last executing test programs: 44.824296114s ago: executing program 0 (id=40): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_snmp6\x00') lseek(r0, 0x47, 0x0) getdents(r1, 0x0, 0x51) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xc311, 0x40000) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000b803"], &(0x7f00000000c0)=0x3e0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0xffffffff) 44.810113766s ago: executing program 0 (id=41): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x100) pread64(r0, &(0x7f0000000100)=""/14, 0xe, 0x88000001) 44.746142412s ago: executing program 0 (id=42): openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3f) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af60, &(0x7f0000000040)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x2010040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/ram0\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f00000002c0)={0x2020}, 0x2020) r5 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000001c0)={0x0, &(0x7f0000002300)=[@enable_nested={0x12c, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x4, 0xe7}}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x0, @gpa=0x1ffc}}, @nested_vmlaunch={0x12f, 0x18}], 0x88}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 44.745693092s ago: executing program 0 (id=43): mkdir(&(0x7f0000000080)='./dev\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x2000800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/sda\x00', 0x1c5e42, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000040)=ANY=[@ANYBLOB="a7831f6c0728"]) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000180)={0x7, 0x4d, 0x2}, 0x7) 44.715656565s ago: executing program 0 (id=44): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="400f02"], 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x3, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc02010111240201251a2549ee"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000004c0)={0x14, &(0x7f00000003c0)={0x0, 0xc, 0xaa, {0xaa, 0xe, "5ae93632803461c0c717f02e0deb375372800f0f34618341f7511ea09c5e1f1b7e720fc5e639592009c712879d87e02b394f327604c2512dc1843a9c1ac974c2cc95882ad0ed5bbb42c64f7adb78833a5ec790d814b6fdcc706a5133fe709fc25aa125eec52de95b4c1a22e49a9bd183767643fd5d53475927fe4bb4d3ba774c52600dca4c7e5279b665fd68c60faf6f29b428eab78bb9137e8b58d9df9034979139f9818e4daf58"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x44, &(0x7f0000000500)={0x20, 0x15, 0xdd, "22540db0079381b03255a57ce9a144d326aa60c1af4983623ff398a38bd615dd3e34e53306daf411b76e9d741da3e93ad52d5f284ee51a2673e8abe1ea71143aa8a0ac689e8aa6e0133adc87ae2b1fdc02daa1f76e77246d3df0d31b4543499d293ef2738317e0f3c19aada28d7dcb175924efa1e277f8e9d31edcc2b59c3022649b3fa53aeb618d4aac7e9cfec3d86a91367be0c39d65c82b3aa4a47283255a207278d09f898e485823aef46d47e85db9fef8bdb931e267af21823a294311f98c62e8fcb639813385a0b474be50d889c990fcd814c05619b06c6f73c0"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x33}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x2c}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0x9, 0x1, 0xe7, 0x5, 0x6, 0x22a7, 0xc065, 0x7, 0xfffa, 0x6, 0x7ff, 0x8}}, &(0x7f0000000700)={0x20, 0x85, 0x4, 0xfffffffe}, &(0x7f0000000740)={0x20, 0x83, 0x2}, &(0x7f0000000780)={0x20, 0x87, 0x2, 0x3f8}, &(0x7f0000000800)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000600)={0x2c, &(0x7f0000000140)={0x20, 0x5, 0xd2, {0xd2, 0xe, "20f848bbe109e523aa1cee88d40735bc361f4f42b0de500e5708f387c8a070dbf7781cb3506c96abeb85fa442adb4993df39995dbc50cd5b4038b794a59309f75928ae08fecc59378e0362d59a73ff0f2e102abdf79e7870fc040b1e13a842d00dc5f3845ed1d779a421ac14237787fd66dfde4c31d9665c0329c819a22c3d409ff2b758d11d48326d1aedcd787c7f87936a097776f6f504db066f2ab875ba4ac8e8361da812dd3cd1ab2d66b108062cf4661182a05be01ff30c774b850fb83169c904b5d211b7aedc353941eea494c2"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x6}, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x13, 0x6}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @broadcast}, 0x0, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xb0}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 44.66749554s ago: executing program 0 (id=45): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000406d0494c200000000000109022400010000f020090400150203000400092101100b012206000905810310007d0509aa21a7760fdb49ee3da597de06a294926aa06e0f7c43e334cf11b80138b6880744f16ffcb64515449c4ff64c7d6041d60d4cb2e17be2d5a457e1bd65c0feb467ad74dc1d5abacef15050e2fda3cc01d3485c8f25678131a0faa81d9b7f63f5bbbc55aaaa4bc338432754fdac832a65"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@main=@item_012={0x2, 0x0, 0x9, "06f5"}, @global=@item_012={0x2, 0x1, 0x4, 'PJ'}]}}, 0x0}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000040)=[{r1, 0x80cc}, {r1, 0x420}, {r1, 0x10}, {r1, 0x1}], 0x4, 0xa3c) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000000)={'ip6tnl0\x00', {0x2, 0x4e23, @empty}}) fsmount(0xffffffffffffffff, 0x0, 0x0) 44.583924939s ago: executing program 32 (id=45): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000406d0494c200000000000109022400010000f020090400150203000400092101100b012206000905810310007d0509aa21a7760fdb49ee3da597de06a294926aa06e0f7c43e334cf11b80138b6880744f16ffcb64515449c4ff64c7d6041d60d4cb2e17be2d5a457e1bd65c0feb467ad74dc1d5abacef15050e2fda3cc01d3485c8f25678131a0faa81d9b7f63f5bbbc55aaaa4bc338432754fdac832a65"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@main=@item_012={0x2, 0x0, 0x9, "06f5"}, @global=@item_012={0x2, 0x1, 0x4, 'PJ'}]}}, 0x0}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000040)=[{r1, 0x80cc}, {r1, 0x420}, {r1, 0x10}, {r1, 0x1}], 0x4, 0xa3c) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000000)={'ip6tnl0\x00', {0x2, 0x4e23, @empty}}) fsmount(0xffffffffffffffff, 0x0, 0x0) 4.183715738s ago: executing program 4 (id=376): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff5d}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xad1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000) ioctl$XFS_IOC_FSINUMBERS(r1, 0xc0205867, &(0x7f00000004c0)={&(0x7f00000002c0)=0x2, 0x2, &(0x7f0000000300)=[{}, {}], &(0x7f0000000480)}) (async) ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875) r3 = accept$inet(r1, 0x0, &(0x7f0000000500)) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000540)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e22, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x0, 0x2, 0x8be, 0x5}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r4, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x20}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xfffffeff}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40851}, 0x4801) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000740)={0x51, 0xf, 0x2, {0x0, 0x8}, {0xff, 0xdae}, @period={0x5a, 0xec, 0x5, 0x7232, 0x2, {0x5, 0x80, 0x997, 0x10}, 0x1, &(0x7f0000000700)=[0x1]}}) r5 = syz_ublk_setup_io_uring(0x531a, &(0x7f0000000780)={0x0, 0x9ed0, 0x20, 0x2, 0x244}, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) syz_ublk_setup_io_uring(0x3aa4, &(0x7f00000008c0)={0x0, 0x3a22, 0x40000, 0x0, 0x3b2, 0x0, r5}, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000a80)={'nat\x00', 0x0, 0x4, 0xb, [0x8, 0x2, 0x621, 0x3, 0x6, 0x8], 0x2, &(0x7f0000000a00)=[{}, {}], &(0x7f0000000a40)=""/11}, &(0x7f0000000b00)=0x78) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000b40)=0xf, 0x4) (async) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000b80)='wlc\x00') (async) write(r5, &(0x7f0000000bc0)="ffb6d5b0dc264b9581179c88e5253dedf59e715b5ebec0c1c12dff684079db7f2544f09b3b13387be3a51238d023e7570533675d58bac467a1fe4f3cccd230ff83a68084dd23340913b80395549d2f4d70b990da2c305dbcdd448f05cef880542de37965cd9d5542b55c492564233e72e0b6d28613ad28cd74ec8a57bc5655895753b6036e4c2d3055ef82de1f355745df8bbc9c4aaa30556b5f5e193c6b5bd80b0ec495592f1da7bb775d61728f3426252c6ca908bac3cfe712e527796405ca4ad96c4511c2ecd660b626b570cc80decef44acf34b1067c6da13516e83f", 0xde) (async) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f0000000cc0)=0x1, 0x4) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0xe0000, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000d40)={'wlan0\x00', @remote}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$sock(r8, &(0x7f0000002280)={&(0x7f0000000d80)=@pptp={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000e00)="1fb9f3814e5d8d8c1b32a306aee374af1e969da6212a58bd9ac84be4899f88e9dd3c9cc3eff6", 0x26}, {&(0x7f0000000e40)="6c7dee8e4c7ebeebba7533e643003815f01d10ebdc04400eeaa89b65cc6fc9ead387290a6b4fb73e0d07e7e8d0a8a5e58bf035dbfa72e88688df2365b0efc75b81f5b180b02279112ac8c0a903daa33706550cd46cbe36878a9301feb87a19f9ef57f588d7247b4e15fe09675c8c3547185cf679437c0a7f139f71ed35fb63e5215b22c4ba17ba4e48ff98183c6aa65d253b8c6a3371e4820218e2ed2e0d78434953c6c2ee0ccff8a194cd1213605aeda807caf853b6ef8c35d09fda03c1707d95429851134958bb1f07a0e209fe3bb5851603f181c43470fe27f4", 0xdb}, {&(0x7f0000000f40)="04350efab3479f3968d97c199ea1a84b27fc6011b5e4ad994a60fabce83ca241f44680ee89d27e3ef9443cfa5d85b12344311be5596db3916e5a27ceadafc9e81371e5140568f1106b9e67a56d0307cbbe05b6a5b7288d12d03c1b313cf0fc88ab3a392920834cb402c3b3b93ce042f47ecd297a7605ad939bdfdfc81d035f6023c89b2a937eb42290bc9a37bccf72a50471b645ac7edf2bdb7ebd612b39bc4c0f14664eb33b58cf39a6c9bdcfc758955a7d218db7fbcfc8dc50a7771d3fd3b3c707cfb56fb28f60de8e8bbcdbb2d540f29fbdae59900dc778150a6480a472", 0xdf}, {&(0x7f0000001040)="5d7588a8c74700bec0e6d71c47a4f687", 0x10}, {&(0x7f0000001080)="37dc148474a5488c4889dcd39d591cf69f4f656fe3fe255d5c7f640c00066d982fc562e742dbcf21d35e867d9145fbb9208921c12fb45b91bef3bfba0e847459f5a3e67264c60265eed300f8b4495f6133813906ba", 0x55}, {&(0x7f0000001100)="0c8a546a8f00ce0200b6172f2591e8f3ca9193e7f1a9bc549a9d3d3066d9c2526748b92274861eb3c00b35923f5f76a833250bd0eb4a1808c3836c7f565412ae6103987514e6ac167083f5317b64369d893e3b8fd7f8df4f17ce9769e886a44afce262319b059c29aeae4156c1", 0x6d}, {&(0x7f0000001180)}, {&(0x7f00000011c0)="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", 0x1000}], 0x8, &(0x7f0000002240)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x18}, 0x20060800) (async) fcntl$dupfd(r5, 0x0, r5) (async) fcntl$notify(r3, 0x402, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000022c0)={0x5, 0x1, 0xffc, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r9 = dup2(r1, r6) syz_io_uring_setup(0x759d, &(0x7f0000002300)={0x0, 0x1ceb, 0x4000, 0x3, 0x179, 0x0, r9}, &(0x7f0000002380), &(0x7f00000023c0), &(0x7f0000002400)) (async) r10 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000002500)={{{@in6=@mcast2, @in6=@private2, 0x4e21, 0x8, 0x4e24, 0x3, 0x2, 0x90, 0x80, 0x21, r0}, {0x2, 0x0, 0x3ff, 0x5, 0x54f, 0x9, 0x13, 0xb}, {0x0, 0x1, 0xdc7b, 0xfffffffffffffffa}, 0x9, 0x6e6bb3, 0x2, 0x1, 0x2}, {{@in=@remote, 0x4d5, 0xff}, 0x2, @in=@remote, 0x3507, 0x2, 0x3, 0x9, 0xfb, 0x1, 0x40}}, 0xe8) 4.16229077s ago: executing program 4 (id=377): r0 = syz_open_dev$evdev(&(0x7f0000000a00), 0x0, 0x0) syz_usb_connect$midi(0x3, 0xcc, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xbf, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x1, 0x1, 0x7, 0x10, 0xfc, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x20, 0x6, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x3, 0x6}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x5, 0x5}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x10, 0x1, [{0x9}], 0x1}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x2c, 0x4, [{0xd1, 0x6}, {0x74, 0xe0}, {0x8, 0xb}, {0xfa, 0x5}], 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0x1, 0x1f, 0xd1cebf8c20d40d3e, 0x4, 0x27, 0x4, {0xc, 0x25, 0x1, 0x8, "f2f14ee34da550ce"}}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x3, 0xc, 0x0, {0x12, 0x25, 0x1, 0xe, "2b1d3436161351a2a2e56db8405b"}}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x3, 0x3, 0x81, {0x13, 0x25, 0x1, 0xf, "951d49472263cb64db799a99c37e32"}}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x11, 0x7, 0x3, {0xd, 0x25, 0x1, 0x9, "09f99e9ca1c84087e6"}}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x9, 0x8, 0x9, {0xc, 0x25, 0x1, 0x8, "73b6e161b422e189"}}}]}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x1, 0x1, 0x8, 0x40, 0x8}, 0x123, &(0x7f0000000280)={0x5, 0xf, 0x123, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x5, 0x4}, @generic={0xff, 0x10, 0x1, "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"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x6, 0x4, 0x5}, @wireless={0xb, 0x10, 0x1, 0x8, 0xa0, 0x20, 0x0, 0x4a, 0x6}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x423}}, {0x11, &(0x7f0000000200)=@string={0x11, 0x3, "94613461621a591302038699465e36"}}]}) syz_usb_disconnect(r0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000c00)=ANY=[], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="75a8ccf79c5bee843a7d88e298d1341bd209a21b6f50fe88cd6a6a000063ab59578db363f48925590534d43697c73e19417e39a06607de99de69db13fd737428808940bcd0840dc930c81a8bd8b665cd233c5831977dd63ce2c88d43b17700f4ff9400000000", 0x66}, {&(0x7f00000004c0)="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", 0x236}, {&(0x7f0000000700)="1b3b4cb82b2f1bc29fc0144b7cd8a483d6dbc75ded5829acefe763e19496e9ba57a70000704857247b7a2200000000c97b183e9500a52f3d4433127df4", 0x3d}], 0x3}, 0x40) recvmsg(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/233, 0xe9}], 0x1, &(0x7f0000000c80)=""/4080, 0xff0}, 0x0) close(r1) ioctl$EVIOCRMFF(r0, 0x5509, &(0x7f0000000c40)=0x6ea7) 2.400119062s ago: executing program 2 (id=382): memfd_create(&(0x7f0000000100)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) connect$can_bcm(r2, &(0x7f0000000100)={0x1d, r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$can_bcm(r2, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002400)=ANY=[@ANYBLOB="01000000000200002700000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0100002001"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$sock(r2, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000024c0)="0100000003000000640000000000008000000000000000000000000000000000000000000000000020a107000000000002000000010000000200000001000015b600000000000000", 0x48}], 0x1}}], 0x1, 0x20004090) dup3(r4, r2, 0x80000) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1c80e37b) syz_ublk_setup_io_uring(0x4fa6, &(0x7f0000000000)={0x0, 0xb120, 0x20, 0x2, 0x2f4}, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002540), 0x241, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f0000002580)={0xc0, 0x0, 0x1000}) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f0000002600)={0xc0, 0x0, 0x8000}) syz_ublk_setup_io_uring(0x201d, &(0x7f0000002300)={0x0, 0x80000000, 0x100, 0x0, 0xd}, 0x0, 0x0, 0x0) 2.215925511s ago: executing program 1 (id=389): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="baa000ec6666f20f3066b9f508000066b8536bac1766badac1fc4a0f300f01c83e660f4c8f5f866626660f7ffb653e0f0133660f38815e0d67260fc77801baf80c66b84cbf5a8666efbafc0c66ed", 0x4e}], 0x1, 0x49, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, 0x0) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1d}], 0x1}, 0x8c0) recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x3d, 0x4088010, 0x0, 0x0) unshare(0xfe060000) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r5}, &(0x7f00000008c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=md5)\x00'/50], 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2.214902171s ago: executing program 1 (id=390): ioprio_set$uid(0x3, 0x0, 0x0) openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000040)='./file0\x00', 0x1bb) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$cgroup(0x4000000, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0xa348b2, &(0x7f0000000140)={[{@favordynmods}]}) 2.157908837s ago: executing program 1 (id=391): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="71eaa4990f396db517959e80852c6e7899f13a5ef115b52ab05d14758db20844f3eee02dad949384119f8bdcdd0dbf3e674e0052eeec370d0247a72f13e8ec666fd85d515107f5564aebfc14a5cb4bdfceef94772e003c307c35a88c5341913c6086b9294c0996824909eb4e5ed445bc4a9d22844c62c77f5211bc5a85187af82d8a9f1e1eeacaf30fe393dc894be2961b626b57d4b65748c0a070ba88521e200009204f53f115b53e8a74f947286e694b22f41fa8cd453af919a45b", @ANYRES16=r0, @ANYBLOB="b256bbb9f2fa28d2a5bdaa36b41d50a5539bc84acbcdcce3d631de9e30d55c5e62e9979885d65986cca88e51217632632d6d004b74e042b203086e437d171cab8148e6132dd15d", @ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x48, r4, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x48}, 0x4, 0x700000000000000}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000019}, 0x20000000) 2.156710307s ago: executing program 1 (id=392): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/wake_unlock', 0x82042, 0x102) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x88}, 0x80) socket$packet(0x11, 0x2, 0x300) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000480)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000005c0)={0x18, 0x0, &(0x7f0000000600)=[@increfs, @request_freeze={0x400c6313, 0x0, 0x1}]}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000740)={0x10, 0x0, &(0x7f0000000080)=[@clear_freeze={0x400c6314, 0x0, 0x3}]}) 2.156070847s ago: executing program 2 (id=393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x60, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x60, 0x1, @in={0x2, 0x0, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfffffffc, @mcast2, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8008080}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x40000000, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="02010009"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f00000004c0), 0x3ef, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000004c0)={'veth0_to_team\x00', &(0x7f0000000500)=@ethtool_sset_info={0x50, 0xc, 0x3ff}}) timer_settime(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) sendto(r4, &(0x7f0000000140)='hello_vsock', 0xb, 0x0, 0x0, 0x0) setsockopt$SO_ZEROCOPY_vsock(r4, 0x1, 0x3c, &(0x7f0000000180)=0x1, 0x4) sendmsg$vsock_stream(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)='zerocopy', 0x8}], 0x1}, 0x4000000) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/64, 