last executing test programs: 6.114117618s ago: executing program 0 (id=2442): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x85, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x7, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x0, 0xf00}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xfffffffffffffffd, 0x5, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x9, 0xffffffffffffffff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.026445199s ago: executing program 0 (id=2443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="0100800000000000000001000000140002007767320000000000000000400000000058000880"], 0x80}}, 0x20000010) 5.971540229s ago: executing program 0 (id=2444): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000040ac056502000000000001090224000100001000090400950203000100092101000b01222b0009058103000209028d"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00217f000000b102417ed7e7ab5d453fbee3b61e"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x38, 0x10, 0x973, 0x38, {{0x8, 0x4, 0x0, 0x14, 0x20, 0x64, 0x0, 0x2, 0x4, 0x0, @multicast2, @rand_addr=0x64010100, {[@rr={0x7, 0xb, 0xf0, [@loopback, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip_vti0\x00', r2, 0x80, 0x80, 0x3, 0x2, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x65, 0x0, 0x7, 0x29, 0x0, @private=0xa010101, @local, {[@timestamp_prespec={0x44, 0x14, 0x94, 0x3, 0x7, [{@multicast1, 0x6422efb6}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x1}]}]}}}}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x4, "2bbc246f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000100)={0x20, 0x30, 0x4, "69763e9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x20, 0x2, 0x2f, {0x2f, 0x4, "30b093334353f4bff5f6ce7893e11a65ceb797f57ac47035225d3ebcb58eb587dc3c56403bf491dfdfe6066226"}}, &(0x7f0000000240)={0x0, 0x3, 0x4b, @string={0x4b, 0x3, "aba7e1f7530031a1d0751adf9bd607ee9bb16d6df4069c22f9287f4f84be222cee19b3dfff38dd695b7583c1386a9db62d7b0a228a0dd241b9c7e4247bc13742b5b5e21dfed849ab93"}}}, &(0x7f0000000580)={0x44, &(0x7f0000000340)={0x0, 0x0, 0x34, "59be0cb0e5d49033ec8efc319d43b2403e5d426ffbd94936d050c24142038abb6c7e2e5238fb85b5ecffa36ca6c3c50dc7d2c148"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xa1}, &(0x7f0000000400)={0x20, 0x81, 0x1, "10"}, &(0x7f0000000440)={0x20, 0x82, 0x2, "8395"}, &(0x7f0000000480)={0x20, 0x83, 0x3, "1457bb"}, &(0x7f00000004c0)={0x20, 0x84, 0x2, "a098"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "0e8fed"}}) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x240002, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000200)={0x0, 0x1, r1, 0xb}) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) 4.599388713s ago: executing program 2 (id=2460): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x85, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x7, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x0, 0xf00}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xfffffffffffffffd, 0x5, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x9, 0xffffffffffffffff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.528805904s ago: executing program 2 (id=2461): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000003c0)={'filter\x00', 0x2, [{}, {}]}, 0x48) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000000c0)=0x10, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000036c0)={0x13c0, 0x5e, 0x9, 0x70bd26, 0x25dfd3ff, {0xf}, [@generic="7cf3609f93731e65625e389d3760b594ebea115f26e9e760522d6fbfc5e7d070b61ac64b7597b6b26c21c3ba720d837d6c06e6b869df70de25fdb7c335942180632a44ccf546683624221d0f649a8e9639922a55c6989a93afe0edff80dff32ee2591d4f0f4dc99876f03cbbbf", @nested={0x133b, 0x107, 0x0, 0x1, [@nested={0x8, 0x90, 0x0, 0x1, [@nested={0x4, 0x111}]}, @typed={0x8, 0xa, 0x0, 0x0, @u32=0x7}, @nested={0xeb, 0xa8, 0x0, 0x1, [@nested={0x4, 0x115}, @generic="7ccf396c69c8e16689142de23d55a5a23adcec802586719a1ad6035801368449769baafa368d5cc68dfb7036ce7d94acd5887d85d5b272c49afc14c653808e31f3c0afa3b4e07985a295f8d3596cbe4fc3d53862e9b2afb366077495bae29bd72a6c7e39cbd762d2d70e089e16b98ef79795157a9f0b7506f44f75ba7825e831f693c865740091b8da96f3252d16f9f960ece63beb0f20a6c7ef14f9704160069408fdd4def9573f2c227034bd7fc6a04b69e9b69dd333780a4a69f88a37ef", @nested={0x4, 0x2d}, @nested={0x4, 0x38}, @nested={0x4, 0x75}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}, @generic="cf6e379e8820599e90ea7b54"]}, @nested={0x10af, 0x8d, 0x0, 0x1, [@typed={0x8, 0xd7, 0x0, 0x0, @u32=0x2}, @generic="6cf7f1074c69c4b08d9bfc86147c64575920c0411901cf1c31309e39e17767a94b90a2f83be49ac9d5d110e3d817e0dbc15fed4618620dea689d4d5d969ca13be523de81158241e56fb41afdfd94aa03903c713a6d3060874320f05356045d9d7fc0bff30566db57566e98441788f0a72c9f728728050873b01e3df42bc36577ae8d4bd6f89a12f80707191c83b9352930764a22c41f53900df298", @nested={0x4, 0x10c}, @generic="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", @nested={0x4, 0x122}]}, @generic="e67fbd0bfd246bca9c26662e5eb15c3850b1cb1760a78a2224f677182068ef1d0e19d799e93fc213b4c5c9fb5dd11add30e0143f55b3ca5445b555c3b737b90af3fcbd53349a6dcb08e0957bc0334bd1e2d1eb1fc621f444edccdfeebdff09c6f6638d4006255f3426bb1fbb56d28f33df2f267a6e3379eac2ce94411ccff256191549515d6f1042b56bef87", @nested={0x20, 0x2d, 0x0, 0x1, [@generic="3539a4b4b2c83cac799d7c6c5afdb0c8", @typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0xbe}]}, @generic="123d0f088faffe8968a242685abf51211e36674d1c268ae8401a01c7095b61c6dbe04c417c3a10ecde9dcc23b3195e46dd947a38cbcc0af8208d12ce12900b64674f3ed9fe4b68015f433d1cdf19e051ad2a4be71236d511524d02296058982a2562baea6c65a33795e84ab91d1cfedd375fa22442b48516830c5b86b425d2c81e4f6bfc1cfbecbb9226a20393be136d30f892d860e22cf551cc0735d3040a18bd0501bfb6efc6f5447413f2981575af4badd18dc954c6244bcb45fc5d6691db31ae795aa6724629908729624bc601bf864cf956884b23fc89ef58de9daabd"]}]}, 0x13c0}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r4 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) pipe2(0x0, 0x80) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002440)=ANY=[], 0x1088}, 0x1, 0x0, 0x0, 0x4000800}, 0x2000c004) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x3, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000003680)={0x2c, &(0x7f00000033c0)=ANY=[@ANYBLOB="40039fe0eb"], 0x0, 0x0, 0x0, 0x0}) socket$inet(0x2, 0x4, 0x4) 4.417685535s ago: executing program 0 (id=2462): unshare(0x60000600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) mount$incfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x83, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000810000000000000000000aaff020000000000000000000000000001"], 0xffe) 4.299653576s ago: executing program 0 (id=2464): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) lsm_get_self_attr(0x68, 0x0, 0x0, 0x1) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="000f06000000428a7482a3658e41e4c8a2cb946a69358699cfff75a02dff04f158d6dbf4e47447b150c477485329398e2ffa96c5190d94001eab90281e54f85e1563837d21238b9e51ba92677a34c8b0f601010000af1c04649a542bc3fcc0eff89e530a9c93f559ee86a612acdcac24a8a2dc72bcc519547b784cf1de06a944c23348dfbdf08ececc6a497f20b0daca407c5e45db28d84ceff7d3f43b06b171d858e9"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x13, @string={0x13, 0x3, "70f8bdb3025c5bae9f0ed1702384268bf3"}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000280)={0x0, 0x15, 0x2b, "1dff41edadc4747863ce1b5873d0b339336d0c2b93494299cde44c8deb839b1263229660b9c67141156e6a"}, 0x0, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xfc}, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x83, 0x2, "43d8"}, 0x0, 0x0}) 4.021735149s ago: executing program 3 (id=2470): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x880080, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="c4000000190001000000000010000000e0000001000000000000000000000000200100000000000000000000000000004e220000ffff00000a00808000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000"], 0xc4}}, 0x80c4) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)='z'}) (async) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f00000002c0)=ANY=[@ANYBLOB="02b25a81708ef59ee36a66cc93e32969488dcbd62d69cf185effd42208cc63284d54153d185f14a1551ccddbd28c3ab34ef2149db490cd8f6e680d1e880190e1193665819ed34bd021666cc606c6b1d02ff64d1619a58f358b978346412114b3f837b35b1afd9723b87f3ecc470b29be801cef8f7eafe693aae317652e19ddadc03aaa4e9a50fbff92d5b122f9ed6ac4c6226742e121c297fe053a31bada1359847bc4"], 0x1, 0x83d2156286f3071d) (async) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8920, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) 4.021580189s ago: executing program 3 (id=2471): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd0000fe100001000c0c100000000000224e0000", 0x58}], 0x1) 4.021438099s ago: executing program 3 (id=2472): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d0000090401010202"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40012020, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x1, 0x6b2c, 0x80000000, 0x4, 0x5, 0x3, 0x5, 0x3, 0xf39, 0x9, 0x1, 0xffff}}, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x6}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000200)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x2, 0xc0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0xdbf}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0x4, 0x4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x430, 0x0, 0x9, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x80, 0x1, 0x8}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0xd, 0x1, 0xd0, 0x8, 0x96}, 0x4b, &(0x7f0000000600)={0x5, 0xf, 0x4b, 0x2, [@generic={0x3c, 0x10, 0x1, "26bb9b04c356a0bfd0ed9f0c0fd68e2f735dbd9d10bc3e3cda7867d6db4a50f3b7f8f1b731f2fbe1de827f889cb5d8afaa5bcd9f934a9c9795"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x10, 0xff, 0x8}]}, 0x3, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x449}}, {0x8e, &(0x7f00000006c0)=@string={0x8e, 0x3, "bdaf3437a0271b19bd3df4075b52155b9a8fa6f8894af7fcf80e3a71a1e5faa7a7c5a7944723b8630e22a5eaf33b79d503eaee296078408766739f7da0f70feca87d6cc537eb316e77a64663a660885fbd18f5eed25cde06fe3f69ab1fa665aeedb2d447abb20089433a15e2700a1e6a66af2dbd8fea7873028c6aeec9c8d3c379eb4a885ea0362a32af5a43"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x430}}]}) 3.459681925s ago: executing program 3 (id=2473): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x78, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x500) 3.459316805s ago: executing program 3 (id=2474): ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)={0xa000, 0x4800}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) getpid() munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3c, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x203, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x243, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x5, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x8, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0xa, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0xd, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x6, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x97, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x20763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x404, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xe, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr(r4, &(0x7f0000005f40)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e21, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_usb_connect(0x2, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003834a6b2099040d10a2840102030109025200010c2440070904b800018c8c02010900000000000000020924030203030201a60d2408010700bc5affd3dc187508240806050005f9072408020600030924030605030303070905032b3b"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) memfd_create(0x0, 0x18) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x6) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) copy_file_range(r9, 0x0, r9, 0x0, 0x3, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000001c0)="66b9800000c00f326635000800000f30b800008ee8f2f0095bf4fd0f20c06635040000000f22c0640f7812f2f20f32b808008ee8b819028ee8ba4100b008ee", 0x3f}], 0x1, 0x1, 0x0, 0x0) 3.036629539s ago: executing program 1 (id=2475): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0)=0x10, 0x4) socket(0xa, 0x2400000001, 0x0) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002440)=ANY=[], 0x1088}, 0x1, 0x0, 0x0, 0x4000800}, 0x2000c004) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x3, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.456045355s ago: executing program 0 (id=2476): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010102, @in6=@local, 0x0, 0x56, 0x2, 0x0, 0x2, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffb, 0x0, 0x82}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0xa, @in=@rand_addr=0x64010101, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8) r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00217f000000b102417ed7e7ab5d453fbee3b61e"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x49) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x196, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, 0x0, &(0x7f0000000040)) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) 1.472606595s ago: executing program 1 (id=2477): unshare(0x60000600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) mount$incfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x83, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000011000000000000000000aaff020000000000000000000000000001"], 0xffe) 1.379695226s ago: executing program 1 (id=2478): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x59, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xfffff21c, 0x4) utime(&(0x7f0000000100)='./file0\x00', 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)={0x280800, 0x0, 0xb232f190f48700b0}, 0x18) open_tree(r1, &(0x7f00000001c0)='./file0\x00', 0x8000) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 1.379528826s ago: executing program 1 (id=2479): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x85, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x7, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x0, 0xf00}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xfffffffffffffffd, 0x5, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x9, 0xffffffffffffffff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.328423627s ago: executing program 1 (id=2480): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000002c0)=@urb_type_control={0x2, {0xb, 0x1}, 0x2bf3, 0x4, &(0x7f0000000000)={0x20, 0x14, 0x7f, 0xfff, 0x5}, 0x8, 0xfc, 0x10, 0x0, 0x10, 0xe4, &(0x7f0000000200)="416f21970828ec5eb3015c81d9c63194abfccceaf0a56861fc372a860a92448a8a552341275825644f6ab8cda4dc21dd2c7b556925d765fd0c4a87921f40ac4d38c7dba1ed0322343e6b2b774bbf28b11c2a3c4ad1e748cacda7eb1972b5727069525fe2abac9cb3e46b181ce75de234a382d09ffc1c6e6c0867a79e7c503c84861dbaa0d0716f0c629b56cf60d2b0f34fae44b79d62ff15dfc26ee17561f7a3b4"}) setresgid(0x0, 0x0, 0xee01) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r4) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x78, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(r2, 0x4068aea3, &(0x7f0000000180)) 1.306394997s ago: executing program 1 (id=2481): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d0000090401010202"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40012020, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x1, 0x6b2c, 0x80000000, 0x4, 0x5, 0x3, 0x5, 0x3, 0xf39, 0x9, 0x1, 0xffff}}, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x6}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000200)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x2, 0xc0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0xdbf}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0x4, 0x4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x430, 0x0, 0x9, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x80, 0x1, 0x8}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0xd, 0x1, 0xd0, 0x8, 0x96}, 0x4b, &(0x7f0000000600)={0x5, 0xf, 0x4b, 0x2, [@generic={0x3c, 0x10, 0x1, "26bb9b04c356a0bfd0ed9f0c0fd68e2f735dbd9d10bc3e3cda7867d6db4a50f3b7f8f1b731f2fbe1de827f889cb5d8afaa5bcd9f934a9c9795"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x10, 0xff, 0x8}]}, 0x3, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x449}}, {0x8e, &(0x7f00000006c0)=@string={0x8e, 0x3, "bdaf3437a0271b19bd3df4075b52155b9a8fa6f8894af7fcf80e3a71a1e5faa7a7c5a7944723b8630e22a5eaf33b79d503eaee296078408766739f7da0f70feca87d6cc537eb316e77a64663a660885fbd18f5eed25cde06fe3f69ab1fa665aeedb2d447abb20089433a15e2700a1e6a66af2dbd8fea7873028c6aeec9c8d3c379eb4a885ea0362a32af5a43"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x430}}]}) 667.610573ms ago: executing program 2 (id=2482): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000007980)=ANY=[@ANYBLOB="6c6600001000010002000000fedbdf250c000000070000000000000044661180280012800c001e00010000000000000008eaff002d7bf200080002"], 0x666c}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 667.199053ms ago: executing program 2 (id=2483): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x154}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x40800) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x2, 0x41, 0x7f, 0x2, "aa9485eba56b29482f2fd37987d43b946701d3929596f415af592498a08390bd"}) (async) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x2, 0x41, 