last executing test programs: 5.918799431s ago: executing program 1 (id=362): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) lseek(0xffffffffffffffff, 0x8000000000000000, 0x3) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0xe0f, 0x5, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xb60d, 0x6, 0x5, 0x9, 0x4, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20003, 0x0, 0x4c76, 0x10000, 0x242, 0x3, 0x0, 0x4, 0x80008071, 0x800, 0x17, 0x0, 0xfffeffff, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x5, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x7], [0x10000807, 0x9, 0x8000012f, 0x8004, 0x5, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x5, 0x7fff, 0x6, 0x500, 0x401, 0x6, 0x1, 0xff, 0x6, 0x2, 0x1, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0xc, 0x9, 0x8, 0x5, 0x6, 0xfffff256, 0x6, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x2, 0x4000008, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x6, 0x1ef, 0x5, 0x0, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0xfffffffd, 0x4, 0xf, 0x8, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x7, 0xb1, 0xaca, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x1000004, 0x25], [0x5, 0xbb33, 0x7, 0x503d, 0x2, 0x4, 0x4006, 0x6, 0x8, 0xb9, 0x1, 0x10001ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x3, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x80000002, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c19, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) syz_ublk_setup_io_uring(0x476f, 0x0, 0x0, &(0x7f00000000c0), 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.838612103s ago: executing program 1 (id=363): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000d00)="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", 0x559, r1) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x4000, 0x100000001}) syz_clone3(&(0x7f0000000240)={0xc8004380, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff77) close_range(r4, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) fcntl$setpipe(r0, 0x407, 0x8b08) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.750472645s ago: executing program 1 (id=364): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = userfaultfd(0x80801) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000000) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00002ec000/0x1000)=nil, 0x1000}}) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120110e0cfc1eca0f982fdec23b40101000020bd2833090000000000010902240001000000200904000d020300000009210110050122"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000440)={0x2c, &(0x7f0000000100)={0x0, 0x2, 0x6, {0x6, 0xf, "b55b6a2f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000440)={0x2c, &(0x7f0000000100)={0x0, 0x2, 0x6, {0x6, 0xf, "b55b6a2f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001000)=ANY=[@ANYBLOB="30000000120001000000000000008003000000000c0000b7ff000000000000010d003500d040"], 0x30}], 0x1}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x72db1b326adb3aba, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x14, 0x2}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket(0x11, 0x2, 0x0) setsockopt(r4, 0x107, 0x12, &(0x7f0000000000)="11106e00", 0x4) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) open(&(0x7f00000000c0)='.\x00', 0x517002, 0x0) (async) open(&(0x7f00000000c0)='.\x00', 0x517002, 0x0) write$P9_RWSTAT(r3, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) (async) write$P9_RWSTAT(r3, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) 5.718139376s ago: executing program 0 (id=365): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000240)={0xfdfdfffc, 0x9, 0xffffffff, 0x40000805, 0x19, "0800000000faff010d9915bbff00"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000640)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x3, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = epoll_create1(0x0) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0xfff, 0x0, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000340)={0x8000000000000000, 0x8}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r4, 0x4008af75, &(0x7f0000000140)={0x2, 0x1}) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) r6 = socket$netlink(0x10, 0x3, 0x4) timer_create(0x3, 0x0, &(0x7f0000000340)) timer_create(0x0, 0x0, &(0x7f0000000380)) timer_delete(0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c100000000000204e0000", 0x58}], 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./debug/tracing/events/kvm/enable\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) 4.870371548s ago: executing program 0 (id=370): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "39b138d4300bc48f", "ccf149b57883a43d088357d86882e1e4", "f30add4d", "c3d07f5fede7b038"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "e8d3b1a8", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000300)='v', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="10010000099473089911216859980000000f0902120001000020000904"], 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x8c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x17}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1e6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24004000}, 0x44000) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 3.468283203s ago: executing program 0 (id=375): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x40000) 3.440141134s ago: executing program 0 (id=376): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000543000/0x4000)=nil, 0x4000}, 0x3}) (async, rerun: 64) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) (async) setuid(0xee01) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x1, 0x4) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x20400}, 0x48014) 2.942095306s ago: executing program 0 (id=378): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x40, 0x6, 0x4, "209c8c53"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000900)={0x14, &(0x7f00000003c0)={0x20, 0x8, 0x2, {0x2, 0x33}}, 0x0}, &(0x7f0000000c80)={0x44, &(0x7f00000009c0)={0x20, 0x31, 0x63, "eef93f9b02424b30584f4598238477c0baf489c01563ac9d01302e9db70257256f9788a166b068ea3918277772649d18f6c112747d02ca9a93e7c42dc4237bb0a5ce2b0f2d296bfadb052dae9bdb0766427595823bd9b9e8ba4b3ea1b5c9a96907eeb7"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000b40)={0x20, 0x81, 0x3, "b35c41"}, &(0x7f0000000b80)={0x20, 0x82, 0x2, 'k)'}, &(0x7f0000000bc0)={0x20, 0x83, 0x1, '~'}, &(0x7f0000000c00)={0x20, 0x84, 0x3, 'W>t'}, &(0x7f0000000c40)={0x20, 0x85, 0x3, 'dah'}}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 2.77438435s ago: executing program 1 (id=379): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="48b801b89734000000004d9823c80f23f835080050000f23f8c744240004000000c744240200000000c7442406000000000f06670f2107c74424002a010000ff2c24b8010000000f01c10f23c00f21f835020002000f23f8260f01d1f341f4c4017d10e548b8c0770c90f03a5f344b0fc76f000f20e035004000000f22e035080000000f23f8", 0xfffffffffffffeec}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "b79e5e602970a4f9", "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x11a, 0x4, 0x0, 0x0) poll(&(0x7f0000000080)=[{r3, 0x4000}, {0xffffffffffffffff, 0x4}], 0x2, 0xfffffffe) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80000) sendmmsg$inet6(r4, 0x0, 0x0, 0x20044000) 2.436911849s ago: executing program 3 (id=381): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x52) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x00', 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x40, 0xc00, 0x0, 0x1, 0x0, 0x55, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000006280)=""/4096) write$binfmt_script(r2, &(0x7f0000000540)={'#! ', './sys/class/thermal/cooling_device0/cur_state'}, 0x31) openat(r2, &(0x7f0000000100)='./file0\x00', 0x40, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') sendfile(r3, r3, &(0x7f0000000040)=0x7, 0x7fffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x12, 0x0, &(0x7f0000001a40)) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r6, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r6, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x4b, 0x0, 0x0, 0x8, 0x4, 0xa, 0xd2d0, 0x1, 0x5, 0x0, 0x91, 0xffffffff, 0x101, 0x3, 0x0, 0x7f, 0x0, 0x7, 0x40, 0x0, 0x200008, 0xa, 0xa000000}}) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000), 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 1.871636923s ago: executing program 1 (id=382): socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac3(0x2, 0xc2, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x582, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x3, 0x1, 0xa, 0xb0, 0xf, {0x8, 0xb, 0x0, 0x2, 0x1, 0x26, 0x30, 0x9e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x1, 0x4, 0x1, 0xd, "90d19d", '\a|B'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x5, 0x2, 0x2, 0x7}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x1, 0x8, 0x5, "", "f3858c"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x6, 0xc0, "f355"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x200, 0x4, 0x6}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x4, 0x5, 'E', "f3a5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x4, 0xa, 0x14, {0xa, 0x25, 0x25, 0x1ff, 0x50, 0xff6f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xe2, 0x1, {0xa, 0x25, 0x25, 0x2, 0xd, 0x1}}}}}}}}]}}, 0x0) 1.58004038s ago: executing program 3 (id=387): r0 = socket$packet(0x11, 0x3, 0x300) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000003000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0, 0x2f}], 0x5b, 0x60, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000400)={0x1, 0x0, [{0xb57, 0x0, 0x2}]}) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c000dc84945ec5d0c6d4c06841e3cd1ae9253b2d179d4e541796644d7936f40242b1a3be88c6d9f44a20dde3068469aadad00a66b60f2"]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000001dc0)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x10, 0x0) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x4, 0x3, 0x7, 0x0, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0xc000, 0x2, r7, r8, 0x6, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x4, 0x0, 0x7fffffff, 0xfffffffd, 0x6, {0x2, 0x8000000000000000, 0x8, 0x100000000000, 0x2000000000000db4, 0x7f, 0x8, 0x6, 0x200c, 0x8000, 0xe44, r7, r8, 0x40fe, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) clock_gettime(0x0, 0x0) 1.398400715s ago: executing program 2 (id=390): syz_usb_connect$uac2(0x3, 0x8b, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000300000020532b2300400001020301090279000301fb4004080b02010103200109040000000101200009240108000c1900e508240a00040b060308240a0901030602090401000001022000090401010101022000090501090002080706082501800f070000090402000001022000090402010101022000090582"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x947, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x44, 0xc4, 0x4, 0x20, 0x421, 0x99, 0x772c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x935, 0x3, 0x9, 0x34, 0x0, 0x6, "", [{{0x9, 0x4, 0xd2, 0x2, 0x3, 0x2, 0x2, 0xff, 0xe, [], [{{0x9, 0x5, 0x2900c2577e15198a, 0x0, 0x40, 0x5, 0x7f, 0xe0}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x4, 0x0, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xcb}, @generic={0xe7, 0xb, "6d36ae77103a82283b3feeb3edf90eb91b26b25d1b5b34bdf4ac1224a37ac41cc60a2cdd4064374da1ebbf830755ff3557ff8b643ea39bf466804aa8b2ea9c2aab83fcfc65a95ce708df6ddfe090b4f36e81980691876cde9c3cd3182cd838d4c543021dadc14352376d77f69b2b228f409793a8daa5df2c5a7cfd8db96e5bbbdcbed6a67380ca66da90672541d41f3b7aa93fe9b90ffe24e3c5a08b7b605ccb08d48cf1247af001914de4a2ac1bfa62bb3ae982bf6784565bfd3ff86add1f2dd22b4414ea39ae1cefa0386d27cfae9ad7b5365b95b6edf6ff570e3047dfbc103691984ca0"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x8, 0x4, 0x3, 0x83, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x7}, @generic={0xa4, 0x22, "07c548287e5775da95df4d0c5a4498ecb58444b4942b029d0cfedeb5f49aed1da0aaa7dfe07a9762ac247d950225f47004c92c3fae7e7f058d426f9f43ae8721eae469eae67512e5394a784cdfbe13d628535d3284178a5e92a4267daf5d301a2fadd576e65ee92aaa152ae28728c7510898bc3e3ecba58118ddc218ea3bbd366b942a186cb58d19e0fabf6b2a87fba2b35462b4c733ecc216a5556e2143b5372d04"}]}}]}}, {{0x9, 0x4, 0x75, 0x7f, 0xf, 0xf7, 0x29, 0x23, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0xa}}], [{{0x9, 0x5, 0x9, 0x1, 0x200, 0xf, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x64, 0x5}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0xff, 0x5, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x4}]}}, {{0x9, 0x5, 0xd, 0x4, 0x208, 0x9, 0xac, 0x3, [@generic={0x2c, 0x23, "3c5d1f81a9a08f212ac3bbb889e265f12967cf2d9cd9be7d9498a43e4b020af9fc6a81886193c6fcb2f3"}, @generic={0x96, 0xb, "c0885aa8721be286086e9b7b88a9510fab39033c678eb04e9ef9ca7be629a4b1f20c2350c63529824379f4076a343a8ea93834934f312d99a81874ebe8c75fcbe0d77294107c7b61d9205ff85cd49c52222728b84e193fe987d5c63a83dabb5101352a37378f96e5f12c5f56e4777898fe36784ec442b2ef4ba87d8283677670a7f8320948f4aa343919079544570a1a6de260b4"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x57, 0x4, 0x6}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x0, 0x2, 0x40, [@generic={0xed, 0x23, "fb4cd3159e0a43ff3fa3b5169ac885e4c891e4712ef4129c3b1c6d05b58289a836e87f0be2a3cb00ad728510881c2d9c22ac916bfefe64aed758d04bfdb6b5441162e6937bb9c064e6c38f56025736b609bab1cf25cacfcf3b3b02f25feed7a40c731fc2546ea3f89fbdd62dcf4dfc7b28b31bb421e2862ce0b65332b28edeb26d1e49f196becce6dcc4be8bde37042d3670d911ecb67b55ece0ef6c3549917153bc54e53624529bf06b5fc6e89d9604ca81f27d450daf168a0ab8cc39464dd330169c1776083daeba8cde4afb3c6c260d5c6c8c2b9a3f54d35e1025650f5932abb2cda2331835c6bcd312"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0xf, 0x1, 0x40}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0x5, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x9}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x2, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x47}]}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0x0, 0x6, 0x0, [@generic={0x2c, 0xd, "aa3c2f9ffb98da3a2029593a1770589dcfc2084d6b740c29d8027f1360148a04f9d9cc1b210971b0af3e"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x4}]}}, {{0x9, 0x5, 0x3, 0x8, 0x60, 0x2, 0x9}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0x2, 0x0, 0x0, [@generic={0x2a, 0xc, "312d4b2e6076b3098d94ef96050ced5f0310fbcaaae6d1c0e1cacb65665a180fe66ae9566956e1e7"}, @generic={0x3b, 0x1, "08193c7c4434e15eb08f14d4ed28d52bb901ae3a5c821d84326f1ef116d51f36627b8ecbd14755b826edf8503f9f9cf41dcc6f70a53e4ef7fc"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x618, 0x7, 0xf5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd9, 0x4}]}}, {{0x9, 0x5, 0xc, 0xc, 0x8, 0x8, 0x80, 0x1}}, {{0x9, 0x5, 0x4, 0x0, 0x460, 0xfd, 0xb, 0x1}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x0, 0x11, 0x10}}]}}, {{0x9, 0x4, 0x2a, 0x1a, 0xc, 0xff, 0x5d, 0x1, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x17}, [@extension_unit={0xd, 0x24, 0x8, 0x6, 0x1, 0x4, "c656e295f020"}]}, @generic={0x24, 0x24, "01b4cc091f784c17246c62277998db81f37febb4466cdda72cd4caf5a55cd19aedd4"}], [{{0x9, 0x5, 0x1, 0x3, 0x20, 0x5, 0x1, 0x7f, [@generic={0x47, 0xc, "b4c6b4738d60987397ca7c0c7e8a31ea3630d6b49457bb8e4bd8c9c8587bf58576200d0aa8f4d6114f621202ca5b645ee975bf28b1ba30d3314379aa051ddecd8ebb7d56ce"}, @generic={0xfe, 0xf, "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"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xcf, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x6, 0x3, 0x3, [@generic={0x92, 0x21, "ca4d082ec94fdb94b0a1ca39dc7db2f4ef2a9eebec3e4cd3919cef0d65a2c1585a6b8da30ce6de2f223323432ec026d0cf735930d14164d6e28779ac68f043c7b8c0649ed32684df5af9b3e85f8b993056c9ef43095d7d5af2b05d9582dac5ce0d54ccee08d08180e53010dd488c818799d295f9c2bae3f56c71067e1f5d9e4ac87ed803f2123678d40bbdeed1b8efc0"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xf0, 0x1ff}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0xff, 0x6, 0x80, [@generic={0xec, 0x22, "6edde4b233f1eaa4ea00f3a0465a89af624c07e473ba356b26d0564c58e93bdaf03c5236a10f99902fb4794977c0d7f6cb35ab5ab175c996e10dd86f62bc13aeb595f41f4f1c31b2a792d1e76a301acd6022d8c4346071903e4c65ae2e5d2ec8dc8e3e7904f6c13616ccb23d6be937bcb1c43ba33215a7efee595376b0426a6d74d4e0d54e7e3c513047923ea67d1d8ad4772cdd8dd903137e64c57bf88797ec7a64b5b505dca1fd88d7a54d4e5241a9079da3511649b9aff40acc6bc0da9e99f76563279f4616ec1f056290921cc90aa538b6e8599d3ca1192aff729ed27f040b88be5532b7a93aecdd"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0x4}]}}, {{0x9, 0x5, 0xb, 0x1, 0x5df, 0x4, 0x3, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xc, 0x3}, @generic={0x40, 0x23, "6784dea114727c926ebe0e7d5d1ff28f617c9e13bfde6548cab49bb2db85918d58e5a4f122436aa04f6460fd31704b06500e7d96b688bb0ec5e295194265"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x400, 0x7, 0x2, 0x3}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0x80, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x2, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x2abd}, @generic={0x79, 0x8, "1a31e19d658b165ea200bb679607abd1bd7f3478d0961ac1ebf97892493115245130aca7a857adef53abe7967747840f65423e2bf1c3fe2490bc1da09c641016a5ac12f9ba7ba1a582359a54a6d3556034d662c3534863673758be011da47a7b3ec4c9a5f732989ab3f084f2fe336ecc684821f727c452"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0xc, 0x58, 