0x40}], 0x1, &(0x7f0000000340)=""/64, 0x40}, 0x2000) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0xfffffffffffffffc) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/error_log\x00', 0x1c9501, 0x0) setresgid(0x0, 0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000080), 0x0) 2.094865334s ago: executing program 2 (id=394): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./tracing\x00', &(0x7f0000000640)='tracefs\x00', 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r1, 0x0, 0x4814) pselect6(0x40, &(0x7f0000000200)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000000), 0x10) r2 = syz_create_resource$futex(&(0x7f0000000180)=0x1) futex(r2, 0x9, 0x1, 0x0, r2, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x62, 0x0, &(0x7f00000001c0)) futex(r2, 0xa, 0x3, 0x0, r2, 0x5) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) r5 = socket$inet(0x2, 0xa, 0x9) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e23, @broadcast}, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x7}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={'lo\x00', {0x2, 0x4e23, @local}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./tracing/uprobe_events\x00', 0x401, 0x48) write(r6, &(0x7f00000006c0)='p:__st/event1 ./file0:0x0 arg2=', 0x1f) 2.016275712s ago: executing program 3 (id=395): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6814, 0x101, 0x20000000007fff}}], 0x68}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x1000, 0x0) unlink(&(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001cc0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x5}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000001d40)=0xd, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001d80)={'veth0_macvtap\x00', 0x0}) sendto$packet(r4, &(0x7f0000001dc0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000001e00)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r4, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001ec0)=""/35, 0x23}], 0x1}, 0x1}], 0x1, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001f00), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001f40)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000001f80)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000480)={@val={0x70}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @multicast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback}}, 0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r10 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r10, 0xc138fd03, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r10, 0xc138fd09, &(0x7f0000000b00)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x1800, 0x0, 0x0, @by_dev={r11}, [@crypt={0x0, 0x2000, 0x0, 0x58, 'crypt\x00', {'aes-xts-plain64', 0x20, @none, 0x20, '0', 0x20, {@ram_num={'1:', 0x0}, 0x20, '0'}}}]}) ioctl$DM_DEV_REMOVE(r10, 0xc138fd04, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_DEPS(r10, 0xc138fd0b, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x148, 0x138, 0x0, 0x0, 0x81210, 0x0, 0x0, @by_dev={r11}, "97ef39bc8324dbb5f3528b"}) timerfd_settime(r9, 0x3, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000401, 0xee01, &(0x7f0000000440)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x9}) 1.729701221s ago: executing program 3 (id=396): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'veth0_macvtap\x00', &(0x7f0000000000)=@ethtool_cmd={0x35, 0xf, 0xa9, 0x8001, 0x8, 0x8, 0x6, 0x5, 0x0, 0x3, 0x6, 0x8, 0x3, 0x5, 0x0, 0x0, [0x1, 0xaa]}}) 1.729332171s ago: executing program 3 (id=397): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)={0x1, 0x0, [{0x97defb495c47ee1c, 0x1000, &(0x7f0000000540)=""/4096}]}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000500)=0x304000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./trace\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/set_event\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='*ub:*', 0x5) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) close(r2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001880)={0x0, 0xb, 0x0, [0x5, 0x2, 0x5, 0x4, 0xbe], [0x0, 0x1ff, 0x4, 0x4, 0x6, 0x0, 0x180000000000000, 0x40, 0x8, 0x715, 0x3, 0x2, 0x400, 0x3, 0xb, 0x1, 0x8, 0x0, 0x4, 0x9, 0x4, 0x9, 0x3, 0x6, 0x52b, 0x5628cf64, 0x86e, 0x9, 0xffffffff, 0x677, 0x8, 0x4, 0x10001, 0x3, 0x0, 0x8, 0x4, 0x9, 0xd3, 0x7, 0x1, 0x100, 0x9, 0xd, 0x7, 0xfffffffffffffffc, 0x9, 0x985, 0x4, 0xffbfffffffffffff, 0x1, 0xffffffffffffff40, 0xbd, 0x47, 0x9, 0x9, 0x8000000000000000, 0x9, 0x6, 0x6, 0x7, 0x5, 0x5, 0x1, 0x8, 0xa3, 0x0, 0xa78, 0x2, 0x4, 0x6, 0x0, 0xc32b, 0x200, 0x7f, 0xdfb8, 0x5, 0x1ff, 0x8, 0xaa, 0x8000000000000001, 0x1000, 0x2, 0xa14, 0x9, 0x69, 0xc, 0x2, 0x0, 0x0, 0x474, 0x9e, 0x4, 0xfffffffffffffffb, 0x8, 0x1, 0x9, 0xf5d3, 0x1, 0xd, 0x2, 0x4, 0xfffffffffffffff8, 0x5b00, 0xd, 0x5, 0x5, 0x2d, 0x1, 0x2000000, 0x81, 0x7ff, 0xb8, 0x8, 0xad5e, 0xffffffffffff8001, 0x2, 0x101, 0x400, 0x2, 0x984]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001cc0)={r3, 0xffffffffffffffff, 0x6}) 1.728920722s ago: executing program 3 (id=398): capset(&(0x7f0000000480)={0x20071026}, &(0x7f00000004c0)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x188}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0xff80, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 1.728396682s ago: executing program 3 (id=399): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2179, 0x53, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x11, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0x3d, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0xfc, 0x4}}}}}]}}]}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kheaders.tar.xz', 0x0, 0x200) read$char_usb(r1, &(0x7f0000000100)=""/177, 0x39) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x6, 0x1, 0x3, 0x2, 0x0, 0x700, 0x25dfdbfc}, 0x10}, 0x1, 0x7}, 0x800) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r3, 0x81, 0x7, &(0x7f0000000340)='BBBBBBB') syz_usb_ep_write(r3, 0x81, 0x7, &(0x7f0000000380)='BBBBBBB') syz_usb_ep_write(r3, 0x81, 0x7, &(0x7f00000003c0)='BBBBBBB') syz_usb_ep_write(r3, 0x8b, 0xda, &(0x7f0000000400)="fc22b217da66b4a786886528fd5d03380798855064209efbde5007e7095e565e352a9f6e002b327a6d58507c3a4fea40d64e4daf44bb44d2083ccb6f80258ce37f69b9a1c1250e1e95a0045e887d851b18872a81b93b4ead156947d762dcee1108283d46ecd06e934c97f772e8f95e20092401164eaa7b7154b90c36d5cba8523fa983579302c04ee6b78631fdd5f3f7d8caa00dd5af7312d7ab8584a827ffc8c7a7da618a37d833b6ae5711d9fb837992184f2e3b7877bcc2bc9a0d39b73dc9513d66563a86e4a9387e794788d2628ab89532131205103a42cc") 1.310953985s ago: executing program 1 (id=400): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, 0x0, 0xaf}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x2c, 0x0, 0x1, 0x505, 0x0, 0x0, {0x3}, [@CTA_TUPLE_ORIG={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040081}, 0x40c0) r1 = syz_io_uring_setup(0x2f8d, &(0x7f00000000c0)={0x0, 0xc383, 0x0, 0x3, 0x200004}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000280)={0x10000004}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x28, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x1, 0x186, 0x0, 0x0, 0x1000, 0xfffffff8, 0x0, 0x0, 0x4c}}}, &(0x7f0000000380)) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x49, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x44805}, 0x0) 1.273900558s ago: executing program 1 (id=401): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000406d0408c500000000000109022400010000000009040000020300000009a100000401221800090581030024d0b3f7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210808000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000200)=0xb6, 0x4) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @empty}, 0x10) (async) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{&(0x7f0000000400)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) (async) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000280)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x0, 0x3, 0x67, {0x67, 0x22, "5c4bcfc36cf559d4aa7e4304089a8e728cb816ab965cbdfe7bcdbf88e9e8c163d30ffa0cf07a8acc97ff2cf391cb514c63a3e9b987b80cbfebc0588c3e07635447bec259fa9de9c94589e691e19664788ad3bb87180f15afe1672eb9f1effca347087d4c86"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.202076316s ago: executing program 2 (id=402): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000038c0)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030000000921110100012223000905810340"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/devices/usb1/interface_authorized_default\x00', 0x2, 0x0) setuid(0xee01) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setrlimit(0x40000000000008, &(0x7f0000000000)={0x5, 0x7}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x1f133, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000003900)={0x24, 0x0, 0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], 0x0}, 0x0) 1.144031132s ago: executing program 4 (id=403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="2e1221b23bb601c493d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000180)="8bcceb216f624c06f5ff840875090000", 0x10}], 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$tun(r3, &(0x7f00000004c0)={@val={0x0, 0x15}, @val={0x3, 0x4, 0x5, 0x226, 0x4, 0x1}, @llc={@snap={0xaa, 0x3, '[', "a86f3e", 0x8884}}}, 0x16) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r1) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="2e1221b23bb601c493d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000180)="8bcceb216f624c06f5ff840875090000", 0x10}], 0x2) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) write$tun(r3, &(0x7f00000004c0)={@val={0x0, 0x15}, @val={0x3, 0x4, 0x5, 0x226, 0x4, 0x1}, @llc={@snap={0xaa, 0x3, '[', "a86f3e", 0x8884}}}, 0x16) (async) 1.093627267s ago: executing program 4 (id=404): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x82, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x830071, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000340)=0x89, 0x4) sendto$unix(r1, &(0x7f0000000380)="d3", 0x1, 0x200040d1, 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x10102, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x1000, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 994.021637ms ago: executing program 4 (id=405): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/102380, 0x18fec}, {0x0, 0x41}], 0x2, 0x0, 0x4) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0xc, 0x0, [{0x40000105, 0x0, 0xa8}]}) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) 893.562068ms ago: executing program 4 (id=406): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x26) (async) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x26) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000002600)=0x8000000001cb, 0x12) open$dir(&(0x7f0000000340)='./dev_mnt/roccatsavu0\x00', 0x442240, 0x16) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000006000/0x3000)=nil) (async) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000006000/0x3000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000000140)=[{&(0x7f0000002480)=""/156, 0x9c}], 0x67, &(0x7f0000002540)=[{&(0x7f0000002580)=""/116, 0xd8d0481}], 0x1, 0x0) (async) process_vm_writev(r3, &(0x7f0000000140)=[{&(0x7f0000002480)=""/156, 0x9c}], 0x67, &(0x7f0000002540)=[{&(0x7f0000002580)=""/116, 0xd8d0481}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x24, 0x2, 0x0, 0x1, [@nested={0x1f, 0x14, 0x0, 0x1, [@generic="1e0013ac58eccc52a6179d4896ee29a9355bf31e841904efec71a5"]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0x2020) (async) read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0x2020) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=407): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4c}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00008ba000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00005b7000/0x2000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f00000008c0)={0x20, 0x17, 0x8, "9f129b7b59319f05"}, 0x0, 0x0, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x2, 0x2}}, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x56}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "e78b"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0xfffb}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 36.804436][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.815380][ T45] usb 1-1: Found UVC 1.00 device (046d:0825) [ 36.824966][ T45] usb 1-1: No streaming interface found for terminal 2. [ 36.841402][ T316] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 36.863513][ T316] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 36.881972][ T316] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 36.891450][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.904968][ T316] usb 2-1: Product: syz [ 36.911340][ T316] usb 2-1: Manufacturer: syz [ 36.918260][ T316] usb 2-1: SerialNumber: syz [ 36.926609][ T411] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 36.933886][ T411] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 36.941809][ T316] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 36.953477][ T316] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 36.964391][ T316] usbserial_generic 2-1:1.0: generic converter detected [ 36.973294][ T316] usb 2-1: generic converter now attached to ttyUSB0 [ 37.015645][ T397] usb 1-1: USB disconnect, device number 6 [ 37.186879][ T316] usb 2-1: USB disconnect, device number 3 [ 37.193663][ T316] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 37.202753][ T316] usbserial_generic 2-1:1.0: device disconnected [ 37.635174][ T397] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 37.785226][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 37.786897][ T397] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.803574][ T397] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 37.814497][ T397] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.825547][ T397] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 37.837430][ T397] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 37.849210][ T397] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 37.860259][ T397] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 37.874178][ T397] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.883292][ T397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 37.891375][ T397] usb 4-1: SerialNumber: syz [ 37.897236][ T474] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 37.915178][ T45] usb 3-1: device descriptor read/64, error -71 [ 37.965214][ T311] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.110367][ T397] usb 4-1: USB disconnect, device number 3 [ 38.116304][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 38.123464][ T311] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.134616][ T311] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.146358][ T311] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 38.155610][ T311] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 38.163973][ T311] usb 2-1: Product: syz [ 38.165398][ T45] usb 3-1: device descriptor read/64, error -71 [ 38.170554][ T311] usb 2-1: Manufacturer: syz [ 38.180997][ T311] hub 2-1:4.0: USB hub found [ 38.381122][ T311] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 38.415368][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 38.553135][ T13] bridge_slave_1: left allmulticast mode [ 38.564459][ T45] usb 3-1: device descriptor read/64, error -71 [ 38.571318][ T13] bridge_slave_1: left promiscuous mode [ 38.585535][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.600811][ T13] bridge_slave_0: left allmulticast mode [ 38.606572][ T13] bridge_slave_0: left promiscuous mode [ 38.612280][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.707305][ T311] usb 2-1: USB disconnect, device number 4 [ 38.715992][ T511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.48'. [ 38.725558][ T511] netlink: 20 bytes leftover after parsing attributes in process `syz.3.48'. [ 38.748873][ T13] veth1_macvtap: left promiscuous mode [ 38.754462][ T13] veth0_vlan: left promiscuous mode [ 38.835177][ T45] usb 3-1: device descriptor read/64, error -71 [ 38.853630][ T512] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.860745][ T512] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.869282][ T512] bridge_slave_0: entered allmulticast mode [ 38.876135][ T512] bridge_slave_0: entered promiscuous mode [ 38.883217][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.890528][ T512] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.897730][ T512] bridge_slave_1: entered allmulticast mode [ 38.904051][ T512] bridge_slave_1: entered promiscuous mode [ 38.951319][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.955522][ T45] usb usb3-port1: attempt power cycle [ 38.958462][ T512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.971098][ T512] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.978180][ T512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.000998][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.008682][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.018599][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.025737][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.035297][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.042405][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.070797][ T512] veth0_vlan: entered promiscuous mode [ 39.082364][ T512] veth1_macvtap: entered promiscuous mode [ 39.145892][ T522] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.154118][ T522] rust_binder: Read failure Err(EFAULT) in pid:4 [ 39.161799][ T397] rust_binder: 521: undelivered TRANSACTION_COMPLETE [ 39.179916][ T66] rust_binder: 521: undelivered transaction 5, process died [ 39.198685][ T528] capability: warning: `syz.4.53' uses deprecated v2 capabilities in a way that may be insecure [ 39.305346][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.326198][ T45] usb 3-1: device descriptor read/8, error -71 [ 39.425246][ T397] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 39.445198][ T66] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 