0x7f, 0x2, "aa9485eba56b29482f2fd37987d43b946701d3929596f415af592498a08390bd"}) sendto(r0, &(0x7f0000000300)="12f3ffffffffffffa0", 0xffffff81, 0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)={[{@noswap}]}) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000100)={0x0, 0x400003, 0xfffffffffffffffc, 0xffffffffffffffff, 0x10000000000, 0x7, 0x80000000, 0x3}, &(0x7f00000024c0)={0x40000000000009, 0x10000, 0x400000000001, 0x6, 0x40, 0x0, 0x0, 0x4}, 0x0, 0x0) recvfrom(r2, &(0x7f0000000480)=""/110, 0xfffffffffffffe9a, 0x734, 0x0, 0xfffffffffffffecb) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0x11}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 596.875294ms ago: executing program 2 (id=2484): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01008000000000000000010000001400020077673200000000000000ffef0000000058000880"], 0x80}}, 0x20000010) 457.458895ms ago: executing program 2 (id=2485): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000108701000c0c100000000000224e0000", 0x58}], 0x1) 457.227285ms ago: executing program 3 (id=2486): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0)=0x10, 0x4) socket(0xa, 0x2400000001, 0x0) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002440)=ANY=[], 0x1088}, 0x1, 0x0, 0x0, 0x4000800}, 0x2000c004) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x3, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 405.765556ms ago: executing program 32 (id=2485): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000108701000c0c100000000000224e0000", 0x58}], 0x1) 0s ago: executing program 4 (id=2487): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x29, 0x3, 0x0, {0x7, @ether_spec={@local, @remote, 0x1ff}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x0, 0x8000, [0x2, 0x2]}, @udp_ip6_spec={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, 0x4e23, 0x4e22, 0x9c}, {0x0, @broadcast, 0x3, 0x0, [0x3, 0x5]}, 0xfffffffffffffffe, 0x1}}}) mlockall(0x2) brk(0x689d80000000) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) sendmsg$tipc(r3, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) (async, rerun: 32) r4 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (rerun: 32) setpgid(r4, 0x0) (async) connect$tipc(r3, &(0x7f00000000c0)=@name, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x46, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): escriptor, different from the interface descriptor's value: 2 [ 164.865013][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 164.871698][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 164.880775][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.889415][ T9] usb 1-1: config 0 descriptor?? [ 165.194237][ T4740] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 165.200644][ T4740] cdc_mbim 3-1:1.0: bind() failure [ 165.206884][ T4740] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 165.213918][ T4740] cdc_ncm 3-1:1.1: bind() failure [ 165.296776][ T9] hid (null): unknown global tag 0xd [ 165.303240][ T9] magicmouse 0003:05AC:0265.0010: unknown main item tag 0x4 [ 165.311095][ T9] magicmouse 0003:05AC:0265.0010: unknown global tag 0xd [ 165.318164][ T9] magicmouse 0003:05AC:0265.0010: item 0 4 1 13 parsing failed [ 165.325948][ T9] magicmouse 0003:05AC:0265.0010: magicmouse hid parse failed [ 165.333834][ T9] magicmouse 0003:05AC:0265.0010: probe with driver magicmouse failed with error -22 [ 165.438895][ T5305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.447574][ T5305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.499793][ T9] usb 1-1: USB disconnect, device number 74 [ 165.747042][ T36] audit: type=1326 audit(2000000085.640:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.3.1820" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f543139cdd9 code=0x0 [ 166.020098][ T5312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.028830][ T5312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.149140][ T36] audit: type=1400 audit(2000000086.040:433): avc: denied { read write } for pid=5324 comm="syz.0.1825" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.172694][ T36] audit: type=1400 audit(2000000086.040:434): avc: denied { open } for pid=5324 comm="syz.0.1825" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.196489][ T36] audit: type=1400 audit(2000000086.040:435): avc: denied { ioctl } for pid=5324 comm="syz.0.1825" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.380595][ T9] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 166.530593][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 166.536949][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.547863][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.557648][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 166.566784][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.580568][ T9] usb 1-1: config 0 descriptor?? [ 166.589764][ T5328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.594524][ T9] hub 1-1:0.0: USB hub found [ 166.606680][ T5328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.790385][ T9] hub 1-1:0.0: 1 port detected [ 167.126779][ T346] usb 3-1: USB disconnect, device number 21 [ 167.400331][ T9] hub 1-1:0.0: activate --> -90 [ 167.460591][ T346] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 167.481414][ T5339] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.1831'. [ 167.490697][ T5339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1831'. [ 167.610559][ T346] usb 3-1: Using ep0 maxpacket: 16 [ 167.616842][ T346] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 167.625055][ T346] usb 3-1: config 0 has no interface number 0 [ 167.631180][ T346] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 167.638827][ T5343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.642754][ T346] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 167.650326][ T5343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.661605][ T346] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 167.672875][ T5343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.676894][ T346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.685297][ T5343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.693181][ T346] usb 3-1: Product: syz [ 167.704616][ T36] audit: type=1326 audit(2000000087.600:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.1.1833" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87b619cdd9 code=0x0 [ 167.704647][ T346] usb 3-1: Manufacturer: syz [ 167.734171][ T346] usb 3-1: SerialNumber: syz [ 167.739309][ T346] usb 3-1: config 0 descriptor?? [ 167.744824][ T5335] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 167.752037][ T5335] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 167.758872][ T5344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.769393][ T5344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.778277][ T5344] netlink: 'syz.1.1833': attribute type 46 has an invalid length. [ 167.972452][ T5335] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 167.979758][ T5335] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 168.001463][ T9] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 168.048795][ T36] audit: type=1326 audit(2000000087.940:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.3.1835" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f543139cdd9 code=0x0 [ 168.208035][ T329] usb 1-1: USB disconnect, device number 75 [ 168.214068][ T9] usb 1-1-port1: cannot disable (err = -71) [ 168.388130][ T346] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 255 [ 168.596961][ T346] usb 3-1: USB disconnect, device number 22 [ 169.107490][ T5367] netlink: 26148 bytes leftover after parsing attributes in process `syz.2.1842'. [ 169.116799][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1842'. [ 169.136423][ T36] audit: type=1400 audit(2000000089.030:438): avc: denied { mount } for pid=5368 comm="syz.2.1843" name="/" dev="ramfs" ino=24511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 169.400592][ T329] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 169.433823][ T36] audit: type=1326 audit(2000000089.330:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5376 comm="syz.3.1847" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f543139cdd9 code=0x0 [ 169.550585][ T329] usb 3-1: Using ep0 maxpacket: 32 [ 169.556912][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.567992][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.577885][ T329] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 169.587045][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.595737][ T329] usb 3-1: config 0 descriptor?? [ 169.601630][ T329] hub 3-1:0.0: USB hub found [ 169.706796][ T5382] syzkaller0: entered promiscuous mode [ 169.712563][ T5382] syzkaller0: entered allmulticast mode [ 169.802497][ T329] hub 3-1:0.0: 1 port detected [ 170.100617][ T346] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 170.250573][ T346] usb 1-1: Using ep0 maxpacket: 16 [ 170.256980][ T346] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 170.265203][ T346] usb 1-1: config 0 has no interface number 0 [ 170.271408][ T346] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 170.281779][ T346] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 170.293531][ T346] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 170.302748][ T346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.310982][ T346] usb 1-1: Product: syz [ 170.315366][ T346] usb 1-1: Manufacturer: syz [ 170.320029][ T346] usb 1-1: SerialNumber: syz [ 170.326180][ T346] usb 1-1: config 0 descriptor?? [ 170.331929][ T5385] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 170.339225][ T5385] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 170.407666][ T329] hub 3-1:0.0: activate --> -90 [ 170.545381][ T5395] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.1853'. [ 170.548200][ T5385] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 170.554806][ T5395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1853'. [ 170.561921][ T5385] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 170.736149][ T5401] netlink: 'syz.1.1856': attribute type 3 has an invalid length. [ 170.744031][ T5401] netlink: 944 bytes leftover after parsing attributes in process `syz.1.1856'. [ 170.897387][ T36] audit: type=1326 audit(2000000090.790:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.1.1859" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87b619cdd9 code=0x0 [ 170.985140][ T346] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 255 [ 171.011907][ T329] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 171.187181][ T9] usb 1-1: USB disconnect, device number 76 [ 171.215437][ T319] usb 3-1: USB disconnect, device number 23 [ 171.215670][ T329] usb 3-1-port1: cannot disable (err = -71) [ 171.611656][ T5417] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.1862'. [ 171.620972][ T5417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1862'. [ 171.708146][ T5424] netlink: 'syz.0.1865': attribute type 3 has an invalid length. [ 171.716059][ T5424] netlink: 944 bytes leftover after parsing attributes in process `syz.0.1865'. [ 171.838648][ T5437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.847227][ T5437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.856104][ T36] audit: type=1400 audit(2000000091.750:441): avc: denied { create } for pid=5436 comm="syz.1.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.876348][ T5437] sit0: entered promiscuous mode [ 171.882436][ T5437] netlink: 'syz.1.1871': attribute type 1 has an invalid length. [ 172.220609][ T319] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 172.370576][ T319] usb 3-1: Using ep0 maxpacket: 16 [ 172.376799][ T319] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 172.385105][ T319] usb 3-1: config 0 has no interface number 0 [ 172.391329][ T319] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 172.401466][ T319] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 172.413085][ T319] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 172.413796][ T5447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.422476][ T319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.432297][ T5447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.438904][ T319] usb 3-1: Product: syz [ 172.450765][ T319] usb 3-1: Manufacturer: syz [ 172.455390][ T319] usb 3-1: SerialNumber: syz [ 172.460807][ T319] usb 3-1: config 0 descriptor?? [ 172.466091][ T5441] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 172.473707][ T5441] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 172.493135][ T36] audit: type=1326 audit(2000000092.390:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.3.1878" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f543139cdd9 code=0x0 [ 172.682995][ T5441] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 172.690269][ T5441] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 173.098848][ T319] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 255 [ 173.120074][ T5463] __nla_validate_parse: 3 callbacks suppressed [ 173.120087][ T5463] netlink: 26148 bytes leftover after parsing attributes in process `syz.1.1883'. [ 173.135700][ T5463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1883'. [ 173.153367][ T5465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.161921][ T5465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.304130][ T9] usb 3-1: USB disconnect, device number 24 [ 173.687534][ T5479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.696106][ T5479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.840634][ T9] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 173.845288][ T36] audit: type=1326 audit(2000000093.740:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.3.1893" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f543139cdd9 code=0x0 [ 173.990565][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 173.996813][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.007913][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.017776][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 174.026846][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.035409][ T9] usb 1-1: config 0 descriptor?? [ 174.041391][ T9] hub 1-1:0.0: USB hub found [ 174.150606][ T64] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 174.249432][ T9] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 174.280572][ T64] usb 3-1: device descriptor read/64, error -71 [ 174.312089][ T5495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.320857][ T5494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.321601][ T5495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.329446][ T5494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.338629][ T5495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1897'. [ 174.459525][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 174.465560][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 174.490940][ T9] usb 1-1: USB disconnect, device number 77 [ 174.520583][ T64] usb 3-1: device descriptor read/64, error -71 [ 174.760565][ T64] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 174.864694][ T5503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.873385][ T5503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.874665][ T5504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.890408][ T5504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.898279][ T64] usb 3-1: device descriptor read/64, error -71 [ 175.141608][ T64] usb 3-1: device descriptor read/64, error -71 [ 175.229782][ T36] audit: type=1326 audit(2000000095.120:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.3.1906" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f543139cdd9 code=0x0 [ 175.254505][ T9] usb 1-1: new low-speed USB device number 78 using dummy_hcd [ 175.260762][ T64] usb usb3-port1: attempt power cycle [ 175.411600][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 175.422917][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 175.433848][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 175.446662][ T9] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 175.455731][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.464279][ T9] usb 1-1: config 0 descriptor?? [ 175.469503][ T5511] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.600582][ T64] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 175.621759][ T64] usb 3-1: device descriptor read/8, error -71 [ 175.751624][ T64] usb 3-1: device descriptor read/8, error -71 [ 175.878194][ T5511] No source specified [ 175.883499][ T9] sony 0003:1345:3008.0011: unknown main item tag 0x3 [ 175.890424][ T9] sony 0003:1345:3008.0011: unknown main item tag 0x0 [ 175.897271][ T9] sony 0003:1345:3008.0011: unknown main item tag 0x0 [ 175.904081][ T9] sony 0003:1345:3008.0011: unknown main item tag 0x0 [ 175.910889][ T9] sony 0003:1345:3008.0011: unknown main item tag 0x0 [ 175.917795][ T9] sony 0003:1345:3008.0011: unknown main item tag 0x0 [ 175.924590][ T9] sony 0003:1345:3008.0011: unknown main item tag 0x0 [ 175.931490][ T9] sony 0003:1345:3008.0011: unknown main item tag 0x0 [ 175.939525][ T9] sony 0003:1345:3008.0011: hiddev96,hidraw0: USB HID v80.06 Device [HID 1345:3008] on usb-dummy_hcd.0-1/input0 [ 175.951998][ T9] sony 0003:1345:3008.0011: failed to claim input [ 175.990607][ T64] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 176.011594][ T64] usb 3-1: device descriptor read/8, error -71 [ 176.084174][ T5525] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5525 comm=syz.3.1908 [ 176.085812][ T319] usb 1-1: USB disconnect, device number 78 [ 176.097535][ T36] audit: type=1400 audit(2000000095.990:445): avc: denied { execmem } for pid=5524 comm="syz.3.