0x5}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0xc, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2}]}}, {{0x9, 0x5, 0xd, 0x10, 0x248, 0x3, 0x8, 0x30}}, {{0x9, 0x5, 0x2, 0x4, 0x210, 0xff, 0x2a, 0x14}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x300, 0x4a, 0x7, 0x81, 0xff, 0x5}, 0xaf, &(0x7f0000000d80)={0x5, 0xf, 0xaf, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x8, 0xb, 0x9b}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0xb, 0x9}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0xd27, 0x770f, 0x6, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xf, 0x5, 0x4}, @generic={0x7f, 0x10, 0x3, "d7839f6e78eb8f9a01c2095c782538625459db448bf0028d59fbeffd3876f92407d7347deb63f736830342fa5ed56ec7499d7e68e1936e8a92ce7363f9b435e82c358e675ffea5f7c4dfc3a6ffdc7a9fba7120c090755454935c0aefa06f1e5ce1c51e4203a389a90e6bc55ae83dba81e4546f1e179ebed5e88cce70"}]}, 0x4, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x4ff}}]}) 886.355018ms ago: executing program 0 (id=391): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x650500, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)="2a750b000000743a7a08b622751c6b47287eb8204ace515aa949176b2c1306a8a2403f8dbcf6d4b60daa28d4f326824b86220660c080c23b701bbe", 0x3b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x1, 0xffffffff, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x97d}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r4, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000002780)=@vmx={0x104, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = dup3(r6, r5, 0x0) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000001c0)={0x2d, 0x19, 0xb, 0xc, 0x4, 0x81, 0x6, 0xa0, 0x1}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000002c0)=0x11) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES8=r1, @ANYRES64=r0], 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x24, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @nested={0x7, 0x13, 0x0, 0x1, [@generic="1b9216"]}]}, 0x24}], 0x1}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1b1c, 0xa18, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb, 0x20, 0x7, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x52e}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0xc, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x9d, 0xd7}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x3, 0x2, 0x8, 0xff, 0x3}, 0x19, &(0x7f0000000480)=ANY=[@ANYBLOB="050f19c2c100011410048b27fbceeee5533745fa4cd9a500000000e8eb9bdb44521ac5fb56fb"], 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x449}}, {0xaa, &(0x7f0000000280)=@string={0xaa, 0x3, "2ca63314b812a4918ef4fc3613191f71386a0f6825019857c4919ceb53fdcc3ae4519f33558de98b7ea238d097aaa1006ff7025eeb4ae3a215f5427f4f4de72300a0964735cd31f4c50b5c03fe60be7590f98f31801a1cc9919e930fe605fb16ebca612db7c86d42f64fc3461770d8af98a85c4685e321d589b48826608dc82b8a4201afc3cb0b1fcff32c572994abeb3ffcb550aba2e288e9357aaf3158d2c6427f2e7a45c39440"}}, {0xcb, &(0x7f0000000340)=ANY=[@ANYBLOB="cb03bb4efc9f7d4ada39b8c49b36f3734470d7e0e59fc6ba08e502bb15197f915fc95dd0de82b188488ff5b9192ca422b186c791950d6757eb8ab9c541e8f9faba5a1d4ff04cfeb0e8c11ba357efe7fac127629a9440a033b18b42012d08f5c4db19aa855a610f1f2f95aee7cf0c768504ed358e3cdc7f928e20454c67a81f3ae603be2ae0418df4e072e34ae05f34afe2f86b9ec783bb7d24644c0a646451655d3d5e66f83ea212cb18a1558042c7ddb7d90d32e0ac85286972fb58c0408d6616df60358af5656fd0acba"]}]}) setsockopt$inet_tcp_buf(r9, 0x6, 0x21, &(0x7f0000000040)="8edf79a46e7e03b8d50a7b199e997119e04b43a6a144cf4575dfae7c466a2d139775c5971ec8dbac97a22cfd1eb7c586", 0x30) 682.323073ms ago: executing program 1 (id=392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000080}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x194, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x103}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000000}, 0x404c084) (async) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000380)) (async) syz_usb_connect$uac3(0x2, 0x8a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0xa, 0xf0, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x24, 0x30, 0xed}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x14, 0x8000}, [@selector_unit={0x5, 0x24, 0xc, 0x7}, @selector_unit={0x5, 0x24, 0xc, 0x1e}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x1, 0x9, 0x10, {0xa, 0x25, 0x25, 0x200005, 0x50, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xe2, 0x1, {0xa, 0x25, 0x25, 0x2, 0xd, 0xffff}}}}}}}}]}}, 0x0) 598.317635ms ago: executing program 3 (id=393): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') ioctl$UDMABUF_CREATE_LIST(r1, 0xc0686611, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000200)=""/39, &(0x7f0000000040)=0x27) write$P9_RLERRORu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="150000000702000800747261636566730006000000151ea3dcc794b6c25d1727d1b92b4771678d6bc207ef31da6785a8d7e69543f3d3835b86fc62e0c20b661e10923ead8d34ed93d2588c121868c09a87895023b3e3ea30c4b3ba004c914462f2753eda4fc96e92cd59362bfbbe7c20d8905ab29c141e01f0652de8edab6048a08b6f0cf48056ecbb42aa667ef8cbb818f91c5b87a281aa17650cef63ef5e6b75b891c611c5fa93532a9119fba4c769661975cc9599c8940d1e3895c3a6dada3c6d8fe8c629890d5ca08c7d55605c3b28ee2a"], 0x15) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYRES16=r0], 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@loopback, @local, 0x14, 0x4}}) 174.414776ms ago: executing program 2 (id=394): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) shutdown(r0, 0x0) 173.659986ms ago: executing program 2 (id=395): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x3]}, 0x0, 0x8) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f0000000440)=""/127, 0x7f}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x1, 0x0, @a}, 0x48, r4) keyctl$clear(0x7, r4) sendfile(r0, r3, 0x0, 0x8) 170.676396ms ago: executing program 2 (id=396): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000180)={@id={0x2, 0x0, @c}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) rmdir(&(0x7f0000000600)='./config/../file0\x00') 140.688276ms ago: executing program 2 (id=397): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@multicast1, 0x80, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) 122.385867ms ago: executing program 2 (id=398): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x2, 0x4e1f, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="240000000000000000000000070000004414"], 0x28}, 0x4000810) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0xa, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00006d8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066ba000000000f3036db45ef0c0cb8d09bbc8900efbafc0cedba4300ba210066ed3626f00fc70d", 0x4f}], 0x0, 0x42, 0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0x600) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r4, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/174, 0xae}, {&(0x7f00000000c0)=""/128, 0x80}], 0x3}}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b0500000000000904"], 0x0) 2.48595ms ago: executing program 3 (id=399): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x2c000, 0x0) r0 = fsopen(&(0x7f0000001980)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='(,\x00', 0x0, r0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000019c0)='uid', &(0x7f0000001a00)='./bus\x00', 0xffffffffffffff9c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x80, 0x4, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) geteuid() r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101202) ioctl$EVIOCSABS20(r2, 0x401845e0, 0x0) close_range(r2, r1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) syz_open_procfs(r3, &(0x7f0000000080)='net/vlan/vlan0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='0', 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x7000)=nil, 0x7000, &(0x7f0000000000)='\x00\x00\xad\xddP\x04Do\x90\x986\xc7\"K3\xaf\xf3\xe7\xf7Dm\xebD\x04\xf9A\x86_\x8d\x93\xe2\x13\xbf\xc5\xc7c\xe3\xf9(\xfe\x8a\x1c\xa8\x15\xf6\x81\xf6\xfcAM\x86\xc1\xb1\xdaJoI\xef\xf0\xe6U\xc2\r!\x16\xda\x16Y\xc0\x13\xba\xacX\a9@\x00\xac\xd0\xf1\xb3\xa8\xa7\x86h3|\x03\x95@\xebM\xa6i\xb3S\x84\xa0yum\xcbZ$8\xd2e\x19\xdb\xeb\xf3\x1eK\x1a\xad\xc4w\xe5\xcd&f\x9e\xc4') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e90000/0x4000)=nil, 0x1063, &(0x7f0000000180)='\x00\x00\xad\xddP\x04Do\x90\x986\xc7\"K3\xaf\xf3\xe7\xf7Dm\xebD\x04\xf9A\x86_\x8d\x93\xe2\x13\xbf\xc5\xc7c\xe3\xf9(\xfe\x8a\x1c\xa8\x15\xe9\x81\xf6\xfcAM\x86\xc1\x8al\xae-I\xef\xf0\xe6U\xc2\r!H\xda\x16Y\xba\xacX\a9@\x00\xac\xd0\xf1\x9c\xa8\xa7\x86h3|\x03\x95@\xebM\xa6i\xb3S\x84\xa0yu\x02\x1a\x9a=3\f\x8cS\xdb\xeb\xf3\x1eK\x1a\xad\xc4w\xe5\xcd&f\x9e\xc4\x18xm}\x82N8\x10\xa9\xeeUw*\xbd\xa4\t\"\x98\xaeb\x00\x00') 2.26526ms ago: executing program 3 (id=400): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) lseek(0xffffffffffffffff, 0x8000000000000000, 0x3) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0xe0f, 0x5, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xb60d, 0x6, 0x5, 0x7, 0x4, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0x0, 0x4, 0x80008071, 0x800, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x7], [0x10000807, 0x9, 0x8000012f, 0x8004, 0x5, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x5, 0x7fff, 0x6, 0x500, 0x401, 0x6, 0x1, 0xff, 0x6, 0x2, 0x1, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0xc, 0x9, 0x8, 0x5, 0x6, 0xfffff256, 0x6, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x2, 0x4000008, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x6, 0x1ef, 0x5, 0x0, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0xfffffffd, 0x4, 0xf, 0x8, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x7, 0xb1, 0xaca, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x1000004, 0x25], [0x5, 0xbb33, 0x7, 0x503d, 0x2, 0x4, 0x4006, 0x6, 0x8, 0xb9, 0x1, 0x10001ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x3, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x80000002, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c19, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) syz_ublk_setup_io_uring(0x476f, 0x0, 0x0, &(0x7f00000000c0), 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x300) 0s ago: executing program 3 (id=401): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x401, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7f, 0x76, 0x9}, @acm={0x4, 0x24, 0x2, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x13, &(0x7f0000000000)=0x5, 0x4) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000000)={r2}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7fffffff) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): 64646][ T36] audit: type=1400 audit(1787973130.259:134): avc: denied { setopt } for pid=419 comm="syz.3.18" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.602994][ T36] audit: type=1400 audit(1787973130.449:135): avc: denied { append } for pid=436 comm="syz.1.20" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.800285][ T355] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 34.976595][ T355] usb 4-1: Using ep0 maxpacket: 8 [ 34.985924][ T355] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.010233][ T355] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 35.034756][ T355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.056427][ T355] usb 4-1: Product: syz [ 35.060511][ T36] audit: type=1400 audit(1787973130.949:136): avc: denied { create } for pid=448 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.065394][ T355] usb 4-1: Manufacturer: syz [ 35.100254][ T355] usb 4-1: SerialNumber: syz [ 35.110433][ T355] usb 4-1: config 0 descriptor?? [ 35.116638][ T36] audit: type=1400 audit(1787973130.979:137): avc: denied { write } for pid=446 comm="syz.2.21" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 35.124579][ T355] usb 4-1: bad CDC descriptors [ 35.174417][ T355] usb 4-1: unsupported MDLM descriptors [ 35.339631][ T440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.357031][ T440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.383300][ T45] usb 4-1: USB disconnect, device number 6 [ 35.416790][ T349] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.436629][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.588526][ T349] usb 3-1: unable to get BOS descriptor or descriptor too short [ 35.600631][ T349] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.615363][ T349] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 35.617005][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 35.631811][ T349] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 35.640550][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.653224][ T349] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 35.666759][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.684716][ T349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.707258][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.717310][ T349] usb 3-1: Product: syz [ 35.733544][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.741652][ T349] usb 3-1: Manufacturer: syz [ 35.753071][ T31] usb 2-1: Product: syz [ 35.760591][ T349] usb 3-1: SerialNumber: syz [ 35.770384][ T31] usb 2-1: Manufacturer: syz [ 35.783535][ T31] usb 2-1: SerialNumber: syz [ 35.994353][ T31] usb 2-1: 0:2 : does not exist [ 36.005823][ T31] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 36.023864][ T349] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 36.033315][ T31] usb 2-1: USB disconnect, device number 3 [ 36.054986][ T349] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 36.077816][ T349] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 36.101176][ T349] usb 3-1: USB disconnect, device number 3 [ 36.110310][ T418] udevd[418]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.196675][ T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 36.356836][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 36.370519][ T45] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 36.382673][ T45] usb 4-1: config 0 has no interface number 0 [ 36.397627][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 36.413443][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.428567][ T45] usb 4-1: Product: syz [ 36.434487][ T45] usb 4-1: Manufacturer: syz [ 36.441523][ T45] usb 4-1: SerialNumber: syz [ 36.450936][ T45] usb 4-1: config 0 descriptor?? [ 36.462524][ T45] smsc95xx v2.0.0 [ 36.487945][ T9] usb 1-1: bad CDC descriptors [ 36.512202][ T9] usb 1-1: USB disconnect, device number 3 [ 36.538544][ T462] x_tables: unsorted entry at hook 1 [ 36.543531][ T461] x_tables: unsorted entry at hook 1 [ 36.754129][ T471] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.926520][ T479] tipc: Started in network mode [ 36.936372][ T479] tipc: Node identity , cluster identity 4711 [ 37.064440][ T485] syzkaller1: entered promiscuous mode [ 37.078138][ T485] syzkaller1: entered allmulticast mode [ 37.189606][ T488] ======================================================= [ 37.189606][ T488] WARNING: The mand mount option has been deprecated and [ 37.189606][ T488] and is ignored by this kernel. Remove the mand [ 37.189606][ T488] option from the mount to silence this warning. [ 37.189606][ T488] ======================================================= [ 37.288538][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 37.309771][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 37.335622][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 37.374778][ T45] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 37.389354][ T493] process 'syz.2.38' launched '/dev/fd/6' with NULL argv: empty string added [ 37.407794][ T45] usb 4-1: USB disconnect, device number 7 [ 37.715344][ T503] Zero length message leads to an empty skb [ 37.845686][ T510] overlay: filesystem on ./file0 not supported as upperdir [ 38.056594][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.137830][ T349] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 38.218388][ T9] usb 2-1: config 2 has an invalid interface number: 36 but max is 0 [ 38.291982][ T9] usb 2-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 38.317405][ T45] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 38.321852][ T9] usb 2-1: config 2 has no interface number 0 [ 38.343967][ T9] usb 2-1: config 2 interface 36 has no altsetting 0 [ 38.355640][ T349] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.377001][ T349] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.400209][ T349] usb 4-1: config 0 interface 0 has no altsetting 0 [ 38.411698][ T349] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 38.434061][ T9] usb 2-1: New USB device found, idVendor=1bc7, idProduct=3000, bcdDevice=69.9a [ 38.453900][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.469285][ T9] usb 2-1: Product: syz [ 38.482391][ T9] usb 2-1: Manufacturer: syz [ 38.490353][ T349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.496656][ T45] usb 3-1: device descriptor read/64, error -71 [ 38.504990][ T9] usb 2-1: SerialNumber: syz [ 38.531411][ T349] usb 4-1: config 0 descriptor?? [ 38.754730][ T508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.767748][ T45] usb 3-1: device descriptor read/64, error -71 [ 38.771013][ T508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.796772][ T311] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.798392][ T508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.820205][ T508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.843580][ T9] cdc_acm 2-1:2.36: More than one union descriptor, skipping ... [ 38.856761][ T9] cdc_acm 2-1:2.36: skipping garbage [ 38.867853][ T9] usb 2-1: USB disconnect, device number 4 [ 38.947026][ T349] sony 0003:054C:0268.0001: global environment stack underflow [ 38.958746][ T349] sony 0003:054C:0268.0001: item 0 4 1 11 parsing failed [ 38.966602][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 38.970448][ T349] sony 0003:054C:0268.0001: parse failed [ 38.977285][ T311] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.983211][ T349] sony 0003:054C:0268.0001: probe with driver sony failed with error -22 [ 38.997027][ T311] usb 1-1: config 0 has no interfaces? [ 39.021359][ T311] usb 1-1: string descriptor 0 read error: -71 [ 39.030444][ T311] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 39.046002][ T45] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 39.057569][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.073992][ T311] usb 1-1: config 0 descriptor?? [ 39.082375][ T311] usb 1-1: can't set config #0, error -71 [ 39.096064][ T311] usb 1-1: USB disconnect, device number 4 [ 39.145952][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 39.145969][ T36] audit: type=1400 audit(1787973135.029:178): avc: denied { read } for pid=516 comm="syz.3.45" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.147042][ T577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.201693][ T45] usb 3-1: device descriptor read/64, error -71 [ 39.202323][ T577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.431268][ T36] audit: type=1400 audit(1787973135.319:179): avc: denied { read } for pid=582 comm="syz.1.48" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.472427][ T36] audit: type=1400 audit(1787973135.319:180): avc: denied { open } for pid=582 comm="syz.1.48" path="/dev/input/event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.476757][ T45] usb 3-1: device descriptor read/64, error -71 [ 39.512958][ T36] audit: type=1400 audit(1787973135.319:181): avc: denied { ioctl } for pid=582 comm="syz.1.48" path="/dev/input/event1" dev="devtmpfs" ino=193 ioctlcmd=0x45e0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.556323][ T36] audit: type=1400 audit(1787973135.409:182): avc: denied { read } for pid=582 comm="syz.1.48" path="socket:[4803]" dev="sockfs" ino=4803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.583761][ T587] syz.0.49 uses obsolete (PF_INET,SOCK_PACKET) [ 39.586665][ T36] audit: type=1400 audit(1787973135.469:183): avc: denied { create } for pid=585 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 39.617510][ T36] audit: type=1400 audit(1787973135.479:184): avc: denied { read write } for pid=585 comm="syz.0.49" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 39.649014][ T36] audit: type=1400 audit(1787973135.479:185): avc: denied { open } for pid=585 comm="syz.0.49" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 39.687044][ T45] usb usb3-port1: attempt power cycle [ 39.695033][ T36] audit: type=1400 audit(1787973135.479:186): avc: denied { ioctl } for pid=585 comm="syz.0.49" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 39.732613][ T36] audit: type=1400 audit(1787973135.479:187): avc: denied { setopt } for pid=585 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.926671][ T349] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 40.096602][ T45] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 40.097882][ T349] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.126924][ T349] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.137858][ T45] usb 3-1: device descriptor read/8, error -71 [ 40.141389][ T349] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.163301][ T349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.175742][ T349] usb 1-1: Product: syz [ 40.182696][ T349] usb 1-1: Manufacturer: syz [ 40.188006][ T349] usb 1-1: SerialNumber: syz [ 40.287814][ T45] usb 3-1: device descriptor read/8, error -71 [ 40.485589][ T349] usb 1-1: 0:2 : does not exist [ 40.495322][ T349] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 40.506541][ T311] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.510054][ T349] usb 1-1: USB disconnect, device number 5 [ 40.525779][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.544820][ T45] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 40.578301][ T45] usb 3-1: device descriptor read/8, error -71 [ 40.676656][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 40.685732][ T311] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 40.700112][ T311] usb 2-1: config 0 has no interface number 0 [ 40.715374][ T311] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 40.728718][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.742252][ T311] usb 2-1: Product: syz [ 40.748069][ T311] usb 2-1: Manufacturer: syz [ 40.757992][ T311] usb 2-1: SerialNumber: syz [ 40.766129][ T45] usb 3-1: device descriptor read/8, error -71 [ 40.779403][ T311] usb 2-1: config 0 descriptor?? [ 40.791846][ T311] smsc95xx v2.0.0 [ 40.886733][ T45] usb usb3-port1: unable to enumerate USB device [ 40.902589][ T349] usb 4-1: USB disconnect, device number 8 [ 41.082102][ T615] 9pnet_fd: Insufficient options for proto=fd [ 41.371137][ T642] netlink: 96 bytes leftover after parsing attributes in process `syz.0.66'. [ 41.396439][ T45] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 41.556971][ T45] usb 3-1: Invalid ep0 maxpacket: 64 [ 41.611018][ T311] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 41.628607][ T311] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 41.643430][ T311] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 41.662876][ T311] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 41.675245][ T311] usb 2-1: USB disconnect, device number 5 [ 41.686671][ T312] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 41.703255][ T45] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 41.856589][ T312] usb 4-1: Using ep0 maxpacket: 16 [ 41.865367][ T45] usb 3-1: Invalid ep0 maxpacket: 64 [ 41.872772][ T45] usb usb3-port1: attempt power cycle [ 41.881507][ T312] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 41.892648][ T312] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 41.903433][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.913988][ T312] usb 4-1: Product: syz [ 41.920513][ T312] usb 4-1: Manufacturer: syz [ 41.928520][ T312] usb 4-1: SerialNumber: syz [ 41.942556][ T312] r8152-cfgselector 4-1: Unknown version 0x0000 [ 41.955991][ T312] r8152-cfgselector 4-1: config 0 descriptor?? [ 42.173389][ T655] FAULT_INJECTION: forcing a failure. [ 42.173389][ T655] name failslab, interval 1, probability 0, space 0, times 1 [ 42.197454][ T655] CPU: 0 UID: 0 PID: 655 Comm: syz.1.69 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 42.197499][ T655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.197516][ T655] Call Trace: [ 42.197524][ T655] [ 42.197901][ T655] __dump_stack+0x21/0x30 [ 42.197957][ T655] dump_stack_lvl+0x140/0x1c0 [ 42.197975][ T655] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.197995][ T655] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 42.198010][ T655] ? __sched_text_start+0x10/0x10 [ 42.198025][ T655] ? x64_sys_call+0x131a/0x2ee0 [ 42.198044][ T655] dump_stack+0x19/0x20 [ 42.198070][ T655] should_fail_ex+0x3c2/0x510 [ 42.198093][ T655] should_failslab+0xac/0x100 [ 42.198113][ T655] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 42.198124][ T655] ? __d_alloc+0x42/0x8c0 [ 42.198135][ T655] __d_alloc+0x42/0x8c0 [ 42.198144][ T655] d_alloc_parallel+0xe4/0x1370 [ 42.198155][ T655] ? __rcu_read_unlock+0xc0/0xc0 [ 42.198176][ T655] ? __cfi_lockref_get_not_dead+0x10/0x10 [ 42.198206][ T655] ? __rcu_read_unlock+0x67/0xc0 [ 42.198231][ T655] ? try_to_unlazy+0x62a/0xb50 [ 42.198250][ T655] ? __cfi_d_alloc_parallel+0x10/0x10 [ 42.198260][ T655] ? __kasan_check_write+0x18/0x20 [ 42.198270][ T655] ? down_write+0xee/0x2b0 [ 42.198282][ T655] ? __cfi_down_write+0x10/0x10 [ 42.198294][ T655] path_openat+0xa09/0x35a0 [ 42.198308][ T655] ? x64_sys_call+0x131a/0x2ee0 [ 42.198327][ T655] ? do_filp_open+0x440/0x440 [ 42.198353][ T655] do_filp_open+0x1f2/0x440 [ 42.198376][ T655] ? __cfi_do_filp_open+0x10/0x10 [ 42.198399][ T655] ? alloc_fd+0x4c1/0x570 [ 42.198411][ T655] do_sys_openat2+0x134/0x1d0 [ 42.198487][ T655] ? fput+0x1a4/0x230 [ 42.198526][ T655] ? do_sys_open+0x100/0x100 [ 42.198555][ T655] ? __kasan_check_write+0x18/0x20 [ 42.198586][ T655] __x64_sys_open+0x120/0x150 [ 42.198605][ T655] x64_sys_call+0x131a/0x2ee0 [ 42.198615][ T655] do_syscall_64+0x57/0xf0 [ 42.198633][ T655] ? clear_bhb_loop+0x50/0xa0 [ 42.198656][ T655] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.199380][ T655] RIP: 0033:0x7ff86879e159 [ 42.199415][ T655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.199432][ T655] RSP: 002b:00007ff8695c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 42.199454][ T655] RAX: ffffffffffffffda RBX: 00007ff868a25fa0 RCX: 00007ff86879e159 [ 42.199471][ T655] RDX: 0000000000000000 RSI: 0000000000048141 RDI: 0000200000000080 [ 42.199485][ T655] RBP: 00007ff868835024 R08: 0000000000000000 R09: 0000000000000000 [ 42.199560][ T655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.199577][ T655] R13: 00007ff868a26038 R14: 00007ff868a25fa0 R15: 00007ffe60340118 [ 42.199597][ T655] [ 42.286644][ T45] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 42.651293][ T659] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.667764][ T45] usb 3-1: Invalid ep0 maxpacket: 64 [ 42.807109][ T45] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 42.838178][ T45] usb 3-1: Invalid ep0 maxpacket: 64 [ 42.848624][ T45] usb usb3-port1: unable to enumerate USB device [ 42.936976][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 43.096535][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 43.107546][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 43.122386][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.148368][ T31] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 43.168710][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.183393][ T31] usb 2-1: Product: syz [ 43.191025][ T31] usb 2-1: Manufacturer: syz [ 43.198797][ T31] usb 2-1: SerialNumber: syz [ 43.416726][ T662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.428278][ T662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.445476][ T31] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 43.459532][ T31] usb 2-1: USB disconnect, device number 6 [ 43.987318][ T671] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=671 comm=syz.1.73 [ 44.007198][ T670] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=670 comm=syz.1.73 [ 44.236368][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 44.236386][ T36] audit: type=1400 audit(1787973140.119:212): avc: denied { ioctl } for pid=681 comm="syz.2.76" path="socket:[4923]" dev="sockfs" ino=4923 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.371235][ T36] audit: type=1400 audit(1787973140.259:213): avc: denied { create } for pid=684 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.416312][ T312] r8152-cfgselector 4-1: Unknown version 0x0000 [ 44.431313][ T312] r8152-cfgselector 4-1: bad CDC descriptors [ 44.437853][ T36] audit: type=1326 audit(1787973140.319:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=684 comm="syz.1.77" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff86879e159 code=0x0 [ 44.448481][ T312] r8152-cfgselector 4-1: USB disconnect, device number 9 [ 44.529210][ T36] audit: type=1400 audit(1787973140.419:215): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 44.596850][ T36] audit: type=1400 audit(1787973140.479:216): avc: denied { read append } for pid=691 comm="syz.0.80" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 44.599666][ T10] kernel write not supported for file /input/event2 (pid: 10 comm: kworker/0:1) [ 44.651345][ T36] audit: type=1400 audit(1787973140.479:217): avc: denied { open } for pid=691 comm="syz.0.80" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 44.705668][ T349] kernel write not supported for file /input/event2 (pid: 349 comm: kworker/0:3) [ 44.711184][ T36] audit: type=1400 audit(1787973140.489:218): avc: denied { write } for pid=691 comm="syz.0.80" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 44.764123][ T36] audit: type=1400 audit(1787973140.599:219): avc: denied { setopt } for pid=684 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.798464][ T36] audit: type=1400 audit(1787973140.619:220): avc: denied { bind } for pid=693 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.866117][ T36] audit: type=1400 audit(1787973140.749:221): avc: denied { read write } for pid=706 comm="syz.3.82" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 44.867781][ T349] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 44.925395][ T349] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.949382][ T707] kvm: MWAIT instruction emulated as NOP! [ 44.976740][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 45.027058][ T709] fido_id[709]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 45.096680][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 45.137798][ T10] usb 3-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 45.150742][ T713] overlayfs: failed to clone lowerpath [ 45.161821][ T10] usb 3-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 45.179604][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.195223][ T10] usb 3-1: Product: syz [ 45.201814][ T10] usb 3-1: Manufacturer: syz [ 45.210206][ T10] usb 3-1: SerialNumber: syz [ 45.219238][ T10] usb-storage 3-1:1.0: USB Mass Storage device detected [ 45.234482][ T10] scsi host1: usb-storage 3-1:1.0 [ 45.247542][ T349] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 45.278368][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 45.302847][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 45.315821][ T31] usb 1-1: can't read configurations, error -61 [ 45.386575][ T349] usb 4-1: device descriptor read/64, error -71 [ 45.476719][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 45.539329][ T10] usb 3-1: USB disconnect, device number 12 [ 45.616610][ T355] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 45.636795][ T349] usb 4-1: device descriptor read/64, error -71 [ 45.648192][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 45.663494][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 45.675186][ T31] usb 1-1: can't read configurations, error -61 [ 45.683602][ T31] usb usb1-port1: attempt power cycle [ 45.778195][ T355] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 45.794410][ T355] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.810463][ T355] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 45.829851][ T355] usb 2-1: config 1 has no interface number 0 [ 45.837849][ T355] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 45.853449][ T355] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 45.881390][ T355] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.894298][ T355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.904601][ T349] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 45.913471][ T355] usb 2-1: Product: syz [ 45.919485][ T355] usb 2-1: Manufacturer: syz [ 45.924663][ T355] usb 2-1: SerialNumber: syz [ 46.026729][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 46.056696][ T349] usb 4-1: device descriptor read/64, error -71 [ 46.069722][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.083019][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 46.097032][ T31] usb 1-1: can't read configurations, error -61 [ 46.129852][ T723] netlink: 64 bytes leftover after parsing attributes in process `syz.2.86'. [ 46.142561][ T355] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 46.157214][ T355] usb 2-1: USB disconnect, device number 7 [ 46.246641][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 46.279603][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.291825][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 46.304445][ T31] usb 1-1: can't read configurations, error -61 [ 46.315173][ T31] usb usb1-port1: unable to enumerate USB device [ 46.316677][ T349] usb 4-1: device descriptor read/64, error -71 [ 46.386636][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 46.436788][ T349] usb usb4-port1: attempt power cycle [ 46.526587][ T10] usb 3-1: device descriptor read/64, error -71 [ 46.776725][ T10] usb 3-1: device descriptor read/64, error -71 [ 46.788773][ T349] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 46.815373][ T733] fuse: Unknown parameter 'rootmodÖ4°bf¯_Ô000000000h?