39.456301][ T45] usb 3-1: device descriptor read/8, error -71 [ 39.549325][ T311] lg-g15 0003:046D:0A07.0002: hidraw0: USB HID vfffff5.00 Device [syz0] on syz0 [ 39.559380][ T397] usb 2-1: device descriptor read/64, error -71 [ 39.566749][ T311] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0002/input/input4 [ 39.587612][ T532] fido_id[532]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 39.605299][ T66] usb 5-1: Using ep0 maxpacket: 16 [ 39.612089][ T66] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.622728][ T66] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.633469][ T66] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 39.642862][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 39.651227][ T66] usb 5-1: SerialNumber: syz [ 39.663346][ T66] usb 5-1: 0:2 : does not exist [ 39.679462][ T536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.688265][ T536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.715178][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.736557][ T45] usb 3-1: device descriptor read/8, error -71 [ 39.815174][ T397] usb 2-1: device descriptor read/64, error -71 [ 39.866179][ T45] usb 3-1: device descriptor read/8, error -71 [ 39.925223][ T311] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 39.975247][ T45] usb usb3-port1: unable to enumerate USB device [ 40.055159][ T397] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 40.076294][ T311] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 40.086283][ T311] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 40.096337][ T311] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 40.107341][ T311] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 40.116434][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.127801][ T537] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 40.135096][ T537] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 40.143136][ T311] pl2303 4-1:1.0: pl2303 converter detected [ 40.150492][ T311] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 40.185160][ T397] usb 2-1: device descriptor read/64, error -71 [ 40.425216][ T397] usb 2-1: device descriptor read/64, error -71 [ 40.545277][ T397] usb usb2-port1: attempt power cycle [ 40.582234][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 40.582253][ T36] audit: type=1400 audit(1793648773.510:224): avc: denied { read write } for pid=538 comm="syz.2.57" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 40.611806][ T36] audit: type=1400 audit(1793648773.510:225): avc: denied { open } for pid=538 comm="syz.2.57" path="/10/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 40.635532][ T36] audit: type=1400 audit(1793648773.510:226): avc: denied { ioctl } for pid=538 comm="syz.2.57" path="/10/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 40.712174][ T36] audit: type=1400 audit(1793648773.640:227): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.746561][ T36] audit: type=1400 audit(1793648773.680:228): avc: denied { read write } for pid=535 comm="syz.3.56" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.774799][ T36] audit: type=1400 audit(1793648773.680:229): avc: denied { open } for pid=535 comm="syz.3.56" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.798351][ T36] audit: type=1400 audit(1793648773.680:230): avc: denied { ioctl } for pid=535 comm="syz.3.56" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x55cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.823826][ T36] audit: type=1400 audit(1793648773.720:231): avc: denied { create } for pid=546 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 40.843889][ T36] audit: type=1400 audit(1793648773.730:232): avc: denied { setopt } for pid=546 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.915153][ T397] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 40.936366][ T397] usb 2-1: device descriptor read/8, error -71 [ 41.076215][ T397] usb 2-1: device descriptor read/8, error -71 [ 41.315155][ T397] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 41.336272][ T397] usb 2-1: device descriptor read/8, error -71 [ 41.466286][ T397] usb 2-1: device descriptor read/8, error -71 [ 41.575243][ T397] usb usb2-port1: unable to enumerate USB device [ 42.210225][ T66] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 42.227319][ T66] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 42.239074][ T36] audit: type=1400 audit(1793648775.170:233): avc: denied { create } for pid=563 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.240842][ T66] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 42.273845][ T565] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.294295][ T66] usb 5-1: USB disconnect, device number 2 [ 42.340428][ T583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.69'. [ 42.494223][ T604] mmap: syz.1.71 (604): VmData 29278208 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 42.575154][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 42.679890][ T66] usb 4-1: USB disconnect, device number 4 [ 42.696315][ T66] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 42.714955][ T66] pl2303 4-1:1.0: device disconnected [ 42.745581][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 42.763595][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.774877][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.784721][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 42.807643][ T627] tipc: Enabling of bearer rejected, failed to enable media [ 42.816110][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 42.827429][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.841996][ T9] usb 3-1: config 0 descriptor?? [ 42.980814][ T639] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.165143][ T397] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 43.249544][ T9] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 43.271862][ T9] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0 [ 43.290624][ T9] microsoft 0003:045E:07DA.0003: implement() called with n (152) > 32! (kworker/0:0) [ 43.305159][ T397] usb 4-1: device descriptor read/64, error -71 [ 43.458306][ T9] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0 [ 43.467298][ T9] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 43.476380][ T9] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 43.488779][ T9] microsoft 0003:045E:07DA.0003: no inputs found [ 43.495196][ T9] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 43.545162][ T397] usb 4-1: device descriptor read/64, error -71 [ 43.671832][ T9] usb 3-1: USB disconnect, device number 7 [ 43.795162][ T397] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 43.886271][ T320] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 43.904611][ T320] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 43.945133][ T397] usb 4-1: device descriptor read/64, error -71 [ 44.205182][ T397] usb 4-1: device descriptor read/64, error -71 [ 44.305141][ T311] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 44.316499][ T397] usb usb4-port1: attempt power cycle [ 44.323142][ T689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=689 comm=syz.2.98 [ 44.486634][ T311] usb 5-1: unable to get BOS descriptor or descriptor too short [ 44.494757][ T311] usb 5-1: not running at top speed; connect to a high speed hub [ 44.503276][ T311] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 516, setting to 64 [ 44.514140][ T311] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 44.526529][ T311] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 44.535670][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.543667][ T311] usb 5-1: Product: syz [ 44.547894][ T311] usb 5-1: Manufacturer: syz [ 44.552590][ T311] usb 5-1: SerialNumber: syz [ 44.675171][ T397] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 44.696242][ T397] usb 4-1: device descriptor read/8, error -71 [ 44.763309][ T677] device-mapper: table: 252:0: crypt: Error decoding and setting key (-EINVAL) [ 44.772410][ T677] device-mapper: ioctl: error adding target to table [ 44.785040][ T311] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 44.794281][ T311] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 44.802387][ T311] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 44.812357][ T311] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 44.820949][ T311] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 44.829215][ T311] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 44.839619][ T311] usb 5-1: failed to enable PITCH for EP 0x82 [ 44.846208][ T397] usb 4-1: device descriptor read/8, error -71 [ 44.857084][ T311] usb 5-1: USB disconnect, device number 3 [ 44.874825][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.086776][ T397] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 45.126250][ T397] usb 4-1: device descriptor read/8, error -71 [ 45.254605][ T717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.260456][ T397] usb 4-1: device descriptor read/8, error -71 [ 45.265408][ T717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.387815][ T397] usb usb4-port1: unable to enumerate USB device [ 45.735204][ T397] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 45.765210][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 45.885709][ T397] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 45.894604][ T397] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 45.902270][ T397] usb 2-1: can't read configurations, error -61 [ 45.926285][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.936521][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.946916][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 45.956161][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.964268][ T9] usb 5-1: Product: syz [ 45.968505][ T9] usb 5-1: Manufacturer: syz [ 45.973218][ T9] usb 5-1: SerialNumber: syz [ 46.035194][ T397] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 46.109683][ T755] x86/PAT: syz.2.117:755 freeing invalid memtype [mem 0xfe408000-0xfe408fff] [ 46.128878][ T753] x86/PAT: syz.2.117:753 freeing invalid memtype [mem 0xfe407000-0xfe407fff] [ 46.182252][ T9] usb 5-1: 0:1 : does not exist [ 46.191795][ T397] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 46.201886][ T9] usb 5-1: USB disconnect, device number 4 [ 46.211367][ T397] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 46.219446][ T397] usb 2-1: can't read configurations, error -61 [ 46.226215][ T397] usb usb2-port1: attempt power cycle [ 46.233668][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.267719][ T769] netlink: 'syz.2.119': attribute type 7 has an invalid length. [ 46.275718][ T770] netlink: 'syz.2.119': attribute type 7 has an invalid length. [ 46.355178][ T66] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 46.505166][ T66] usb 4-1: Using ep0 maxpacket: 32 [ 46.511536][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.522471][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.532277][ T66] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 46.545140][ T66] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 46.554222][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.562327][ T316] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 46.570687][ T66] usb 4-1: config 0 descriptor?? [ 46.575263][ T397] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 46.605955][ T397] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 46.614961][ T397] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 46.622789][ T397] usb 2-1: can't read configurations, error -61 [ 46.735168][ T316] usb 3-1: Using ep0 maxpacket: 8 [ 46.741447][ T316] usb 3-1: config 1 interface 1 has no altsetting 0 [ 46.749866][ T316] usb 3-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 46.759026][ T316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.765366][ T397] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 46.767635][ T316] usb 3-1: Product: syz [ 46.779216][ T316] usb 3-1: Manufacturer: syz [ 46.783965][ T316] usb 3-1: SerialNumber: syz [ 46.796138][ T397] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 46.805201][ T397] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 46.813129][ T397] usb 2-1: can't read configurations, error -61 [ 46.819734][ T397] usb usb2-port1: unable to enumerate USB device [ 46.984331][ T749] futex_wake_op: syz.3.116 tries to shift op by 144; fix this program [ 46.993960][ T749] futex_wake_op: syz.3.116 tries to shift op by 144; fix this program [ 46.998432][ T772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.012469][ T772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.028311][ T316] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 47.040666][ T316] usb 3-1: USB disconnect, device number 8 [ 47.054453][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.054467][ T66] hid (null): unknown global tag 0xc8 [ 47.080911][ T66] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0005/input/input6 [ 47.094843][ T66] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0005/input/input7 [ 47.114163][ T66] kye 0003:0458:5011.0005: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 47.257839][ T66] usb 4-1: USB disconnect, device number 9 [ 47.583488][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 47.583506][ T36] audit: type=1400 audit(1793648780.510:261): avc: denied { watch watch_reads } for pid=783 comm="syz.4.125" path="/15" dev="tmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 47.612620][ T784] serio: Serial port ptm0 [ 47.613905][ T36] audit: type=1400 audit(1793648780.510:262): avc: denied { read } for pid=783 comm="syz.4.125" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 47.641176][ T36] audit: type=1400 audit(1793648780.510:263): avc: denied { open } for pid=783 comm="syz.4.125" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 47.768734][ T784] serio: Serial port ptm0 [ 47.783079][ T36] audit: type=1400 audit(1793648780.710:264): avc: denied { ioctl } for pid=793 comm="syz.3.126" path="socket:[6106]" dev="sockfs" ino=6106 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 47.807360][ T66] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 47.906372][ T36] audit: type=1400 audit(1793648780.840:265): avc: denied { read } for pid=801 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.938454][ T36] audit: type=1400 audit(1793648780.860:266): avc: denied { ioctl } for pid=801 comm="syz.4.129" path="socket:[6127]" dev="sockfs" ino=6127 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.955368][ T66] usb 3-1: device descriptor read/64, error -71 [ 48.055485][ T814] __vm_enough_memory: pid: 814, comm: syz.4.134, bytes: 11727858188288 not enough memory for the allocation [ 48.215283][ T66] usb 3-1: device descriptor read/64, error -71 [ 48.313193][ T833] netlink: 316 bytes leftover after parsing attributes in process `syz.4.139'. [ 48.322420][ T833] netlink: 316 bytes leftover after parsing attributes in process `syz.4.139'. [ 48.336399][ T36] audit: type=1400 audit(1793648781.270:267): avc: denied { write } for pid=832 comm="syz.4.139" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.359662][ T36] audit: type=1400 audit(1793648781.270:268): avc: denied { ioctl } for pid=832 comm="syz.4.139" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.384483][ T36] audit: type=1400 audit(1793648781.290:269): avc: denied { setopt } for pid=832 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.455182][ T66] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 48.505196][ T36] audit: type=1400 audit(1793648781.430:270): avc: denied { ioctl } for pid=839 comm="syz.1.140" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 48.570536][ T844] FAULT_INJECTION: forcing a failure. [ 48.570536][ T844] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 48.583737][ T844] CPU: 0 UID: 0 PID: 844 Comm: syz.1.142 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 48.583777][ T844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 48.583801][ T844] Call Trace: [ 48.583810][ T844] [ 48.583819][ T844] __dump_stack+0x21/0x30 [ 48.583849][ T844] dump_stack_lvl+0x140/0x1c0 [ 48.583872][ T844] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.583897][ T844] dump_stack+0x19/0x20 [ 48.583917][ T844] should_fail_ex+0x3c2/0x510 [ 48.583954][ T844] should_fail+0xf/0x20 [ 48.583988][ T844] should_fail_usercopy+0x1e/0x30 [ 48.584010][ T844] _copy_from_iter+0x56d/0x1520 [ 48.584038][ T844] ? __cfi__copy_from_iter+0x10/0x10 [ 48.584063][ T844] ? __sched_text_start+0x10/0x10 [ 48.584093][ T844] vhost_chr_write_iter+0xe7/0xb00 [ 48.584127][ T844] ? schedule+0xc1/0x170 [ 48.584152][ T844] ? __cfi_vhost_chr_write_iter+0x10/0x10 [ 48.584185][ T844] ? __futex_wait+0x330/0x3d0 [ 48.584217][ T844] ? avc_policy_seqno+0xd/0x30 [ 48.584242][ T844] ? selinux_file_permission+0x318/0xb60 [ 48.584277][ T844] vhost_vsock_chr_write_iter+0x60/0x70 [ 48.584314][ T844] do_iter_readv_writev+0x62c/0x820 [ 48.584339][ T844] ? vfs_iter_read+0x5e0/0x5e0 [ 48.584363][ T844] ? bpf_lsm_file_permission+0xd/0x20 [ 48.584390][ T844] vfs_writev+0x4a5/0xe90 [ 48.584417][ T844] ? do_writev+0x2e0/0x2e0 [ 48.584441][ T844] ? vfs_write+0xbcf/0xfd0 [ 48.584482][ T844] do_writev+0x151/0x2e0 [ 48.584508][ T844] ? vfs_readv+0xa00/0xa00 [ 48.584533][ T844] ? __kasan_check_write+0x18/0x20 [ 48.584567][ T844] ? fpregs_restore_userregs+0x11c/0x260 [ 48.584601][ T844] __x64_sys_writev+0x81/0x90 [ 48.584623][ T844] x64_sys_call+0x1fbb/0x2ee0 [ 48.584649][ T844] do_syscall_64+0x57/0xf0 [ 48.584671][ T844] ? clear_bhb_loop+0x50/0xa0 [ 48.584702][ T844] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.584732][ T844] RIP: 0033:0x7f5926d9fb19 [ 48.584761][ T844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.584782][ T844] RSP: 002b:00007f5927c98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 48.584809][ T844] RAX: ffffffffffffffda RBX: 00007f5927025fa0 RCX: 00007f5926d9fb19 [ 48.584828][ T844] RDX: 0000000000000002 RSI: 0000200000000600 RDI: 0000000000000003 [ 48.584844][ T844] RBP: 00007f5926e37af8 R08: 0000000000000000 R09: 0000000000000000 [ 48.584859][ T844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.584874][ T844] R13: 00007f5927026038 R14: 00007f5927025fa0 R15: 00007ffcc72c96e8 [ 48.584895][ T844] [ 48.646219][ T66] usb 3-1: device descriptor read/64, error -71 [ 49.085182][ T66] usb 3-1: device descriptor read/64, error -71 [ 49.115164][ T397] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 49.206287][ T66] usb usb3-port1: attempt power cycle [ 49.265163][ T397] usb 2-1: device descriptor read/64, error -71 [ 49.295164][ T316] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 49.431829][ T864] ÿÿÿÿÿÿ: renamed from veth0_vlan (while UP) [ 49.446428][ T316] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 49.456724][ T316] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 49.468161][ T316] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 49.477463][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.486302][ T316] usb 4-1: Product: syz [ 49.490558][ T316] usb 4-1: Manufacturer: syz [ 49.495358][ T316] usb 4-1: SerialNumber: syz [ 49.505149][ T397] usb 2-1: device descriptor read/64, error -71 [ 49.519257][ T868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 49.545230][ T66] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 49.569363][ T868] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 49.570587][ T66] usb 3-1: device descriptor read/8, error -71 [ 49.583736][ T868] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 49.634949][ T870] netlink: 182 bytes leftover after parsing attributes in process `syz.4.152'. [ 49.710366][ T316] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 49.726289][ T66] usb 3-1: device descriptor read/8, error -71 [ 49.745183][ T397] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 49.875162][ T397] usb 2-1: device descriptor read/64, error -71 [ 49.965247][ T66] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 49.986278][ T66] usb 3-1: device descriptor read/8, error -71 [ 50.112011][ T316] usb 4-1: USB disconnect, device number 10 [ 50.119485][ T316] usblp0: removed [ 50.123731][ T66] usb 3-1: device descriptor read/8, error -71 [ 50.125261][ T397] usb 2-1: device descriptor read/64, error -71 [ 50.235315][ T66] usb usb3-port1: unable to enumerate USB device [ 50.245285][ T397] usb usb2-port1: attempt power cycle [ 50.585159][ T397] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 50.616663][ T397] usb 2-1: device descriptor read/8, error -71 [ 50.661279][ T894] incfs: Options parsing error. -22 [ 50.666799][ T894] incfs: mount failed -22 [ 50.710585][ T901] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 50.764757][ T397] usb 2-1: device descriptor read/8, error -71 [ 50.965174][ T311] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 51.015189][ T397] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 51.055161][ T316] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 51.063623][ T397] usb 2-1: device descriptor read/8, error -71 [ 51.116032][ T311] usb 5-1: not running at top speed; connect to a high speed hub [ 51.124612][ T311] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.134986][ T311] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 51.144123][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.154614][ T311] usb 5-1: Found UVC 1.00 device (0000:0000) [ 51.205141][ T316] usb 3-1: Using ep0 maxpacket: 16 [ 51.206796][ T397] usb 2-1: device descriptor read/8, error -71 [ 51.212078][ T316] usb 3-1: config 0 interface 0 altsetting 246 endpoint 0x81 has an invalid bInterval 0, changing to 1 [ 51.227639][ T316] usb 3-1: config 0 interface 0 altsetting 246 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.237632][ T316] usb 3-1: config 0 interface 0 altsetting 246 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.250649][ T316] usb 3-1: config 0 interface 0 has no altsetting 0 [ 51.257314][ T316] usb 3-1: New USB device found, idVendor=1532, idProduct=0116, bcdDevice= 0.00 [ 51.266519][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.275504][ T316] usb 3-1: config 0 descriptor?? [ 51.325258][ T397] usb usb2-port1: unable to enumerate USB device [ 51.355417][ T311] usb 5-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 51.366086][ T311] uvcvideo 5-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 51.374940][ T311] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 51.383937][ T311] usb 5-1: USB disconnect, device number 5 [ 51.527212][ T909] new mount options do not match the existing superblock, will be ignored [ 51.536629][ T909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.545670][ T909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.598728][ T311] rust_binder: 908: undelivered freeze notification, 0000000000000001 [ 51.606701][ T316] usbhid 3-1:0.0: can't add hid device: -71 [ 51.613089][ T316] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 51.624319][ T316] usb 3-1: USB disconnect, device number 13 [ 51.955164][ T311] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 52.107259][ T311] usb 4-1: config index 0 descriptor too short (expected 65003, got 45) [ 52.126968][ T311] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 52.145493][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.153614][ T311] usb 4-1: Product: syz [ 52.163708][ T311] usb 4-1: Manufacturer: syz [ 52.168562][ T311] usb 4-1: SerialNumber: syz [ 52.237804][ T934] IPv4: Oversized IP packet from 127.202.26.0 [ 52.260307][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.268197][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.275702][ T324] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 52.283521][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.291299][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.298797][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.306368][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.313832][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.321313][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.328934][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.336446][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.344003][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.351492][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.359335][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.366844][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.374372][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.381939][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.393361][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.400867][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.429886][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.438264][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.446282][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.453965][ T324] usb 2-1: config index 0 descriptor too short (expected 65003, got 45) [ 52.472519][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.480462][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.498053][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.498146][ T324] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 52.515050][ T324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.523309][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.530886][ T324] usb 2-1: Product: syz [ 52.535320][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.542816][ T324] usb 2-1: Manufacturer: syz [ 52.555233][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.562728][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.570406][ T324] usb 2-1: SerialNumber: syz [ 52.575175][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.587767][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.596001][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.604578][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.612367][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.622911][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.630501][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.638142][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.645691][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.653306][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.682756][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.699151][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.715148][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.731408][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.747418][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.763777][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.787957][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.803826][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.805030][ T927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.171'. [ 52.821791][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.838046][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.854446][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.870689][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.882995][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 52.883015][ T36] audit: type=1400 audit(1793648785.810:290): avc: denied { setcheckreqprot } for pid=926 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 52.915172][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.923855][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.932114][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.932394][ T927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.940774][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.955787][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.963301][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.971112][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.975739][ T927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.979539][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 52.994550][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.002261][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.020165][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.035197][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.052910][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.072910][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.080559][ T36] audit: type=1400 audit(1793648786.000:291): avc: denied { sqpoll } for pid=938 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 53.101609][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.116754][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.134998][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.145226][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.152948][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.161855][ T941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 53.171056][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.180599][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.188535][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.197752][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.03 Device [syz1] on syz1 [ 53.222123][ T324] rtl8150 2-1:1.0: couldn't reset the device [ 53.237285][ T324] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 53.249255][ T311] rtl8150 4-1:1.0: couldn't reset the device [ 53.257623][ T311] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 53.268050][ T942] fido_id[942]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.283509][ T324] usb 2-1: USB disconnect, device number 17 [ 53.585783][ T311] usb 4-1: USB disconnect, device number 11 [ 53.759349][ T36] audit: type=1400 audit(1793648786.690:292): avc: denied { read } for pid=956 comm="syz.2.179" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.817715][ T963] IPv6: syztnl0: Disabled Multicast RS [ 53.824524][ T36] audit: type=1400 audit(1793648786.750:293): avc: denied { getopt } for pid=958 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.845426][ T36] audit: type=1400 audit(1793648786.770:294): avc: denied { unmount } for pid=512 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 53.896227][ T36] audit: type=1400 audit(1793648786.830:295): avc: denied { map } for pid=964 comm="syz.4.181" path="pipe:[4367]" dev="pipefs" ino=4367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 53.920359][ T971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.939504][ T971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.958605][ T36] audit: type=1400 audit(1793648786.890:296): avc: denied { mount } for pid=976 comm="syz.3.183" name="/" dev="configfs" ino=2551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 53.990435][ T36] audit: type=1400 audit(1793648786.920:297): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 54.031355][ T979] FAULT_INJECTION: forcing a failure. [ 54.031355][ T979] name failslab, interval 1, probability 0, space 0, times 1 [ 54.035300][ T311] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 54.051638][ T979] CPU: 1 UID: 0 PID: 979 Comm: syz.3.184 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 54.051671][ T979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 54.051686][ T979] Call Trace: [ 54.051694][ T979] [ 54.051703][ T979] __dump_stack+0x21/0x30 [ 54.051730][ T979] dump_stack_lvl+0x140/0x1c0 [ 54.051750][ T979] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.051772][ T979] dump_stack+0x19/0x20 [ 54.051791][ T979] should_fail_ex+0x3c2/0x510 [ 54.051828][ T979] should_failslab+0xac/0x100 [ 54.051852][ T979] kmem_cache_alloc_noprof+0x42/0x410 [ 54.051886][ T979] ? kasan_save_alloc_info+0x3a/0x50 [ 54.051917][ T979] ? seq_open+0x6f/0x1d0 [ 54.051941][ T979] ? __kasan_kmalloc+0x96/0xb0 [ 54.051965][ T979] seq_open+0x6f/0x1d0 [ 54.051987][ T979] ? __kasan_check_write+0x18/0x20 [ 54.052019][ T979] kernfs_fop_open+0x4fc/0xd50 [ 54.052049][ T979] ? __cfi_kernfs_fop_open+0x10/0x10 [ 54.052087][ T979] do_dentry_open+0x97f/0x1510 [ 54.052117][ T979] vfs_open+0x86/0x240 [ 54.052142][ T979] ? __cfi_vfs_open+0x10/0x10 [ 54.052168][ T979] ? may_open+0x352/0x430 [ 54.052193][ T979] path_openat+0x2c49/0x35a0 [ 54.052220][ T979] ? kasan_save_alloc_info+0x3a/0x50 [ 54.052250][ T979] ? getname+0x1b/0x30 [ 54.052267][ T979] ? x64_sys_call+0xe69/0x2ee0 [ 54.052289][ T979] ? do_syscall_64+0x57/0xf0 [ 54.052312][ T979] ? do_filp_open+0x440/0x440 [ 54.052340][ T979] do_filp_open+0x1f2/0x440 [ 54.052365][ T979] ? __cfi_do_filp_open+0x10/0x10 [ 54.052394][ T979] ? alloc_fd+0x4c1/0x570 [ 54.052416][ T979] do_sys_openat2+0x134/0x1d0 [ 54.052443][ T979] ? fput+0x1a4/0x230 [ 54.052467][ T979] ? do_sys_open+0x100/0x100 [ 54.052497][ T979] __x64_sys_openat+0x13a/0x170 [ 54.052527][ T979] x64_sys_call+0xe69/0x2ee0 [ 54.052551][ T979] do_syscall_64+0x57/0xf0 [ 54.052572][ T979] ? clear_bhb_loop+0x50/0xa0 [ 54.052603][ T979] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.052632][ T979] RIP: 0033:0x7fc81d19fb19 [ 54.052653][ T979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.052672][ T979] RSP: 002b:00007fc81e044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 54.052698][ T979] RAX: ffffffffffffffda RBX: 00007fc81d425fa0 RCX: 00007fc81d19fb19 [ 54.052716][ T979] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 54.052733][ T979] RBP: 00007fc81d237af8 R08: 0000000000000000 R09: 0000000000000000 [ 54.052748][ T979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.052762][ T979] R13: 00007fc81d426038 R14: 00007fc81d425fa0 R15: 00007ffebaf55e18 [ 54.052783][ T979] [ 54.375159][ T66] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 54.403662][ T990] syz.4.188 uses obsolete (PF_INET,SOCK_PACKET) [ 54.407394][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 54.418258][ T36] audit: type=1400 audit(1793648787.350:298): avc: denied { accept } for pid=989 comm="syz.4.