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 176.122524][ T36] audit: type=1400 audit(2000000096.000:446): avc: denied { bpf } for pid=5524 comm="syz.3.1908" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 176.127467][ T5525] 9pnet_fd: Insufficient options for proto=fd [ 176.143251][ T36] audit: type=1400 audit(2000000096.020:447): avc: denied { write } for pid=5524 comm="syz.3.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.150099][ T64] usb 3-1: device descriptor read/8, error -71 [ 176.169325][ T36] audit: type=1400 audit(2000000096.020:448): avc: denied { nlmsg_write } for pid=5524 comm="syz.3.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.224870][ T36] audit: type=1400 audit(2000000096.120:449): avc: denied { ioctl } for pid=5530 comm="syz.3.1911" path="socket:[27285]" dev="sockfs" ino=27285 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.290661][ T64] usb usb3-port1: unable to enumerate USB device [ 176.830305][ T2922] bridge0: port 3(syz_tun) entered disabled state [ 176.838144][ T2922] bridge0: port 3(syz_tun) entered disabled state [ 176.850601][ T64] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 176.879509][ T5541] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.886660][ T5541] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.893995][ T5541] bridge_slave_0: entered allmulticast mode [ 176.900226][ T5541] bridge_slave_0: entered promiscuous mode [ 176.906618][ T5541] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.913697][ T5541] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.920894][ T5541] bridge_slave_1: entered allmulticast mode [ 176.927236][ T5541] bridge_slave_1: entered promiscuous mode [ 176.949816][ T36] audit: type=1326 audit(2000000096.840:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5545 comm="syz.2.1915" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff5cc99cdd9 code=0x0 [ 176.981384][ T5541] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.988425][ T5541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.995707][ T5541] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.002793][ T5541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.020577][ T64] usb 1-1: Using ep0 maxpacket: 16 [ 177.026846][ T64] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 177.035066][ T1444] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.035321][ T64] usb 1-1: config 0 has no interface number 0 [ 177.048726][ T1444] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.049382][ T64] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 177.066217][ T64] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 177.078205][ T64] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 177.081007][ T1442] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.090555][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.094739][ T1442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.103053][ T64] usb 1-1: Product: syz [ 177.111117][ T1442] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.114676][ T64] usb 1-1: Manufacturer: syz [ 177.121372][ T1442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.126080][ T64] usb 1-1: SerialNumber: syz [ 177.139167][ T64] usb 1-1: config 0 descriptor?? [ 177.144456][ T5539] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 177.151760][ T5539] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 177.161286][ T5541] veth0_vlan: entered promiscuous mode [ 177.172814][ T5541] veth1_macvtap: entered promiscuous mode [ 177.353689][ T5557] netlink: 'syz.3.1918': attribute type 4 has an invalid length. [ 177.362949][ T5539] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 177.370250][ T5539] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 177.779143][ T64] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 255 [ 177.985606][ T319] usb 1-1: USB disconnect, device number 79 [ 178.100587][ T64] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 178.240675][ T64] usb 3-1: device descriptor read/64, error -71 [ 178.270075][ T36] audit: type=1326 audit(2000000098.160:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.3.1932" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa6c479cdd9 code=0x0 [ 178.492911][ T64] usb 3-1: device descriptor read/64, error -71 [ 178.730588][ T64] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 178.750628][ T329] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 178.860589][ T64] usb 3-1: device descriptor read/64, error -71 [ 178.900665][ T329] usb 1-1: Using ep0 maxpacket: 32 [ 178.911959][ T329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.923073][ T329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.933178][ T329] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 178.942489][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.951555][ T329] usb 1-1: config 0 descriptor?? [ 178.963587][ T329] hub 1-1:0.0: USB hub found [ 179.100574][ T64] usb 3-1: device descriptor read/64, error -71 [ 179.169354][ T329] hub 1-1:0.0: 1 port detected [ 179.211104][ T64] usb usb3-port1: attempt power cycle [ 179.560551][ T64] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 179.591612][ T64] usb 3-1: device descriptor read/8, error -71 [ 179.731633][ T64] usb 3-1: device descriptor read/8, error -71 [ 179.778888][ T329] hub 1-1:0.0: activate --> -90 [ 179.868130][ T36] audit: type=1326 audit(2000000099.760:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.1.1947" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87b619cdd9 code=0x0 [ 179.970578][ T64] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 179.991582][ T64] usb 3-1: device descriptor read/8, error -71 [ 180.121673][ T64] usb 3-1: device descriptor read/8, error -71 [ 180.230655][ T64] usb usb3-port1: unable to enumerate USB device [ 180.380560][ T329] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 180.580365][ T10] usb 1-1: USB disconnect, device number 80 [ 180.586387][ T329] usb 1-1-port1: cannot disable (err = -71) [ 181.260632][ T319] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 181.376320][ T5666] netlink: 'syz.1.1962': attribute type 4 has an invalid length. [ 181.384230][ T64] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 181.407908][ T36] audit: type=1326 audit(2000000101.300:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.1963" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87b619cdd9 code=0x0 [ 181.442158][ T319] usb 3-1: unable to get BOS descriptor or descriptor too short [ 181.450608][ T319] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 181.463882][ T319] usb 3-1: string descriptor 0 read error: -22 [ 181.470093][ T319] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 181.479528][ T319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.540563][ T64] usb 1-1: Using ep0 maxpacket: 16 [ 181.546705][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.558381][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.568191][ T64] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 181.577269][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.586299][ T64] usb 1-1: config 0 descriptor?? [ 181.994448][ T64] apple 0003:05AC:024B.0012: unknown global tag 0xe [ 182.004588][ T64] apple 0003:05AC:024B.0012: item 0 1 1 14 parsing failed [ 182.011974][ T64] apple 0003:05AC:024B.0012: parse failed [ 182.017895][ T64] apple 0003:05AC:024B.0012: probe with driver apple failed with error -22 [ 182.228218][ T5664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.236993][ T5664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.245798][ T64] usb 1-1: USB disconnect, device number 81 [ 182.343036][ T5679] 9pnet: p9_errstr2errno: server reported unknown error tun [ 182.357582][ T5679] support for cryptoloop has been removed. Use dm-crypt instead. [ 182.462118][ T5682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.470828][ T5682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.479459][ T5682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.488033][ T5682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.696746][ T5653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.705376][ T5653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.717388][ T319] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 182.729171][ T319] usb 3-1: USB disconnect, device number 33 [ 183.009463][ T36] audit: type=1326 audit(2000000102.900:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5701 comm="syz.1.1975" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87b619cdd9 code=0x0 [ 183.120589][ T10] usb 1-1: new low-speed USB device number 82 using dummy_hcd [ 183.160781][ T319] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 183.272201][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 183.280584][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 183.292138][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 4 [ 183.303014][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 221, setting to 0 [ 183.310556][ T319] usb 3-1: device descriptor read/64, error -71 [ 183.313736][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 183.329751][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 183.339586][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 183.349286][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 183.361103][ T10] usb 1-1: string descriptor 0 read error: -22 [ 183.367306][ T10] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 183.376384][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.384969][ T10] usb 1-1: config 0 descriptor?? [ 183.390236][ T5700] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 183.404094][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 183.550722][ T319] usb 3-1: device descriptor read/64, error -71 [ 183.608208][ T5710] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1978'. [ 183.790596][ T319] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 183.891491][ T5730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.900085][ T5730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.920577][ T319] usb 3-1: device descriptor read/64, error -71 [ 184.106911][ T64] usb 1-1: USB disconnect, device number 82 [ 184.160606][ T319] usb 3-1: device descriptor read/64, error -71 [ 184.270664][ T319] usb usb3-port1: attempt power cycle [ 184.381887][ T5742] ip6gretap0: entered promiscuous mode [ 184.387396][ T5742] ip6gretap0: entered allmulticast mode [ 184.423282][ T5747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.432208][ T5747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.440616][ T5747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.449198][ T5747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.458259][ T5747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.466812][ T5747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.493217][ T36] audit: type=1326 audit(2000000104.390:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.1.1992" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87b619cdd9 code=0x0 [ 184.557068][ T36] audit: type=1400 audit(2000000104.450:456): avc: denied { mounton } for pid=5756 comm="syz.0.1994" path="/244/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 184.610580][ T319] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 184.631473][ T319] usb 3-1: device descriptor read/8, error -71 [ 184.761587][ T319] usb 3-1: device descriptor read/8, error -71 [ 185.000562][ T319] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 185.010570][ T9] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 185.021618][ T319] usb 3-1: device descriptor read/8, error -71 [ 185.160570][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 185.161744][ T319] usb 3-1: device descriptor read/8, error -71 [ 185.167076][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.183191][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.192966][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 185.202020][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.210689][ T9] usb 1-1: config 0 descriptor?? [ 185.216585][ T9] hub 1-1:0.0: USB hub found [ 185.280730][ T319] usb usb3-port1: unable to enumerate USB device [ 185.380604][ T5792] netlink: 26148 bytes leftover after parsing attributes in process `syz.1.2006'. [ 185.390042][ T5792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'. [ 185.408622][ T36] audit: type=1326 audit(2000000105.300:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.1.2007" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87b619cdd9 code=0x0 [ 185.434871][ T9] hub 1-1:0.0: 1 port detected [ 185.867392][ T5802] tipc: Started in network mode [ 185.872336][ T5802] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 185.881454][ T5802] tipc: Enabling of bearer rejected, failed to enable media [ 186.041877][ T64] hub 1-1:0.0: activate --> -90 [ 186.280567][ T319] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 186.304810][ T36] audit: type=1326 audit(2000000106.200:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.1.2014" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87b619cdd9 code=0x0 [ 186.431724][ T319] usb 3-1: config 0 interface 0 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.444877][ T319] usb 3-1: config 0 interface 0 has no altsetting 0 [ 186.451601][ T319] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 186.460707][ T319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.469675][ T319] usb 3-1: config 0 descriptor?? [ 186.645283][ T64] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 186.846028][ T45] usb 1-1: USB disconnect, device number 83 [ 186.852064][ T64] usb 1-1-port1: cannot disable (err = -71) [ 186.876603][ T319] hid (null): unknown global tag 0xd [ 186.883604][ T319] magicmouse 0003:05AC:0265.0013: unknown main item tag 0x4 [ 186.891078][ T319] magicmouse 0003:05AC:0265.0013: unknown global tag 0xd [ 186.898114][ T319] magicmouse 0003:05AC:0265.0013: item 0 4 1 13 parsing failed [ 186.905862][ T319] magicmouse 0003:05AC:0265.0013: magicmouse hid parse failed [ 186.913379][ T319] magicmouse 0003:05AC:0265.0013: probe with driver magicmouse failed with error -22 [ 186.955180][ T36] audit: type=1400 audit(2000000106.850:459): avc: denied { associate } for pid=5821 comm="syz.3.2017" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 187.144970][ T45] usb 3-1: USB disconnect, device number 38 [ 187.190125][ T5832] overlay: filesystem on ./bus not supported as upperdir [ 187.198210][ T5834] overlay: filesystem on ./bus not supported as upperdir [ 187.249092][ T5839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.257632][ T5839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.361414][ T5841] netlink: 26148 bytes leftover after parsing attributes in process `syz.0.2024'. [ 187.370745][ T5841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2024'. [ 187.620613][ T45] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 187.746468][ T36] audit: type=1326 audit(187.726:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.2.2030" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff5cc99cdd9 code=0x0 [ 187.792293][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.802908][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.814038][ T45] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 187.831549][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.840856][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.848875][ T45] usb 1-1: Product: syz [ 187.853151][ T45] usb 1-1: Manufacturer: syz [ 187.857743][ T45] usb 1-1: SerialNumber: syz [ 187.869152][ T45] cdc_mbim 1-1:1.0: skipping garbage [ 187.874327][ T5860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.883209][ T5860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.892174][ T5860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.901264][ T5860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.418606][ T5865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.427592][ T5865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.630407][ T5874] netlink: 26148 bytes leftover after parsing attributes in process `syz.2.2036'. [ 188.639778][ T5874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2036'. [ 188.870245][ T45] cdc_mbim 1-1:1.0: bind() failure [ 188.876421][ T45] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 188.883504][ T45] cdc_ncm 1-1:1.1: bind() failure [ 188.890594][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 189.040603][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 189.046997][ T9] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 189.055183][ T9] usb 3-1: config 0 has no interface number 0 [ 189.061375][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 189.071478][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 189.074330][ T319] usb 1-1: USB disconnect, device number 84 [ 189.085785][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 189.096663][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.104751][ T9] usb 3-1: Product: syz [ 189.108998][ T9] usb 3-1: Manufacturer: syz [ 189.113699][ T9] usb 3-1: SerialNumber: syz [ 189.119478][ T9] usb 3-1: config 0 descriptor?? [ 189.124924][ T5878] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 189.132209][ T5878] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 189.341429][ T5878] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 189.348843][ T5878] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 189.601924][ T36] audit: type=1326 audit(189.586:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5888 comm="syz.0.2044" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f244879cdd9 code=0x0 [ 189.757014][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 255 [ 189.878522][ T5899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.887120][ T5899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.958806][ T9] usb 3-1: USB disconnect, device number 39 [ 190.212473][ T5903] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.2050'. [ 190.221963][ T5903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2050'. [ 190.495719][ T36] audit: type=1400 audit(190.476:462): avc: denied { listen } for pid=5921 comm="syz.0.