, interval 1, probability 0, space 10, times 0 [ 296.852528][ T4952] CPU: 1 UID: 0 PID: 4952 Comm: syz.0.1486 Tainted: G W syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 296.852570][ T4952] Tainted: [W]=WARN [ 296.852577][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 296.852588][ T4952] Call Trace: [ 296.852594][ T4952] [ 296.852601][ T4952] __dump_stack+0x21/0x30 [ 296.852632][ T4952] dump_stack_lvl+0x140/0x1c0 [ 296.852657][ T4952] ? __cfi_dump_stack_lvl+0x10/0x10 [ 296.852680][ T4952] ? avc_has_perm_noaudit+0x289/0x360 [ 296.852699][ T4952] dump_stack+0x19/0x20 [ 296.852722][ T4952] should_fail_ex+0x3c2/0x510 [ 296.852738][ T4952] should_failslab+0xac/0x100 [ 296.852754][ T4952] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 296.852789][ T4952] ? __d_alloc+0x42/0x8c0 [ 296.852811][ T4952] __d_alloc+0x42/0x8c0 [ 296.852855][ T4952] d_alloc_parallel+0xe4/0x1370 [ 296.852893][ T4952] ? __cfi_ovl_permission+0x10/0x10 [ 296.852974][ T4952] ? __kasan_check_write+0x18/0x20 [ 296.852997][ T4952] ? security_inode_permission+0x77/0x150 [ 296.853017][ T4952] ? downgrade_write+0x470/0x470 [ 296.853037][ T4952] ? try_to_unlazy+0x62a/0xb50 [ 296.853060][ T4952] ? __cfi_d_alloc_parallel+0x10/0x10 [ 296.853082][ T4952] ? down_read+0x7f/0xe0 [ 296.853105][ T4952] ? __cfi_down_read+0x10/0x10 [ 296.853129][ T4952] path_openat+0xa09/0x35a0 [ 296.853149][ T4952] ? x64_sys_call+0xe69/0x2ee0 [ 296.853167][ T4952] ? do_filp_open+0x440/0x440 [ 296.853186][ T4952] do_filp_open+0x1f2/0x440 [ 296.853203][ T4952] ? __cfi_do_filp_open+0x10/0x10 [ 296.853223][ T4952] ? alloc_fd+0x4c1/0x570 [ 296.853248][ T4952] do_sys_openat2+0x134/0x1d0 [ 296.853269][ T4952] ? fput+0x1a4/0x230 [ 296.853286][ T4952] ? do_sys_open+0x100/0x100 [ 296.853304][ T4952] ? ksys_write+0x1f3/0x260 [ 296.853326][ T4952] ? __cfi_ksys_write+0x10/0x10 [ 296.853350][ T4952] __x64_sys_openat+0x13a/0x170 [ 296.853369][ T4952] x64_sys_call+0xe69/0x2ee0 [ 296.853386][ T4952] do_syscall_64+0x57/0xf0 [ 296.853402][ T4952] ? clear_bhb_loop+0x50/0xa0 [ 296.853426][ T4952] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 296.853448][ T4952] RIP: 0033:0x7fcd34d9f559 [ 296.853462][ T4952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.853476][ T4952] RSP: 002b:00007fcd35b81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 296.853493][ T4952] RAX: ffffffffffffffda RBX: 00007fcd35025fa0 RCX: 00007fcd34d9f559 [ 296.853505][ T4952] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 296.853517][ T4952] RBP: 00007fcd35b81090 R08: 0000000000000000 R09: 0000000000000000 [ 296.853528][ T4952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.853538][ T4952] R13: 00007fcd35026038 R14: 00007fcd35025fa0 R15: 00007ffe3490e428 [ 296.853553][ T4952] [ 297.172615][ T36] audit: type=1400 audit(2000000052.112:574): avc: denied { lock } for pid=4960 comm="syz.2.1489" path="socket:[42018]" dev="sockfs" ino=42018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 297.480824][ T2825] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 297.580748][ T352] usb 5-1: USB disconnect, device number 75 [ 297.643348][ T2825] usb 1-1: Using ep0 maxpacket: 16 [ 297.649754][ T2825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.660830][ T2825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 297.671687][ T2825] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 297.684634][ T2825] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 297.693760][ T2825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.702588][ T2825] usb 1-1: config 0 descriptor?? [ 298.072059][ T4987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.082056][ T4987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.165291][ T4990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1499'. [ 298.208474][ T4995] overlayfs: failed to resolve './file1/file0': -40 [ 298.216826][ T4995] ================================================================== [ 298.224933][ T4995] BUG: KASAN: slab-use-after-free in string+0x20f/0x2b0 [ 298.231914][ T4995] Read of size 1 at addr ffff888104e40040 by task syz.4.1501/4995 [ 298.239775][ T4995] [ 298.242323][ T4995] CPU: 0 UID: 0 PID: 4995 Comm: syz.4.1501 Tainted: G W syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 298.242360][ T4995] Tainted: [W]=WARN [ 298.242369][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 298.242389][ T4995] Call Trace: [ 298.242396][ T4995] [ 298.242404][ T4995] __dump_stack+0x21/0x30 [ 298.242451][ T4995] dump_stack_lvl+0x140/0x1c0 [ 298.242487][ T4995] ? __cfi_dump_stack_lvl+0x10/0x10 [ 298.242527][ T4995] ? kasan_save_alloc_info+0x3a/0x50 [ 298.242551][ T4995] print_address_description+0x71/0x210 [ 298.242578][ T4995] print_report+0x4a/0x70 [ 298.242625][ T4995] kasan_report+0x162/0x1a0 [ 298.242648][ T4995] ? string+0x20f/0x2b0 [ 298.242676][ T4995] ? string+0x20f/0x2b0 [ 298.242693][ T4995] __asan_report_load1_noabort+0x18/0x20 [ 298.242715][ T4995] string+0x20f/0x2b0 [ 298.242730][ T4995] vsnprintf+0xe65/0x1ad0 [ 298.242775][ T4995] seq_printf+0x189/0x290 [ 298.242800][ T4995] ? __cfi_seq_printf+0x10/0x10 [ 298.242830][ T4995] ? __kvmalloc_node_noprof+0x173/0x300 [ 298.242854][ T4995] show_interrupts+0x6d2/0x7f0 [ 298.242990][ T4995] traverse+0x21b/0x700 [ 298.243031][ T4995] seq_read_iter+0xdbd/0xf30 [ 298.243051][ T4995] proc_reg_read_iter+0x1ea/0x2c0 [ 298.243114][ T4995] do_iter_readv_writev+0x629/0x820 [ 298.243152][ T4995] ? vfs_iter_read+0x5e0/0x5e0 [ 298.243187][ T4995] ? bpf_lsm_file_permission+0xd/0x20 [ 298.243212][ T4995] vfs_readv+0x301/0xa00 [ 298.243245][ T4995] ? do_readv+0x2e0/0x2e0 [ 298.243277][ T4995] __x64_sys_preadv+0x19f/0x2c0 [ 298.243310][ T4995] ? __cfi___x64_sys_preadv+0x10/0x10 [ 298.243347][ T4995] ? switch_fpu_return+0x12/0x20 [ 298.243370][ T4995] x64_sys_call+0x1ee9/0x2ee0 [ 298.243401][ T4995] do_syscall_64+0x57/0xf0 [ 298.243426][ T4995] ? clear_bhb_loop+0x50/0xa0 [ 298.243457][ T4995] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 298.243492][ T4995] RIP: 0033:0x7f7061d9f559 [ 298.243507][ T4995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.243522][ T4995] RSP: 002b:00007f7062c73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 298.243554][ T4995] RAX: ffffffffffffffda RBX: 00007f7062025fa0 RCX: 00007f7061d9f559 [ 298.243574][ T4995] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003 [ 298.243589][ T4995] RBP: 00007f7061e36b20 R08: 0000000080000002 R09: 0000000000000000 [ 298.243606][ T4995] R10: 00000000000006d7 R11: 0000000000000246 R12: 0000000000000000 [ 298.243620][ T4995] R13: 00007f7062026038 R14: 00007f7062025fa0 R15: 00007ffed8c516b8 [ 298.243644][ T4995] [ 298.243650][ T4995] [ 298.502624][ T4995] Allocated by task 346: [ 298.506883][ T4995] kasan_save_track+0x3e/0x80 [ 298.511598][ T4995] kasan_save_alloc_info+0x3a/0x50 [ 298.516740][ T4995] __kasan_kmalloc+0x96/0xb0 [ 298.521350][ T4995] __kmalloc_cache_noprof+0x23c/0x470 [ 298.526777][ T4995] usb_control_msg+0x83/0x490 [ 298.531530][ T4995] get_bMaxPacketSize0+0xc2/0x6d0 [ 298.536614][ T4995] hub_port_init+0x1196/0x2810 [ 298.541400][ T4995] hub_event+0x2408/0x4360 [ 298.545839][ T4995] process_scheduled_works+0x7f4/0x1060 [ 298.551496][ T4995] worker_thread+0xc99/0x13f0 [ 298.556198][ T4995] kthread+0x2c4/0x360 [ 298.560334][ T4995] ret_from_fork+0x64/0xa0 [ 298.564770][ T4995] ret_from_fork_asm+0x1a/0x30 [ 298.569559][ T4995] [ 298.571913][ T4995] Freed by task 346: [ 298.575952][ T4995] kasan_save_track+0x3e/0x80 [ 298.580661][ T4995] kasan_save_free_info+0x44/0x50 [ 298.585739][ T4995] __kasan_slab_free+0x5f/0x80 [ 298.590520][ T4995] kfree+0x158/0x440 [ 298.594437][ T4995] usb_control_msg+0x2dc/0x490 [ 298.599217][ T4995] get_bMaxPacketSize0+0xc2/0x6d0 [ 298.604271][ T4995] hub_port_init+0x1196/0x2810 [ 298.609059][ T4995] hub_event+0x2408/0x4360 [ 298.613500][ T4995] process_scheduled_works+0x7f4/0x1060 [ 298.619069][ T4995] worker_thread+0xc99/0x13f0 [ 298.623767][ T4995] kthread+0x2c4/0x360 [ 298.627856][ T4995] ret_from_fork+0x64/0xa0 [ 298.632293][ T4995] ret_from_fork_asm+0x1a/0x30 [ 298.637076][ T4995] [ 298.639421][ T4995] The buggy address belongs to the object at ffff888104e40040 [ 298.639421][ T4995] which belongs to the cache kmalloc-8 of size 8 [ 