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 54.423271][ T311] usb 3-1: not running at top speed; connect to a high speed hub [ 54.447562][ T311] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 4 [ 54.461151][ T311] usb 3-1: language id specifier not provided by device, defaulting to English [ 54.471439][ T311] usb 3-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40 [ 54.473710][ T992] netlink: 16 bytes leftover after parsing attributes in process `syz.4.188'. [ 54.480697][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.497811][ T311] usb 3-1: Product: syz [ 54.502034][ T311] usb 3-1: Manufacturer: 鴪ꋾ犪äŒç”©ï†­î¸žãª–Ᶎ䑕炗ꃗ㯑ꚕä„隇í…⽺䰸㰚힇阚电둰₶헒ⷡ셌孾種⺗⟗轈헴ꄦí ã·½ê®“áŠãžªå™žà´ã¯ì¨€è¡Œî³–袡á’檧éžæ¾ï®±ì‘݇䱮괙ᮋ汖ႋà¤éŒŽãœ‡äŠ â‘±àºê¨£è¡Ÿê­æ‚粈赤㶯춎敧 [ 54.532467][ T311] usb 3-1: SerialNumber: syz [ 54.545911][ T66] usb 2-1: not running at top speed; connect to a high speed hub [ 54.554591][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.566547][ T66] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 54.575697][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.590532][ T66] usb 2-1: Found UVC 1.00 device (046d:0825) [ 54.597783][ T66] usb 2-1: No streaming interface found for terminal 2. [ 54.655159][ T45] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 54.735149][ T316] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 54.805162][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 54.812532][ T45] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 54.820919][ T45] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 54.829184][ T45] usb 4-1: config 0 has an invalid descriptor of length 162, skipping remainder of the config [ 54.839477][ T45] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 54.848456][ T45] usb 4-1: config 0 has no interface number 0 [ 54.854609][ T45] usb 4-1: too many endpoints for config 0 interface 104 altsetting 118: 97, using maximum allowed: 30 [ 54.865828][ T45] usb 4-1: config 0 interface 104 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 54.879290][ T45] usb 4-1: config 0 interface 104 has no altsetting 0 [ 54.886264][ T45] usb 4-1: config 0 interface 104 has no altsetting 1 [ 54.894765][ T45] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 54.903942][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.912049][ T45] usb 4-1: Product: syz [ 54.916429][ T45] usb 4-1: Manufacturer: syz [ 54.921112][ T45] usb 4-1: SerialNumber: syz [ 54.925822][ T316] usb 5-1: not running at top speed; connect to a high speed hub [ 54.934887][ T45] usb 4-1: config 0 descriptor?? [ 54.939953][ T316] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.951326][ T316] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 54.960573][ T45] asix 4-1:0.104: probe with driver asix failed with error -22 [ 54.968350][ T316] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 54.977862][ T316] usb 5-1: Product: syz [ 54.982083][ T316] usb 5-1: Manufacturer: syz [ 54.990313][ T316] usb 5-1: Found UVC 1.00 device syz (225a:e1d4) [ 55.153154][ T36] audit: type=1400 audit(1793648788.080:299): avc: denied { create } for pid=981 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.191397][ T316] usb 5-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 55.201145][ T316] uvcvideo 5-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 55.210154][ T316] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 55.218933][ T316] usb 5-1: USB disconnect, device number 6 [ 56.637881][ T1001] loop6: detected capacity change from 0 to 7 [ 56.644616][ T1001] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.652730][ T1001] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.660681][ T1001] loop6: unable to read partition table [ 56.666584][ T1001] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 56.670298][ T315] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.687254][ T315] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.695395][ T315] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.703542][ T315] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.711670][ T315] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.719774][ T315] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.727835][ T1001] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.735974][ T315] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.743098][ T311] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 56.746073][ T1001] loop6: unable to read partition table [ 56.761165][ T311] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 56.775569][ T311] usb 3-1: USB disconnect, device number 14 [ 56.802196][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.927947][ T45] usb 2-1: USB disconnect, device number 18 [ 57.158563][ T1023] overlay: filesystem on ./file0 not supported as upperdir [ 57.315182][ T45] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 57.348936][ T316] usb 4-1: USB disconnect, device number 12 [ 57.445233][ T45] usb 2-1: device descriptor read/64, error -71 [ 57.685172][ T45] usb 2-1: device descriptor read/64, error -71 [ 57.753609][ T1034] FAULT_INJECTION: forcing a failure. [ 57.753609][ T1034] name failslab, interval 1, probability 0, space 0, times 0 [ 57.766489][ T1034] CPU: 0 UID: 0 PID: 1034 Comm: syz.2.201 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 57.766525][ T1034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 57.766545][ T1034] Call Trace: [ 57.766551][ T1034] [ 57.766559][ T1034] __dump_stack+0x21/0x30 [ 57.766583][ T1034] dump_stack_lvl+0x140/0x1c0 [ 57.766600][ T1034] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.766620][ T1034] dump_stack+0x19/0x20 [ 57.766636][ T1034] should_fail_ex+0x3c2/0x510 [ 57.766665][ T1034] should_failslab+0xac/0x100 [ 57.766685][ T1034] kmem_cache_alloc_noprof+0x42/0x410 [ 57.766712][ T1034] ? __kernfs_new_node+0xf1/0x740 [ 57.766733][ T1034] __kernfs_new_node+0xf1/0x740 [ 57.766752][ T1034] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 57.766775][ T1034] ? kernfs_new_node+0x280/0x280 [ 57.766800][ T1034] ? __kasan_check_write+0x18/0x20 [ 57.766830][ T1034] ? down_write+0xee/0x2b0 [ 57.766855][ T1034] ? rpm_resume+0xb92/0x1670 [ 57.766884][ T1034] kernfs_new_node+0x154/0x280 [ 57.766904][ T1034] kernfs_create_link+0xa8/0x200 [ 57.766929][ T1034] sysfs_do_create_link_sd+0x8a/0x120 [ 57.766957][ T1034] sysfs_create_link+0x6c/0x90 [ 57.766985][ T1034] driver_sysfs_add+0x91/0x240 [ 57.767008][ T1034] really_probe+0x178/0x8b0 [ 57.767031][ T1034] __driver_probe_device+0x193/0x280 [ 57.767054][ T1034] driver_probe_device+0x54/0x3f0 [ 57.767078][ T1034] __driver_attach+0x422/0x5e0 [ 57.767099][ T1034] bus_for_each_dev+0x249/0x2d0 [ 57.767127][ T1034] ? __cfi___driver_attach+0x10/0x10 [ 57.767149][ T1034] ? __cfi_bus_for_each_dev+0x10/0x10 [ 57.767176][ T1034] ? __kasan_kmalloc+0x96/0xb0 [ 57.767194][ T1034] ? _raw_spin_unlock+0x45/0x60 [ 57.767212][ T1034] ? klist_add_tail+0x1dd/0x220 [ 57.767239][ T1034] driver_attach+0x46/0x50 [ 57.767260][ T1034] bus_add_driver+0x393/0x730 [ 57.767297][ T1034] driver_register+0x2b7/0x3c0 [ 57.767322][ T1034] usb_gadget_register_driver_owner+0xfc/0x270 [ 57.767352][ T1034] raw_ioctl+0x144c/0x37a0 [ 57.767377][ T1034] ? __cfi_raw_ioctl+0x10/0x10 [ 57.767399][ T1034] ? selinux_file_ioctl+0x732/0x1480 [ 57.767427][ T1034] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 57.767454][ T1034] ? hook_file_ioctl+0x1ef/0x590 [ 57.767479][ T1034] ? __cfi_hook_file_ioctl+0x10/0x10 [ 57.767505][ T1034] ? __fget_files+0x2bc/0x330 [ 57.767524][ T1034] ? bpf_lsm_file_ioctl+0xd/0x20 [ 57.767543][ T1034] ? security_file_ioctl+0x3e/0x110 [ 57.767569][ T1034] ? __cfi_raw_ioctl+0x10/0x10 [ 57.767590][ T1034] __se_sys_ioctl+0x126/0x1b0 [ 57.767609][ T1034] __x64_sys_ioctl+0x7f/0xa0 [ 57.767627][ T1034] x64_sys_call+0x1878/0x2ee0 [ 57.767647][ T1034] do_syscall_64+0x57/0xf0 [ 57.767664][ T1034] ? clear_bhb_loop+0x50/0xa0 [ 57.767689][ T1034] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.767713][ T1034] RIP: 0033:0x7fad6439f7ab [ 57.767729][ T1034] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 57.767746][ T1034] RSP: 002b:00007fad65266f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.767766][ T1034] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fad6439f7ab [ 57.767782][ T1034] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 57.767794][ T1034] RBP: 00007fad65267fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 57.767806][ T1034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.767818][ T1034] R13: 00002000000001c0 R14: 0000000000000005 R15: 0000000000000000 [ 57.767833][ T1034] [ 57.767860][ T1034] raw-gadget.1 gadget.2: really_probe: driver_sysfs_add failed [ 57.937644][ T45] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 57.940655][ T1034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.085275][ T45] usb 2-1: device descriptor read/64, error -71 [ 58.095466][ T1034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.355459][ T45] usb 2-1: device descriptor read/64, error -71 [ 58.465256][ T45] usb usb2-port1: attempt power cycle [ 58.485612][ T316] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 58.635166][ T316] usb 4-1: Using ep0 maxpacket: 8 [ 58.642973][ T316] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 58.652131][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.660191][ T316] usb 4-1: Product: syz [ 58.664407][ T316] usb 4-1: Manufacturer: syz [ 58.669069][ T316] usb 4-1: SerialNumber: syz [ 58.687577][ T1072] capability: warning: `syz.2.211' uses 32-bit capabilities (legacy support in use) [ 58.699050][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 58.699066][ T36] audit: type=1400 audit(1793648791.630:306): avc: denied { search } for pid=1069 comm="syz.2.211" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 58.726871][ T36] audit: type=1400 audit(1793648791.630:307): avc: denied { mounton } for pid=1069 comm="syz.2.211" path="/44/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 58.805175][ T45] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 58.826263][ T45] usb 2-1: device descriptor read/8, error -71 [ 58.880422][ T316] usb 4-1: Unsupported UAC3 BADD profile [ 58.888163][ T316] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 58.900665][ T316] usb 4-1: USB disconnect, device number 13 [ 58.911489][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.956402][ T45] usb 2-1: device descriptor read/8, error -71 [ 59.005284][ T31] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 59.135160][ T31] usb 3-1: device descriptor read/64, error -71 [ 59.195198][ T45] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 59.216322][ T45] usb 2-1: device descriptor read/8, error -71 [ 59.346489][ T45] usb 2-1: device descriptor read/8, error -71 [ 59.375202][ T31] usb 3-1: device descriptor read/64, error -71 [ 59.455285][ T45] usb usb2-port1: unable to enumerate USB device [ 59.615229][ T31] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 59.675179][ T311] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 59.715188][ T324] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 59.745265][ T31] usb 3-1: device descriptor read/64, error -71 [ 59.825169][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 59.831421][ T311] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 59.839565][ T311] usb 4-1: config 0 has no interface number 0 [ 59.845728][ T324] usb 5-1: device descriptor read/64, error -71 [ 59.852039][ T311] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 59.862133][ T311] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 59.873749][ T311] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 59.882867][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.890920][ T311] usb 4-1: Product: syz [ 59.895136][ T311] usb 4-1: Manufacturer: syz [ 59.899753][ T311] usb 4-1: SerialNumber: syz [ 59.904971][ T311] usb 4-1: config 0 descriptor?? [ 59.910313][ T1076] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 59.917602][ T1076] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 59.985160][ T31] usb 3-1: device descriptor read/64, error -71 [ 60.085155][ T324] usb 5-1: device descriptor read/64, error -71 [ 60.095293][ T31] usb usb3-port1: attempt power cycle [ 60.125820][ T1076] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 60.133075][ T1076] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 60.325142][ T324] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 60.341431][ T1076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.350219][ T1076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.358584][ T311] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 60.368703][ T311] asix 4-1:0.34: probe with driver asix failed with error -61 [ 60.395210][ T316] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 60.435215][ T31] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 60.455242][ T324] usb 5-1: device descriptor read/64, error -71 [ 60.456862][ T31] usb 3-1: device descriptor read/8, error -71 [ 60.545169][ T316] usb 2-1: Using ep0 maxpacket: 16 [ 60.551952][ T316] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 60.560885][ T316] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.571269][ T316] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.572364][ T36] audit: type=1400 audit(1793648793.500:308): avc: denied { ioctl } for pid=1075 comm="syz.3.213" path="socket:[8717]" dev="sockfs" ino=8717 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.584349][ T316] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 60.613906][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.622038][ T316] usb 2-1: Product: syz [ 60.626359][ T316] usb 2-1: Manufacturer: syz [ 60.631034][ T316] usb 2-1: SerialNumber: syz [ 60.636113][ T31] usb 3-1: device descriptor read/8, error -71 [ 60.725211][ T324] usb 5-1: device descriptor read/64, error -71 [ 60.835295][ T324] usb usb5-port1: attempt power cycle [ 60.847108][ T1083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 60.888143][ T316] usb 2-1: 0:2 : does not exist [ 60.894931][ T316] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 60.902741][ T31] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 60.913942][ T316] usb 2-1: USB disconnect, device number 23 [ 60.923041][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.946352][ T31] usb 3-1: device descriptor read/8, error -71 [ 61.076611][ T31] usb 3-1: device descriptor read/8, error -71 [ 61.175180][ T324] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 61.185291][ T31] usb usb3-port1: unable to enumerate USB device [ 61.196348][ T324] usb 5-1: device descriptor read/8, error -71 [ 61.326567][ T324] usb 5-1: device descriptor read/8, error -71 [ 61.407463][ T1088] netlink: 68 bytes leftover after parsing attributes in process `syz.1.217'. [ 61.415824][ T36] audit: type=1400 audit(1793648794.340:309): avc: denied { read } for pid=1086 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.565208][ T324] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 61.586408][ T324] usb 5-1: device descriptor read/8, error -71 [ 61.655186][ T311] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 61.716305][ T324] usb 5-1: device descriptor read/8, error -71 [ 61.806232][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.818814][ T311] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.825786][ T36] audit: type=1400 audit(1793648794.750:310): avc: denied { execute } for pid=1094 comm="syz.2.219" path="/selinux/checkreqprot" dev="selinuxfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 61.832483][ T311] usb 2-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 61.864911][ T324] usb usb5-port1: unable to enumerate USB device [ 61.872076][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.880794][ T36] audit: type=1400 audit(1793648794.790:311): avc: denied { create } for pid=1094 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 62.302408][ T36] audit: type=1400 audit(1793648795.230:312): avc: denied { create } for pid=1086 comm="syz.1.217" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.323156][ T36] audit: type=1400 audit(1793648795.230:313): avc: denied { read write } for pid=1086 comm="syz.1.217" name="file0" dev="tmpfs" ino=287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.335424][ T316] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 62.348307][ T36] audit: type=1400 audit(1793648795.230:314): avc: denied { open } for pid=1086 comm="syz.1.217" path="/50/file0" dev="tmpfs" ino=287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.376652][ T36] audit: type=1400 audit(1793648795.230:315): avc: denied { ioctl } for pid=1086 comm="syz.1.217" path="/50/file0" dev="tmpfs" ino=287 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.451223][ T9] usb 4-1: USB disconnect, device number 14 [ 62.466306][ T1103] SELinux: security_context_str_to_sid () failed with errno=-22 [ 62.497886][ T1107] overlayfs: unescaped trailing colons in lowerdir mount option. [ 62.505748][ T316] usb 3-1: no configurations [ 62.506481][ T1108] overlayfs: unescaped trailing colons in lowerdir mount option. [ 62.525182][ T316] usb 3-1: can't read configurations, error -22 [ 62.589153][ T1119] netlink: 9 bytes leftover after parsing attributes in process `syz.4.226'. [ 62.598684][ T1119] gretap0: entered promiscuous mode [ 62.609882][ T1119] netlink: 5 bytes leftover after parsing attributes in process `syz.4.226'. [ 62.619682][ T1119] 0ªî{X¹¦: renamed from gretap0 [ 62.626572][ T1119] 0ªî{X¹¦: left promiscuous mode [ 62.631926][ T1119] 0ªî{X¹¦: entered allmulticast mode [ 62.638442][ T1119] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 62.656833][ T1119] netlink: 'syz.4.226': attribute type 63 has an invalid length. [ 62.664709][ T1119] netlink: 5 bytes leftover after parsing attributes in process `syz.4.226'. [ 62.673927][ T1119] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 62.673933][ T316] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 62.815592][ T316] usb 3-1: no configurations [ 62.820251][ T316] usb 3-1: can't read configurations, error -22 [ 62.826857][ T316] usb usb3-port1: attempt power cycle [ 62.855456][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 62.866275][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 63.005229][ T9] usb 4-1: device descriptor read/64, error -71 [ 63.075434][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 63.086199][ T397] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 63.094120][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 63.105067][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 63.116059][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 63.127197][ T1091] FAULT_INJECTION: forcing a failure. [ 63.127197][ T1091] name fail_futex, interval 1, probability 0, space 0, times 1 [ 63.129570][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 63.143122][ T1091] CPU: 1 UID: 0 PID: 1091 Comm: syz.1.217 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 63.143208][ T1091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 63.143250][ T1091] Call Trace: [ 63.143269][ T1091] [ 63.143290][ T1091] __dump_stack+0x21/0x30 [ 63.143356][ T1091] dump_stack_lvl+0x140/0x1c0 [ 63.143452][ T1091] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.143514][ T1091] dump_stack+0x19/0x20 [ 63.143566][ T1091] should_fail_ex+0x3c2/0x510 [ 63.143651][ T1091] should_fail+0xf/0x20 [ 63.143726][ T1091] get_futex_key+0x5c4/0x940 [ 63.143788][ T1091] ? __cfi_get_futex_key+0x10/0x10 [ 63.143841][ T1091] ? call_rcu+0x14/0x20 [ 63.143936][ T1091] futex_wake+0x150/0x950 [ 63.144009][ T1091] ? __kasan_check_write+0x18/0x20 [ 63.144094][ T1091] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 63.144156][ T1091] ? __cfi_futex_wake+0x10/0x10 [ 63.144225][ T1091] ? perf_lock_task_context+0x398/0x450 [ 63.144319][ T1091] ? __perf_event_period+0x490/0x490 [ 63.144410][ T1091] ? mutex_unlock+0x90/0x240 [ 63.144503][ T1091] do_futex+0x37d/0x510 [ 63.144566][ T1091] ? __kasan_check_read+0x15/0x20 [ 63.144643][ T1091] ? __cfi_do_futex+0x10/0x10 [ 63.144704][ T1091] ? __kasan_check_write+0x18/0x20 [ 63.144781][ T1091] mm_release+0x15f/0x300 [ 63.144855][ T1091] ? exit_mm_release+0x50/0x50 [ 63.144940][ T1091] ? futex_exit_release+0x11d/0x1f0 [ 63.145002][ T1091] exit_mm_release+0x29/0x50 [ 63.145085][ T1091] do_exit+0x832/0x2850 [ 63.145169][ T1091] ? futex_wake+0x666/0x950 [ 63.145236][ T1091] ? __cfi_do_exit+0x10/0x10 [ 63.145317][ T1091] ? futex_wait+0x2b8/0x7c0 [ 63.145376][ T1091] ? __cfi_futex_wait+0x10/0x10 [ 63.145446][ T1091] ? __kasan_check_write+0x18/0x20 [ 63.145522][ T1091] ? _raw_spin_lock_irq+0x93/0x120 [ 63.145584][ T1091] do_group_exit+0x21f/0x2f0 [ 63.145661][ T1091] ? __kasan_check_write+0x18/0x20 [ 63.145742][ T1091] ? recalc_sigpending+0x16c/0x1d0 [ 63.145836][ T1091] get_signal+0x134c/0x1490 [ 63.145953][ T1091] arch_do_signal_or_restart+0xbc/0x700 [ 63.146018][ T1091] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 63.146093][ T1091] syscall_exit_to_user_mode+0x57/0xb0 [ 63.146175][ T1091] do_syscall_64+0x63/0xf0 [ 63.146227][ T1091] ? clear_bhb_loop+0x50/0xa0 [ 63.146298][ T1091] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.146371][ T1091] RIP: 0033:0x7f5926d9fb19 [ 63.146409][ T1091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.146460][ T1091] RSP: 002b:00007f5927c120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 63.146524][ T1091] RAX: fffffffffffffe00 RBX: 00007f5927026368 RCX: 00007f5926d9fb19 [ 63.146569][ T1091] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5927026368 [ 63.146609][ T1091] RBP: 00007f5927026360 R08: 0000000000000000 R09: 0000000000000000 [ 63.146642][ T1091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.146681][ T1091] R13: 00007f59270263f8 R14: 00007ffcc72c9600 R15: 00007ffcc72c96e8 [ 63.146726][ T1091] [ 63.185496][ T316] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 63.189077][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 63.226351][ T316] usb 3-1: no configurations [ 63.230484][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 63.235369][ T316] usb 3-1: can't read configurations, error -22 [ 63.242308][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 63.385319][ T316] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 63.403046][ T9] usb 4-1: device descriptor read/64, error -71 [ 63.436443][ T316] usb 3-1: no configurations [ 63.444427][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 63.452268][ T316] usb 3-1: can't read configurations, error -22 [ 63.455338][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 63.463191][ T316] usb usb3-port1: unable to enumerate USB device [ 63.474142][ T397] usb 5-1: config 1 has an invalid interface number: 93 but max is 0 [ 63.566295][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 63.577089][ T397] usb 5-1: config 1 has no interface number 0 [ 63.583319][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 63.594207][ T397] usb 5-1: config 1 interface 93 has no altsetting 0 [ 63.601007][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 63.612679][ T397] usb 5-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02 [ 63.622018][ T397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.630218][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 63.641903][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 63.653810][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 63.664849][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 63.675923][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 63.686959][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 63.697832][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 63.705745][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 63.716802][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 63.728121][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 63.739107][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 63.750067][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 63.761140][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 63.772086][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 63.783086][ T311] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 63.796203][ T311] ax88179_178a 2-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 36:8f:e3:58:66:91 [ 63.812351][ T311] usb 2-1: USB disconnect, device number 24 [ 63.819039][ T311] ax88179_178a 2-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 63.855190][ T9] usb 4-1: device descriptor read/64, error -71 [ 63.864390][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 63.864407][ T36] audit: type=1400 audit(1793648796.790:319): avc: denied { read } for pid=1134 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.897562][ T36] audit: type=1400 audit(1793648796.820:320): avc: denied { open } for pid=1134 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.925804][ T36] audit: type=1400 audit(1793648796.820:321): avc: denied { getattr } for pid=1134 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.030986][ T36] audit: type=1400 audit(1793648796.960:322): avc: denied { write } for pid=1132 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=424 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.075844][ T36] audit: type=1400 audit(1793648796.960:323): avc: denied { add_name } for pid=1132 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.105142][ T9] usb 4-1: device descriptor read/64, error -71 [ 64.121346][ T36] audit: type=1400 audit(1793648796.960:324): avc: denied { create } for pid=1132 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.168243][ T36] audit: type=1400 audit(1793648796.960:325): avc: denied { write } for pid=1132 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=996 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.185370][ T311] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 64.220381][ T36] audit: type=1400 audit(1793648796.960:326): avc: denied { append } for pid=1132 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=996 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.225484][ T9] usb usb4-port1: attempt power cycle [ 64.255282][ T36] audit: type=1400 audit(1793648797.020:327): avc: denied { remove_name } for pid=1144 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=996 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.278911][ T36] audit: type=1400 audit(1793648797.020:328): avc: denied { unlink } for pid=1144 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=996 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.377789][ T311] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 64.387082][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.402842][ T311] usb 2-1: Product: syz [ 64.411588][ T311] usb 2-1: Manufacturer: syz [ 64.421536][ T311] usb 2-1: SerialNumber: syz [ 64.595174][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 64.636275][ T9] usb 4-1: device descriptor read/8, error -71 [ 64.775923][ T9] usb 4-1: device descriptor read/8, error -71 [ 65.035148][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 65.066232][ T9] usb 4-1: device descriptor read/8, error -71 [ 65.196331][ T9] usb 4-1: device descriptor read/8, error -71 [ 65.315218][ T9] usb usb4-port1: unable to enumerate USB device [ 65.803596][ T397] usb 5-1: string descriptor 0 read error: -71 [ 65.810664][ T397] gl620a 5-1:1.93: probe with driver gl620a failed with error -22 [ 65.831816][ T397] usb 5-1: USB disconnect, device number 11 [ 65.913045][ T1180] syz.4.237 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 65.924389][ T1180] ./dev/sda1: Can't lookup blockdev [ 66.145489][ T1198] netlink: 76 bytes leftover after parsing attributes in process `syz.3.243'. [ 66.220314][ T9] usb 2-1: USB disconnect, device number 25 [ 66.241285][ T1208] netlink: 140 bytes leftover after parsing attributes in process `syz.3.245'. [ 66.255133][ T397] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 66.416287][ T397] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 66.424781][ T397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.435373][ T397] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 66.444461][ T397] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 66.452537][ T397] usb 5-1: Manufacturer: syz [ 66.457881][ T397] usb 5-1: config 0 descriptor?? [ 66.495155][ T31] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 66.645146][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 66.651790][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 66.660420][ T31] usb 4-1: config 8 has an invalid interface number: 50 but max is 1 [ 66.668618][ T31] usb 4-1: config 8 has an invalid descriptor of length 226, skipping remainder of the config [ 66.676469][ T397] usb 5-1: USB disconnect, device number 12 [ 66.679282][ T31] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 66.694486][ T31] usb 4-1: config 8 has no interface number 0 [ 66.700959][ T31] usb 4-1: config 8 interface 50 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 66.711949][ T31] usb 4-1: config 8 interface 50 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.725063][ T31] usb 4-1: config 8 interface 50 has no altsetting 0 [ 66.733319][ T31] usb 4-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=82.e4 [ 66.742447][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.750528][ T31] usb 4-1: Product: syz [ 66.754720][ T31] usb 4-1: Manufacturer: syz [ 66.759399][ T31] usb 4-1: SerialNumber: syz [ 66.968070][ T31] rtl8150 4-1:8.50: couldn't find required endpoints [ 66.974909][ T31] rtl8150 4-1:8.50: probe with driver rtl8150 failed with error -5 [ 66.984151][ T31] usb 4-1: USB disconnect, device number 19 [ 66.991455][ T352] udevd[352]: setting mode of /dev/bus/usb/004/019 to 020664 failed: No such file or directory [ 67.002002][ T352] udevd[352]: setting owner of /dev/bus/usb/004/019 to uid=0, gid=0 failed: No such file or directory [ 67.585135][ T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 67.666545][ T1230] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 67.719572][ T1235] mmap: syz.3.254 (1235) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 67.735149][ T31] usb 5-1: device descriptor read/64, error -71 [ 67.987038][ T31] usb 5-1: device descriptor read/64, error -71 [ 68.255169][ T31] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 68.336348][ T320] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 68.395156][ T31] usb 5-1: device descriptor read/64, error -71 [ 68.526273][ T320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.540155][ T320] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 768 [ 68.550371][ T320] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 68.565746][ T320] usb 4-1: New USB device found, idVendor=174c, idProduct=46aa, bcdDevice= 1.00 [ 68.575035][ T320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.583522][ T320] usb 4-1: Product: syz [ 68.587983][ T320] usb 4-1: Manufacturer: syz [ 68.592668][ T320] usb 4-1: SerialNumber: syz [ 68.602681][ T320] usb-storage 4-1:1.0: USB Mass Storage device detected [ 68.617713][ T320] scsi host1: usb-storage 4-1:1.0 [ 68.645413][ T31] usb 5-1: device descriptor read/64, error -71 [ 68.755230][ T31] usb usb5-port1: attempt power cycle [ 68.765738][ T1273] kvm: kvm [1272]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 68.785311][ T66] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 68.805185][ T1250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.825502][ T1250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.840901][ T320] usb 4-1: USB disconnect, device number 20 [ 68.976993][ T66] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 68.985275][ T66] usb 2-1: config 0 has no interface number 0 [ 68.991514][ T66] usb 2-1: config 0 interface 200 has no altsetting 0 [ 69.000384][ T66] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=67.93 [ 69.010462][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.018742][ T66] usb 2-1: Product: syz [ 69.023014][ T66] usb 2-1: Manufacturer: syz [ 69.028008][ T66] usb 2-1: SerialNumber: syz [ 69.037946][ T66] usb 2-1: config 0 descriptor?? [ 69.080745][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 69.080766][ T36] audit: type=1400 audit(1793648802.010:337): avc: denied { cmd } for pid=1278 comm="syz.2.266" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 69.105408][ T31] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 69.146779][ T31] usb 5-1: device descriptor read/8, error -71 [ 69.287198][ T31] usb 5-1: device descriptor read/8, error -71 [ 69.342542][ T66] ftdi_sio 2-1:0.200: FTDI USB Serial Device converter detected [ 69.368170][ T66] ftdi_sio ttyUSB0: unknown device type: 0x6793 [ 69.397511][ T36] audit: type=1400 audit(1793648802.320:338): avc: denied { read } for pid=1291 comm="syz.1.270" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.418763][ T66] usb 2-1: USB disconnect, device number 26 [ 69.444275][ T66] ftdi_sio 2-1:0.200: device disconnected [ 69.555315][ T31] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 69.563984][ T1302] FAULT_INJECTION: forcing a failure. [ 69.563984][ T1302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.578133][ T31] usb 5-1: device descriptor read/8, error -71 [ 69.593010][ T1302] CPU: 0 UID: 0 PID: 1302 Comm: syz.1.273 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 69.593046][ T1302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 69.593060][ T1302] Call Trace: [ 69.593067][ T1302] [ 69.593076][ T1302] __dump_stack+0x21/0x30 [ 69.593101][ T1302] dump_stack_lvl+0x140/0x1c0 [ 69.593121][ T1302] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.593141][ T1302] ? selinux_file_ioctl+0x732/0x1480 [ 69.593172][ T1302] dump_stack+0x19/0x20 [ 69.593189][ T1302] should_fail_ex+0x3c2/0x510 [ 69.593220][ T1302] should_fail+0xf/0x20 [ 69.593247][ T1302] should_fail_usercopy+0x1e/0x30 [ 69.593266][ T1302] _copy_from_user+0x20/0xa0 [ 69.593288][ T1302] vhost_vsock_dev_ioctl+0x141/0xdc0 [ 69.593313][ T1302] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 69.593337][ T1302] ? __fget_files+0x2bc/0x330 [ 69.593358][ T1302] ? bpf_lsm_file_ioctl+0xd/0x20 [ 69.593379][ T1302] ? security_file_ioctl+0x3e/0x110 [ 69.593407][ T1302] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 69.593430][ T1302] __se_sys_ioctl+0x126/0x1b0 [ 69.593452][ T1302] __x64_sys_ioctl+0x7f/0xa0 [ 69.593471][ T1302] x64_sys_call+0x1878/0x2ee0 [ 69.593492][ T1302] do_syscall_64+0x57/0xf0 [ 69.593512][ T1302] ? clear_bhb_loop+0x50/0xa0 [ 69.593561][ T1302] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.593587][ T1302] RIP: 0033:0x7f5926d9fb19 [ 69.593605][ T1302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.593623][ T1302] RSP: 002b:00007f5927c98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.593646][ T1302] RAX: ffffffffffffffda RBX: 00007f5927025fa0 RCX: 00007f5926d9fb19 [ 69.593662][ T1302] RDX: 0000200000000240 RSI: 000000004004af61 RDI: 0000000000000003 [ 69.593676][ T1302] RBP: 00007f5927c98090 R08: 0000000000000000 R09: 0000000000000000 [ 69.593690][ T1302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.593703][ T1302] R13: 00007f5927026038 R14: 00007f5927025fa0 R15: 00007ffcc72c96e8 [ 69.593720][ T1302] [ 69.706634][ T31] usb 5-1: device descriptor read/8, error -71 [ 69.809244][ T1309] netlink: 'syz.2.275': attribute type 15 has an invalid length. [ 69.929256][ T36] audit: type=1400 audit(1793648802.860:339): avc: denied { listen } for pid=1317 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.973241][ T36] audit: type=1400 audit(1793648802.890:340): avc: denied { getopt } for pid=1317 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.002809][ T31] usb usb5-port1: unable to enumerate USB device [ 70.129701][ T36] audit: type=1326 audit(1793648803.060:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1362 comm="syz.2.282" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad6439fb19 code=0x0 [ 70.255212][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 70.335934][ T36] audit: type=1400 audit(1793648803.270:342): avc: denied { mount } for pid=1369 comm="syz.4.284" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.367312][ T36] audit: type=1400 audit(1793648803.300:343): avc: denied { unmount } for pid=512 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.411492][ T1381] FAULT_INJECTION: forcing a failure. [ 70.411492][ T1381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.425059][ T1381] CPU: 1 UID: 0 PID: 1381 Comm: syz.4.287 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 70.425101][ T1381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 70.425116][ T1381] Call Trace: [ 70.425123][ T1381] [ 70.425132][ T1381] __dump_stack+0x21/0x30 [ 70.425159][ T1381] dump_stack_lvl+0x140/0x1c0 [ 70.425180][ T1381] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.425202][ T1381] ? check_stack_object+0x138/0x150 [ 70.425236][ T1381] dump_stack+0x19/0x20 [ 70.425256][ T1381] should_fail_ex+0x3c2/0x510 [ 70.425290][ T1381] should_fail+0xf/0x20 [ 70.425320][ T1381] should_fail_usercopy+0x1e/0x30 [ 70.425341][ T1381] _copy_to_user+0x24/0xa0 [ 70.425366][ T1381] simple_read_from_buffer+0xed/0x160 [ 70.425393][ T1381] proc_fail_nth_read+0x1aa/0x220 [ 70.425423][ T1381] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 70.425451][ T1381] ? bpf_lsm_file_permission+0xd/0x20 [ 70.425475][ T1381] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 70.425503][ T1381] vfs_read+0x288/0xc70 [ 70.425534][ T1381] ? __cfi_mutex_unlock+0x10/0x10 [ 70.425561][ T1381] ? __cfi_vfs_read+0x10/0x10 [ 70.425591][ T1381] ? __kasan_check_write+0x18/0x20 [ 70.425623][ T1381] ? mutex_lock+0x97/0x1d0 [ 70.425648][ T1381] ? __cfi_mutex_lock+0x10/0x10 [ 70.425678][ T1381] ksys_read+0x145/0x260 [ 70.425710][ T1381] ? __cfi_ksys_read+0x10/0x10 [ 70.425740][ T1381] ? __kasan_check_write+0x18/0x20 [ 70.425771][ T1381] ? fput+0x1a4/0x230 [ 70.425795][ T1381] ? __kasan_check_read+0x15/0x20 [ 70.425825][ T1381] __x64_sys_read+0x7f/0x90 [ 70.425857][ T1381] x64_sys_call+0x2638/0x2ee0 [ 70.425881][ T1381] do_syscall_64+0x57/0xf0 [ 70.425902][ T1381] ? clear_bhb_loop+0x50/0xa0 [ 70.425932][ T1381] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.425960][ T1381] RIP: 0033:0x7f8bd3f6034e [ 70.425987][ T1381] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 70.426007][ T1381] RSP: 002b:00007f8bd4ef6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.426031][ T1381] RAX: ffffffffffffffda RBX: 00007f8bd4ef76c0 RCX: 00007f8bd3f6034e [ 70.426049][ T1381] RDX: 000000000000000f RSI: 00007f8bd4ef70a0 RDI: 0000000000000004 [ 70.426063][ T1381] RBP: 00007f8bd4ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 