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.660783][ T5930] netlink: 26148 bytes leftover after parsing attributes in process `syz.0.2060'. [ 190.670068][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2060'. [ 190.710632][ T319] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 190.860594][ T319] usb 3-1: Using ep0 maxpacket: 16 [ 190.866873][ T319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.877928][ T319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.888039][ T319] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 190.900959][ T319] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 190.910030][ T319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.924120][ T9] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 190.924486][ T319] usb 3-1: config 0 descriptor?? [ 190.996888][ T36] audit: type=1326 audit(190.976:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5933 comm="syz.1.2062" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87b619cdd9 code=0x0 [ 191.100619][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 191.106937][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.117179][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 191.126201][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 191.135280][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.144096][ T9] usb 1-1: config 0 descriptor?? [ 191.251472][ T5951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.260395][ T5951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.350536][ T319] appleir 0003:05AC:8241.0014: unknown main item tag 0x0 [ 191.357709][ T319] appleir 0003:05AC:8241.0014: unknown main item tag 0x0 [ 191.364882][ T319] appleir 0003:05AC:8241.0014: unknown main item tag 0x0 [ 191.372002][ T319] appleir 0003:05AC:8241.0014: unknown main item tag 0x0 [ 191.379176][ T319] appleir 0003:05AC:8241.0014: No inputs registered, leaving [ 191.387761][ T319] appleir 0003:05AC:8241.0014: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 191.612906][ T10] usb 3-1: USB disconnect, device number 40 [ 191.779447][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.788106][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.000953][ T5963] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.2072'. [ 192.010325][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2072'. [ 192.322353][ T5993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.341135][ T5993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.579465][ T6004] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.2082'. [ 192.833114][ T6010] incfs: Error accessing: ./bus. [ 192.838750][ T6010] incfs: mount failed -2 [ 192.993779][ T6017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.009218][ T6017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.045897][ T6017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.069018][ T6017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.160550][ T45] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 193.321601][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.340551][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.351683][ T45] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 193.366340][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.375612][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.385584][ T45] usb 3-1: Product: syz [ 193.389781][ T45] usb 3-1: Manufacturer: syz [ 193.400713][ T45] usb 3-1: SerialNumber: syz [ 193.412168][ T45] cdc_mbim 3-1:1.0: skipping garbage [ 193.708655][ T319] usb 1-1: USB disconnect, device number 85 [ 193.893065][ T6046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.910763][ T6046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.090570][ T319] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 194.241675][ T319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.260531][ T319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.270391][ T319] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 194.290563][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.299422][ T319] usb 1-1: config 0 descriptor?? [ 194.413083][ T45] cdc_mbim 3-1:1.0: bind() failure [ 194.426561][ T45] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 194.438873][ T45] cdc_ncm 3-1:1.1: bind() failure [ 194.515794][ T6050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.531235][ T6050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.615481][ T10] usb 3-1: USB disconnect, device number 41 [ 194.711980][ T319] hid-led 0003:1D34:000A.0015: unknown main item tag 0x3 [ 194.759315][ T5978] syz.3.2073 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 194.778460][ T5978] CPU: 1 UID: 0 PID: 5978 Comm: syz.3.2073 Not tainted syzkaller #0 fb88d4f85f77cf6c597a9679d4a606940e6190c4 [ 194.778499][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.778513][ T5978] Call Trace: [ 194.778520][ T5978] [ 194.778528][ T5978] __dump_stack+0x21/0x30 [ 194.778561][ T5978] dump_stack_lvl+0x140/0x1c0 [ 194.778587][ T5978] ? __cfi_dump_stack_lvl+0x10/0x10 [ 194.778613][ T5978] ? ___ratelimit+0x40e/0x5b0 [ 194.778634][ T5978] dump_stack+0x19/0x20 [ 194.778659][ T5978] dump_header+0xd6/0x490 [ 194.778684][ T5978] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 194.778711][ T5978] oom_kill_process+0x35d/0x640 [ 194.778733][ T5978] out_of_memory+0x624/0xa30 [ 194.778754][ T5978] ? __cfi_out_of_memory+0x10/0x10 [ 194.778775][ T5978] ? mutex_lock_killable+0x97/0x1d0 [ 194.778798][ T5978] ? __cfi_mutex_lock_killable+0x10/0x10 [ 194.778827][ T5978] mem_cgroup_out_of_memory+0x2c8/0x390 [ 194.778848][ T5978] ? css_next_descendant_pre+0x202/0x230 [ 194.778872][ T5978] ? drain_obj_stock+0xed0/0xed0 [ 194.778894][ T5978] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 194.778913][ T5978] try_charge_memcg+0x91c/0xe10 [ 194.778939][ T5978] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 194.778959][ T5978] ? __cfi_try_charge_memcg+0x10/0x10 [ 194.778986][ T5978] ? __alloc_pages_noprof+0x35f/0x7e0 [ 194.779013][ T5978] __mem_cgroup_charge+0xfc/0x420 [ 194.779040][ T5978] ? filemap_get_entry+0x41b/0x490 [ 194.779063][ T5978] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 194.779092][ T5978] filemap_add_folio+0x57/0x3e0 [ 194.779114][ T5978] __filemap_get_folio+0x5f0/0xba0 [ 194.779138][ T5978] ? __cfi___filemap_get_folio+0x10/0x10 [ 194.779161][ T5978] ? filemap_map_pages+0x17db/0x1b90 [ 194.779184][ T5978] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 194.779209][ T5978] filemap_fault+0xbcb/0x1b40 [ 194.779235][ T5978] ? __cfi_filemap_fault+0x10/0x10 [ 194.779257][ T5978] ? __kasan_check_read+0x15/0x20 [ 194.779275][ T5978] ? __cfi_filemap_map_pages+0x10/0x10 [ 194.779300][ T5978] ? vma_data_pages+0x10f/0x150 [ 194.779328][ T5978] do_pte_missing+0x360d/0x4410 [ 194.779353][ T5978] ? shmem_inode_acct_blocks+0x361/0x470 [ 194.779372][ T5978] ? shmem_alloc_and_add_folio+0xd86/0x10b0 [ 194.779390][ T5978] ? pte_marker_clear+0x1b0/0x1b0 [ 194.779416][ T5978] ? put_swap_device+0x130/0x130 [ 194.779434][ T5978] ? __pte_offset_map+0x1b0/0x230 [ 194.779456][ T5978] ? pte_offset_map_rw_nolock+0xba/0x110 [ 194.779479][ T5978] handle_mm_fault+0x11b8/0x1bf0 [ 194.779497][ T5978] ? __kasan_check_write+0x18/0x20 [ 194.779514][ T5978] ? __cfi_handle_mm_fault+0x10/0x10 [ 194.779532][ T5978] ? follow_page_pte+0x2c8/0xbc0 [ 194.779554][ T5978] ? gup_must_unshare+0x1e0/0x1e0 [ 194.779575][ T5978] ? vma_is_secretmem+0x11/0x50 [ 194.779598][ T5978] __get_user_pages+0x1170/0x22b0 [ 194.779618][ T5978] ? __kasan_check_write+0x18/0x20 [ 194.779635][ T5978] ? populate_vma_page_range+0x220/0x220 [ 194.779655][ T5978] ? __kernel_write_iter+0x6a4/0x8a0 [ 194.779672][ T5978] get_dump_page+0x10c/0x220 [ 194.779692][ T5978] ? __cfi_get_dump_page+0x10/0x10 [ 194.779711][ T5978] ? __asan_memset+0x39/0x50 [ 194.779726][ T5978] dump_user_range+0x18b/0xe60 [ 194.779745][ T5978] ? __cfi_dump_user_range+0x10/0x10 [ 194.779762][ T5978] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 194.779787][ T5978] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 194.779811][ T5978] ? elf_core_dump+0x24c0/0x3960 [ 194.779836][ T5978] elf_core_dump+0x2e7e/0x3960 [ 194.779857][ T5978] ? __cfi_elf_core_dump+0x10/0x10 [ 194.779882][ T5978] ? dump_interrupted+0xf0/0xf0 [ 194.779896][ T5978] ? filp_open+0x199/0x1f0 [ 194.779917][ T5978] ? 0xffffffffff600000 [ 194.779931][ T5978] do_coredump+0x208d/0x2fe0 [ 194.779949][ T5978] ? __cfi_do_coredump+0x10/0x10 [ 194.779963][ T5978] ? asm_exc_page_fault+0x2b/0x30 [ 194.779984][ T5978] ? __kasan_slab_free+0x6a/0x80 [ 194.780002][ T5978] ? kmem_cache_free+0x1bd/0x4f0 [ 194.780019][ T5978] ? get_signal+0xa74/0x14e0 [ 194.780042][ T5978] get_signal+0x11f8/0x14e0 [ 194.780065][ T5978] arch_do_signal_or_restart+0xbc/0x760 [ 194.780082][ T5978] ? fixup_vdso_exception+0x20d/0x310 [ 194.780104][ T5978] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 194.780123][ T5978] irqentry_exit_to_user_mode+0x4d/0xb0 [ 194.780143][ T5978] irqentry_exit+0x16/0x60 [ 194.780161][ T5978] exc_page_fault+0x65/0xc0 [ 194.780180][ T5978] asm_exc_page_fault+0x2b/0x30 [ 194.780194][ T5978] RIP: 0033:0x7fa6c479cde1 [ 194.780220][ T5978] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 194.780234][ T5978] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 194.780251][ T5978] RAX: 0000000000000000 RBX: 00007fa6c4a15fa0 RCX: 00007fa6c479cdd9 [ 194.780272][ T5978] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 194.780285][ T5978] RBP: 00007fa6c4832d69 R08: 0000000000000000 R09: 0000000000000000 [ 194.780296][ T5978] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 194.780306][ T5978] R13: 00007fa6c4a16038 R14: 00007fa6c4a15fa0 R15: 00007ffe65adc548 [ 194.780321][ T5978] [ 194.780347][ T5978] memory: usage 307200kB, limit 307200kB, failcnt 22429 [ 195.141102][ T6052] netlink: 26148 bytes leftover after parsing attributes in process `syz.2.2096'. [ 195.143788][ T5978] memory+swap: usage 431516kB, limit 9007199254740988kB, failcnt 0 [ 195.264897][ T6056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.273105][ T319] hid-led 0003:1D34:000A.0015: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 195.280002][ T5978] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 195.284065][ T319] hid-led 0003:1D34:000A.0015: Dream Cheeky Webmail Notifier initialized [ 195.293079][ T6056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.302190][ T319] usb 1-1: USB disconnect, device number 86 [ 195.309101][ T5978] Memory cgroup stats for [ 195.342575][ T6057] fido_id[6057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 195.354597][ T5978] /syz3: [ 195.368308][ T5978] cache 314314752 [ 195.375187][ T5978] rss 258048 [ 195.378416][ T5978] rss_huge 0 [ 195.381851][ T5978] shmem 250933248 [ 195.385586][ T5978] mapped_file 4096 [ 195.389636][ T5978] dirty 4096 [ 195.393136][ T5978] writeback 0 [ 195.396461][ T5978] workingset_refault_anon 38 [ 195.401237][ T5978] workingset_refault_file 1330 [ 195.406027][ T5978] swap 127299584 [ 195.409556][ T5978] swapcached 40960 [ 195.413294][ T5978] pgpgin 259143 [ 195.416751][ T5978] pgpgout 182854 [ 195.420275][ T5978] pgfault 145930 [ 195.423858][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 195.424085][ T5978] pgmajfault 68 [ 195.434949][ T5978] inactive_anon 167936 [ 195.439186][ T5978] active_anon 251023360 [ 195.443368][ T5978] inactive_file 16384 [ 195.447355][ T5978] active_file 0 [ 195.450879][ T5978] unevictable 63365120 [ 195.454974][ T5978] hierarchical_memory_limit 314572800 [ 195.460418][ T5978] hierarchical_memsw_limit 9223372036854771712 [ 195.466588][ T5978] total_cache 314314752 [ 195.470823][ T5978] total_rss 258048 [ 195.474527][ T5978] total_rss_huge 0 [ 195.478234][ T5978] total_shmem 250933248 [ 195.482455][ T5978] total_mapped_file 4096 [ 195.486688][ T5978] total_dirty 4096 [ 195.490420][ T5978] total_writeback 0 [ 195.494262][ T5978] total_workingset_refault_anon 38 [ 195.499388][ T5978] total_workingset_refault_file 1330 [ 195.504836][ T5978] total_swap 127299584 [ 195.508963][ T5978] total_swapcached 40960 [ 195.513244][ T5978] total_pgpgin 259143 [ 195.517237][ T5978] total_pgpgout 182854 [ 195.521357][ T5978] total_pgfault 145930 [ 195.525422][ T5978] total_pgmajfault 68 [ 195.529394][ T5978] total_inactive_anon 167936 [ 195.534081][ T5978] total_active_anon 251023360 [ 195.538758][ T5978] total_inactive_file 16384 [ 195.543601][ T5978] total_active_file 0 [ 195.547604][ T5978] total_unevictable 63365120 [ 195.552456][ T5978] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2073,pid=5972,uid=0 [ 195.567493][ T5978] Memory cgroup out of memory: Killed process 5972 (syz.3.2073) total-vm:90508kB, anon-rss:1252kB, file-rss:22120kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:0 [ 195.585573][ T10] usb 3-1: config 0 interface 0 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.608375][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 195.621716][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 195.640599][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.649369][ T10] usb 3-1: config 0 descriptor?? [ 195.656500][ T5971] syz.3.2073 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 195.730695][ T5971] CPU: 1 UID: 0 PID: 5971 Comm: syz.3.2073 Not tainted syzkaller #0 fb88d4f85f77cf6c597a9679d4a606940e6190c4 [ 195.730730][ T5971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.730743][ T5971] Call Trace: [ 195.730749][ T5971] [ 195.730758][ T5971] __dump_stack+0x21/0x30 [ 195.730791][ T5971] dump_stack_lvl+0x140/0x1c0 [ 195.730818][ T5971] ? __cfi_dump_stack_lvl+0x10/0x10 [ 195.730844][ T5971] ? ___ratelimit+0x40e/0x5b0 [ 195.730865][ T5971] dump_stack+0x19/0x20 [ 195.730891][ T5971] dump_header+0xd6/0x490 [ 195.730915][ T5971] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 195.730942][ T5971] oom_kill_process+0x35d/0x640 [ 195.730965][ T5971] out_of_memory+0x624/0xa30 [ 195.730986][ T5971] ? __cfi_out_of_memory+0x10/0x10 [ 195.731007][ T5971] ? mutex_lock_killable+0x97/0x1d0 [ 195.731029][ T5971] ? __cfi_mutex_lock_killable+0x10/0x10 [ 195.731052][ T5971] mem_cgroup_out_of_memory+0x2c8/0x390 [ 195.731073][ T5971] ? css_next_descendant_pre+0x202/0x230 [ 195.731098][ T5971] ? drain_obj_stock+0xed0/0xed0 [ 195.731123][ T5971] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 195.731146][ T5971] try_charge_memcg+0x91c/0xe10 [ 195.731172][ T5971] ? finish_fault+0xe63/0x1140 [ 195.731194][ T5971] ? __cfi_try_charge_memcg+0x10/0x10 [ 195.731220][ T5971] ? __alloc_pages_noprof+0x35f/0x7e0 [ 195.731247][ T5971] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 195.731274][ T5971] __mem_cgroup_charge+0xfc/0x420 [ 195.731301][ T5971] ? do_pte_missing+0x3859/0x4410 [ 195.731325][ T5971] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 195.731360][ T5971] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 195.731385][ T5971] ? put_swap_device+0x130/0x130 [ 195.731407][ T5971] ? shmem_huge_global_enabled+0x2da/0x360 [ 195.731429][ T5971] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 195.731450][ T5971] ? __kasan_check_write+0x18/0x20 [ 195.731469][ T5971] ? _raw_spin_lock+0x92/0x120 [ 195.731495][ T5971] shmem_get_folio_gfp+0x607/0x1390 [ 195.731519][ T5971] ? shmem_get_folio+0xc0/0xc0 [ 195.731539][ T5971] ? __kasan_check_write+0x18/0x20 [ 195.731557][ T5971] ? inode_to_bdi+0x6d/0x100 [ 195.731589][ T5971] shmem_write_begin+0xf4/0x270 [ 195.731612][ T5971] generic_perform_write+0x328/0x970 [ 195.731637][ T5971] ? inode_update_timestamps+0x4f0/0x700 [ 195.731666][ T5971] ? __cfi_generic_perform_write+0x10/0x10 [ 195.731690][ T5971] ? down_write+0xee/0x2b0 [ 195.731712][ T5971] ? mnt_get_write_access_file+0x1af/0x3b0 [ 195.731738][ T5971] ? mnt_put_write_access_file+0xc2/0x100 [ 195.731764][ T5971] ? file_update_time+0x1de/0x210 [ 195.731790][ T5971] shmem_file_write_iter+0x105/0x130 [ 195.731815][ T5971] __kernel_write_iter+0x42f/0x8a0 [ 195.731834][ T5971] ? __cfi___kernel_write_iter+0x10/0x10 [ 195.731853][ T5971] ? get_dump_page+0x165/0x220 [ 195.731878][ T5971] ? __asan_memset+0x39/0x50 [ 195.731896][ T5971] ? iov_iter_bvec+0xc0/0x180 [ 195.731919][ T5971] dump_user_range+0xb8b/0xe60 [ 195.731940][ T5971] ? __cfi_dump_user_range+0x10/0x10 [ 195.731960][ T5971] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 195.731990][ T5971] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 195.732019][ T5971] ? elf_core_dump+0x24c0/0x3960 [ 195.732043][ T5971] elf_core_dump+0x2e7e/0x3960 [ 195.732069][ T5971] ? __cfi_elf_core_dump+0x10/0x10 [ 195.732098][ T5971] ? dump_interrupted+0xf0/0xf0 [ 195.732115][ T5971] ? filp_open+0x199/0x1f0 [ 195.732140][ T5971] ? 