û”Ó¢­.' [ 46.817898][ T349] usb 4-1: device descriptor read/8, error -71 [ 46.958378][ T349] usb 4-1: device descriptor read/8, error -71 [ 47.036605][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 47.126578][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 47.176616][ T10] usb 3-1: device descriptor read/64, error -71 [ 47.206699][ T349] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 47.238227][ T349] usb 4-1: device descriptor read/8, error -71 [ 47.288097][ T31] usb 2-1: config 1 has an invalid descriptor of length 99, skipping remainder of the config [ 47.304953][ T31] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 47.321803][ T31] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 47.331403][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.340389][ T31] usb 2-1: Product: syz [ 47.344760][ T31] usb 2-1: Manufacturer: syz [ 47.349973][ T31] usb 2-1: SerialNumber: syz [ 47.358446][ T31] usb-storage 2-1:1.0: USB Mass Storage device detected [ 47.367045][ T31] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 47.377676][ T31] scsi host1: usb-storage 2-1:1.0 [ 47.387954][ T349] usb 4-1: device descriptor read/8, error -71 [ 47.436605][ T10] usb 3-1: device descriptor read/64, error -71 [ 47.506648][ T349] usb usb4-port1: unable to enumerate USB device [ 47.546702][ T10] usb usb3-port1: attempt power cycle [ 47.559091][ T31] usb 2-1: USB disconnect, device number 8 [ 47.886583][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 47.908331][ T10] usb 3-1: device descriptor read/8, error -71 [ 48.048096][ T10] usb 3-1: device descriptor read/8, error -71 [ 48.296586][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 48.326756][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 48.328744][ T10] usb 3-1: device descriptor read/8, error -71 [ 48.406581][ T349] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 48.477804][ T10] usb 3-1: device descriptor read/8, error -71 [ 48.487934][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 48.505871][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.519074][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 48.534642][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 48.548887][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.564408][ T31] usb 2-1: config 0 descriptor?? [ 48.578854][ T349] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 48.588730][ T349] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 48.598485][ T10] usb usb3-port1: unable to enumerate USB device [ 48.609926][ T349] usb 4-1: Product: syz [ 48.619420][ T349] usb 4-1: config 0 descriptor?? [ 48.631545][ T349] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 48.642164][ T349] usb 4-1: Detected FT232H [ 49.001273][ T31] logitech-djreceiver 0003:046D:C71C.0003: unknown main item tag 0x7 [ 49.012645][ T31] logitech-djreceiver 0003:046D:C71C.0003: unexpected long global item [ 49.025034][ T31] logitech-djreceiver 0003:046D:C71C.0003: logi_dj_probe: parse failed [ 49.038697][ T31] logitech-djreceiver 0003:046D:C71C.0003: probe with driver logitech-djreceiver failed with error -22 [ 49.169500][ T753] sit0: entered promiscuous mode [ 49.184348][ T753] netlink: 'syz.2.96': attribute type 1 has an invalid length. [ 49.205637][ T753] netlink: 1 bytes leftover after parsing attributes in process `syz.2.96'. [ 49.232595][ T349] ftdi_sio 4-1:0.0: GPIO initialisation failed: -32 [ 49.246932][ T10] usb 2-1: USB disconnect, device number 9 [ 49.256848][ T758] bridge0: port 3(syz_tun) entered blocking state [ 49.272935][ T758] bridge0: port 3(syz_tun) entered disabled state [ 49.273045][ T349] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 49.294958][ T758] syz_tun: entered allmulticast mode [ 49.336937][ T758] syz_tun: entered promiscuous mode [ 49.356705][ T758] bridge0: port 3(syz_tun) entered blocking state [ 49.371043][ T758] bridge0: port 3(syz_tun) entered forwarding state [ 49.600625][ T766] netlink: 188 bytes leftover after parsing attributes in process `syz.3.92'. [ 49.621508][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 49.621617][ T36] audit: type=1400 audit(1787973145.509:235): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 49.680352][ T36] audit: type=1400 audit(1787973145.569:236): avc: denied { map } for pid=771 comm="syz.0.102" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.724268][ T36] audit: type=1400 audit(1787973145.569:237): avc: denied { execute } for pid=771 comm="syz.0.102" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.756764][ T666] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 49.785330][ T36] audit: type=1400 audit(1787973145.669:238): avc: denied { write } for pid=773 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.788876][ T774] FAULT_INJECTION: forcing a failure. [ 49.788876][ T774] name failslab, interval 1, probability 0, space 0, times 0 [ 49.821072][ T36] audit: type=1400 audit(1787973145.679:239): avc: denied { mounton } for pid=773 comm="syz.1.103" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 49.842859][ T774] CPU: 1 UID: 0 PID: 774 Comm: syz.1.103 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 49.842890][ T774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.842902][ T774] Call Trace: [ 49.842909][ T774] [ 49.842916][ T774] __dump_stack+0x21/0x30 [ 49.842947][ T774] dump_stack_lvl+0x140/0x1c0 [ 49.842971][ T774] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.842998][ T774] dump_stack+0x19/0x20 [ 49.843021][ T774] should_fail_ex+0x3c2/0x510 [ 49.843043][ T774] should_failslab+0xac/0x100 [ 49.843065][ T774] kmem_cache_alloc_noprof+0x42/0x410 [ 49.843086][ T774] ? alloc_empty_file+0xbf/0x270 [ 49.843201][ T774] ? _raw_spin_unlock+0x45/0x60 [ 49.843235][ T774] alloc_empty_file+0xbf/0x270 [ 49.843258][ T774] ? _raw_spin_unlock+0x45/0x60 [ 49.843283][ T774] alloc_file_pseudo+0x142/0x1f0 [ 49.843307][ T774] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 49.843332][ T774] sock_alloc_file+0xbe/0x2b0 [ 49.843351][ T774] __sys_socket+0x14c/0x1c0 [ 49.843370][ T774] __x64_sys_socket+0x7e/0x90 [ 49.843389][ T774] x64_sys_call+0x2608/0x2ee0 [ 49.843406][ T774] do_syscall_64+0x57/0xf0 [ 49.843431][ T774] ? clear_bhb_loop+0x50/0xa0 [ 49.843452][ T774] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.843472][ T774] RIP: 0033:0x7ff86879e159 [ 49.843489][ T774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.843504][ T774] RSP: 002b:00007ff8695c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 49.843524][ T774] RAX: ffffffffffffffda RBX: 00007ff868a25fa0 RCX: 00007ff86879e159 [ 49.843537][ T774] RDX: 0000000000000000 RSI: 0800000000000002 RDI: 000000000000000a [ 49.843548][ T774] RBP: 00007ff868835024 R08: 0000000000000000 R09: 0000000000000000 [ 49.843556][ T774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.843562][ T774] R13: 00007ff868a26038 R14: 00007ff868a25fa0 R15: 00007ffe60340118 [ 49.843571][ T774] [ 49.928434][ T666] usb 3-1: unable to get BOS descriptor or descriptor too short [ 49.929589][ T36] audit: type=1400 audit(1787973145.739:240): avc: denied { connect } for pid=773 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.946769][ T666] usb 3-1: not running at top speed; connect to a high speed hub [ 50.026525][ T36] audit: type=1400 audit(1787973145.909:241): avc: denied { create } for pid=742 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 50.033443][ T666] usb 3-1: config 1 has an invalid interface number: 81 but max is 0 [ 50.055018][ T36] audit: type=1400 audit(1787973145.929:242): avc: denied { sys_admin } for pid=742 comm="syz.3.92" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 50.059291][ T666] usb 3-1: config 1 has no interface number 0 [ 50.346927][ T666] usb 3-1: config 1 interface 81 altsetting 215 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 50.365773][ T666] usb 3-1: config 1 interface 81 has no altsetting 0 [ 50.397884][ T666] usb 3-1: New USB device found, idVendor=0499, idProduct=7862, bcdDevice=3b.d1 [ 50.412967][ T666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.428803][ T666] usb 3-1: Product: syz [ 50.435997][ T666] usb 3-1: Manufacturer: syz [ 50.444161][ T666] usb 3-1: SerialNumber: syz [ 50.454897][ T765] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 50.606514][ T349] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 50.676752][ T666] usb 3-1: USB disconnect, device number 17 [ 50.701697][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.81/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.777803][ T349] usb 2-1: config 28 has an invalid interface number: 206 but max is 0 [ 50.790365][ T349] usb 2-1: config 28 has no interface number 0 [ 50.798904][ T349] usb 2-1: config 28 interface 206 has no altsetting 0 [ 50.815028][ T349] usb 2-1: New USB device found, idVendor=1608, idProduct=030e, bcdDevice=22.27 [ 50.829540][ T349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.842555][ T349] usb 2-1: Product: syz [ 50.847796][ T349] usb 2-1: Manufacturer: syz [ 50.855685][ T349] usb 2-1: SerialNumber: syz [ 51.064006][ T10] usb 4-1: USB disconnect, device number 14 [ 51.081401][ T349] usb 2-1: USB disconnect, device number 10 [ 51.092223][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 51.119983][ T10] ftdi_sio 4-1:0.0: device disconnected [ 51.168533][ T36] audit: type=1400 audit(1787973147.059:243): avc: denied { connect } for pid=791 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.213738][ T36] audit: type=1400 audit(1787973147.059:244): avc: denied { write } for pid=791 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.314191][ T792] capability: warning: `syz.3.106' uses 32-bit capabilities (legacy support in use) [ 51.646544][ T666] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 51.796582][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 51.838012][ T666] usb 4-1: No LPM exit latency info found, disabling LPM. [ 51.855157][ T666] usb 4-1: string descriptor 0 read error: -22 [ 51.898389][ T666] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 51.957869][ T666] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.006709][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 52.020485][ T31] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 52.037112][ T666] usb 4-1: MIDIStreaming interface descriptor not found [ 52.048569][ T31] usb 1-1: config 179 has no interface number 0 [ 52.079766][ T31] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 52.136515][ T31] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 52.185649][ T31] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 52.219384][ T814] capability: warning: `syz.2.114' uses deprecated v2 capabilities in a way that may be insecure [ 52.224631][ T31] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 52.277699][ T816] overlay: Bad value for 'uuid' [ 52.284557][ T31] usb 1-1: config 179 interface 65 has no altsetting 0 [ 52.361538][ T31] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 52.388444][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.421690][ T31] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input4 [ 52.471602][ T726] usb 4-1: USB disconnect, device number 15 [ 52.516715][ T95] input input4: unable to receive magic message: -110 [ 52.532949][ T95] input input4: unable to receive magic message: -32 [ 52.577274][ T333] input input4: unable to receive magic message: -32 [ 52.589564][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 52.608625][ T95] input input4: unable to receive magic message: -32 [ 52.644100][ T95] input input4: unable to receive magic message: -71 [ 52.646638][ T31] usb 1-1: USB disconnect, device number 10 [ 52.656809][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 52.656844][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 52.699470][ T31] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 52.748695][ T10] usb 3-1: config index 0 descriptor too short (expected 45, got 22) [ 52.766019][ T10] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 52.786433][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 52.819610][ T10] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 52.833843][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.851466][ T10] usb 3-1: Product: syz [ 52.860133][ T10] usb 3-1: Manufacturer: syz [ 52.868699][ T10] usb 3-1: SerialNumber: syz [ 52.882460][ T10] rtl8150 3-1:1.0: couldn't find required endpoints [ 52.896924][ T10] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 53.086696][ T31] usb 3-1: USB disconnect, device number 18 [ 53.516560][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 53.688254][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 53.706181][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 53.724113][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.152878][ T31] lg-g15 0003:046D:C222.0004: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 54.348821][ T31] lg-g15 0003:046D:C222.0004: Error getting LED brightness: -71 [ 54.363714][ T31] lg-g15 0003:046D:C222.0004: probe with driver lg-g15 failed with error -71 [ 54.378923][ T31] usb 1-1: USB disconnect, device number 11 [ 54.487915][ T852] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 54.498265][ T852] overlayfs: missing 'lowerdir' [ 54.736610][ T312] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 54.827175][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 54.827192][ T36] audit: type=1400 audit(1787973150.719:261): avc: denied { read } for pid=853 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.866353][ T36] audit: type=1400 audit(1787973150.719:262): avc: denied { listen } for pid=853 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.890196][ T36] audit: type=1400 audit(1787973150.749:263): avc: denied { search } for pid=855 comm="syz.0.128" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 54.914991][ T36] audit: type=1400 audit(1787973150.749:264): avc: denied { ioctl } for pid=855 comm="syz.0.128" path="/28/tracing/dynamic_events" dev="tracefs" ino=1049 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 54.944843][ T312] usb 3-1: Using ep0 maxpacket: 32 [ 54.951683][ T857] netlink: 25 bytes leftover after parsing attributes in process `syz.0.128'. [ 54.970289][ T312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 54.979619][ T312] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 54.991468][ T312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.003153][ T312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.015070][ T312] usb 3-1: string descriptor 0 read error: -22 [ 55.019419][ T859] netlink: 36 bytes leftover after parsing attributes in process `syz.0.129'. [ 55.022304][ T312] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 55.042520][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.054600][ T312] usb 3-1: 0:2 : does not exist [ 55.086664][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 55.236594][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 55.243448][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.255859][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.265536][ T312] usb 3-1: USB disconnect, device number 19 [ 55.266709][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 55.286167][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.295391][ T10] usb 4-1: Product: syz [ 55.300576][ T10] usb 4-1: Manufacturer: syz [ 55.308054][ T10] usb 4-1: SerialNumber: syz [ 55.316528][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 55.466562][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 55.473128][ T31] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 55.482091][ T31] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 55.495562][ T31] usb 1-1: config 4 has no interface number 0 [ 55.504934][ T31] usb 1-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 55.519721][ T10] usb 4-1: 0:2 : does not exist [ 55.521369][ T31] usb 1-1: config 4 interface 51 has no altsetting 0 [ 55.535195][ T31] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 55.546295][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.556372][ T31] usb 1-1: Product: syz [ 55.561547][ T31] usb 1-1: Manufacturer: syz [ 55.563277][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 55.566558][ T31] usb 1-1: SerialNumber: syz [ 55.573420][ T31] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -22 [ 55.586361][ T10] usb 4-1: USB disconnect, device number 16 [ 55.599085][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.776898][ T10] usb 1-1: USB disconnect, device number 12 [ 55.826423][ T36] audit: type=1400 audit(1787973151.709:265): avc: denied { ioctl } for pid=865 comm="syz.2.132" path="socket:[7519]" dev="sockfs" ino=7519 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.038449][ T36] audit: type=1400 audit(1787973151.929:266): avc: denied { read append } for pid=879 comm="syz.2.136" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.068409][ T36] audit: type=1400 audit(1787973151.929:267): avc: denied { open } for pid=879 comm="syz.2.136" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.103665][ T36] audit: type=1400 audit(1787973151.929:268): avc: denied { ioctl } for pid=879 comm="syz.2.136" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.240484][ T36] audit: type=1400 audit(1787973152.129:269): avc: denied { read } for pid=889 comm="syz.2.139" name="trace_pipe_raw" dev="tracefs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 56.415661][ T897] can0: slcan on ttyS3. [ 56.422097][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 56.431244][ T36] audit: type=1400 audit(1787973152.319:270): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.536549][ T312] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 56.587931][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 56.606145][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 56.620253][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 