last executing test programs: 2m24.151315164s ago: executing program 3 (id=3683): r0 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x17, @empty}, 0x10, &(0x7f00000000c0)=[{0x0, 0xffb9}], 0x1, &(0x7f0000001d00)=ANY=[], 0x7}, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) creat(&(0x7f0000000100)='./file0\x00', 0x98) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000040)=0x200, 0x4) sendmmsg$unix(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c0}}], 0x1, 0x80) connect$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) syz_usb_connect(0x2, 0x51, &(0x7f00000001c0)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c643"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) 2m22.882593456s ago: executing program 3 (id=3693): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b20000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b20000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) (async) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x82, 0x2, '>d'}, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0xffffc000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x3c, r3, 0x1, 0x170bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x86}, 0x40040) 2m21.607343809s ago: executing program 3 (id=3705): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x700000c, 0x11, r4, 0x180000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0xf000, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m21.606705109s ago: executing program 3 (id=3706): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0xef, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0x0, @in6=@local, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x786d) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r4 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r4], 0x20}}, 0x40816) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r5, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2ff4, 0x6}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x40}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xf}, @NL80211_ATTR_IE={0x16, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}}, @sec_chan_ofs={0x3e, 0x1}, @chsw_timing={0x68, 0x4, {0x0, 0xfffd}}]}]}, 0x50}}, 0x4) r7 = socket$inet6(0xa, 0x3, 0x7b) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 2m21.579030092s ago: executing program 3 (id=3708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x97f3c6f4abd00bab, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x210080, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x30) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x26) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x66, {"b9b80a0000b866840000ba000000000f300f20e035000400000f22e0a831650f30f30fc736450faea800000080f0418061070148b89e000000000000000f23d80f21f835c00000b00f23f8672e440fe55b00f30f09"}}, @rdmsr={0x66, 0x18, {0x2b5}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x3, 0x7f, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x58000, 0xee73}}, @nested_amd_vmload={0x182, 0x18}, @wr_drn={0x68, 0x20, {0x7, 0x5}}, @out_dx={0x6a, 0x28, {0x4c3, 0x4, 0x2}}, @cpuid={0x64, 0x18, {0x2, 0x2}}, @set_irq_handler={0xc8, 0x20, {0xf3, 0x2}}, @out_dx={0x6a, 0x28, {0xb499, 0x1, 0x10001}}, @wr_drn={0x68, 0x20, {0x6, 0x100000001}}], 0x1ae}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xab9, 0x0, 0x9}]}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r4 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r4, 0x3a, 0x1, 0x0, &(0x7f0000000100)) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r3, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) (async) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}, 0x2}], 0x1, 0x32021, 0x0) socket(0x28, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x15) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) (async) unshare(0x4000400) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) fcntl$getflags(r6, 0x403) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x6}]}) 2m21.562589373s ago: executing program 3 (id=3709): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0xc0a43, 0xbb) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) sendfile(r0, r0, 0x0, 0xffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006fe1ad40a92010726b5b010203010902240001010740000904bcd1010101c1e70a240104000902010209050f0400000781049fd184ff4ea8"], 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x28) 2m7.490333661s ago: executing program 0 (id=3846): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x400002, r2}) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x1, r2}) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1}) (async) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x73f4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x40, 0x1a, 0x5, {0x5, 0x21, "ccc0eb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b", @ANYRES64], 0x0) 2m7.490199261s ago: executing program 0 (id=3847): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x3}}, 0x10) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="18383024eb0047df279f070472e022ec841854a15799228604832fa0b181ab241a927aa61b47fb0dc69574508c4955b951b212108295ab902dbf881174b3da6c5f71b03aa8319cd0e2343ab7c80abd2dde254321e6d229d0c918f4cc3d5a0a930526abf9b9508a664e9d80d6168843dc2ea313408f33510ca4dbe4934d9a77b8470f1e6717225e2a9aa25b9e63f2cea3756fba3719daa38162c714c69d2dada94f602ef9cebb061c525b6ebba566f5666f8b8d7db340bfdd5eff410a413fccb373e6b770bc07be13a5b71f8c4acc4e3cb893f3f851f23f4e6d"], 0x0) 2m6.963051248s ago: executing program 0 (id=3856): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = dup(r0) bind$inet6(r1, &(0x7f0000001dc0)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x80000001}, 0x1c) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x8914, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0}) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{0x800, 0xc8, 0x40, 0x6}, {0x44d3, 0x77, 0x5, 0x3}, {0x9, 0x85, 0x7, 0x7}, {0x4, 0xfa, 0x5, 0x147}, {0x981c, 0x4, 0x9, 0x3fb}, {0x7, 0x9, 0x3, 0x4}, {0x0, 0x3, 0x68, 0x9}, {0x6, 0xd, 0x60, 0x8000}, {0x1, 0x4, 0x0, 0x1}]}, 0x10) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x1e, 0x0, 0x1, [@nested={0x9, 0x3d, 0x0, 