298.653161][ T4995] The buggy address is located 0 bytes inside of [ 298.653161][ T4995] freed 8-byte region [ffff888104e40040, ffff888104e40048) [ 298.666630][ T4995] [ 298.668971][ T4995] The buggy address belongs to the physical page: [ 298.675396][ T4995] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x104e40 [ 298.684278][ T4995] flags: 0x4000000000000000(zone=1) [ 298.689512][ T4995] page_type: f5(slab) [ 298.693517][ T4995] raw: 4000000000000000 ffff888100041500 dead000000000100 dead000000000122 [ 298.702117][ T4995] raw: 0000000000000000 0000000000800080 00000001f5000000 0000000000000000 [ 298.710721][ T4995] page dumped because: kasan: bad access detected [ 298.717159][ T4995] page_owner tracks the page as allocated [ 298.722888][ T4995] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 3024786619, free_ts 0 [ 298.740531][ T4995] post_alloc_hook+0x37d/0x3b0 [ 298.745319][ T4995] prep_new_page+0x2d/0x180 [ 298.749842][ T4995] get_page_from_freelist+0x4aea/0x4ba0 [ 298.755414][ T4995] __alloc_pages_noprof+0x35a/0x7e0 [ 298.760636][ T4995] alloc_slab_page+0x6b/0x1e0 [ 298.765329][ T4995] allocate_slab+0x69/0x430 [ 298.769845][ T4995] ___slab_alloc+0x591/0x8c0 [ 298.774478][ T4995] __kmalloc_noprof+0x2fc/0x510 [ 298.779356][ T4995] acpi_ns_internalize_name+0x2df/0x490 [ 298.785004][ T4995] acpi_ns_get_node+0x1ab/0x360 [ 298.789936][ T4995] acpi_get_handle+0x188/0x290 [ 298.794734][ T4995] acpi_has_method+0x8d/0xe0 [ 298.799383][ T4995] handle_ioapic_add+0xb3/0xa60 [ 298.804335][ T4995] acpi_ns_walk_namespace+0x25b/0x690 [ 298.809736][ T4995] acpi_walk_namespace+0xfa/0x140 [ 298.814795][ T4995] acpi_ioapic_add+0x9a/0x120 [ 298.819495][ T4995] page_owner free stack trace missing [ 298.824898][ T4995] [ 298.827239][ T4995] Memory state around the buggy address: [ 298.832890][ T4995] ffff888104e3ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 298.840974][ T4995] ffff888104e3ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 298.849059][ T4995] >ffff888104e40000: fa fc fc fc fa fc fc fc fa fc fc fc 06 fc fc fc [ 298.857156][ T4995] ^ [ 298.863324][ T4995] ffff888104e40080: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 298.871400][ T4995] ffff888104e40100: 00 fc fc fc fa fc fc fc 06 fc fc fc 00 fc fc fc [ 298.879479][ T4995] ================================================================== [ 298.887551][ T4995] Disabling lock debugging due to kernel taint [ 298.902246][ T36] audit: type=1400 audit(2000000053.699:575): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 298.930759][ T36] audit: type=1400 audit(2000000053.717:576): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.952154][ T36] audit: type=1400 audit(2000000053.717:577): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.973441][ T36] audit: type=1400 audit(2000000053.717:578): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.994036][ T36] audit: type=1400 audit(2000000053.717:579): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 299.014516][ T36] audit: type=1400 audit(2000000053.717:580): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 299.037431][ T36] audit: type=1400 audit(2000000053.717:581): avc: denied { getattr } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 299.204008][ T346] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 299.367725][ T346] usb 5-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 299.376555][ T346] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.387250][ T346] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 299.396469][ T346] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 299.405564][ T346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.414408][ T346] usb 5-1: config 0 descriptor?? [ 299.421193][ T346] usb 5-1: Found UVC 9.00 device (046d:0825) [ 299.428253][ T346] usb 5-1: No streaming interface found for terminal 2. [ 299.639422][ T346] usb 5-1: USB disconnect, device number 76 [ 300.992327][ T2825] usbhid 1-1:0.0: can't add hid device: -71 [ 300.999016][ T2825] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 301.007944][ T2825] usb 1-1: USB disconnect, device number 100