56.636078][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 56.656889][ T10] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 56.677957][ T349] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 56.690081][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.704577][ T10] usb 4-1: Product: syz [ 56.706708][ T312] usb 3-1: Using ep0 maxpacket: 8 [ 56.712116][ T10] usb 4-1: Manufacturer: syz [ 56.724287][ T312] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.729000][ T10] usb 4-1: SerialNumber: syz [ 56.747953][ T312] usb 3-1: config 0 interface 0 has no altsetting 0 [ 56.759174][ T10] usb 4-1: config 0 descriptor?? [ 56.769094][ T312] usb 3-1: New USB device found, idVendor=046d, idProduct=c125, bcdDevice= 0.e7 [ 56.785439][ T10] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 56.797198][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.823358][ T312] usb 3-1: config 0 descriptor?? [ 56.886602][ T349] usb 1-1: device descriptor read/64, error -71 [ 57.018058][ T10] ums-isd200 4-1:0.0: probe with driver ums-isd200 failed with error -22 [ 57.050344][ T312] usb 3-1: USB disconnect, device number 20 [ 57.136602][ T349] usb 1-1: device descriptor read/64, error -71 [ 57.194205][ T31] usb 4-1: USB disconnect, device number 17 [ 57.236604][ T726] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 57.386664][ T349] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 57.402898][ T726] usb 2-1: Using ep0 maxpacket: 8 [ 57.414469][ T726] usb 2-1: config index 0 descriptor too short (expected 2048, got 36) [ 57.429472][ T726] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 57.444452][ T726] usb 2-1: can't read configurations, error -22 [ 57.536874][ T349] usb 1-1: device descriptor read/64, error -71 [ 57.576685][ T726] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 57.663500][ T925] netlink: 132 bytes leftover after parsing attributes in process `syz.2.145'. [ 57.737135][ T726] usb 2-1: Using ep0 maxpacket: 8 [ 57.745763][ T726] usb 2-1: config index 0 descriptor too short (expected 2048, got 36) [ 57.757822][ T726] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 57.771730][ T726] usb 2-1: can't read configurations, error -22 [ 57.789071][ T726] usb usb2-port1: attempt power cycle [ 57.798917][ T349] usb 1-1: device descriptor read/64, error -71 [ 57.917275][ T349] usb usb1-port1: attempt power cycle [ 58.136570][ T10] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 58.150757][ T726] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 58.177165][ T726] usb 2-1: Using ep0 maxpacket: 8 [ 58.196397][ T726] usb 2-1: config index 0 descriptor too short (expected 2048, got 36) [ 58.212116][ T726] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 58.229685][ T726] usb 2-1: can't read configurations, error -22 [ 58.286607][ T349] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 58.299086][ T10] usb 3-1: device descriptor read/64, error -71 [ 58.328258][ T349] usb 1-1: device descriptor read/8, error -71 [ 58.376640][ T726] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 58.416978][ T726] usb 2-1: Using ep0 maxpacket: 8 [ 58.437681][ T726] usb 2-1: config index 0 descriptor too short (expected 2048, got 36) [ 58.449718][ T726] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 58.463230][ T726] usb 2-1: can't read configurations, error -22 [ 58.477487][ T726] usb usb2-port1: unable to enumerate USB device [ 58.496742][ T349] usb 1-1: device descriptor read/8, error -71 [ 58.567641][ T10] usb 3-1: device descriptor read/64, error -71 [ 58.746641][ T349] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 58.778094][ T349] usb 1-1: device descriptor read/8, error -71 [ 58.816638][ T10] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 58.928164][ T349] usb 1-1: device descriptor read/8, error -71 [ 58.966649][ T10] usb 3-1: device descriptor read/64, error -71 [ 59.046700][ T349] usb usb1-port1: unable to enumerate USB device [ 59.056574][ T312] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 59.216606][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 59.216619][ T10] usb 3-1: device descriptor read/64, error -71 [ 59.217746][ T312] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 59.252839][ T312] usb 4-1: config 0 has no interface number 0 [ 59.262497][ T312] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 59.278186][ T312] usb 4-1: config 0 interface 196 has no altsetting 0 [ 59.294794][ T312] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 59.309451][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.320482][ T312] usb 4-1: Product: syz [ 59.327708][ T312] usb 4-1: Manufacturer: syz [ 59.335218][ T312] usb 4-1: SerialNumber: syz [ 59.342091][ T312] usb 4-1: config 0 descriptor?? [ 59.346630][ T10] usb usb3-port1: attempt power cycle [ 59.351643][ T970] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 59.447885][ T896] can0 (unregistered): slcan off ttyS3. [ 59.499125][ T981] bridge0: port 3(dummy0) entered blocking state [ 59.512125][ T981] bridge0: port 3(dummy0) entered disabled state [ 59.524958][ T981] dummy0: entered allmulticast mode [ 59.534117][ T981] dummy0: entered promiscuous mode [ 59.543911][ T981] bridge0: port 3(dummy0) entered blocking state [ 59.555884][ T981] bridge0: port 3(dummy0) entered forwarding state [ 59.569295][ T988] dummy0: left allmulticast mode [ 59.580745][ T988] dummy0: left promiscuous mode [ 59.591983][ T988] bridge0: port 3(dummy0) entered disabled state [ 59.686605][ T10] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 59.729006][ T10] usb 3-1: device descriptor read/8, error -71 [ 59.877075][ T10] usb 3-1: device descriptor read/8, error -71 [ 59.988403][ T970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.006810][ T970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.020611][ T312] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 60.040920][ T312] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 60.126606][ T10] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 60.167872][ T10] usb 3-1: device descriptor read/8, error -71 [ 60.269008][ C1] ipheth 4-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 60.308277][ T10] usb 3-1: device descriptor read/8, error -71 [ 60.426646][ T10] usb usb3-port1: unable to enumerate USB device [ 60.437017][ T726] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 60.469776][ T10] usb 4-1: USB disconnect, device number 18 [ 60.532111][ T10] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 60.596630][ T726] usb 2-1: Using ep0 maxpacket: 16 [ 60.609644][ T726] usb 2-1: New USB device found, idVendor=000f, idProduct=0000, bcdDevice= 0.40 [ 60.625127][ T726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.635418][ T726] usb 2-1: Product: syz [ 60.642079][ T726] usb 2-1: Manufacturer: syz [ 60.653410][ T726] usb 2-1: SerialNumber: syz [ 60.671398][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 60.671509][ T36] audit: type=1400 audit(1787973156.559:287): avc: denied { create } for pid=1061 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 60.727112][ T1063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.161'. [ 60.752110][ T36] audit: type=1400 audit(1787973156.639:288): avc: denied { ioctl } for pid=1061 comm="syz.0.161" path="socket:[8011]" dev="sockfs" ino=8011 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.917612][ T36] audit: type=1400 audit(1787973156.809:289): avc: denied { name_bind } for pid=1064 comm="syz.2.162" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 61.016560][ T36] audit: type=1400 audit(1787973156.899:290): avc: denied { bind } for pid=1066 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.060369][ T36] audit: type=1400 audit(1787973156.899:291): avc: denied { name_bind } for pid=1066 comm="syz.3.163" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 61.105791][ T36] audit: type=1400 audit(1787973156.899:292): avc: denied { node_bind } for pid=1066 comm="syz.3.163" saddr=::ffff:224.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 61.166043][ T36] audit: type=1326 audit(1787973157.049:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1073 comm="syz.2.166" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f507319e159 code=0x0 [ 61.319394][ T36] audit: type=1400 audit(1787973157.209:294): avc: denied { getopt } for pid=1025 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.321888][ T1026] 9p: Unknown access argument 18446744073709551615: -34 [ 61.371844][ T36] audit: type=1400 audit(1787973157.209:295): avc: denied { ioctl } for pid=1025 comm="syz.1.158" path="socket:[8020]" dev="sockfs" ino=8020 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.426592][ T36] audit: type=1400 audit(1787973157.209:296): avc: denied { getopt } for pid=1025 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.519663][ T1082] FAULT_INJECTION: forcing a failure. [ 61.519663][ T1082] name failslab, interval 1, probability 0, space 0, times 0 [ 61.545901][ T1082] CPU: 0 UID: 0 PID: 1082 Comm: syz.0.168 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 61.545944][ T1082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.545956][ T1082] Call Trace: [ 61.545963][ T1082] [ 61.545969][ T1082] __dump_stack+0x21/0x30 [ 61.545995][ T1082] dump_stack_lvl+0x140/0x1c0 [ 61.546010][ T1082] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.546026][ T1082] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 61.546037][ T1082] ? init_file+0x9e/0x210 [ 61.546051][ T1082] ? alloc_empty_file+0xd9/0x270 [ 61.546063][ T1082] ? path_openat+0xf4/0x35a0 [ 61.546076][ T1082] ? do_sys_openat2+0x134/0x1d0 [ 61.546090][ T1082] ? __x64_sys_open+0x120/0x150 [ 61.546115][ T1082] ? x64_sys_call+0x131a/0x2ee0 [ 61.546125][ T1082] dump_stack+0x19/0x20 [ 61.546142][ T1082] should_fail_ex+0x3c2/0x510 [ 61.546155][ T1082] should_failslab+0xac/0x100 [ 61.546168][ T1082] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 61.546178][ T1082] ? __d_alloc+0x42/0x8c0 [ 61.546192][ T1082] __d_alloc+0x42/0x8c0 [ 61.546209][ T1082] d_alloc_parallel+0xe4/0x1370 [ 61.546226][ T1082] ? make_vfsuid+0x4d/0xa0 [ 61.546237][ T1082] ? __cfi_lockref_get_not_dead+0x10/0x10 [ 61.546935][ T1082] ? security_inode_permission+0x77/0x150 [ 61.546964][ T1082] ? try_to_unlazy+0x62a/0xb50 [ 61.546985][ T1082] ? __cfi_d_alloc_parallel+0x10/0x10 [ 61.547157][ T1082] ? __kasan_check_write+0x18/0x20 [ 61.547183][ T1082] ? down_write+0xee/0x2b0 [ 61.547207][ T1082] ? __cfi_down_write+0x10/0x10 [ 61.547232][ T1082] path_openat+0xa09/0x35a0 [ 61.547259][ T1082] ? x64_sys_call+0x131a/0x2ee0 [ 61.547277][ T1082] ? do_filp_open+0x440/0x440 [ 61.547554][ T1082] do_filp_open+0x1f2/0x440 [ 61.547604][ T1082] ? __cfi_do_filp_open+0x10/0x10 [ 61.547633][ T1082] ? alloc_fd+0x4c1/0x570 [ 61.547761][ T1082] do_sys_openat2+0x134/0x1d0 [ 61.547789][ T1082] ? fput+0x1a4/0x230 [ 61.547810][ T1082] ? do_sys_open+0x100/0x100 [ 61.547867][ T1082] ? __kasan_check_write+0x18/0x20 [ 61.547888][ T1082] __x64_sys_open+0x120/0x150 [ 61.547914][ T1082] x64_sys_call+0x131a/0x2ee0 [ 61.547931][ T1082] do_syscall_64+0x57/0xf0 [ 61.547958][ T1082] ? clear_bhb_loop+0x50/0xa0 [ 61.547977][ T1082] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.547995][ T1082] RIP: 0033:0x7f9d97b9e159 [ 61.548012][ T1082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.548028][ T1082] RSP: 002b:00007f9d98a7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 61.548048][ T1082] RAX: ffffffffffffffda RBX: 00007f9d97e25fa0 RCX: 00007f9d97b9e159 [ 61.548062][ T1082] RDX: 0000000000000000 RSI: 0000000000048141 RDI: 0000200000000080 [ 61.548074][ T1082] RBP: 00007f9d97c35024 R08: 0000000000000000 R09: 0000000000000000 [ 61.548086][ T1082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.548096][ T1082] R13: 00007f9d97e26038 R14: 00007f9d97e25fa0 R15: 00007ffe84a76468 [ 61.548111][ T1082] [ 61.988976][ T1082] netlink: 'syz.0.168': attribute type 63 has an invalid length. [ 62.001898][ T1082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.168'. [ 62.077976][ T726] usb 2-1: MIDIStreaming interface descriptor not found [ 62.097552][ T726] usb 2-1: USB disconnect, device number 15 [ 62.114805][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.225692][ T1099] 9pnet_virtio: no channels available for device 127.0.0.1 [ 62.229582][ T1095] mmap: syz.2.173 (1095) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.396634][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 62.556614][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 62.565022][ T31] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 62.577153][ T31] usb 1-1: config 0 has no interface number 0 [ 62.584964][ T31] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 62.596808][ T31] usb 1-1: config 0 interface 196 has no altsetting 0 [ 62.607723][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 62.629004][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.640195][ T31] usb 1-1: Product: syz [ 62.645926][ T31] usb 1-1: Manufacturer: syz [ 62.653407][ T31] usb 1-1: SerialNumber: syz [ 62.662383][ T31] usb 1-1: config 0 descriptor?? [ 62.684588][ T1093] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.077214][ T1155] tipc: Can't bind to reserved service type 2 [ 63.297331][ T31] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 63.370262][ T31] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 63.513366][ C0] ipheth 1-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 63.626542][ T726] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 63.714072][ T10] usb 1-1: USB disconnect, device number 17 [ 63.756589][ T10] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 63.787973][ T726] usb 3-1: unable to get BOS descriptor or descriptor too short [ 63.798471][ T726] usb 3-1: not running at top speed; connect to a high speed hub [ 63.809983][ T726] usb 3-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 63.822475][ T726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.833280][ T726] usb 3-1: Product: syz [ 63.837670][ T726] usb 3-1: Manufacturer: syz [ 63.843031][ T726] usb 3-1: SerialNumber: syz [ 63.849019][ T1162] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 64.066271][ T726] usb 3-1: USB disconnect, device number 25 [ 64.079050][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.126593][ T31] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 64.286634][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 64.297875][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.312037][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 64.323432][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.336702][ T31] usb 4-1: config 0 descriptor?? [ 64.350218][ T31] hub 4-1:0.0: bad descriptor, ignoring hub [ 64.359175][ T31] hub 4-1:0.0: probe with driver hub failed with error -5 [ 64.549861][ T1191] program syz.3.199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.636550][ T726] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 64.806524][ T726] usb 1-1: Using ep0 maxpacket: 8 [ 64.817273][ T726] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 64.826173][ T726] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 64.854673][ T726] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 64.876549][ T726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 64.887673][ T726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 64.899093][ T726] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 64.908419][ T726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.916897][ T726] usb 1-1: Product: syz [ 64.921242][ T726] usb 1-1: Manufacturer: syz [ 64.926169][ T726] usb 1-1: SerialNumber: syz [ 64.932348][ T726] usb 1-1: config 0 descriptor?? [ 64.939080][ T726] hub 1-1:0.0: bad descriptor, ignoring hub [ 64.946039][ T726] hub 1-1:0.0: probe with driver hub failed with error -5 [ 64.955151][ T726] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 65.088279][ T1218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.099170][ T1218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.140080][ T726] usb 1-1: USB disconnect, device number 18 [ 65.687212][ T1240] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 65.687417][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 65.687431][ T36] audit: type=1400 audit(1787973161.579:309): avc: denied { execute } for pid=1239 comm="syz.3.217" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.730955][ T726] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 65.731742][ T36] audit: type=1400 audit(1787973161.589:310): avc: denied { create } for pid=1239 comm="syz.3.