0xffffffffff600000 [ 195.732157][ T5971] do_coredump+0x208d/0x2fe0 [ 195.732178][ T5971] ? __cfi_do_coredump+0x10/0x10 [ 195.732196][ T5971] ? asm_exc_page_fault+0x2b/0x30 [ 195.732220][ T5971] ? __kasan_slab_free+0x6a/0x80 [ 195.732242][ T5971] ? kmem_cache_free+0x1bd/0x4f0 [ 195.732262][ T5971] ? get_signal+0xa74/0x14e0 [ 195.732288][ T5971] get_signal+0x11f8/0x14e0 [ 195.732317][ T5971] arch_do_signal_or_restart+0xbc/0x760 [ 195.732338][ T5971] ? fixup_vdso_exception+0x20d/0x310 [ 195.732359][ T5971] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 195.732383][ T5971] irqentry_exit_to_user_mode+0x4d/0xb0 [ 195.732408][ T5971] irqentry_exit+0x16/0x60 [ 195.732430][ T5971] exc_page_fault+0x65/0xc0 [ 195.732452][ T5971] asm_exc_page_fault+0x2b/0x30 [ 195.732470][ T5971] RIP: 0033:0x7fa6c479cde1 [ 195.732486][ T5971] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 195.732504][ T5971] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 195.732523][ T5971] RAX: 0000000000000000 RBX: 00007fa6c4a15fa0 RCX: 00007fa6c479cdd9 [ 195.732538][ T5971] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 195.732553][ T5971] RBP: 00007fa6c4832d69 R08: 0000000000000000 R09: 0000000000000000 [ 195.732567][ T5971] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 195.732586][ T5971] R13: 00007fa6c4a16038 R14: 00007fa6c4a15fa0 R15: 00007ffe65adc548 [ 195.732604][ T5971] [ 195.732651][ T5971] memory: usage 297052kB, limit 307200kB, failcnt 22983 [ 196.063870][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 196.070715][ T5971] memory+swap: usage 402548kB, limit 9007199254740988kB, failcnt 0 [ 196.080581][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 196.087947][ T5971] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 196.100737][ T10] usb 3-1: USB disconnect, device number 42 [ 196.107162][ T5971] Memory cgroup stats for /syz3: [ 196.256010][ T5971] cache 303509504 [ 196.264843][ T5971] rss 192512 [ 196.268049][ T5971] rss_huge 0 [ 196.271286][ T5971] shmem 236863488 [ 196.274907][ T5971] mapped_file 0 [ 196.278349][ T5971] dirty 0 [ 196.320122][ T5971] writeback 0 [ 196.340789][ T5971] workingset_refault_anon 70 [ 196.345506][ T5971] workingset_refault_file 2128 [ 196.350387][ T5971] swap 123977728 [ 196.360530][ T5971] swapcached 1376256 [ 196.365745][ T5971] pgpgin 269784 [ 196.369244][ T5971] pgpgout 195816 [ 196.375223][ T5971] pgfault 147666 [ 196.378798][ T5971] pgmajfault 93 [ 196.388634][ T5971] inactive_anon 200146944 [ 196.397388][ T5971] active_anon 38273024 [ 196.410116][ T5971] inactive_file 16384 [ 196.421172][ T5971] active_file 3264512 [ 196.425195][ T5971] unevictable 63365120 [ 196.436197][ T5971] hierarchical_memory_limit 314572800 [ 196.450540][ T5971] hierarchical_memsw_limit 9223372036854771712 [ 196.470259][ T5971] total_cache 303509504 [ 196.494719][ T5971] total_rss 192512 [ 196.498488][ T5971] total_rss_huge 0 [ 196.508110][ T6088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.526933][ T6088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.533650][ T5971] total_shmem 236863488 [ 196.539119][ T5971] total_mapped_file 0 [ 196.543339][ T5971] total_dirty 0 [ 196.546806][ T5971] total_writeback 0 [ 196.550744][ T5971] total_workingset_refault_anon 70 [ 196.555947][ T5971] total_workingset_refault_file 2128 [ 196.561292][ T45] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 196.561521][ T5971] total_swap 123977728 [ 196.573060][ T5971] total_swapcached 1376256 [ 196.577468][ T5971] total_pgpgin 269784 [ 196.581472][ T5971] total_pgpgout 195816 [ 196.585565][ T5971] total_pgfault 147666 [ 196.589643][ T5971] total_pgmajfault 93 [ 196.598335][ T5971] total_inactive_anon 200146944 [ 196.603236][ T5971] total_active_anon 38273024 [ 196.607867][ T5971] total_inactive_file 16384 [ 196.612409][ T5971] total_active_file 3264512 [ 196.616913][ T5971] total_unevictable 63365120 [ 196.621568][ T5971] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2093,pid=6044,uid=0 [ 196.636532][ T5971] Memory cgroup out of memory: Killed process 6044 (syz.3.2093) total-vm:94084kB, anon-rss:1360kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:0 [ 196.730570][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 196.736779][ T45] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 196.745035][ T45] usb 1-1: config 0 has no interface number 0 [ 196.751578][ T45] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 196.764642][ T45] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 196.778043][ T45] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 196.780625][ T6094] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.2108'. [ 196.787505][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.804784][ T45] usb 1-1: Product: syz [ 196.809022][ T45] usb 1-1: Manufacturer: syz [ 196.820729][ T45] usb 1-1: SerialNumber: syz [ 196.826162][ T45] usb 1-1: config 0 descriptor?? [ 196.833178][ T6072] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 196.840360][ T6072] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 196.847554][ T64] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 196.854819][ T6094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2108'. [ 197.000604][ T64] usb 3-1: Using ep0 maxpacket: 8 [ 197.007068][ T64] usb 3-1: unable to get BOS descriptor or descriptor too short [ 197.015838][ T64] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.026163][ T64] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.036750][ T64] usb 3-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 197.046132][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.054172][ T64] usb 3-1: Product: syz [ 197.058632][ T64] usb 3-1: Manufacturer: syz [ 197.059534][ T6072] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 197.063511][ T64] usb 3-1: SerialNumber: syz [ 197.073248][ T6072] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 197.090478][ T6098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.101138][ T6098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.294826][ T64] usb 3-1: 0:1 : does not exist [ 197.299988][ T64] usb 3-1: unit 5 not found! [ 197.305027][ T64] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 197.334625][ T64] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 197.351724][ T64] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 197.362517][ T64] usb 3-1: USB disconnect, device number 43 [ 197.394844][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 197.504998][ T45] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 255 [ 197.641139][ T6111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.649786][ T6111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.659465][ T6111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.668082][ T6111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.708013][ T45] usb 1-1: USB disconnect, device number 87 [ 197.843852][ T36] audit: type=1400 audit(197.826:464): avc: denied { bind } for pid=6113 comm="syz.2.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 197.844259][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2117'. [ 197.930217][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2117'. [ 197.939819][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2117'. [ 198.180622][ T45] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 198.185741][ T6120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.196798][ T6120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.310552][ T45] usb 3-1: device descriptor read/64, error -71 [ 198.391499][ T6133] netlink: 26148 bytes leftover after parsing attributes in process `syz.0.2124'. [ 198.400810][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2124'. [ 198.560598][ T45] usb 3-1: device descriptor read/64, error -71 [ 198.810646][ T45] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 198.927187][ T6156] netlink: 26148 bytes leftover after parsing attributes in process `syz.1.2134'. [ 198.936607][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2134'. [ 198.950566][ T45] usb 3-1: device descriptor read/64, error -71 [ 198.959045][ T6158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.967665][ T6158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.080189][ T6162] tmpfs: Bad value for 'nr_inodes' [ 199.190566][ T45] usb 3-1: device descriptor read/64, error -71 [ 199.300752][ T45] usb usb3-port1: attempt power cycle [ 199.340577][ T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 199.490569][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 199.496881][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.507274][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.520558][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 199.529644][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.538857][ T9] usb 1-1: config 0 descriptor?? [ 199.544708][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 199.550764][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 199.558134][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 199.607752][ T6182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.616389][ T6182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.640643][ T45] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 199.671566][ T45] usb 3-1: device descriptor read/8, error -71 [ 199.801790][ T45] usb 3-1: device descriptor read/8, error -71 [ 200.040589][ T45] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 200.061653][ T45] usb 3-1: device descriptor read/8, error -71 [ 200.201717][ T45] usb 3-1: device descriptor read/8, error -71 [ 200.310692][ T45] usb usb3-port1: unable to enumerate USB device [ 200.329240][ T6203] __nla_validate_parse: 1 callbacks suppressed [ 200.329253][ T6203] netlink: 26148 bytes leftover after parsing attributes in process `syz.1.2155'. [ 200.352138][ T6205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.360661][ T6205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.881351][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.889949][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.941413][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2163'. [ 200.951024][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2163'. [ 201.048943][ T6233] netlink: 26148 bytes leftover after parsing attributes in process `syz.1.2166'. [ 201.058264][ T6233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2166'. [ 201.074625][ T6235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.083218][ T6235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.250586][ T45] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 201.291538][ T36] audit: type=1326 audit(201.276:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6237 comm="syz.3.2168" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6c479cdd9 code=0x0 [ 201.411635][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.421873][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.434624][ T45] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 201.448813][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.457977][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.466013][ T45] usb 3-1: Product: syz [ 201.470228][ T45] usb 3-1: Manufacturer: syz [ 201.475801][ T45] usb 3-1: SerialNumber: syz [ 201.482506][ T45] cdc_mbim 3-1:1.0: skipping garbage [ 201.980531][ T6261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.989143][ T6261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.360766][ T64] usb 1-1: reset high-speed USB device number 88 using dummy_hcd [ 202.484103][ T45] cdc_mbim 3-1:1.0: bind() failure [ 202.490078][ T45] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 202.496945][ T64] usb 1-1: device descriptor read/64, error -71 [ 202.503251][ T45] cdc_ncm 3-1:1.1: bind() failure [ 202.511140][ T6265] netlink: 26148 bytes leftover after parsing attributes in process `syz.1.2178'. [ 202.520553][ T6265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2178'. [ 202.536954][ T6267] netlink: 'syz.1.2179': attribute type 11 has an invalid length. [ 202.545284][ T6267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.553928][ T6267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.562541][ T6267] netlink: 'syz.1.2179': attribute type 11 has an invalid length. [ 202.685889][ T4740] usb 3-1: USB disconnect, device number 48 [ 202.750568][ T64] usb 1-1: device descriptor read/64, error -71 [ 202.888431][ T6286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.897066][ T6286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.990565][ T64] usb 1-1: reset high-speed USB device number 88 using dummy_hcd [ 203.120563][ T64] usb 1-1: device descriptor read/64, error -71 [ 203.360615][ T64] usb 1-1: device descriptor read/64, error -71 [ 203.421776][ T6292] netlink: 26148 bytes leftover after parsing attributes in process `syz.1.2188'. [ 203.430569][ T4740] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 203.431152][ T6292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2188'. [ 203.580549][ T4740] usb 3-1: Using ep0 maxpacket: 16 [ 203.586675][ T4740] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 203.594953][ T4740] usb 3-1: config 0 has no interface number 0 [ 203.601127][ T64] usb 1-1: reset high-speed USB device number 88 using dummy_hcd [ 203.608958][ T4740] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 203.620862][ T4740] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 203.632383][ T4740] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 203.641985][ T4740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.649992][ T4740] usb 3-1: Product: syz [ 203.655039][ T4740] usb 3-1: Manufacturer: syz [ 203.659692][ T4740] usb 3-1: SerialNumber: syz [ 203.664794][ T64] usb 1-1: device descriptor read/8, error -71 [ 203.672350][ T4740] usb 3-1: config 0 descriptor?? [ 203.677579][ T6288] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 203.684799][ T6288] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 203.790091][ T6303] veth1_macvtap: left promiscuous mode [ 203.795812][ T6303] macsec0: entered promiscuous mode [ 203.801832][ T64] usb 1-1: device descriptor read/8, error -71 [ 203.809327][ T6303] veth1_macvtap: entered promiscuous mode [ 203.815483][ T6303] macsec0: left promiscuous mode [ 203.893296][ T6288] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 203.900650][ T6288] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 203.942963][ T6308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.951626][ T6308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.050557][ T64] usb 1-1: reset high-speed USB device number 88 using dummy_hcd [ 204.071532][ T64] usb 1-1: device descriptor read/8, error -71 [ 204.201532][ T64] usb 1-1: device descriptor read/8, error -71 [ 204.309015][ T4740] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 255 [ 204.319250][ T64] usb 1-1: USB disconnect, device number 88 [ 204.476942][ T6314] netlink: 26148 bytes leftover after parsing attributes in process `syz.1.2198'. [ 204.511362][ T4740] usb 3-1: USB disconnect, device number 49 [ 204.610595][ T64] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 204.736627][ T6334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.745139][ T64] usb 1-1: device descriptor read/64, error -71 [ 204.745911][ T6334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.990844][ T64] usb 1-1: device descriptor read/64, error -71 [ 205.243484][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.243515][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.250237][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.256745][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.270586][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.277064][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.284220][ T6358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.299235][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.299262][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.310781][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.320730][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.321683][ T6358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.330779][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.353269][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.369963][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.382277][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.398935][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.405647][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.421080][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.430728][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.440595][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.457885][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.464421][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.480816][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.487355][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.500566][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.507109][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.520571][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.527171][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.533871][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.540374][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.547102][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.554060][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.560719][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.567224][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.574014][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.580766][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.587268][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.593964][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.600458][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.607163][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.613644][ T45] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 205.628020][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.628045][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.636505][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.643343][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.649818][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.656536][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.663264][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.669767][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.676510][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.683148][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.689634][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.696541][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.703418][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.710081][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.716780][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.723445][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.729926][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.736653][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.743330][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.749814][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.756490][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.763247][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.769730][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.776402][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.782865][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 205.794802][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.810907][ T45] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 205.829956][ T45] usb 3-1: config 0 has no interface number 0 [ 205.840530][ T45] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 205.857642][ T45] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 205.873076][ T45] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 205.876010][ T6372] __nla_validate_parse: 3 callbacks suppressed [ 205.876027][ T6372] netlink: 26148 bytes leftover after parsing attributes in process `syz.1.2221'. [ 205.890748][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.903642][ T6372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2221'. [ 205.915870][ T45] usb 3-1: Product: syz [ 205.920604][ T45] usb 3-1: Manufacturer: syz [ 205.925221][ T45] usb 3-1: SerialNumber: syz [ 205.940422][ T45] usb 3-1: config 0 descriptor?? [ 205.957195][ T6364] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 205.975304][ T6377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.979499][ T6364] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 205.999204][ T6377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.026487][ T6383] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2226'. [ 206.036451][ T6383] gretap0: entered promiscuous mode [ 206.046472][ T6383] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2226'. [ 206.055513][ T6383] 0ªî{X¹¦: renamed from gretap0 [ 206.061617][ T6383] 0ªî{X¹¦: left promiscuous mode [ 206.066795][ T6383] 0ªî{X¹¦: entered allmulticast mode [ 206.073144][ T6383] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 206.107872][ T36] audit: type=1400 audit(206.086:466): avc: denied { getopt } for pid=6387 comm="syz.0.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 206.127585][ T36] audit: type=1400 audit(206.086:467): avc: denied { append } for pid=6387 comm="syz.0.2228" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 206.202835][ T6364] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 206.210047][ T6364] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 206.340580][ T349] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 206.491956][ T349] usb 1-1: not running at top speed; connect to a high speed hub [ 206.500452][ T349] usb 1-1: config 1 interface 0 has no altsetting 0 [ 206.508788][ T349] usb 1-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.40 [ 206.517996][ T349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.526267][ T349] usb 1-1: Product: syz [ 206.530675][ T349] usb 1-1: Manufacturer: syz [ 206.530717][ T6390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.535591][ T349] usb 1-1: SerialNumber: syz [ 206.544009][ T6390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.618076][ T45] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 255 [ 206.821621][ T45] usb 3-1: USB disconnect, device number 50 [ 206.959508][ T349] usbhid 1-1:1.0: can't add hid device: -71 [ 206.965556][ T349] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 206.974834][ T349] usb 1-1: USB disconnect, device number 91 [ 207.074960][ T6396] netlink: 26148 bytes leftover after parsing attributes in process `syz.1.2232'. [ 207.084250][ T6396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2232'. [ 207.100206][ T6398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.108886][ T6398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.118135][ T6398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.126610][ T6398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.226511][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.235077][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.341025][ T36] audit: type=1400 audit(207.326:468): avc: denied { lock } for pid=6414 comm="syz.2.2240" path="socket:[34193]" dev="sockfs" ino=34193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 207.610582][ T45] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 207.706987][ T6430] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.2247'. [ 207.717275][ T6430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2247'. [ 207.730583][ T64] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 207.761754][ T45] usb 3-1: config 0 interface 0 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.774890][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 207.783696][ T45] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 207.793104][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.804279][ T45] usb 3-1: config 0 descriptor?? [ 207.816293][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.824944][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.880557][ T64] usb 1-1: Using ep0 maxpacket: 32 [ 207.887097][ T64] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.897321][ T64] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 207.906310][ T64] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 207.915481][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.924106][ T64] usb 1-1: config 0 descriptor?? [ 208.212361][ T45] hid (null): unknown global tag 0xd [ 208.219276][ T45] magicmouse 0003:05AC:0265.0016: unknown main item tag 0x4 [ 208.226664][ T45] magicmouse 0003:05AC:0265.0016: unknown global tag 0xd [ 208.233748][ T45] magicmouse 0003:05AC:0265.0016: item 0 4 1 13 parsing failed [ 208.241524][ T45] magicmouse 0003:05AC:0265.0016: magicmouse hid parse failed [ 208.249003][ T45] magicmouse 0003:05AC:0265.0016: probe with driver magicmouse failed with error -22 [ 208.294542][ T6451] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.2257'. [ 208.303844][ T6451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2257'. [ 208.414230][ T45] usb 3-1: USB disconnect, device number 51 [ 208.455173][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.463954][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.983875][ T36] audit: type=1400 audit(208.966:469): avc: denied { accept } for pid=6480 comm="syz.1.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 209.007433][ T6484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.016309][ T6484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.500564][ T45] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 209.651713][ T45] usb 3-1: config 0 interface 0 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.664889][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 209.671754][ T45] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 209.683351][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.694206][ T45] usb 3-1: config 0 descriptor?? [ 209.912432][ T6524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.921052][ T6524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.101678][ T45] hid (null): unknown global tag 0xd [ 210.108094][ T45] magicmouse 0003:05AC:0265.0017: unknown main item tag 0x4 [ 210.115507][ T45] magicmouse 0003:05AC:0265.0017: unknown global tag 0xd [ 210.122635][ T45] magicmouse 0003:05AC:0265.0017: item 0 4 1 13 parsing failed [ 210.130278][ T45] magicmouse 0003:05AC:0265.0017: magicmouse hid parse failed [ 210.137788][ T45] magicmouse 0003:05AC:0265.0017: probe with driver magicmouse failed with error -22 [ 210.407843][ T45] usb 3-1: USB disconnect, device number 52 [ 210.509406][ T64] usb 1-1: USB disconnect, device number 92 [ 210.646558][ T6546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.655163][ T6546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.910403][ T6554] __nla_validate_parse: 6 callbacks suppressed [ 210.910418][ T6554] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.2299'. [ 210.926016][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2299'. [ 210.935117][ T6556] netlink: 'syz.2.2300': attribute type 8 has an invalid length. [ 211.020570][ T64] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 211.176071][ T64] usb 1-1: Using ep0 maxpacket: 32 [ 211.183483][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.193509][ T64] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 211.202776][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.211994][ T64] usb 1-1: config 0 descriptor?? [ 211.218986][ T64] hub 1-1:0.0: bad descriptor, ignoring hub [ 211.225287][ T64] hub 1-1:0.0: probe with driver hub failed with error -5 [ 211.228852][ T6579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.232856][ T64] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 211.241904][ T6579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.410575][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 211.474216][ T6585] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.2312'. [ 211.483759][ T6585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2312'. [ 211.562207][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.572449][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.583404][ T9] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 211.597550][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.606707][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.614718][ T9] usb 3-1: Product: syz [ 211.618867][ T9] usb 3-1: Manufacturer: syz [ 211.623502][ T9] usb 3-1: SerialNumber: syz [ 211.630089][ T9] cdc_mbim 3-1:1.0: skipping garbage [ 211.918401][ T6601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.927073][ T6601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.047752][ T6611] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.2322'. [ 212.057093][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2322'. [ 212.451754][ T6619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.460608][ T6619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.617398][ T6627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.626148][ T6627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.632510][ T9] cdc_mbim 3-1:1.0: bind() failure [ 212.640235][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 212.647208][ T9] cdc_ncm 3-1:1.1: bind() failure [ 212.837591][ T9] usb 3-1: USB disconnect, device number 53 [ 213.143454][ T6642] netlink: 26148 bytes leftover after parsing attributes in process `syz.1.2334'. [ 213.152883][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2334'. [ 213.168886][ T6644] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2335'. [ 213.169084][ T36] audit: type=1400 audit(213.146:470): avc: denied { nlmsg_read } for pid=6643 comm="syz.1.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 213.423588][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.432155][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.655568][ T6676] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 213.817089][ T6681] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.2346'. [ 213.955871][ T6687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.964601][ T6687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.040714][ T9] usb 1-1: reset high-speed USB device number 93 using dummy_hcd [ 214.191311][ T9] usb 1-1: device firmware changed [ 214.196643][ T9] usb 1-1: USB disconnect, device number 93 [ 214.490932][ T9] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 214.649120][ T6705] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.656571][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.663699][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 214.669051][ T6705] bridge_slave_0: entered allmulticast mode [ 214.675826][ T6705] bridge_slave_0: entered promiscuous mode [ 214.681862][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.692830][ T6705] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.699897][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.707370][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.710682][ T6705] bridge_slave_1: entered allmulticast mode [ 214.720606][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 214.726668][ T6705] bridge_slave_1: entered promiscuous mode [ 214.735563][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.751618][ T64] usb 2-1: USB disconnect, device number 34 [ 214.755067][ T9] usb 1-1: config 0 descriptor?? [ 214.769125][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 214.775963][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 214.786705][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 214.800066][ T6705] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.807216][ T6705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.814510][ T6705] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.821666][ T6705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.829527][ T45] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 214.844111][ T309] bridge_slave_1: left allmulticast mode [ 214.849818][ T309] bridge_slave_1: left promiscuous mode [ 214.855524][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.863771][ T309] bridge_slave_0: left allmulticast mode [ 214.869514][ T309] bridge_slave_0: left promiscuous mode [ 214.875189][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.925146][ T1433] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.932550][ T1433] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.942428][ T1447] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.949514][ T1447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.958686][ T1433] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.965775][ T1433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.982771][ T309] tipc: Disabling bearer [ 214.988060][ T309] tipc: Left network mode [ 214.992515][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 214.996047][ T6705] veth0_vlan: entered promiscuous mode [ 215.005409][ T45] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 215.014769][ T45] usb 3-1: config 0 has no interface number 0 [ 215.020945][ T45] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 215.031108][ T309] veth1_macvtap: left promiscuous mode [ 215.031174][ T45] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 215.036755][ T309] veth0_vlan: left promiscuous mode [ 215.048703][ T45] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 215.060866][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.068891][ T45] usb 3-1: Product: syz [ 215.073233][ T45] usb 3-1: Manufacturer: syz [ 215.077834][ T45] usb 3-1: SerialNumber: syz [ 215.083369][ T45] usb 3-1: config 0 descriptor?? [ 215.088867][ T6704] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 215.096166][ T6704] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 215.119981][ T6705] veth1_macvtap: entered promiscuous mode [ 215.156102][ T6712] FAULT_INJECTION: forcing a failure. [ 215.156102][ T6712] name failslab, interval 1, probability 0, space 0, times 1 [ 215.169014][ T6712] CPU: 1 UID: 0 PID: 6712 Comm: syz.1.2356 Not tainted syzkaller #0 fb88d4f85f77cf6c597a9679d4a606940e6190c4 [ 215.169052][ T6712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 215.169065][ T6712] Call Trace: [ 215.169072][ T6712] [ 215.169080][ T6712] __dump_stack+0x21/0x30 [ 215.169116][ T6712] dump_stack_lvl+0x140/0x1c0 [ 215.169144][ T6712] ? __cfi_dump_stack_lvl+0x10/0x10 [ 