70.426076][ T1381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.426090][ T1381] R13: 00007f8bd4226038 R14: 00007f8bd4225fa0 R15: 00007ffc6ff75f38 [ 70.426109][ T1381] [ 70.571483][ T1386] random: crng reseeded on system resumption [ 70.578915][ T36] audit: type=1400 audit(1793648803.470:344): avc: denied { write } for pid=1383 comm="syz.3.288" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 70.705612][ T9] usb 2-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 70.716821][ T36] audit: type=1400 audit(1793648803.470:345): avc: denied { open } for pid=1383 comm="syz.3.288" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 70.738139][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.753964][ T1384] Restarting kernel threads ... [ 70.754098][ T36] audit: type=1400 audit(1793648803.680:346): avc: denied { ioctl } for pid=1383 comm="syz.3.288" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 70.763628][ T9] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 70.784377][ T1384] done. [ 70.803050][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 70.812459][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.813620][ T1388] ./dev/sda1: Can't lookup blockdev [ 70.828239][ T9] usb 2-1: config 0 descriptor?? [ 70.837755][ T9] usb 2-1: Found UVC 9.00 device (046d:0825) [ 70.844778][ T9] usb 2-1: No streaming interface found for terminal 2. [ 70.993259][ T1403] tmpfs: Unknown parameter 'noinode32' [ 71.005310][ T1394] netlink: 'syz.4.291': attribute type 10 has an invalid length. [ 71.035883][ T31] usb 2-1: USB disconnect, device number 27 [ 71.086524][ T1414] netlink: 'syz.2.297': attribute type 63 has an invalid length. [ 71.097732][ T1414] netlink: 5 bytes leftover after parsing attributes in process `syz.2.297'. [ 71.106623][ T1414] gretap0: entered allmulticast mode [ 71.112188][ T1414] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 71.345187][ T66] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 71.475186][ T66] usb 5-1: device descriptor read/64, error -71 [ 71.715179][ T66] usb 5-1: device descriptor read/64, error -71 [ 71.815146][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 71.932687][ T1457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 71.942862][ T1457] device-mapper: table: 252:2: crypt: Error decoding and setting key (-EINVAL) [ 71.952031][ T1457] device-mapper: ioctl: error adding target to table [ 71.965190][ T66] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 71.973931][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.985095][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.994898][ T31] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 72.004303][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.013470][ T31] usb 2-1: config 0 descriptor?? [ 72.125157][ T66] usb 5-1: device descriptor read/64, error -71 [ 72.304384][ T1460] fuse: Unknown parameter 'fbz6Cä­;•b¹È«ã' [ 72.310714][ T1461] netlink: 'syz.3.313': attribute type 16 has an invalid length. [ 72.319180][ T1461] netlink: 'syz.3.313': attribute type 16 has an invalid length. [ 72.327035][ T1461] netlink: 'syz.3.313': attribute type 16 has an invalid length. [ 72.335008][ T1461] netlink: 'syz.3.313': attribute type 16 has an invalid length. [ 72.342860][ T1461] netlink: 'syz.3.313': attribute type 16 has an invalid length. [ 72.350708][ T1461] netlink: 'syz.3.313': attribute type 16 has an invalid length. [ 72.358553][ T1461] netlink: 'syz.3.313': attribute type 16 has an invalid length. [ 72.375262][ T66] usb 5-1: device descriptor read/64, error -71 [ 72.422583][ T31] hid-led 0003:27B8:01ED.0007: unknown main item tag 0x0 [ 72.429721][ T31] hid-led 0003:27B8:01ED.0007: unknown main item tag 0x0 [ 72.436817][ T31] hid-led 0003:27B8:01ED.0007: unknown main item tag 0x0 [ 72.444075][ T31] hid-led 0003:27B8:01ED.0007: unknown main item tag 0x0 [ 72.451193][ T31] hid-led 0003:27B8:01ED.0007: unknown main item tag 0x0 [ 72.486003][ T66] usb usb5-port1: attempt power cycle [ 72.753369][ T1470] tipc: Started in network mode [ 72.758380][ T1470] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 72.767537][ T1470] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 72.776003][ T1470] tipc: Enabled bearer , priority 10 [ 72.835187][ T66] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 72.856129][ T66] usb 5-1: device descriptor read/8, error -71 [ 72.899343][ T1476] netlink: 64 bytes leftover after parsing attributes in process `syz.3.317'. [ 72.986231][ T66] usb 5-1: device descriptor read/8, error -71 [ 73.195375][ T9] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 73.225158][ T66] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 73.246286][ T66] usb 5-1: device descriptor read/8, error -71 [ 73.346774][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 73.354901][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 73.364976][ T9] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 73.374126][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.382230][ T9] usb 4-1: Product: syz [ 73.386526][ T9] usb 4-1: Manufacturer: syz [ 73.387041][ T66] usb 5-1: device descriptor read/8, error -71 [ 73.391170][ T9] usb 4-1: SerialNumber: syz [ 73.505273][ T66] usb usb5-port1: unable to enumerate USB device [ 73.629882][ T1479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 73.895147][ T397] tipc: Node number set to 1 [ 74.023620][ T1493] sit0: entered promiscuous mode [ 74.030625][ T1493] netlink: 1 bytes leftover after parsing attributes in process `syz.4.321'. [ 74.105136][ T66] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 74.255157][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 74.261868][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 74.270349][ T66] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 74.280670][ T66] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.291077][ T66] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 74.300184][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.308245][ T66] usb 3-1: Product: syz [ 74.312449][ T66] usb 3-1: Manufacturer: syz [ 74.317123][ T66] usb 3-1: SerialNumber: syz [ 74.528856][ T66] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 74.537394][ T66] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3) [ 74.545842][ T66] usb 3-1: 3:0: cannot get min/max values for control 4 (id 3) [ 74.554248][ T66] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 74.566213][ T66] usb 3-1: 3:0: cannot get min/max values for control 8 (id 3) [ 74.574892][ T66] usb 3-1: 3:0: cannot get min/max values for control 8 (id 3) [ 74.583317][ T66] usb 3-1: 3:0: failed to get current value for ch 1 (-71) [ 74.592690][ T66] usb 3-1: 3:0: failed to get current value for ch 2 (-71) [ 74.600905][ T66] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 74.609032][ T66] usb 3-1: 3:0: cannot get min/max values for control 12 (id 3) [ 74.617790][ T66] usb 3-1: 3:0: cannot get min/max values for control 12 (id 3) [ 74.629225][ T31] hid-led 0003:27B8:01ED.0007: probe with driver hid-led failed with error -71 [ 74.639669][ T66] usb 3-1: USB disconnect, device number 23 [ 74.654996][ T31] usb 2-1: USB disconnect, device number 28 [ 74.666664][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.684317][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 74.684335][ T36] audit: type=1400 audit(1793648808.605:360): avc: denied { write } for pid=1500 comm="syz.1.323" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.085200][ T31] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 75.202354][ T36] audit: type=1400 audit(1793648809.125:361): avc: denied { shutdown } for pid=1518 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.235162][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 75.241651][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.252623][ T31] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 75.261722][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.270618][ T31] usb 2-1: config 0 descriptor?? [ 75.477824][ T36] audit: type=1326 audit(1793648809.405:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1505 comm="syz.1.325" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5926d9fb19 code=0x0 [ 75.739662][ T1520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.749460][ T1520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.761717][ T1520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.771070][ T1520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.805874][ T1529] kvm: user requested TSC rate below hardware speed [ 75.813726][ T1529] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 75.914785][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 75.932817][ T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 75.944067][ T9] usb 4-1: USB disconnect, device number 21 [ 75.966434][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.030183][ T36] audit: type=1400 audit(1793648809.955:363): avc: denied { mounton } for pid=1541 comm="syz.4.337" path="/82/file0" dev="tmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 76.169913][ T36] audit: type=1400 audit(1793648810.095:364): avc: denied { bind } for pid=1558 comm="syz.4.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.171597][ T1559] netlink: 48 bytes leftover after parsing attributes in process `syz.4.342'. [ 76.191554][ T36] audit: type=1400 audit(1793648810.095:365): avc: denied { setopt } for pid=1558 comm="syz.4.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.351805][ T1568] validate_nla: 27 callbacks suppressed [ 76.351828][ T1568] netlink: 'syz.4.344': attribute type 12 has an invalid length. [ 76.605149][ T66] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 76.755161][ T66] usb 5-1: Using ep0 maxpacket: 8 [ 76.761458][ T66] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 76.772339][ T66] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 250, changing to 11 [ 76.785175][ T66] usb 5-1: New USB device found, idVendor=07cf, idProduct=6802, bcdDevice= 0.40 [ 76.794269][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.802416][ T66] usb 5-1: Product: syz [ 76.806975][ T66] usb 5-1: Manufacturer: syz [ 76.811607][ T66] usb 5-1: SerialNumber: syz [ 76.817618][ T1568] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 76.911444][ T1574] rust_binder: Write failure EFAULT in pid:292 [ 76.935259][ T45] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 77.031348][ T66] usb 5-1: USB disconnect, device number 21 [ 77.043914][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.086175][ T45] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 77.094339][ T45] usb 3-1: config 0 has no interface number 0 [ 77.100937][ T45] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 77.111917][ T45] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 77.122962][ T45] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 77.133869][ T45] usb 3-1: config 0 interface 2 has no altsetting 0 [ 77.141952][ T45] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 77.151486][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.159619][ T45] usb 3-1: Product: syz [ 77.163891][ T45] usb 3-1: Manufacturer: syz [ 77.168568][ T316] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 77.176205][ T45] usb 3-1: SerialNumber: syz [ 77.181886][ T45] usb 3-1: config 0 descriptor?? [ 77.187318][ T1570] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 77.194641][ T1570] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 77.326280][ T316] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 77.334456][ T316] usb 4-1: config 0 has no interface number 0 [ 77.340684][ T316] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 77.350590][ T316] usb 4-1: config 0 interface 41 has no altsetting 0 [ 77.358839][ T316] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 77.368028][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.376298][ T316] usb 4-1: Product: syz [ 77.380588][ T316] usb 4-1: Manufacturer: syz [ 77.385265][ T316] usb 4-1: SerialNumber: syz [ 77.390733][ T316] usb 4-1: config 0 descriptor?? [ 77.396865][ T316] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 77.415766][ T45] usb 3-1: USB disconnect, device number 24 [ 77.428790][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.599946][ T9] usb 4-1: USB disconnect, device number 22 [ 77.786189][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 77.792314][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 77.801376][ T31] usb 2-1: USB disconnect, device number 29 [ 77.923961][ T36] audit: type=1400 audit(1793648811.845:366): avc: denied { mounton } for pid=1587 comm="syz.2.352" path="/92/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 78.127242][ T1595] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 78.145484][ T1597] netlink: 92 bytes leftover after parsing attributes in process `syz.2.356'. [ 78.161894][ T31] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 78.295121][ T31] usb 2-1: device descriptor read/64, error -71 [ 78.375346][ T1605] ptp ptp0: new virtual clock ptp1 [ 78.397856][ T1605] ptp ptp0: new virtual clock ptp2 [ 78.407235][ T1605] ptp ptp0: new virtual clock ptp3 [ 78.415985][ T1605] ptp ptp0: new virtual clock ptp4 [ 78.421171][ T1605] ptp ptp0: guarantee physical clock free running [ 78.432086][ T1604] ptp ptp0: delete virtual clock ptp4 [ 78.444648][ T1612] loop6: detected capacity change from 0 to 1 [ 78.451447][ T1604] ptp ptp0: delete virtual clock ptp3 [ 78.460882][ C1] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 2 [ 78.480001][ T1604] ptp ptp0: delete virtual clock ptp2 [ 78.492292][ T1615] rust_binder: 1614:1615 got transaction to invalid handle 3 [ 78.495521][ T36] audit: type=1400 audit(1793648812.415:367): avc: denied { write } for pid=1614 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.503283][ T1615] rust_binder: 1614:1615 transaction async to 0:0 failed ENOENT, code 1 size 0-24 line process.rs:958 [ 78.531694][ T1604] ptp ptp0: guarantee physical clock free running [ 78.534705][ T316] rust_binder: 1614: undelivered TRANSACTION_ERROR: 29201 [ 78.555123][ T31] usb 2-1: device descriptor read/64, error -71 [ 78.576700][ T1624] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 78.589654][ T1624] overlayfs: overlapping lowerdir path [ 78.633933][ T36] audit: type=1400 audit(1793648812.555:368): avc: denied { map } for pid=1629 comm="syz.4.365" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 78.677207][ T36] audit: type=1400 audit(1793648812.555:369): avc: denied { execute } for pid=1629 comm="syz.4.365" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 78.710762][ T1638] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.368' sets config #0 [ 78.791636][ T1642] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.368' sets config #1 [ 78.795263][ T31] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 78.816262][ T1642] overlay: Unknown parameter 'euid<00000000000000020475' [ 78.955130][ T31] usb 2-1: device descriptor read/64, error -71 [ 78.972504][ T1655] Invalid logical block size (-3) [ 79.138392][ T1673] printk: legacy console [ttyS0] disabled [ 79.151532][ T1673] printk: legacy console [ttyS0] enabled [ 79.162930][ T1676] printk: legacy console [ttyS0] disabled [ 79.182654][ T1673] printk: legacy console [ttyS0] enabled [ 79.195171][ T31] usb 2-1: device descriptor read/64, error -71 [ 79.225176][ T9] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 79.295298][ T324] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 79.305290][ T31] usb usb2-port1: attempt power cycle [ 79.375922][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 79.384539][ T9] usb 3-1: config 1 has an invalid descriptor of length 198, skipping remainder of the config [ 79.396131][ T9] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 79.405245][ T9] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 79.413718][ T9] usb 3-1: Product: syz [ 79.418034][ T9] usb 3-1: Manufacturer: syz [ 79.425112][ T9] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 79.431551][ T324] usb 5-1: device descriptor read/64, error -71 [ 79.625559][ T1653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.634196][ T1653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.645150][ T31] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 79.654461][ T1653] fuseblk: Unknown parameter 'óM‰01777777777777777777777' [ 79.666227][ T31] usb 2-1: device descriptor read/8, error -71 [ 79.675149][ T324] usb 5-1: device descriptor read/64, error -71 [ 79.796229][ T31] usb 2-1: device descriptor read/8, error -71 [ 79.808358][ T9] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 79.818012][ T9] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 79.826861][ T9] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 79.835905][ T9] usb 3-1: USB disconnect, device number 25 [ 79.935203][ T324] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 79.955158][ T316] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 80.035206][ T31] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 80.056320][ T31] usb 2-1: device descriptor read/8, error -71 [ 80.065180][ T324] usb 5-1: device descriptor read/64, error -71 [ 80.106405][ T316] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.116607][ T316] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 80.125866][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.136251][ T316] uvcvideo 4-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 80.145259][ T316] usb 4-1: Found UVC 1.00 device (0000:0000) [ 80.152178][ T316] uvcvideo 4-1:1.1: No supported video formats found. [ 80.159199][ T316] uvcvideo 4-1:1.1: Failed to initialize the device (-22). [ 80.173321][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 80.173338][ T36] audit: type=1400 audit(1793648814.095:373): avc: denied { search } for pid=1681 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.192009][ T31] usb 2-1: device descriptor read/8, error -71 [ 80.207895][ T36] audit: type=1400 audit(1793648814.135:374): avc: denied { read write } for pid=1681 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 80.230421][ T36] audit: type=1400 audit(1793648814.135:375): avc: denied { open } for pid=1681 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 80.253213][ T36] audit: type=1400 audit(1793648814.135:376): avc: denied { lock } for pid=1681 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 80.285474][ T36] audit: type=1400 audit(1793648814.215:377): avc: denied { ioctl } for pid=1667 comm="syz.4.377" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.310387][ T36] audit: type=1400 audit(1793648814.215:378): avc: denied { read write } for pid=1682 comm="syz.2.381" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.334539][ T36] audit: type=1400 audit(1793648814.215:379): avc: denied { open } for pid=1682 comm="syz.2.381" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.358001][ T31] usb usb2-port1: unable to enumerate USB device [ 80.358489][ T324] usb 5-1: device descriptor read/64, error -71 [ 80.371673][ T397] usb 4-1: USB disconnect, device number 23 [ 80.485290][ T324] usb usb5-port1: attempt power cycle [ 80.825174][ T324] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 80.856113][ T324] usb 5-1: device descriptor read/8, error -71 [ 80.895292][ T36] audit: type=1400 audit(1793648814.825:380): avc: denied { execmem } for pid=1693 comm="syz.3.