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 65.886560][ T726] usb 3-1: Using ep0 maxpacket: 32 [ 65.893555][ T726] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 65.902361][ T726] usb 3-1: config 0 has no interface number 0 [ 65.908516][ T726] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 65.919845][ T726] usb 3-1: config 0 interface 196 has no altsetting 0 [ 65.926573][ T31] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 65.929124][ T726] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 65.944694][ T726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.953179][ T726] usb 3-1: Product: syz [ 65.957409][ T726] usb 3-1: Manufacturer: syz [ 65.962268][ T726] usb 3-1: SerialNumber: syz [ 65.967620][ T726] usb 3-1: config 0 descriptor?? [ 65.973044][ T1225] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 66.009000][ T36] audit: type=1400 audit(1787973161.899:311): avc: denied { relabelfrom } for pid=1244 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 66.031315][ T36] audit: type=1400 audit(1787973161.899:312): avc: denied { relabelto } for pid=1244 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 66.053053][ T36] audit: type=1400 audit(1787973161.919:313): avc: denied { read write } for pid=1244 comm="syz.1.219" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 66.079321][ T36] audit: type=1400 audit(1787973161.919:314): avc: denied { open } for pid=1244 comm="syz.1.219" path="/55/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 66.105285][ T36] audit: type=1400 audit(1787973161.919:315): avc: denied { ioctl } for pid=1244 comm="syz.1.219" path="/55/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 66.106523][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 66.142694][ T31] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 66.153264][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.162612][ T31] usb 1-1: Product: syz [ 66.167340][ T31] usb 1-1: Manufacturer: syz [ 66.173905][ T31] usb 1-1: SerialNumber: syz [ 66.186786][ T36] audit: type=1400 audit(1787973162.079:316): avc: denied { write } for pid=1247 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 66.208469][ T36] audit: type=1400 audit(1787973162.079:317): avc: denied { ioctl } for pid=1247 comm="syz.1.220" path="socket:[9386]" dev="sockfs" ino=9386 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 66.237588][ T36] audit: type=1400 audit(1787973162.079:319): avc: denied { read } for pid=1247 comm="syz.1.220" path="socket:[9385]" dev="sockfs" ino=9385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.476539][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 66.574965][ T1259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.223'. [ 66.586496][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 66.595925][ T1259] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.603909][ T31] usb 1-1: USB disconnect, device number 19 [ 66.606550][ T726] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 66.629409][ T1259] bridge_slave_0 (unregistering): left allmulticast mode [ 66.636920][ T1259] bridge_slave_0 (unregistering): left promiscuous mode [ 66.644087][ T1259] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.654586][ T726] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 66.663925][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 66.675395][ T10] usb 2-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 66.696529][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.711746][ T10] usb 2-1: Product: syz [ 66.718356][ T10] usb 2-1: Manufacturer: syz [ 66.724284][ T10] usb 2-1: SerialNumber: syz [ 66.785754][ T1272] FAULT_INJECTION: forcing a failure. [ 66.785754][ T1272] name failslab, interval 1, probability 0, space 0, times 0 [ 66.801721][ T1272] CPU: 1 UID: 0 PID: 1272 Comm: syz.3.225 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 66.801755][ T1272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.801767][ T1272] Call Trace: [ 66.801773][ T1272] [ 66.801780][ T1272] __dump_stack+0x21/0x30 [ 66.801811][ T1272] dump_stack_lvl+0x140/0x1c0 [ 66.801835][ T1272] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.801861][ T1272] ? stack_trace_save+0xaa/0x100 [ 66.801882][ T1272] dump_stack+0x19/0x20 [ 66.801905][ T1272] should_fail_ex+0x3c2/0x510 [ 66.801928][ T1272] should_failslab+0xac/0x100 [ 66.801951][ T1272] __kmalloc_cache_noprof+0x41/0x470 [ 66.801971][ T1272] ? proc_self_get_link+0x119/0x290 [ 66.801998][ T1272] proc_self_get_link+0x119/0x290 [ 66.802022][ T1272] ? security_inode_follow_link+0x7e/0x180 [ 66.802048][ T1272] ? __cfi_proc_self_get_link+0x10/0x10 [ 66.802074][ T1272] pick_link+0x6d4/0xe80 [ 66.802094][ T1272] step_into+0xc33/0xf10 [ 66.802112][ T1272] ? read_word_at_a_time+0x1a/0x40 [ 66.802136][ T1272] ? set_root+0x420/0x420 [ 66.802153][ T1272] ? inode_permission+0xf3/0x4c0 [ 66.802175][ T1272] link_path_walk+0x746/0xeb0 [ 66.802196][ T1272] path_openat+0x298/0x35a0 [ 66.802219][ T1272] ? schedule+0xc5/0x240 [ 66.802237][ T1272] ? kasan_save_alloc_info+0x3a/0x50 [ 66.802255][ T1272] ? __kasan_slab_alloc+0x73/0x90 [ 66.802278][ T1272] ? getname+0x1b/0x30 [ 66.802296][ T1272] ? x64_sys_call+0xe69/0x2ee0 [ 66.802314][ T1272] ? do_syscall_64+0x57/0xf0 [ 66.802342][ T1272] ? do_filp_open+0x440/0x440 [ 66.802367][ T1272] do_filp_open+0x1f2/0x440 [ 66.802401][ T1272] ? __cfi_do_filp_open+0x10/0x10 [ 66.802428][ T1272] ? alloc_fd+0x4c1/0x570 [ 66.802451][ T1272] do_sys_openat2+0x134/0x1d0 [ 66.802476][ T1272] ? fput+0x1a4/0x230 [ 66.802499][ T1272] ? do_sys_open+0x100/0x100 [ 66.802526][ T1272] __x64_sys_openat+0x13a/0x170 [ 66.802552][ T1272] x64_sys_call+0xe69/0x2ee0 [ 66.802570][ T1272] do_syscall_64+0x57/0xf0 [ 66.802595][ T1272] ? clear_bhb_loop+0x50/0xa0 [ 66.802616][ T1272] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.802637][ T1272] RIP: 0033:0x7f1ff895e98e [ 66.802654][ T1272] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 66.802671][ T1272] RSP: 002b:00007f1ff98ebf18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 66.802693][ T1272] RAX: ffffffffffffffda RBX: 00007f1ff98ec6c0 RCX: 00007f1ff895e98e [ 66.802708][ T1272] RDX: 0000000000000000 RSI: 00007f1ff8a3475f RDI: ffffffffffffff9c [ 66.802721][ T1272] RBP: 00007f1ff8a35024 R08: 0000000000000000 R09: 0000000000000000 [ 66.802734][ T1272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.802746][ T1272] R13: 00007f1ff8c26038 R14: 00007f1ff8c25fa0 R15: 00007fff76a49108 [ 66.802763][ T1272] [ 66.959891][ T1257] netlink: 'syz.1.222': attribute type 46 has an invalid length. [ 66.975394][ C0] ipheth 3-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 67.175891][ T31] usb 3-1: USB disconnect, device number 26 [ 67.255169][ T31] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 67.475501][ T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 67.489159][ T10] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 67.506303][ T10] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 67.520099][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 67.535150][ T10] usb 2-1: USB disconnect, device number 16 [ 67.548606][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.702042][ T1307] tipc: Started in network mode [ 67.709302][ T1307] tipc: Node identity ac14140f, cluster identity 4711 [ 67.717573][ T1307] tipc: New replicast peer: 255.255.255.255 [ 67.724256][ T1307] tipc: Enabled bearer , priority 10 [ 67.736606][ T1318] tipc: Enabling of bearer rejected, already enabled [ 68.216667][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 68.341798][ T1349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.351239][ T1349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.377664][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.389934][ T10] usb 1-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 68.399654][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.408038][ T10] usb 1-1: Product: syz [ 68.412303][ T10] usb 1-1: Manufacturer: syz [ 68.417573][ T10] usb 1-1: SerialNumber: syz [ 68.675919][ T10] usb 1-1: USB disconnect, device number 20 [ 68.846547][ T666] tipc: Node number set to 2886997007 [ 69.136696][ T666] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 69.224981][ T1390] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.253' sets config #1 [ 69.238859][ T1390] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.253' sets config #1 [ 69.250295][ T1390] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.253' sets config #1 [ 69.261105][ T1390] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.253' sets config #1 [ 69.272286][ T1390] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.253' sets config #1 [ 69.277739][ T666] usb 2-1: device descriptor read/64, error -71 [ 69.284526][ T1390] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.253' sets config #1 [ 69.291818][ T1389] netlink: 36 bytes leftover after parsing attributes in process `syz.3.253'. [ 69.304084][ T1390] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.253' sets config #1 [ 69.322937][ T1390] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.253' sets config #1 [ 69.333578][ T1390] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.253' sets config #1 [ 69.350062][ T1390] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.253' sets config #1 [ 69.360052][ T1390] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.253' sets config #1 [ 69.369972][ T1390] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.253' sets config #1 [ 69.379721][ T1390] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.253' sets config #1 [ 69.389176][ T1390] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.253' sets config #1 [ 69.399087][ T1390] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.253' sets config #1 [ 69.408967][ T1390] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.253' sets config #1 [ 69.546601][ T666] usb 2-1: device descriptor read/64, error -71 [ 69.656584][ T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 69.786789][ T666] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 69.807744][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.818991][ T31] usb 1-1: too many endpoints for config 1 interface 1 altsetting 0: 239, using maximum allowed: 30 [ 69.830116][ T31] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 239 [ 69.844362][ T31] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 69.856543][ T355] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 69.857364][ T31] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 69.874142][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.882835][ T31] usb 1-1: Product: syz [ 69.887326][ T31] usb 1-1: Manufacturer: syz [ 69.892053][ T31] usb 1-1: SerialNumber: syz [ 69.936569][ T666] usb 2-1: device descriptor read/64, error -71 [ 70.006518][ T355] usb 3-1: Using ep0 maxpacket: 32 [ 70.014004][ T355] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 70.022762][ T355] usb 3-1: config 0 has no interface number 0 [ 70.030695][ T355] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 70.040389][ T355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.048662][ T355] usb 3-1: Product: syz [ 70.053626][ T355] usb 3-1: Manufacturer: syz [ 70.058794][ T355] usb 3-1: SerialNumber: syz [ 70.065032][ T355] usb 3-1: config 0 descriptor?? [ 70.071244][ T355] smsc95xx v2.0.0 [ 70.176553][ T666] usb 2-1: device descriptor read/64, error -71 [ 70.286662][ T666] usb usb2-port1: attempt power cycle [ 70.478501][ T355] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 70.489785][ T355] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 70.617243][ T31] usb 1-1: 1:1 : unsupported format bits 0x2020000 [ 70.624480][ T31] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 70.634103][ T666] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 70.641898][ T31] usb 1-1: 2:1 : unsupported format bits 0x2020000 [ 70.653627][ T1390] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.253' sets config #1 [ 70.666594][ T31] usb 1-1: USB disconnect, device number 21 [ 70.678007][ T666] usb 2-1: device descriptor read/8, error -71 [ 70.704536][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.723973][ T1408] netlink: 'syz.3.260': attribute type 3 has an invalid length. [ 70.798282][ T1410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.809424][ T1410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.818971][ T666] usb 2-1: device descriptor read/8, error -71 [ 70.907588][ T355] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 70.919493][ T355] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 70.930865][ T355] usb 3-1: USB disconnect, device number 27 [ 70.961018][ T1418] netlink: 112 bytes leftover after parsing attributes in process `syz.0.264'. [ 71.066485][ T666] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 71.087849][ T666] usb 2-1: device descriptor read/8, error -71 [ 71.216607][ T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 71.226394][ T666] usb 2-1: device descriptor read/8, error -71 [ 71.334789][ T1423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.343928][ T1423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.346502][ T666] usb usb2-port1: unable to enumerate USB device [ 71.379865][ T31] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 71.389238][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.399264][ T31] usb 1-1: Product: syz [ 71.403538][ T31] usb 1-1: Manufacturer: syz [ 71.408689][ T31] usb 1-1: SerialNumber: syz [ 71.501416][ T1429] netlink: 68 bytes leftover after parsing attributes in process `syz.2.268'. [ 71.586776][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 71.586792][ T36] audit: type=1400 audit(1787973423.476:327): avc: denied { map } for pid=1431 comm="syz.2.269" path="socket:[11047]" dev="sockfs" ino=11047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 71.825984][ T1420] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 71.844235][ T1420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.853855][ T1420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.931069][ T1471] netlink: 'syz.1.278': attribute type 6 has an invalid length. [ 71.953467][ T1469] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 71.962176][ T1469] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 72.019025][ T36] audit: type=1400 audit(1787973423.906:328): avc: denied { read } for pid=1477 comm="syz.1.280" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 72.051534][ T36] audit: type=1400 audit(1787973423.906:329): avc: denied { open } for pid=1477 comm="syz.1.280" path="/66/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 72.086341][ T312] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 72.115069][ T31] rtl8150 1-1:1.0: couldn't reset the device [ 72.121575][ T31] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 72.133141][ T31] usb 1-1: USB disconnect, device number 22 [ 72.237381][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 72.247681][ T312] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 72.258322][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 72.270514][ T312] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 72.283246][ T312] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 72.293198][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.302676][ T312] usb 3-1: Product: syz [ 72.307212][ T312] usb 3-1: Manufacturer: syz [ 72.312103][ T312] usb 3-1: SerialNumber: syz [ 72.318147][ T312] usb 3-1: config 0 descriptor?? [ 72.325005][ T312] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 72.567652][ T312] ums-isd200 3-1:0.0: probe with driver ums-isd200 failed with error -22 [ 72.733708][ T1467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.743244][ T1467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.758573][ T1489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.771570][ T1488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.777340][ T1489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.781489][ T1488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.836244][ T10] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 72.856234][ T355] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 72.906986][ T1491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.919061][ T36] audit: type=1400 audit(1787973424.807:330): avc: denied { ioctl } for pid=1490 comm="syz.3.283" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 72.926577][ T1491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.997395][ T10] usb 2-1: No LPM exit latency info found, disabling LPM. [ 73.014979][ T10] usb 2-1: string descriptor 0 read error: -22 [ 73.028634][ T10] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 73.038321][ T355] usb 1-1: Using ep0 maxpacket: 16 [ 73.047692][ T355] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.063465][ T355] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.074162][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.087770][ T355] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.098927][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 73.106808][ T355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.115600][ T355] usb 1-1: Product: syz [ 73.121400][ T355] usb 1-1: Manufacturer: syz [ 73.127316][ T355] usb 1-1: SerialNumber: syz [ 73.310240][ T312] usb 2-1: USB disconnect, device number 21 [ 73.339180][ T1484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.356305][ T1484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.367584][ T355] usb 1-1: 0:2 : does not exist [ 73.375917][ T355] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 73.390782][ T355] usb 1-1: USB disconnect, device number 23 [ 73.842028][ T1504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.285'. [ 73.923227][ T36] audit: type=1400 audit(1787973425.807:331): avc: denied { ioctl } for pid=1506 comm="syz.1.286" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.930581][ T1507] rust_binder: Failure in copy_transaction_data: EINVAL [ 73.954461][ T1507] rust_binder: 1506:1507 transaction call to 1506:0 failed EINVAL, code 0 size 0-249 [ 73.955054][ T36] audit: type=1400 audit(1787973425.807:332): avc: denied { set_context_mgr } for pid=1506 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 73.967438][ T355] rust_binder: 1506: undelivered TRANSACTION_ERROR: 29201 [ 73.974446][ T36] audit: type=1400 audit(1787973425.817:333): avc: denied { call } for pid=1506 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 74.002721][ T1510] tipc: Started in network mode [ 74.028947][ T1510] tipc: Node identity , cluster identity 4711 [ 74.035481][ T1510] tipc: Failed to obtain node identity [ 74.041319][ T1510] tipc: Enabling of bearer rejected, failed to enable media [ 74.088404][ T36] audit: type=1400 audit(1787973425.977:334): avc: denied { append } for pid=1516 comm="syz.1.289" name="uprobe_events" dev="tracefs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 74.100456][ T1519] rtc_cmos 00:00: Alarms can be up to one day in the future [ 74.133904][ T36] audit: type=1400 audit(1787973426.017:335): avc: denied { append } for pid=1518 comm="syz.0.290" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.256945][ T1553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 74.259589][ T1527] cgroup: fork rejected by pids controller in /syz0 [ 74.496371][ T1598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.512019][ T1598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.831354][ T355] usb 3-1: USB disconnect, device number 28 [ 74.915520][ T311] rtc_cmos 00:00: Alarms can be up to one day in the future [ 74.921677][ T1629] FAULT_INJECTION: forcing a failure. [ 74.921677][ T1629] name failslab, interval 1, probability 0, space 0, times 0 [ 74.923454][ T311] rtc_cmos 00:00: Alarms can be up to one day in the future [ 74.937014][ T1629] CPU: 0 UID: 0 PID: 1629 Comm: syz.1.300 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 74.937047][ T1629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.937071][ T1629] Call Trace: [ 74.937082][ T1629] [ 74.937092][ T1629] __dump_stack+0x21/0x30 [ 74.937125][ T1629] dump_stack_lvl+0x140/0x1c0 [ 74.937151][ T1629] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.937176][ T1629] ? cgroup_rstat_updated+0x144/0x800 [ 74.937198][ T1629] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 74.937218][ T1629] dump_stack+0x19/0x20 [ 74.937240][ T1629] should_fail_ex+0x3c2/0x510 [ 74.937262][ T1629] should_failslab+0xac/0x100 [ 74.937284][ T1629] kmem_cache_alloc_noprof+0x42/0x410 [ 74.937304][ T1629] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 74.937330][ T1629] ? vm_area_dup+0x3f/0x560 [ 74.937350][ T1629] ? update_curr+0x51c/0x9c0 [ 74.937368][ T1629] vm_area_dup+0x3f/0x560 [ 74.937386][ T1629] ? __split_vma+0x1b8/0xc10 [ 74.937406][ T1629] __split_vma+0x1ce/0xc10 [ 74.937426][ T1629] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 74.937446][ T1629] ? dequeue_entity+0x88a/0x13b0 [ 74.937470][ T1629] ? update_load_avg+0x4f3/0x1980 [ 74.937492][ T1629] vma_modify+0x364/0x1540 [ 74.937515][ T1629] vma_modify_flags_name+0x186/0x1c0 [ 74.937538][ T1629] madvise_update_vma+0x24e/0x800 [ 74.937556][ T1629] ? __ia32_sys_process_madvise+0xf0/0xf0 [ 74.937583][ T1629] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 74.937608][ T1629] madvise_vma_behavior+0x111f/0x2df0 [ 74.937628][ T1629] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 74.937648][ T1629] ? __sched_text_start+0x10/0x10 [ 74.937667][ T1629] ? plist_add+0x4d4/0x570 [ 74.937693][ T1629] ? __futex_queue+0x19f/0x350 [ 74.937715][ T1629] ? __cfi___futex_queue+0x10/0x10 [ 74.937739][ T1629] ? mtree_range_walk+0x573/0x730 [ 74.937760][ T1629] ? mas_prev_slot+0xb6b/0xc20 [ 74.937783][ T1629] ? mas_prev+0x5f/0xa0 [ 74.937803][ T1629] ? find_vma_prev+0x12a/0x1b0 [ 74.937822][ T1629] ? __cfi_find_vma_prev+0x10/0x10 [ 74.937849][ T1629] ? __cfi_futex_wait+0x10/0x10 [ 74.937868][ T1629] madvise_walk_vmas+0x3ee/0x700 [ 74.937886][ T1629] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 74.937904][ T1629] ? down_write_killable+0xee/0x2d0 [ 74.937936][ T1629] ? madvise_set_anon_name+0x650/0x650 [ 74.937955][ T1629] ? __asan_memset+0x39/0x50 [ 74.937974][ T1629] ? blk_start_plug+0x71/0x1c0 [ 74.937996][ T1629] do_madvise+0x5e8/0xbb0 [ 74.938013][ T1629] ? __cfi_do_madvise+0x10/0x10 [ 74.938032][ T1629] ? xfd_validate_state+0x68/0x140 [ 74.938057][ T1629] ? __kasan_check_write+0x18/0x20 [ 74.938075][ T1629] ? fpregs_restore_userregs+0x11c/0x260 [ 74.938097][ T1629] __x64_sys_madvise+0xad/0xc0 [ 74.938114][ T1629] x64_sys_call+0x20c3/0x2ee0 [ 74.938131][ T1629] do_syscall_64+0x57/0xf0 [ 74.938155][ T1629] ? clear_bhb_loop+0x50/0xa0 [ 74.938176][ T1629] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.938196][ T1629] RIP: 0033:0x7ff86879e159 [ 74.938212][ T1629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.938228][ T1629] RSP: 002b:00007ff8695c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 74.938249][ T1629] RAX: ffffffffffffffda RBX: 00007ff868a25fa0 RCX: 00007ff86879e159 [ 74.938263][ T1629] RDX: 0000000000000010 RSI: 0000000000004000 RDI: 000020000007f000 [ 74.938276][ T1629] RBP: 00007ff868835024 R08: 0000000000000000 R09: 0000000000000000 [ 74.938289][ T1629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.938300][ T1629] R13: 00007ff868a26038 R14: 00007ff868a25fa0 R15: 00007ffe60340118 [ 74.938317][ T1629] [ 75.175907][ T355] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 75.177782][ T311] rtc_cmos 00:00: Alarms can be up to one day in the future [ 75.349505][ T311] rtc_cmos 00:00: Alarms can be up to one day in the future [ 75.357303][ T311] rtc rtc0: __rtc_set_alarm: err=-22 [ 75.357334][ T355] usb 3-1: Using ep0 maxpacket: 8 [ 75.372790][ T355] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 75.383377][ T355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.392691][ T355] usb 3-1: config 0 descriptor?? [ 75.599962][ T355] usb 3-1: string descriptor 0 read error: -71 [ 75.607094][ T355] uvcvideo 3-1:0.0: Found Unit with invalid ID 0 [ 75.613831][ T355] usb 3-1: Found UVC 0.00 device (2833:0201) [ 75.621323][ T355] usb 3-1: No valid video chain found. [ 75.625900][ T311] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 75.628728][ T355] usb 3-1: USB disconnect, device number 29 [ 75.785867][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 75.792732][ T311] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 75.802536][ T311] usb 1-1: config 2 has no interface number 0 [ 75.808684][ T311] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 75.818802][ T311] usb 1-1: config 2 interface 88 has no altsetting 0 [ 75.827153][ T311] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 75.836263][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 75.844274][ T311] usb 1-1: Product: syz [ 75.848483][ T311] usb 1-1: Manufacturer: syz [ 75.853832][ T311] usb 1-1: SerialNumber: syz [ 75.859510][ T1640] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 76.067959][ T1640] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 76.117020][ T1655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 76.119039][ T36] audit: type=1400 audit(1787973428.007:336): avc: denied { watch } for pid=1654 comm="syz.2.308" path="/86/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 76.163856][ T1659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 76.275809][ T355] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 76.425792][ T355] usb 2-1: Using ep0 maxpacket: 32 [ 76.433348][ T355] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 76.442659][ T355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.453817][ T355] usb 2-1: config 0 has no interface number 0 [ 76.460042][ T355] usb 2-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 76.473495][ T355] usb 2-1: config 0 interface 196 has no altsetting 0 [ 76.481981][ T355] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 76.491635][ T355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.500442][ T355] usb 2-1: Product: syz [ 76.505228][ T355] usb 2-1: Manufacturer: syz [ 76.510421][ T355] usb 2-1: SerialNumber: syz [ 76.516340][ T355] usb 2-1: config 0 descriptor?? [ 76.523000][ T355] ipheth 2-1:0.196: Unable to find endpoints [ 76.773156][ T1666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.782914][ T1666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.089413][ T311] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 77.100852][ T311] asix 1-1:2.88: probe with driver asix failed with error -71 [ 77.112917][ T311] usb 1-1: USB disconnect, device number 24 [ 77.307078][ T1674] tipc: Started in network mode [ 77.312362][ T1674] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 77.321971][ T1674] tipc: Enabled bearer , priority 10 [ 77.330733][ T1674] tipc: Enabled bearer , priority 10 [ 77.338748][ T1674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.347506][ T1674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.358229][ T1674] tipc: Enabled bearer , priority 0 [ 77.621626][ T1678] netlink: 'syz.0.315': attribute type 3 has an invalid length. [ 77.629903][ T1678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 77.641180][ T1678] netlink: 'syz.0.315': attribute type 46 has an invalid length. [ 77.891423][ T1692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 77.900554][ T311] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 77.935589][ T31] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 77.961047][ T36] audit: type=1400 audit(1787973429.847:337): avc: denied { map } for pid=1691 comm="syz.3.319" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.065731][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 78.071431][ T31] usb 3-1: device descriptor read/64, error -71 [ 78.080136][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.089637][ T311] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 78.102579][ T311] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 78.111712][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.120100][ T311] usb 1-1: Product: syz [ 78.124447][ T311] usb 1-1: Manufacturer: syz [ 78.129096][ T311] usb 1-1: SerialNumber: syz [ 78.315585][ T31] usb 3-1: device descriptor read/64, error -71 [ 78.337365][ T311] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 78.347110][ T311] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 78.357599][ T311] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 78.368407][ T311] usb 1-1: USB disconnect, device number 25 [ 78.445589][ T1695] tipc: Node number set to 4269801491 [ 78.555529][ T31] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 78.685517][ T31] usb 3-1: device descriptor read/64, error -71 [ 78.757061][ T36] audit: type=1400 audit(1787973430.647:338): avc: denied { block_suspend } for pid=1696 comm="syz.3.320" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.925493][ T31] usb 3-1: device descriptor read/64, error -71 [ 79.035558][ T31] usb usb3-port1: attempt power cycle [ 79.048169][ T355] usb 2-1: USB disconnect, device number 22 [ 79.085498][ T311] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 79.245551][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 79.254466][ T311] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 79.265051][ T311] usb 1-1: config 0 has no interface number 0 [ 79.274170][ T311] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 79.284335][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.293508][ T311] usb 1-1: Product: syz [ 79.300051][ T1703] x_tables: unsorted underflow at hook 3 [ 79.300502][ T311] usb 1-1: Manufacturer: syz [ 79.310971][ T311] usb 1-1: SerialNumber: syz [ 79.324561][ T311] usb 1-1: config 0 descriptor?? [ 79.324602][ T1706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.331004][ T311] smsc95xx v2.0.0 [ 79.341269][ T1706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.375406][ T31] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 79.396422][ T31] usb 3-1: device descriptor read/8, error -71 [ 79.405448][ T355] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 79.418091][ T1709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.428108][ T1709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.439037][ T1709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.448495][ T1709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.526377][ T31] usb 3-1: device descriptor read/8, error -71 [ 79.576375][ T355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.605359][ T355] usb 2-1: config 0 interface 0 has no altsetting 0 [ 79.613109][ T355] usb 2-1: New USB device found, idVendor=96b4, idProduct=c216, bcdDevice= 0.00 [ 79.635381][ T355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.648340][ T355] usb 2-1: config 0 descriptor?? [ 79.775352][ T31] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 79.796351][ T31] usb 3-1: device descriptor read/8, error -71 [ 79.888883][ T355] usb 2-1: string descriptor 0 read error: -71 [ 79.904568][ T355] hub 2-1:0.0: bad descriptor, ignoring hub [ 79.918599][ T355] hub 2-1:0.0: probe with driver hub failed with error -5 [ 79.942636][ T31] usb 3-1: device descriptor read/8, error -71 [ 79.955766][ T355] usb 2-1: USB disconnect, device number 23 [ 80.075528][ T31] usb usb3-port1: unable to enumerate USB device [ 80.339528][ T311] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 80.351267][ T311] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 80.362184][ T311] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 80.373641][ T311] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 80.386693][ T311] usb 1-1: USB disconnect, device number 26 [ 81.023316][ T1733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 81.043454][ T36] audit: type=1400 audit(1787973432.928:339): avc: denied { shutdown } for pid=1728 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.163528][ T36] audit: type=1400 audit(1787973433.048:340): avc: denied { write } for pid=1735 comm="syz.1.331" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 81.243732][ T1695] hid (null): invalid report_count 56689 [ 81.255292][ T36] audit: type=1400 audit(1787973433.148:341): avc: denied { ioctl } for pid=1739 comm="syz.1.332" path="socket:[12672]" dev="sockfs" ino=12672 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.263297][ T1695] hid (null): global environment stack underflow [ 81.317258][ T36] audit: type=1400 audit(1787973433.198:342): avc: denied { ioctl } for pid=1739 comm="syz.1.332" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 81.325190][ T1695] hid (null): invalid report_count 30581501 [ 81.351630][ T1695] hid (null): unknown global tag 0xe [ 81.366538][ T1695] hid-generic 0800:000F:0006.0005: invalid report_count 56689 [ 81.391996][ T1695] hid-generic 0800:000F:0006.0005: item 0 2 1 9 parsing failed [ 81.419702][ T1695] hid-generic 0800:000F:0006.0005: probe with driver hid-generic failed with error -22 [ 81.453455][ T36] audit: type=1400 audit(1787973433.328:343): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 81.494529][ T36] audit: type=1400 audit(1787973433.378:344): avc: denied { cmd } for pid=1743 comm="syz.1.334" path="socket:[12691]" dev="sockfs" ino=12691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.695174][ T1695] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 81.785115][ T31] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 81.845153][ T1695] usb 1-1: Using ep0 maxpacket: 8 [ 81.852639][ T1695] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 81.862339][ T1695] usb 1-1: config 0 has no interface number 0 [ 81.870459][ T1695] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 81.880572][ T1695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.889195][ T311] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 81.897406][ T1695] usb 1-1: Product: syz [ 81.902186][ T1695] usb 1-1: Manufacturer: syz [ 81.907276][ T1695] usb 1-1: SerialNumber: syz [ 81.914740][ T1695] usb 1-1: config 0 descriptor?? [ 81.976136][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 81.985896][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.997393][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 82.007695][ T31] usb 2-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00 [ 82.017629][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.029558][ T31] usb 2-1: Found UVC 1.00 device (0000:d970) [ 82.066271][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 82.077458][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 82.091591][ T311] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 82.101767][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.110635][ T311] usb 3-1: Product: syz [ 82.115217][ T311] usb 3-1: Manufacturer: syz [ 82.120209][ T311] usb 3-1: SerialNumber: syz [ 82.134486][ T311] usb 3-1: config 0 descriptor?? [ 82.152948][ T311] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 82.235709][ T31] usb 2-1: No streaming interface found for terminal 2. [ 82.290265][ T1695] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 82.306729][ T1695] usb 1-1: No valid video chain found. [ 82.325677][ T1695] usb 1-1: USB disconnect, device number 27 [ 82.371078][ T1755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.408726][ T1757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.408853][ T1755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.437597][ T1751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.445249][ T1757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.456294][ T1751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.476160][ T726] usb 2-1: USB disconnect, device number 24 [ 82.738826][ T311] usb 3-1: USB disconnect, device number 34 [ 82.945052][ T726] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 82.979318][ T1761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.990139][ T1761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.034157][ T36] audit: type=1400 audit(1787973434.918:345): avc: denied { write } for pid=1766 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.050241][ T1769] netlink: 388 bytes leftover after parsing attributes in process `syz.1.344'. [ 83.106466][ T726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.124951][ T726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.135645][ T726] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 83.148515][ T726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.162939][ T1777] syzkaller1: entered promiscuous mode [ 83.171102][ T726] usb 1-1: config 0 descriptor?? [ 83.177678][ T1777] syzkaller1: entered allmulticast mode [ 83.238120][ T1783] Unsupported ieee802154 address type: 0 [ 83.238914][ T36] audit: type=1400 audit(1787973435.128:346): avc: denied { bind } for pid=1782 comm="syz.2.