215.169172][ T6712] ? __cfi_avc_has_perm+0x10/0x10 [ 215.169193][ T6712] ? kasan_save_alloc_info+0x40/0x50 [ 215.169218][ T6712] dump_stack+0x19/0x20 [ 215.169242][ T6712] should_fail_ex+0x3d7/0x530 [ 215.169278][ T6712] should_failslab+0xac/0x100 [ 215.169300][ T6712] __kmalloc_cache_noprof+0x41/0x470 [ 215.169321][ T6712] ? vhost_task_create+0x12c/0x400 [ 215.169344][ T6712] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 215.169368][ T6712] vhost_task_create+0x12c/0x400 [ 215.169389][ T6712] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 215.169414][ T6712] ? __cfi_vhost_task_create+0x10/0x10 [ 215.169435][ T6712] ? __cfi_vhost_task_fn+0x10/0x10 [ 215.169455][ T6712] ? __kasan_check_write+0x18/0x20 [ 215.169474][ T6712] ? mutex_lock+0x97/0x1d0 [ 215.169495][ T6712] ? __cfi_mutex_lock+0x10/0x10 [ 215.169515][ T6712] ? kernel_text_address+0xa9/0xe0 [ 215.169542][ T6712] kvm_mmu_post_init_vm+0x161/0x300 [ 215.169570][ T6712] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 215.169599][ T6712] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 215.169626][ T6712] ? kstrtoull+0x13b/0x1e0 [ 215.169652][ T6712] ? kstrtouint+0x78/0xf0 [ 215.169678][ T6712] ? ioctl_has_perm+0x1bc/0x500 [ 215.169705][ T6712] ? __asan_memcpy+0x5a/0x80 [ 215.169722][ T6712] ? ioctl_has_perm+0x408/0x500 [ 215.169749][ T6712] ? has_cap_mac_admin+0xd0/0xd0 [ 215.169776][ T6712] ? __kasan_check_write+0x18/0x20 [ 215.169794][ T6712] ? mutex_lock_killable+0x97/0x1d0 [ 215.169816][ T6712] ? __cfi_mutex_lock_killable+0x10/0x10 [ 215.169837][ T6712] ? proc_fail_nth_write+0x184/0x220 [ 215.169864][ T6712] kvm_vcpu_ioctl+0xa48/0x1000 [ 215.169885][ T6712] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 215.169904][ T6712] ? __cfi_vfs_write+0x10/0x10 [ 215.169924][ T6712] ? __kasan_check_write+0x18/0x20 [ 215.169942][ T6712] ? mutex_unlock+0x90/0x240 [ 215.169963][ T6712] ? __cfi_mutex_unlock+0x10/0x10 [ 215.169982][ T6712] ? __fget_files+0x2c5/0x340 [ 215.170005][ T6712] ? __fget_files+0x2c5/0x340 [ 215.170026][ T6712] ? bpf_lsm_file_ioctl+0xd/0x20 [ 215.170050][ T6712] ? security_file_ioctl+0x3e/0x110 [ 215.170077][ T6712] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 215.170097][ T6712] __se_sys_ioctl+0x132/0x1b0 [ 215.170119][ T6712] __x64_sys_ioctl+0x7f/0xa0 [ 215.170156][ T6712] x64_sys_call+0x1878/0x2ee0 [ 215.170175][ T6712] do_syscall_64+0x57/0xf0 [ 215.170200][ T6712] ? clear_bhb_loop+0x50/0xa0 [ 215.170229][ T6712] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 215.170272][ T6712] RIP: 0033:0x7f4badd9cdd9 [ 215.170291][ T6712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.170308][ T6712] RSP: 002b:00007f4baecf8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.170330][ T6712] RAX: ffffffffffffffda RBX: 00007f4bae015fa0 RCX: 00007f4badd9cdd9 [ 215.170346][ T6712] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 215.170360][ T6712] RBP: 00007f4baecf8090 R08: 0000000000000000 R09: 0000000000000000 [ 215.170374][ T6712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.170387][ T6712] R13: 00007f4bae016038 R14: 00007f4bae015fa0 R15: 00007ffc6c034658 [ 215.170405][ T6712] [ 215.522615][ T6704] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 215.530256][ T6704] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 215.939288][ T45] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 255 [ 215.940601][ T349] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 216.000162][ T6727] __nla_validate_parse: 1 callbacks suppressed [ 216.000177][ T6727] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.2364'. [ 216.015714][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2364'. [ 216.100590][ T349] usb 2-1: Using ep0 maxpacket: 32 [ 216.106999][ T349] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 216.115294][ T349] usb 2-1: config 0 has no interface number 0 [ 216.122830][ T349] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 216.131953][ T349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.139964][ T349] usb 2-1: Product: syz [ 216.144331][ T349] usb 2-1: Manufacturer: syz [ 216.148944][ T349] usb 2-1: SerialNumber: syz [ 216.152987][ T45] usb 3-1: USB disconnect, device number 54 [ 216.159321][ T349] usb 2-1: config 0 descriptor?? [ 216.165697][ T349] smsc95xx v2.0.0 [ 216.572060][ T349] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 216.582864][ T349] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 217.070890][ T10] usb 1-1: reset high-speed USB device number 94 using dummy_hcd [ 217.170635][ T45] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 217.221255][ T10] usb 1-1: device firmware changed [ 217.226618][ T10] usb 1-1: USB disconnect, device number 94 [ 217.320645][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 217.327027][ T45] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 217.335208][ T45] usb 3-1: config 0 has no interface number 0 [ 217.341359][ T45] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 217.351451][ T45] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 217.362854][ T45] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 217.371953][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.379942][ T45] usb 3-1: Product: syz [ 217.384171][ T45] usb 3-1: Manufacturer: syz [ 217.388770][ T45] usb 3-1: SerialNumber: syz [ 217.394163][ T45] usb 3-1: config 0 descriptor?? [ 217.399417][ T6761] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 217.406669][ T6761] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 217.530571][ T10] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 217.615587][ T6761] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 217.622899][ T6761] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 217.638236][ T6773] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.2382'. [ 217.647758][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2382'. [ 217.680538][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 217.686777][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.697710][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.707489][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 217.716991][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.729012][ T10] usb 1-1: config 0 descriptor?? [ 217.736857][ T10] hub 1-1:0.0: USB hub found [ 217.937208][ T10] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 218.031811][ T45] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 255 [ 218.148064][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 218.154124][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 218.181112][ T10] usb 1-1: USB disconnect, device number 95 [ 218.234091][ T9] usb 3-1: USB disconnect, device number 55 [ 218.755250][ T6800] kernel profiling enabled (shift: 4) [ 218.808880][ T349] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 218.819809][ T349] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 218.831660][ T349] usb 2-1: USB disconnect, device number 35 [ 219.140642][ T45] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 219.254311][ T6810] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.2397'. [ 219.263589][ T6810] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2397'. [ 219.280953][ T6812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2398'. [ 219.300577][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 219.306854][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.318100][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.328265][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 219.339218][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.350627][ T45] usb 3-1: config 0 descriptor?? [ 219.361390][ T45] hub 3-1:0.0: USB hub found [ 219.560074][ T45] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 219.730554][ T10] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 219.769761][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 219.776070][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 219.800983][ T45] usb 3-1: USB disconnect, device number 56 [ 219.814114][ T6834] netlink: 1335 bytes leftover after parsing attributes in process `syz.3.2407'. [ 219.840550][ T4740] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 219.868841][ T36] audit: type=1326 audit(219.846:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.3.2411" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6c479cdd9 code=0x0 [ 219.880579][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 219.893356][ T36] audit: type=1326 audit(219.846:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.3.2411" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6c479cdd9 code=0x0 [ 219.899525][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.932415][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.945520][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 219.954643][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.963365][ T10] usb 1-1: config 0 descriptor?? [ 219.969186][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 219.975171][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 219.982583][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 219.991194][ T4740] usb 2-1: device descriptor read/64, error -71 [ 220.032899][ T6847] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.2412'. [ 220.042264][ T6847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2412'. [ 220.230575][ T4740] usb 2-1: device descriptor read/64, error -71 [ 220.338218][ T6851] fuse: Invalid uid '00000000000037777777777' [ 220.480630][ T4740] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 220.590680][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 220.620557][ T4740] usb 2-1: device descriptor read/64, error -71 [ 220.690986][ T36] audit: type=1326 audit(220.676:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.3.2422" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa6c479cdd9 code=0x0 [ 220.741954][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.742239][ T6870] __vm_enough_memory: pid: 6870, comm: syz.3.2422, bytes: 8795682263040 not enough memory for the allocation [ 220.752493][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.774912][ T10] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 220.789326][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.798531][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.806550][ T10] usb 3-1: Product: syz [ 220.810766][ T10] usb 3-1: Manufacturer: syz [ 220.815376][ T10] usb 3-1: SerialNumber: syz [ 220.821446][ T10] cdc_mbim 3-1:1.0: skipping garbage [ 220.880548][ T4740] usb 2-1: device descriptor read/64, error -71 [ 220.990703][ T4740] usb usb2-port1: attempt power cycle [ 221.330569][ T4740] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 221.351624][ T4740] usb 2-1: device descriptor read/8, error -71 [ 221.490544][ T4740] usb 2-1: device descriptor read/8, error -71 [ 221.730622][ T4740] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 221.753264][ T4740] usb 2-1: device descriptor read/8, error -71 [ 221.823857][ T10] cdc_mbim 3-1:1.0: bind() failure [ 221.829681][ T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 221.836592][ T10] cdc_ncm 3-1:1.1: bind() failure [ 221.881553][ T4740] usb 2-1: device descriptor read/8, error -71 [ 221.990650][ T4740] usb usb2-port1: unable to enumerate USB device [ 222.014176][ T6880] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.2425'. [ 222.023506][ T6880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2425'. [ 222.038528][ T4740] usb 3-1: USB disconnect, device number 57 [ 222.730595][ T6910] netlink: 26148 bytes leftover after parsing attributes in process `syz.1.2438'. [ 222.739995][ T6910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2438'. [ 222.990563][ T4740] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 223.020545][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 223.140554][ T4740] usb 3-1: Using ep0 maxpacket: 16 [ 223.146998][ T4740] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 223.155193][ T4740] usb 3-1: config 0 has no interface number 0 [ 223.161328][ T4740] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 223.171417][ T4740] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 223.182759][ T4740] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 223.191629][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.191841][ T4740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.202288][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.209921][ T4740] usb 3-1: Product: syz [ 223.209942][ T4740] usb 3-1: Manufacturer: syz [ 223.209956][ T4740] usb 3-1: SerialNumber: syz [ 223.221275][ T10] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 223.228796][ T4740] usb 3-1: config 0 descriptor?? [ 223.231257][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.234594][ T6912] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 223.247209][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.252368][ T6912] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 223.261281][ T10] usb 2-1: Product: syz [ 223.287541][ T10] usb 2-1: Manufacturer: syz [ 223.292177][ T10] usb 2-1: SerialNumber: syz [ 223.302124][ T10] cdc_mbim 2-1:1.0: skipping garbage [ 223.410675][ T349] usb 1-1: USB disconnect, device number 96 [ 223.474857][ T6912] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 223.482163][ T6912] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 223.601535][ T6926] overlayfs: failed to clone lowerpath [ 223.672936][ T319] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 223.690058][ T36] audit: type=1400 audit(223.666:474): avc: denied { read } for pid=6911 comm="syz.2.2439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 223.831590][ T319] usb 1-1: config 0 interface 0 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.844675][ T319] usb 1-1: config 0 interface 0 has no altsetting 0 [ 223.851414][ T319] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 223.860508][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.869317][ T319] usb 1-1: config 0 descriptor?? [ 223.908875][ T4740] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 223.918969][ T4740] asix 3-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 223.929347][ T4740] asix 3-1:0.34: probe with driver asix failed with error -61 [ 224.116465][ T4740] usb 3-1: USB disconnect, device number 58 [ 224.276720][ T319] hid (null): unknown global tag 0xd [ 224.283458][ T319] magicmouse 0003:05AC:0265.0018: unknown main item tag 0x4 [ 224.290884][ T319] magicmouse 0003:05AC:0265.0018: unknown global tag 0xd [ 224.297927][ T319] magicmouse 0003:05AC:0265.0018: item 0 4 1 13 parsing failed [ 224.304595][ T10] cdc_mbim 2-1:1.0: bind() failure [ 224.305726][ T319] magicmouse 0003:05AC:0265.0018: magicmouse hid parse failed [ 224.311718][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 224.318162][ T319] magicmouse 0003:05AC:0265.0018: probe with driver magicmouse failed with error -22 [ 224.325635][ T10] cdc_ncm 2-1:1.1: bind() failure [ 224.480736][ T6924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.489490][ T6924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.498301][ T10] usb 1-1: USB disconnect, device number 97 [ 224.517278][ T349] usb 2-1: USB disconnect, device number 40 [ 224.704970][ T6943] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2453'. [ 224.735204][ T6947] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.2455'. [ 224.744537][ T6947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2455'. [ 225.034864][ T6967] syzkaller1: entered promiscuous mode [ 225.040868][ T6967] syzkaller1: entered allmulticast mode [ 225.140574][ T4740] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 225.290554][ T4740] usb 3-1: Using ep0 maxpacket: 32 [ 225.296876][ T4740] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 225.302001][ T6978] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.2467'. [ 225.310204][ T4740] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 225.319236][ T6978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2467'. [ 225.328548][ T4740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.337345][ T349] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 225.348891][ T4740] usb 3-1: config 0 descriptor?? [ 225.360915][ T4740] hub 3-1:0.0: bad descriptor, ignoring hub [ 225.366859][ T4740] hub 3-1:0.0: probe with driver hub failed with error -5 [ 225.374496][ T4740] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 225.420582][ T346] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 225.510570][ T349] usb 1-1: Using ep0 maxpacket: 16 [ 225.516959][ T349] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 225.525116][ T349] usb 1-1: config 0 has no interface number 0 [ 225.531286][ T349] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 225.541401][ T349] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 225.553035][ T349] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 225.562230][ T349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.570276][ T349] usb 1-1: Product: syz [ 225.574521][ T346] usb 2-1: Using ep0 maxpacket: 16 [ 225.579702][ T349] usb 1-1: Manufacturer: syz [ 225.584391][ T349] usb 1-1: SerialNumber: syz [ 225.589970][ T349] usb 1-1: config 0 descriptor?? [ 225.595022][ T346] usb 2-1: unable to get BOS descriptor or descriptor too short [ 225.602985][ T6972] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 225.604992][ T346] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 225.610274][ T6972] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 225.619414][ T346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.634902][ T346] usb 2-1: Product: syz [ 225.639089][ T346] usb 2-1: Manufacturer: syz [ 225.643722][ T346] usb 2-1: SerialNumber: syz [ 225.837449][ T6972] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 225.844779][ T6972] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 225.850108][ T36] audit: type=1400 audit(225.826:475): avc: denied { map } for pid=6975 comm="syz.1.2466" path="socket:[39271]" dev="sockfs" ino=39271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 226.030458][ T346] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 226.042584][ T346] usb 2-1: USB disconnect, device number 41 [ 226.253796][ T349] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 255 [ 226.462113][ T346] usb 1-1: USB disconnect, device number 98 [ 226.630563][ T349] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 226.780530][ T349] usb 2-1: Using ep0 maxpacket: 32 [ 226.787004][ T349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.798050][ T349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.807911][ T349] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 226.816976][ T349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.825525][ T349] usb 2-1: config 0 descriptor?? [ 226.831374][ T349] hub 2-1:0.0: USB hub found [ 227.210537][ T346] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 227.232994][ T349] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 227.361590][ T346] usb 1-1: config 0 has an invalid descriptor of length 236, skipping remainder of the config [ 227.371994][ T346] usb 1-1: config 0 interface 0 altsetting 149 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 227.385091][ T346] usb 1-1: config 0 interface 0 has no altsetting 0 [ 227.391960][ T346] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 227.401298][ T346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.410677][ T346] usb 1-1: config 0 descriptor?? [ 227.416544][ T346] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 227.442648][ T349] usbhid 2-1:0.0: can't add hid device: -71 [ 227.448691][ T349] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 227.471015][ T349] usb 2-1: USB disconnect, device number 42 [ 228.012610][ T36] audit: type=1400 audit(227.996:476): avc: denied { unmount } for pid=6705 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 228.319422][ T7022] overlayfs: failed to resolve './file0': -2 [ 228.360550][ T4740] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 228.512363][ T4740] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.522582][ T4740] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.533506][ T4740] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 228.547720][ T4740] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.556823][ T4740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.564851][ T4740] usb 2-1: Product: syz [ 228.568999][ T4740] usb 2-1: Manufacturer: syz [ 228.573615][ T4740] usb 2-1: SerialNumber: syz [ 228.580318][ T4740] cdc_mbim 2-1:1.0: skipping garbage [ 228.721079][ T7024] netlink: 26148 bytes leftover after parsing attributes in process `syz.2.2482'. [ 228.730383][ T7024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2482'. [ 228.752601][ T7026] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 228.762652][ T36] audit: type=1400 audit(228.746:477): avc: denied { relabelto } for pid=7025 comm="syz.2.2483" name="122" dev="tmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 228.763190][ T7026] tmpfs: Cannot disable swap on remount [ 228.788468][ T36] audit: type=1400 audit(228.746:478): avc: denied { associate } for pid=7025 comm="syz.2.2483" name="122" dev="tmpfs" ino=636 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 228.820702][ T36] audit: type=1400 audit(228.746:479): avc: denied { mounton } for pid=7025 comm="syz.2.2483" path="/122/file0" dev="tmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 228.830632][ T6991] usb 3-1: USB disconnect, device number 59 [ 228.857385][ T36] audit: type=1400 audit(228.836:480): avc: denied { write } for pid=4711 comm="syz-executor" name="122" dev="tmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 228.954067][ T1447] bridge_slave_1: left allmulticast mode [ 228.964184][ T1447] bridge_slave_1: left promiscuous mode [ 228.969856][ T1447] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.981207][ T1447] bridge_slave_0: left allmulticast mode [ 228.986895][ T1447] bridge_slave_0: left promiscuous mode [ 228.992811][ T1447] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.135578][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.142758][ T7032] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.149975][ T7032] bridge_slave_0: entered allmulticast mode [ 229.156390][ T7032] bridge_slave_0: entered promiscuous mode [ 229.163036][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.170118][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.177614][ T7032] bridge_slave_1: entered allmulticast mode [ 229.184002][ T7032] bridge_slave_1: entered promiscuous mode [ 229.191139][ T1447] veth1_macvtap: left promiscuous mode [ 229.196719][ T1447] veth0_vlan: left promiscuous mode [ 229.272909][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.279997][ T7032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.287332][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.294423][ T7032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.319193][ T1433] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.326687][ T1433] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.336556][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.343625][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.352690][ T1433] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.359749][ T1433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.387395][ T7032] veth0_vlan: entered promiscuous mode [ 229.398199][ T7032] veth1_macvtap: entered promiscuous mode [ 229.442182][ T1447] ------------[ cut here ]------------ [ 229.447725][ T1447] WARNING: CPU: 1 PID: 1447 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 229.457891][ T1447] Modules linked in: [ 229.461862][ T1447] CPU: 1 UID: 0 PID: 1447 Comm: kworker/u8:20 Not tainted syzkaller #0 fb88d4f85f77cf6c597a9679d4a606940e6190c4 [ 229.473722][ T1447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 229.483837][ T1447] Workqueue: netns cleanup_net [ 229.488649][ T1447] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 229.494700][ T1447] Code: e8 41 18 d3 fc 4b 83 3c 3e 00 75 19 e8 15 a7 7a fc 49 81 ff f8 07 00 00 74 1b e8 07 a7 7a fc 49 83 c7 08 eb c9 e8 fc a6 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 229.514555][ T1447] RSP: 0000:ffffc9000e89fb90 EFLAGS: 00010293 [ 229.520675][ T1447] RAX: ffffffff850d15a4 RBX: ffff88813862c700 RCX: ffff88811e2db900 [ 229.528680][ T1447] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888117894000 [ 229.536781][ T1447] RBP: ffffc9000e89fbb0 R08: ffffffff87d48e87 R09: 1ffffffff0fa91d0 [ 229.544802][ T1447] R10: dffffc0000000000 R11: fffffbfff0fa91d1 R12: dffffc0000000000 [ 229.552970][ T1447] R13: dffffc0000000000 R14: ffff888117894000 R15: 0000000000000000 [ 229.560996][ T1447] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 229.570067][ T1447] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.576741][ T1447] CR2: 00007f9f4ad9cdd9 CR3: 000000012102a000 CR4: 00000000003526b0 [ 229.584868][ T1447] Call Trace: [ 229.588185][ T1447] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 229.591184][ T1447] cleanup_net+0x6c0/0xc90 [ 229.595634][ T1447] ? __cfi_cleanup_net+0x10/0x10 [ 229.600656][ T1447] process_scheduled_works+0x7d4/0x1020 [ 229.606238][ T1447] worker_thread+0xc51/0x1370 [ 229.610603][ T36] audit: type=1400 audit(229.506:481): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2931]" dev="pipefs" ino=2931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 229.610960][ T1447] kthread+0x2c9/0x370 [ 229.637440][ T1447] ? __cfi_worker_thread+0x10/0x10 [ 229.642599][ T1447] ? __cfi_kthread+0x10/0x10 [ 229.647248][ T1447] ret_from_fork+0x67/0xa0 [ 229.651724][ T1447] ? __cfi_kthread+0x10/0x10 [ 229.656346][ T1447] ret_from_fork_asm+0x1a/0x30 [ 229.661163][ T1447] [ 229.664198][ T1447] ---[ end trace 0000000000000000 ]--- [ 229.762951][ T1447] ------------[ cut here ]------------ [ 229.768469][ T1447] WARNING: CPU: 1 PID: 1447 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 229.778728][ T1447] Modules linked in: [ 229.782713][ T1447] CPU: 1 UID: 0 PID: 1447 Comm: kworker/u8:20 Tainted: G W syzkaller #0 fb88d4f85f77cf6c597a9679d4a606940e6190c4 [ 229.796158][ T1447] Tainted: [W]=WARN [ 229.799988][ T1447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 229.810108][ T1447] Workqueue: netns cleanup_net [ 229.814966][ T1447] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 229.821086][ T1447] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 c0 a6 7a fc 49 81 ff f8 07 00 00 74 1b e8 b2 a6 7a fc 49 83 c7 08 eb c5 e8 a7 a6 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 97 a6 7a fc 5b 41 5c 41 5e 41 [ 229.840752][ T1447] RSP: 0000:ffffc9000e89fb90 EFLAGS: 00010293 [ 229.846856][ T1447] RAX: ffffffff850d15f9 RBX: ffff888117894800 RCX: ffff88811e2db900 [ 229.854875][ T1447] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888117894810 [ 229.862949][ T1447] RBP: ffffc9000e89fbb0 R08: ffffffff87d48e87 R09: 1ffffffff0fa91d0 [ 229.870974][ T1447] R10: dffffc0000000000 R11: fffffbfff0fa91d1 R12: dffffc0000000000 [ 229.878972][ T1447] R13: dffffc0000000000 R14: ffff888117894000 R15: 0000000000000010 [ 229.887004][ T1447] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 229.895975][ T1447] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.902647][ T1447] CR2: 00007ffd6f19ef4c CR3: 00000000074aa000 CR4: 00000000003526b0 [ 229.910670][ T1447] Call Trace: [ 229.913975][ T1447] [ 229.916926][ T1447] cleanup_net+0x6c0/0xc90 [ 229.921388][ T1447] ? __cfi_cleanup_net+0x10/0x10 [ 229.926425][ T1447] process_scheduled_works+0x7d4/0x1020 [ 229.932016][ T1447] worker_thread+0xc51/0x1370 [ 229.936727][ T1447] kthread+0x2c9/0x370 [ 229.940844][ T1447] ? __cfi_worker_thread+0x10/0x10 [ 229.945972][ T1447] ? __cfi_kthread+0x10/0x10 [ 229.950588][ T1447] ret_from_fork+0x67/0xa0 [ 229.955011][ T1447] ? __cfi_kthread+0x10/0x10 [ 229.959593][ T1447] ret_from_fork_asm+0x1a/0x30 [ 229.964399][ T1447] [ 229.967426][ T1447] ---[ end trace 0000000000000000 ]--- [ 229.975982][ T7004] syz_tun (unregistering): left allmulticast mode [ 230.009673][ T1447] ------------[ cut here ]------------ [ 230.015315][ T1447] WARNING: CPU: 1 PID: 1447 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 230.024955][ T1447] Modules linked in: [ 230.028865][ T1447] CPU: 1 UID: 0 PID: 1447 Comm: kworker/u8:20 Tainted: G W syzkaller #0 fb88d4f85f77cf6c597a9679d4a606940e6190c4 [ 230.042218][ T1447] Tainted: [W]=WARN [ 230.046032][ T1447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.056114][ T1447] Workqueue: netns cleanup_net [ 230.060917][ T1447] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 230.066465][ T1447] Code: 3c 20 00 74 08 48 89 df e8 df e1 ed fc 48 8b 3b e8 f7 f0 d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 a2 70 95 fc <0f> 0b e9 b0 fd ff ff e8 96 70 95 fc 0f 0b e9 18 fe ff ff e8 8a 70 [ 230.086107][ T1447] RSP: 0018:ffffc9000e89fb70 EFLAGS: 00010293 [ 230.092217][ T1447] RAX: ffffffff84f24bfe RBX: ffff88813862c700 RCX: ffff88811e2db900 [ 230.100217][ T1447] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88811e2db900 [ 230.108216][ T1447] RBP: ffffc9000e89fb98 R08: ffffffff87d48e87 R09: 1ffffffff0fa91d0 [ 230.116288][ T1447] R10: dffffc0000000000 R11: fffffbfff0fa91d1 R12: 1ffffffff0fa8f20 [ 230.124301][ T1447] R13: dffffc0000000000 R14: ffff88813862d300 R15: dffffc0000000000 [ 230.132403][ T1447] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 230.141457][ T1447] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.148043][ T1447] CR2: 00007ffd6f19ef4c CR3: 00000000074aa000 CR4: 00000000003526b0 [ 230.156038][ T1447] Call Trace: [ 230.159329][ T1447] [ 230.162279][ T1447] xfrm_net_exit+0x31/0x80 [ 230.166745][ T1447] cleanup_net+0x6c0/0xc90 [ 230.171180][ T1447] ? __cfi_cleanup_net+0x10/0x10 [ 230.176127][ T1447] process_scheduled_works+0x7d4/0x1020 [ 230.181795][ T1447] worker_thread+0xc51/0x1370 [ 230.186485][ T1447] kthread+0x2c9/0x370 [ 230.190630][ T1447] ? __cfi_worker_thread+0x10/0x10 [ 230.195929][ T1447] ? __cfi_kthread+0x10/0x10 [ 230.200571][ T1447] ret_from_fork+0x67/0xa0 [ 230.205001][ T1447] ? __cfi_kthread+0x10/0x10 [ 230.209627][ T1447] ret_from_fork_asm+0x1a/0x30 [ 230.214440][ T1447] [ 230.217475][ T1447] ---[ end trace 0000000000000000 ]--- [ 230.241805][ T349] usb 1-1: USB disconnect, device number 99 [ 230.302348][ T4740] cdc_mbim 2-1:1.0: bind() failure [ 230.308137][ T1447] bridge_slave_1: left allmulticast mode [ 230.320656][ T1447] bridge_slave_1: left promiscuous mode [ 230.322678][ T4740] usb 2-1: USB disconnect, device number 43 [ 230.326321][ T1447] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.341287][ T1447] bridge_slave_0: left allmulticast mode [ 230.348175][ T1447] bridge_slave_0: left promiscuous mode [ 230.354224][ T1447] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.484822][ T1447] veth1_macvtap: left promiscuous mode [ 230.490375][ T1447] veth0_vlan: left promiscuous mode [ 230.734942][ T1447] bridge_slave_1: left allmulticast mode [ 230.740661][ T1447] bridge_slave_1: left promiscuous mode [ 230.746647][ T1447] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.755741][ T1447] bridge_slave_0: left allmulticast mode [ 230.761529][ T1447] bridge_slave_0: left promiscuous mode [ 230.767173][ T1447] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.775543][ T1447] bridge_slave_1: left allmulticast mode [ 230.781305][ T1447] bridge_slave_1: left promiscuous mode [ 230.786925][ T1447] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.794470][ T1447] bridge_slave_0: left allmulticast mode [ 230.800106][ T1447] bridge_slave_0: left promiscuous mode [ 230.805872][ T1447] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.813582][ T1447] bridge_slave_1: left allmulticast mode [ 230.819229][ T1447] bridge_slave_1: left promiscuous mode [ 230.825039][ T1447] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.832692][ T1447] bridge_slave_0: left allmulticast mode [ 230.838328][ T1447] bridge_slave_0: left promiscuous mode [ 230.844037][ T1447] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.083182][ T1447] tipc: Left network mode [ 231.089597][ T1447] veth1_macvtap: left promiscuous mode [ 231.095165][ T1447] veth0_vlan: left promiscuous mode [ 231.100902][ T1447] veth1_macvtap: left promiscuous mode [ 231.106387][ T1447] veth0_vlan: left promiscuous mode [ 231.112005][ T1447] veth1_macvtap: left promiscuous mode [ 231.117594][ T1447] veth0_vlan: left promiscuous mode [ 231.586720][ T1447] ------------[ cut here ]------------ [ 231.592261][ T1447] WARNING: CPU: 0 PID: 1447 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 231.602015][ T1447] Modules linked in: [ 231.605913][ T1447] CPU: 0 UID: 0 PID: 1447 Comm: kworker/u8:20 Tainted: G W syzkaller #0 fb88d4f85f77cf6c597a9679d4a606940e6190c4 [ 231.619235][ T1447] Tainted: [W]=WARN [ 231.623071][ T1447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 231.633263][ T1447] Workqueue: netns cleanup_net [ 231.638034][ T1447] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 231.643601][ T1447] Code: 3c 20 00 74 08 48 89 df e8 df e1 ed fc 48 8b 3b e8 f7 f0 d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 a2 70 95 fc <0f> 0b e9 b0 fd ff ff e8 96 70 95 fc 0f 0b e9 18 fe ff ff e8 8a 70 [ 231.663270][ T1447] RSP: 0018:ffffc9000e89fb70 EFLAGS: 00010293 [ 231.669333][ T1447] RAX: ffffffff84f24bfe RBX: ffff88811845c700 RCX: ffff88811e2db900 [ 231.677336][ T1447] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88811e2db900 [ 231.685352][ T1447] RBP: ffffc9000e89fb98 R08: ffffffff87d48e87 R09: 1ffffffff0fa91d0 [ 231.693361][ T1447] R10: dffffc0000000000 R11: fffffbfff0fa91d1 R12: 1ffffffff0fa8f20 [ 231.701369][ T1447] R13: dffffc0000000000 R14: ffff88811845d300 R15: dffffc0000000000 [ 231.709343][ T1447] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 231.718291][ T1447] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.724919][ T1447] CR2: 00007f0f79bc0368 CR3: 000000010b398000 CR4: 00000000003526b0 [ 231.732921][ T1447] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 231.740946][ T1447] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 231.748919][ T1447] Call Trace: [ 231.752382][ T1447] [ 231.755328][ T1447] xfrm_net_exit+0x31/0x80 [ 231.759745][ T1447] cleanup_net+0x6c0/0xc90 [ 231.764267][ T1447] ? __cfi_cleanup_net+0x10/0x10 [ 231.769208][ T1447] process_scheduled_works+0x7d4/0x1020 [ 231.774774][ T1447] worker_thread+0xc51/0x1370 [ 231.779447][ T1447] kthread+0x2c9/0x370 [ 231.783664][ T1447] ? __cfi_worker_thread+0x10/0x10 [ 231.788798][ T1447] ? __cfi_kthread+0x10/0x10 [ 231.793407][ T1447] ret_from_fork+0x67/0xa0 [ 231.797842][ T1447] ? __cfi_kthread+0x10/0x10 [ 231.802465][ T1447] ret_from_fork_asm+0x1a/0x30 [ 231.807259][ T1447] [ 231.810276][ T1447] ---[ end trace 0000000000000000 ]---