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 80.986108][ T324] usb 5-1: device descriptor read/8, error -71 [ 81.036485][ T36] audit: type=1400 audit(1793648814.965:381): avc: denied { create } for pid=1712 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.066791][ T1715] netlink: 52 bytes leftover after parsing attributes in process `syz.2.393'. [ 81.075834][ T1715] tipc: Invalid UDP bearer configuration [ 81.075857][ T1715] tipc: Enabling of bearer rejected, failed to enable media [ 81.091227][ T36] audit: type=1400 audit(1793648815.015:382): avc: denied { connect } for pid=1714 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.156768][ T1716] rust_binder: 1712:1716 BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 81.166848][ T1716] rust_binder: Write failure EINVAL in pid:218 [ 81.225323][ T324] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 81.246290][ T324] usb 5-1: device descriptor read/8, error -71 [ 81.319978][ T1722] device-mapper: table: 252:3: crypt: Error decoding and setting key (-EINVAL) [ 81.329086][ T1722] device-mapper: ioctl: error adding target to table [ 81.377728][ T324] usb 5-1: device descriptor read/8, error -71 [ 81.485431][ T324] usb usb5-port1: unable to enumerate USB device [ 81.725147][ T31] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 81.867936][ T316] rust_binder: 1712: undelivered freeze notification, 0000000000000001 [ 81.877631][ T31] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.890525][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 81.897186][ T31] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 81.906807][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.919163][ T31] usb 4-1: config 0 descriptor?? [ 81.922159][ T1737] netlink: 56 bytes leftover after parsing attributes in process `syz.1.400'. [ 82.185143][ T324] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 82.205132][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 82.330495][ T31] uclogic 0003:2179:0053.0008: interface is invalid, ignoring [ 82.333239][ T1753] block device autoloading is deprecated and will be removed. [ 82.349022][ T324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9216, setting to 64 [ 82.360105][ T324] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.369543][ T1754] GUP no longer grows the stack in syz.4.406 (1754): 200000004000-20000000a000 (200000003000) [ 82.375006][ T324] usb 2-1: New USB device found, idVendor=046d, idProduct=c508, bcdDevice= 0.00 [ 82.376135][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.393308][ T1754] CPU: 1 UID: 0 PID: 1754 Comm: syz.4.406 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 82.393384][ T1754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 82.393422][ T1754] Call Trace: [ 82.393436][ T1754] [ 82.393463][ T1754] __dump_stack+0x21/0x30 [ 82.393520][ T1754] dump_stack_lvl+0x140/0x1c0 [ 82.393574][ T1754] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.393627][ T1754] ? find_vma+0xd3/0x120 [ 82.393710][ T1754] ? vma_is_secretmem+0x11/0x50 [ 82.393776][ T1754] ? check_vma_flags+0x2a5/0x3a0 [ 82.393868][ T1754] dump_stack+0x19/0x20 [ 82.393931][ T1754] __get_user_pages+0x1e20/0x22d0 [ 82.394003][ T1754] ? populate_vma_page_range+0x220/0x220 [ 82.394081][ T1754] __gup_longterm_locked+0xc53/0x1570 [ 82.394146][ T1754] ? __kasan_check_write+0x18/0x20 [ 82.394227][ T1754] ? rwsem_read_trylock+0x275/0x5a0 [ 82.394301][ T1754] pin_user_pages_remote+0x177/0x230 [ 82.394371][ T1754] ? __cfi_pin_user_pages_remote+0x10/0x10 [ 82.394434][ T1754] ? up_read+0x26/0x1c0 [ 82.394496][ T1754] ? mm_access+0x18c/0x210 [ 82.394581][ T1754] process_vm_rw+0x66d/0xc70 [ 82.394673][ T1754] ? __ia32_sys_process_vm_writev+0x110/0x110 [ 82.394735][ T1754] ? handle_mm_fault+0x16fe/0x1ba0 [ 82.394809][ T1754] ? __se_sys_futex+0x13c/0x320 [ 82.394871][ T1754] ? __kasan_check_write+0x18/0x20 [ 82.394952][ T1754] ? do_user_addr_fault+0xbf5/0x1230 [ 82.395014][ T1754] __x64_sys_process_vm_writev+0xeb/0x100 [ 82.395080][ T1754] x64_sys_call+0x1ab/0x2ee0 [ 82.395140][ T1754] do_syscall_64+0x57/0xf0 [ 82.395205][ T1754] ? clear_bhb_loop+0x50/0xa0 [ 82.395299][ T1754] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.395378][ T1754] RIP: 0033:0x7f8bd3f9fb19 [ 82.395421][ T1754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.395471][ T1754] RSP: 002b:00007f8bd4ed6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 82.395535][ T1754] RAX: ffffffffffffffda RBX: 00007f8bd4226090 RCX: 00007f8bd3f9fb19 [ 82.395576][ T1754] RDX: 0000000000000067 RSI: 0000200000000140 RDI: 0000000000000152 [ 82.395615][ T1754] RBP: 00007f8bd4037af8 R08: 0000000000000001 R09: 0000000000000000 [ 82.395648][ T1754] R10: 0000200000002540 R11: 0000000000000246 R12: 0000000000000000 [ 82.395687][ T1754] R13: 00007f8bd4226128 R14: 00007f8bd4226090 R15: 00007ffc6ff75f38 [ 82.395737][ T1754] [ 82.552449][ T1735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.570316][ T1735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.589982][ T324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.625194][ T31] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 82.632423][ T324] usb 2-1: config 0 descriptor?? [ 82.678218][ T316] usb 4-1: USB disconnect, device number 24 [ 82.678234][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.695276][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.708380][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 82.708490][ T1739] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 82.717754][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.796589][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.808118][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.817937][ T31] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 82.827132][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.836319][ T31] usb 5-1: config 0 descriptor?? [ 82.934243][ T1758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.943353][ T1758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.149705][ T9] usbhid 3-1:1.0: can't add hid device: -71 [ 83.155818][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 83.164999][ T9] usb 3-1: USB disconnect, device number 26 [ 83.244722][ T31] savu 0003:1E7D:2D5A.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 83.455176][ T324] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 83.494459][ T31] usb 5-1: USB disconnect, device number 26 [ 83.501985][ T31] ================================================================== [ 83.510130][ T31] BUG: KASAN: slab-use-after-free in roccat_disconnect+0x236/0x240 [ 83.518047][ T31] Read of size 4 at addr ffff88810a388808 by task kworker/1:0/31 [ 83.525789][ T31] [ 83.528132][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Not tainted syzkaller #0 c6d530d213d6421e3ceaeda0202ca36fa97e3e13 [ 83.528154][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 83.528167][ T31] Workqueue: usb_hub_wq hub_event [ 83.528189][ T31] Call Trace: [ 83.528195][ T31] [ 83.528202][ T31] __dump_stack+0x21/0x30 [ 83.528218][ T31] dump_stack_lvl+0x140/0x1c0 [ 83.528233][ T31] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.528250][ T31] print_address_description+0x71/0x210 [ 83.528266][ T31] print_report+0x4a/0x70 [ 83.528280][ T31] kasan_report+0x162/0x1a0 [ 83.528298][ T31] ? roccat_disconnect+0x236/0x240 [ 83.528322][ T31] ? roccat_disconnect+0x236/0x240 [ 83.528346][ T31] __asan_report_load4_noabort+0x18/0x20 [ 83.528369][ T31] roccat_disconnect+0x236/0x240 [ 83.528393][ T31] savu_remove+0xf0/0x170 [ 83.528410][ T31] ? __cfi_savu_remove+0x10/0x10 [ 83.528426][ T31] hid_device_remove+0x293/0x400 [ 83.528449][ T31] ? __cfi_hid_device_remove+0x10/0x10 [ 83.528471][ T31] device_release_driver_internal+0x4ad/0x830 [ 83.528493][ T31] device_release_driver+0x1d/0x30 [ 83.528512][ T31] bus_remove_device+0x34f/0x370 [ 83.528538][ T31] device_del+0x583/0xcf0 [ 83.528556][ T31] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 83.528572][ T31] ? __pm_runtime_resume+0xa0/0xa0 [ 83.528599][ T31] ? __cfi_device_del+0x10/0x10 [ 83.528617][ T31] ? __kasan_check_write+0x18/0x20 [ 83.528640][ T31] ? _raw_spin_lock_irq+0x93/0x120 [ 83.528655][ T31] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 83.528671][ T31] hid_destroy_device+0x6e/0x110 [ 83.528694][ T31] usbhid_disconnect+0xa3/0xc0 [ 83.528713][ T31] usb_unbind_interface+0x2ad/0xa40 [ 83.528733][ T31] ? __cfi_usb_unbind_interface+0x10/0x10 [ 83.528751][ T31] device_release_driver_internal+0x525/0x830 [ 83.528773][ T31] device_release_driver+0x1d/0x30 [ 83.528818][ T31] bus_remove_device+0x34f/0x370 [ 83.528861][ T31] device_del+0x583/0xcf0 [ 83.528879][ T31] ? kfree_const+0x3d/0x50 [ 83.528901][ T31] ? __cfi_device_release+0x10/0x10 [ 83.528924][ T31] ? __cfi_device_del+0x10/0x10 [ 83.528942][ T31] ? kobject_put+0x238/0x2a0 [ 83.528958][ T31] ? device_unregister+0x2b/0x40 [ 83.528978][ T31] usb_disable_device+0x3af/0x770 [ 83.528996][ T31] usb_disconnect+0x331/0x950 [ 83.529012][ T31] hub_event+0x1ad5/0x4360 [ 83.529033][ T31] ? kthread_data+0x54/0xc0 [ 83.529052][ T31] ? psi_task_switch+0x4d7/0x9c0 [ 83.529072][ T31] ? __cfi_hub_event+0x10/0x10 [ 83.529097][ T31] ? kick_pool+0xb9/0x540 [ 83.529120][ T31] process_scheduled_works+0x7f7/0x1060 [ 83.529143][ T31] worker_thread+0xc99/0x13f0 [ 83.529165][ T31] kthread+0x2c7/0x360 [ 83.529187][ T31] ? __cfi_worker_thread+0x10/0x10 [ 83.529206][ T31] ? __cfi_kthread+0x10/0x10 [ 83.529228][ T31] ret_from_fork+0x64/0xa0 [ 83.529243][ T31] ? __cfi_kthread+0x10/0x10 [ 83.529265][ T31] ret_from_fork_asm+0x1a/0x30 [ 83.529284][ T31] [ 83.529290][ T31] [ 83.607361][ T324] usb 4-1: unable to get BOS descriptor or descriptor too short [ 83.612043][ T31] Allocated by task 31: [ 83.612060][ T31] kasan_save_track+0x3e/0x80 [ 83.618101][ T324] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.621357][ T31] kasan_save_alloc_info+0x3a/0x50 [ 83.636224][ T324] usb 4-1: string descriptor 0 read error: -22 [ 83.637885][ T31] __kasan_kmalloc+0x96/0xb0 [ 83.643283][ T324] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 83.647964][ T31] __kmalloc_cache_noprof+0x23c/0x470 [ 83.648003][ T31] roccat_connect+0x6a/0x540 [ 83.652686][ T324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.657888][ T31] savu_probe+0x1a7/0x3f0 [ 83.657916][ T31] hid_device_probe+0x2ce/0x5f0 [ 83.903601][ T31] really_probe+0x2e1/0x8b0 [ 83.908147][ T31] __driver_probe_device+0x193/0x280 [ 83.913508][ T31] driver_probe_device+0x54/0x3f0 [ 83.918586][ T31] __device_attach_driver+0x2f1/0x4b0 [ 83.924013][ T31] bus_for_each_drv+0x264/0x300 [ 83.928911][ T31] __device_attach+0x2c4/0x3c0 [ 83.933708][ T31] device_initial_probe+0x1e/0x30 [ 83.938754][ T31] bus_probe_device+0x18b/0x270 [ 83.943654][ T31] device_add+0x7fd/0xbf0 [ 83.948028][ T31] hid_add_device+0x3c4/0x5a0 [ 83.952744][ T31] usbhid_probe+0xdca/0x1310 [ 83.957376][ T31] usb_probe_interface+0x6ab/0xbf0 [ 83.962526][ T31] really_probe+0x2e1/0x8b0 [ 83.967086][ T31] __driver_probe_device+0x193/0x280 [ 83.972410][ T31] driver_probe_device+0x54/0x3f0 [ 83.977464][ T31] __device_attach_driver+0x2f1/0x4b0 [ 83.982863][ T31] bus_for_each_drv+0x264/0x300 [ 83.987748][ T31] __device_attach+0x2c4/0x3c0 [ 83.992557][ T31] device_initial_probe+0x1e/0x30 [ 83.997630][ T31] bus_probe_device+0x18b/0x270 [ 84.002552][ T31] device_add+0x7fd/0xbf0 [ 84.006922][ T31] usb_set_configuration+0x1aad/0x2080 [ 84.012432][ T31] usb_generic_driver_probe+0x95/0x160 [ 84.017969][ T31] usb_probe_device+0x1ef/0x3b0 [ 84.022899][ T31] really_probe+0x2e1/0x8b0 [ 84.027567][ T31] __driver_probe_device+0x193/0x280 [ 84.032902][ T31] driver_probe_device+0x54/0x3f0 [ 84.037971][ T31] __device_attach_driver+0x2f1/0x4b0 [ 84.043492][ T31] bus_for_each_drv+0x264/0x300 [ 84.048379][ T31] __device_attach+0x2c4/0x3c0 [ 84.053179][ T31] device_initial_probe+0x1e/0x30 [ 84.058268][ T31] bus_probe_device+0x18b/0x270 [ 84.063164][ T31] device_add+0x7fd/0xbf0 [ 84.067524][ T31] usb_new_device+0x98d/0x1500 [ 84.072317][ T31] hub_event+0x2dbd/0x4360 [ 84.076756][ T31] process_scheduled_works+0x7f7/0x1060 [ 84.082347][ T31] worker_thread+0xc99/0x13f0 [ 84.087051][ T31] kthread+0x2c7/0x360 [ 84.091159][ T31] ret_from_fork+0x64/0xa0 [ 84.095600][ T31] ret_from_fork_asm+0x1a/0x30 [ 84.100415][ T31] [ 84.102756][ T31] Freed by task 1752: [ 84.106746][ T31] kasan_save_track+0x3e/0x80 [ 84.111473][ T31] kasan_save_free_info+0x44/0x50 [ 84.116526][ T31] __kasan_slab_free+0x5f/0x80 [ 84.121421][ T31] kfree+0x158/0x440 [ 84.125549][ T31] roccat_release+0x2c3/0x390 [ 84.130269][ T31] __fput+0x20b/0xa30 [ 84.134281][ T31] ____fput+0x20/0x30 [ 84.138294][ T31] task_work_run+0x1e8/0x260 [ 84.142928][ T31] resume_user_mode_work+0x35/0x50 [ 84.148079][ T31] syscall_exit_to_user_mode+0x63/0xb0 [ 84.153587][ T31] do_syscall_64+0x63/0xf0 [ 84.158034][ T31] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.163962][ T31] [ 84.166301][ T31] The buggy address belongs to the object at ffff88810a388800 [ 84.166301][ T31] which belongs to the cache kmalloc-512 of size 512 [ 84.180396][ T31] The buggy address is located 8 bytes inside of [ 84.180396][ T31] freed 512-byte region [ffff88810a388800, ffff88810a388a00) [ 84.194080][ T31] [ 84.196434][ T31] The buggy address belongs to the physical page: [ 84.202875][ T31] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10a388 [ 84.211744][ T31] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 84.220264][ T31] anon flags: 0x4000000000000040(head|zone=1) [ 84.226397][ T31] page_type: f5(slab) [ 84.230406][ T31] raw: 4000000000000040 ffff888100041c80 0000000000000000 0000000000000001 [ 84.239026][ T31] raw: 0000000000000000 0000000080100010 00000001f5000000 0000000000000000 [ 84.247638][ T31] head: 4000000000000040 ffff888100041c80 0000000000000000 0000000000000001 [ 84.256349][ T31] head: 0000000000000000 0000000080100010 00000001f5000000 0000000000000000 [ 84.265060][ T31] head: 4000000000000002 ffffea000428e201 ffffffffffffffff 0000000000000000 [ 84.273784][ T31] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 84.282473][ T31] page dumped because: kasan: bad access detected [ 84.287166][ T324] usb 4-1: current rate 10162847 is different from the runtime rate 48000 [ 84.288968][ T31] page_owner tracks the page as allocated [ 84.288979][ T31] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 944, tgid 943 (syz.2.175), ts 53436583569, free_ts 53399099460 [ 84.325646][ T31] post_alloc_hook+0x37d/0x3b0 [ 84.330470][ T31] prep_new_page+0x2d/0x180 [ 84.335027][ T31] get_page_from_freelist+0x4aea/0x4ba0 [ 84.340624][ T31] __alloc_pages_noprof+0x35a/0x7e0 [ 84.345874][ T31] alloc_slab_page+0x6b/0x1e0 [ 84.350601][ T31] allocate_slab+0x69/0x430 [ 84.355152][ T31] ___slab_alloc+0x591/0x8c0 [ 84.359783][ T31] __kmalloc_cache_noprof+0x2cd/0x470 [ 84.365215][ T31] __kvm_set_memory_region+0x6c7/0xb40 [ 84.370723][ T31] kvm_set_memory_region+0x2f/0x50 [ 84.375884][ T31] kvm_vm_ioctl+0xb01/0xc40 [ 84.380460][ T31] __se_sys_ioctl+0x126/0x1b0 [ 84.385180][ T31] __x64_sys_ioctl+0x7f/0xa0 [ 84.389816][ T31] x64_sys_call+0x1878/0x2ee0 [ 84.394543][ T31] do_syscall_64+0x57/0xf0 [ 84.399007][ T31] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.405043][ T31] page last free pid 943 tgid 943 stack trace: [ 84.411233][ T31] free_unref_page+0xb99/0xf50 [ 84.416028][ T31] __free_pages+0x6b/0x3b0 [ 84.420478][ T31] __free_slab+0xb2/0x110 [ 84.425268][ T31] free_slab+0x18/0xe0 [ 84.429341][ T31] discard_slab+0x23/0x40 [ 84.433783][ T31] __slab_free+0x1fd/0x2a0 [ 84.438240][ T31] ___cache_free+0xc9/0xe0 [ 84.442686][ T31] qlist_free_all+0xb5/0x130 [ 84.447312][ T31] kasan_quarantine_reduce+0x14f/0x180 [ 84.452812][ T31] __kasan_slab_alloc+0x28/0x90 [ 84.457676][ T31] kmem_cache_alloc_noprof+0x1bf/0x410 [ 84.463177][ T31] vm_area_dup+0x3f/0x560 [ 84.467524][ T31] __split_vma+0x1ce/0xc10 [ 84.471985][ T31] vma_modify+0x364/0x1540 [ 84.476446][ T31] vma_modify_flags+0x182/0x1c0 [ 84.481341][ T31] mprotect_fixup+0x432/0x8d0 [ 84.486026][ T31] [ 84.488351][ T31] Memory state around the buggy address: [ 84.493999][ T31] ffff88810a388700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.502075][ T31] ffff88810a388780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.510244][ T31] >ffff88810a388800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.518311][ T31] ^ [ 84.522685][ T31] ffff88810a388880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.530788][ T31] ffff88810a388900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.538944][ T31] ================================================================== [ 84.549472][ T31] Disabling lock debugging due to kernel taint [ 84.551075][ T397] usb 4-1: USB disconnect, device number 25 [ 84.583929][ T1766] overlayfs: overlapping lowerdir path [ 84.959110][ T31] usb 2-1: USB disconnect, device number 34