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.386383][ T726] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 83.394474][ T726] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 83.514912][ T311] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 83.535645][ T1789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.544494][ T1789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.586493][ T1759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.597454][ T36] audit: type=1400 audit(1787973435.488:347): avc: denied { read } for pid=1758 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.605871][ T1759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.630101][ T726] arvo 0003:1E7D:30D4.0006: couldn't init struct arvo_device [ 83.637682][ T726] arvo 0003:1E7D:30D4.0006: couldn't install keyboard [ 83.645801][ T726] arvo 0003:1E7D:30D4.0006: probe with driver arvo failed with error -71 [ 83.656320][ T726] usb 1-1: USB disconnect, device number 28 [ 83.674900][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 83.681834][ T311] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 83.691666][ T311] usb 3-1: config 0 has no interface number 0 [ 83.699914][ T311] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 83.709318][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.717690][ T311] usb 3-1: Product: syz [ 83.722255][ T311] usb 3-1: Manufacturer: syz [ 83.727257][ T311] usb 3-1: SerialNumber: syz [ 83.732541][ T311] usb 3-1: config 0 descriptor?? [ 83.738434][ T311] smsc95xx v2.0.0 [ 83.946467][ T1797] binder: Unknown parameter 'fscontext?}' [ 83.946471][ T36] audit: type=1400 audit(1787973435.838:348): avc: denied { mounton } for pid=1796 comm="syz.1.351" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.001726][ T1799] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.043405][ T1799] kvm: pic: non byte write [ 84.074061][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 84.144565][ T293] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 84.508649][ T36] audit: type=1400 audit(1787973436.398:349): avc: denied { create } for pid=1817 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 84.539668][ T1818] tipc: Failed to remove unknown binding: 66,1,1/4269801491:4274162013/4274162015 [ 84.662222][ T36] audit: type=1400 audit(1787973436.548:350): avc: denied { read } for pid=1819 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.751723][ T311] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 84.773047][ T311] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 84.783784][ T311] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 84.796260][ T311] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 84.809984][ T311] usb 3-1: USB disconnect, device number 35 [ 85.046262][ T1836] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.342275][ T1849] x_tables: duplicate underflow at hook 1 [ 85.344901][ T311] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 85.484824][ T311] usb 2-1: device descriptor read/64, error -71 [ 85.584690][ T726] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 85.742877][ T1851] netlink: 'syz.3.369': attribute type 4 has an invalid length. [ 85.744774][ T311] usb 2-1: device descriptor read/64, error -71 [ 85.751147][ T1851] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.369'. [ 85.767893][ T726] usb 3-1: Using ep0 maxpacket: 16 [ 85.775806][ T726] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 85.780176][ T1851] sock: sock_timestamping_bind_phc: sock not bind to device [ 85.786484][ T726] usb 3-1: config 0 has no interface number 0 [ 85.796867][ T1851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.802619][ T726] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.810144][ T1851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.822797][ T726] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.841321][ T726] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 85.851255][ T726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.861230][ T726] usb 3-1: config 0 descriptor?? [ 86.004757][ T311] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 86.154931][ T311] usb 2-1: device descriptor read/64, error -71 [ 86.394699][ T311] usb 2-1: device descriptor read/64, error -71 [ 86.419300][ T1857] 8021q: VLANs not supported on gre0 [ 86.445576][ T1860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.455034][ T1860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.464620][ T349] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 86.472772][ T726] uclogic 0003:28BD:0071.0007: pen parameters not found [ 86.480537][ T726] uclogic 0003:28BD:0071.0007: interface is invalid, ignoring [ 86.504793][ T311] usb usb2-port1: attempt power cycle [ 86.634621][ T349] usb 1-1: Using ep0 maxpacket: 8 [ 86.640553][ T349] usb 1-1: too many configurations: 15, using maximum allowed: 8 [ 86.657425][ T349] usb 1-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 86.667426][ T349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.677365][ T349] usb 1-1: config 0 descriptor?? [ 86.686413][ T1695] usb 3-1: USB disconnect, device number 36 [ 86.700245][ T349] hub 1-1:0.0: Invalid hub with more than one config or interface [ 86.708939][ T349] hub 1-1:0.0: probe with driver hub failed with error -22 [ 86.844932][ T311] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 86.866208][ T311] usb 2-1: device descriptor read/8, error -71 [ 86.891605][ T349] usb 1-1: USB disconnect, device number 29 [ 86.985078][ T1862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.997237][ T1862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.999852][ T311] usb 2-1: device descriptor read/8, error -71 [ 87.254631][ T311] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 87.276284][ T311] usb 2-1: device descriptor read/8, error -71 [ 87.405811][ T311] usb 2-1: device descriptor read/8, error -71 [ 87.514491][ T1695] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 87.534478][ T311] usb usb2-port1: unable to enumerate USB device [ 87.695828][ T1695] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.712838][ T1695] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.729904][ T1695] usb 3-1: config 0 interface 0 has no altsetting 0 [ 87.737261][ T1695] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 87.747377][ T1695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.758240][ T1695] usb 3-1: config 0 descriptor?? [ 88.194569][ T726] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 88.364345][ T726] usb 1-1: Using ep0 maxpacket: 32 [ 88.375316][ T726] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 88.384213][ T726] usb 1-1: config 0 has no interface number 0 [ 88.407040][ T726] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 88.424327][ T726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.444309][ T726] usb 1-1: Product: syz [ 88.448628][ T726] usb 1-1: Manufacturer: syz [ 88.453415][ T726] usb 1-1: SerialNumber: syz [ 88.467223][ T726] usb 1-1: config 0 descriptor?? [ 88.487160][ T726] smsc95xx v2.0.0 [ 88.576198][ T1864] tipc: Enabling of bearer rejected, failed to enable media [ 88.664646][ T1695] sony 0003:054C:0268.0008: can't set operational mode: step 1 [ 88.677463][ T1695] sony 0003:054C:0268.0008: Failed to set controller into operational mode [ 88.696978][ T1695] sony 0003:054C:0268.0008: hiddev96,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 88.713451][ T1695] sony 0003:054C:0268.0008: failed to claim input [ 88.739467][ T1695] usb 3-1: USB disconnect, device number 37 [ 88.758763][ T1953] fido_id[1953]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 89.274336][ T355] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 89.310867][ T36] audit: type=1400 audit(1787973441.199:351): avc: denied { setattr } for pid=1962 comm="syz.2.386" name="ttynull" dev="devtmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 89.436797][ T355] usb 2-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 0.40 [ 89.446502][ T355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.455431][ T355] usb 2-1: Product: syz [ 89.461282][ T355] usb 2-1: Manufacturer: syz [ 89.469125][ T355] usb 2-1: SerialNumber: syz [ 89.490452][ T726] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 89.503721][ T726] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 89.515734][ T726] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 89.527599][ T726] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 89.548837][ T726] usb 1-1: USB disconnect, device number 30 [ 89.680201][ T355] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 89.692505][ T355] usb 2-1: USB disconnect, device number 29 [ 89.704196][ T1695] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 89.864224][ T1695] usb 3-1: Using ep0 maxpacket: 32 [ 89.871874][ T1695] usb 3-1: unable to get BOS descriptor or descriptor too short [ 89.881303][ T1695] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.892025][ T1695] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 89.903686][ T1695] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 89.913529][ T1695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.922390][ T1695] usb 3-1: Product: syz [ 89.927687][ T1695] usb 3-1: Manufacturer: syz [ 89.932723][ T1695] usb 3-1: SerialNumber: syz [ 90.031243][ T36] audit: type=1400 audit(1787973441.919:352): avc: denied { setopt } for pid=1974 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.040149][ T1975] can0: slcan on ttyS3. [ 90.143218][ T1973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.155086][ T1973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.180437][ T1695] usb 3-1: USB disconnect, device number 38 [ 90.304127][ T349] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 90.322493][ T1995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.334353][ T1995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.444249][ T349] usb 1-1: device descriptor read/64, error -71 [ 90.474150][ T355] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 90.627170][ T355] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 90.637804][ T355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.646189][ T355] usb 2-1: Product: syz [ 90.650550][ T355] usb 2-1: Manufacturer: syz [ 90.655370][ T355] usb 2-1: SerialNumber: syz [ 90.693554][ T349] usb 1-1: device descriptor read/64, error -71 [ 90.871714][ T355] usb 2-1: USB disconnect, device number 30 [ 90.878956][ T355] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN PTI [ 90.891649][ T355] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 90.900157][ T355] CPU: 0 UID: 0 PID: 355 Comm: kworker/0:4 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 90.911988][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.922698][ T355] Workqueue: usb_hub_wq hub_event [ 90.927738][ T355] RIP: 0010:klist_remove+0x15e/0x330 [ 90.933992][ T355] Code: be 00 00 00 00 00 fc ff df 43 80 3c 34 00 74 08 48 89 df e8 84 c6 44 fc 4c 8b 3b 49 83 e7 fe 49 8d 7f 20 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 66 c6 44 fc 49 8b 47 20 48 89 44 24 18 4c [ 90.954522][ T355] RSP: 0018:ffffc9000c0af600 EFLAGS: 00010202 [ 90.961301][ T355] RAX: 0000000000000004 RBX: ffff88811d662648 RCX: dffffc0000000000 [ 90.972844][ T355] RDX: ffffc9000d239000 RSI: 00000000000064ef RDI: 0000000000000020 [ 90.982924][ T355] RBP: ffffc9000c0af6e8 R08: 0000000000000003 R09: 0000000000000004 [ 90.994028][ T355] R10: dffffc0000000000 R11: fffff52001815eb0 R12: 1ffff11023acc4c9 [ 91.004907][ T355] R13: 1ffff92001815ec4 R14: dffffc0000000000 R15: 0000000000000000 [ 91.014822][ T355] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 91.029098][ T355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.036154][ T355] CR2: 000000110c2f1c5d CR3: 000000010d316000 CR4: 00000000003526b0 [ 91.044565][ T355] Call Trace: [ 91.048552][ T355] [ 91.051699][ T355] ? __cfi_klist_remove+0x10/0x10 [ 91.058002][ T355] device_release_driver_internal+0x739/0x830 [ 91.064616][ T355] device_release_driver+0x1d/0x30 [ 91.070095][ T355] bus_remove_device+0x34f/0x370 [ 91.075877][ T355] device_del+0x583/0xcf0 [ 91.080417][ T355] ? __cfi_device_del+0x10/0x10 [ 91.085555][ T355] ? __kasan_check_write+0x18/0x20 [ 91.092240][ T355] usb_disable_device+0x3af/0x770 [ 91.099469][ T355] usb_disconnect+0x331/0x950 [ 91.105953][ T355] hub_event+0x1ad5/0x4360 [ 91.113497][ T355] ? __kasan_check_read+0x15/0x20 [ 91.119611][ T355] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 91.127411][ T355] ? trace_event_buffer_commit+0x256/0x8f0 [ 91.134150][ T355] ? __cfi_hub_event+0x10/0x10 [ 91.141072][ T355] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 91.153722][ T355] ? kick_pool+0xb9/0x540 [ 91.160624][ T355] process_scheduled_works+0x7f4/0x1060 [ 91.168995][ T355] worker_thread+0xc99/0x13f0 [ 91.177413][ T355] kthread+0x2c4/0x360 [ 91.184225][ T1695] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 91.193614][ T355] ? __cfi_worker_thread+0x10/0x10 [ 91.195270][ T36] audit: type=1400 audit(1787973443.079:353): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 91.200823][ T355] ? __cfi_kthread+0x10/0x10 [ 91.200870][ T355] ret_from_fork+0x64/0xa0 [ 91.200899][ T355] ? __cfi_kthread+0x10/0x10 [ 91.230241][ T36] audit: type=1400 audit(1787973443.079:354): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.233100][ T355] ret_from_fork_asm+0x1a/0x30 [ 91.233134][ T355] [ 91.233142][ T355] Modules linked in: [ 91.239110][ T36] audit: type=1400 audit(1787973443.079:355): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.243956][ T355] ---[ end trace 0000000000000000 ]--- [ 91.272957][ T36] audit: type=1400 audit(1787973443.079:356): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.280052][ T355] RIP: 0010:klist_remove+0x15e/0x330 [ 91.299045][ T2014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.310075][ T355] Code: be 00 00 00 00 00 fc ff df 43 80 3c 34 00 74 08 48 89 df e8 84 c6 44 fc 4c 8b 3b 49 83 e7 fe 49 8d 7f 20 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 66 c6 44 fc 49 8b 47 20 48 89 44 24 18 4c [ 91.317664][ T36] audit: type=1400 audit(1787973443.079:357): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.338149][ T349] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 91.344835][ T2014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.352369][ T355] RSP: 0018:ffffc9000c0af600 EFLAGS: 00010202 [ 91.375560][ T36] audit: type=1400 audit(1787973443.079:358): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.395222][ T355] [ 91.402354][ T1695] usb 3-1: Using ep0 maxpacket: 8 [ 91.411846][ T355] RAX: 0000000000000004 RBX: ffff88811d662648 RCX: dffffc0000000000 [ 91.419244][ T1695] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 91.443230][ T355] RDX: ffffc9000d239000 RSI: 00000000000064ef RDI: 0000000000000020 [ 91.454039][ T36] audit: type=1400 audit(1787973443.079:359): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.469911][ T355] RBP: ffffc9000c0af6e8 R08: 0000000000000003 R09: 0000000000000004 [ 91.475719][ T1695] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 91.500586][ T355] R10: dffffc0000000000 R11: fffff52001815eb0 R12: 1ffff11023acc4c9 [ 91.508973][ T1695] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.517670][ T355] R13: 1ffff92001815ec4 R14: dffffc0000000000 R15: 0000000000000000 [ 91.525600][ T1695] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 91.536685][ T355] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 91.546194][ T1695] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 91.554534][ T355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.564137][ T1695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.576057][ T349] usb 1-1: device descriptor read/64, error -71 [ 91.583647][ T1695] usb 3-1: Product: syz [ 91.593155][ T355] CR2: 000000110c290145 CR3: 000000010d388000 CR4: 00000000003526b0 [ 91.601255][ T1695] usb 3-1: Manufacturer: syz [ 91.606841][ T355] Kernel panic - not syncing: Fatal exception [ 91.616296][ T355] Kernel Offset: disabled