0x1, [@generic="f1df62fd16"]}]}]}]}, 0x30}}, 0x0) 2m6.94741789s ago: executing program 0 (id=3857): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x1d, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x2000) r1 = socket$inet6(0xa, 0x2, 0x3a) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @mcast2, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 2m6.930419711s ago: executing program 0 (id=3858): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109500, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000000c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000080)={{0x25000, 0xffffffff, 0x0, 0x9a, 0x3, 0x1, 0xf, 0x0, 0x0, 0xf9, 0x0, 0x7f}, {0xd000, 0x8080000, 0x3, 0x5, 0x7, 0xc0, 0x9, 0x66, 0xc1, 0x7, 0x30, 0x40}, {0xdddd0000, 0xdddd1000, 0xf, 0x6, 0xb, 0x34, 0xe, 0x6, 0x3, 0xc, 0x2, 0xff}, {0x8000000, 0x6000, 0xc, 0x58, 0x7f, 0x76, 0x2, 0xc, 0x7f, 0xfc, 0x9, 0xf}, {0x504ce1cb89483871, 0x1000, 0xa, 0x8f, 0x80, 0x2, 0x9, 0x3, 0x1, 0x8, 0x4, 0x6}, {0xdddd1000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb9, 0x2, 0x1, 0xf8, 0xd}, {0xffff1000, 0x100000, 0x10, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0xb, 0x6, 0x7}, {0xeeee0000, 0x5000, 0x9, 0x6, 0xff, 0x0, 0x9, 0x80, 0x9, 0x8f, 0xdb, 0x31}, {0x4000, 0x59}, {0x4, 0x6}, 0x10000, 0x0, 0x1, 0x151, 0x3, 0x1000, 0xdddd1000, [0x8, 0x3, 0x3, 0x3]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xc, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m6.814425991s ago: executing program 0 (id=3859): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) sync() mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x109) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000000040)={0x20, 0x0, r1, {0x7, 0x0, 0x9, 0xf}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0xfffffffffffffffe, r1, {0x7, 0x2d, 0x80000000, 0x46000020, 0x0, 0xfff7, 0x804, 0x1, 0x0, 0x0, 0x1, 0x8}}, 0x50) r2 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2m6.27123272s ago: executing program 32 (id=3709): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0xc0a43, 0xbb) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) sendfile(r0, r0, 0x0, 0xffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006fe1ad40a92010726b5b010203010902240001010740000904bcd1010101c1e70a240104000902010209050f0400000781049fd184ff4ea8"], 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x28) 1m51.623107789s ago: executing program 33 (id=3859): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) sync() mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x109) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000000040)={0x20, 0x0, r1, {0x7, 0x0, 0x9, 0xf}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0xfffffffffffffffe, r1, {0x7, 0x2d, 0x80000000, 0x46000020, 0x0, 0xfff7, 0x804, 0x1, 0x0, 0x0, 0x1, 0x8}}, 0x50) r2 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 53.55503908s ago: executing program 5 (id=4469): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x700000c, 0x11, r4, 0x180000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 53.524366502s ago: executing program 5 (id=4470): socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLCREATE(r1, &(0x7f0000000680)={0x18, 0xf, 0x1, {{0x2, 0x0, 0x2}, 0x6}}, 0x18) write$P9_RCLUNK(r1, &(0x7f0000000bc0)={0x7, 0x79, 0x1}, 0x7) close(r0) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x334}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f00000005c0)}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 53.458778278s ago: executing program 5 (id=4471): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x103) (async, rerun: 64) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010804, 0x0) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x202, 0x130) 53.011570198s ago: executing program 5 (id=4472): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000001f80)=[{{&(0x7f00000018c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x3, {0xa, 0x4e22, 0x5769ea24, @empty}}}, 0x80, 0x0}}], 0x1, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x42, 0x0, &(0x7f0000000180)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$int_in(r1, 0x0, &(0x7f0000000000)=0x3) chdir(&(0x7f00000001c0)='./bus\x00') r2 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x12) ptrace(0x4208, r2) ptrace$getsig(0x4202, r2, 0x16, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100002000000000020"], 0x24, 0x0) 53.007354688s ago: executing program 5 (id=4473): syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0xf4, 0x0, 0x1, [{0x37, &(0x7f0000000140)=@string={0x37, 0x3, "dcac542e3bfd6c38050c92d2a934e97e879aadbd514c5d54f0133cda9ef88eed62e526cf21a95fddd27e7cbde5a2c133fbc49f868e"}}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700400000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000003000001"], 0xffe) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 52.894119128s ago: executing program 5 (id=4474): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="a584002ec05700699c5e8d64e3cf0000b1e6bdb6995844c807351b2f9c4c00000000", 0x22}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRESHEX=r1, @ANYRESHEX=r2], 0x30, 0x40400d1}}], 0x1, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x400000, 0x3) 52.782281188s ago: executing program 34 (id=4474): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="a584002ec05700699c5e8d64e3cf0000b1e6bdb6995844c807351b2f9c4c00000000", 0x22}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRESHEX=r1, @ANYRESHEX=r2], 0x30, 0x40400d1}}], 0x1, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x400000, 0x3) 52.254715185s ago: executing program 6 (id=4475): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="5fea7cfdf557dda36224e8557a5b9012181d200caf23734abfb6aee16ae4818cd72384c84df596d7528139affc2afc2fce506fb829270697e9c409542fcdca28bc18f85f751fa32d0627f9ce5003c387"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x30, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xd, 0x35, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x30}], 0x1}, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 36.731800402s ago: executing program 35 (id=4475): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="5fea7cfdf557dda36224e8557a5b9012181d200caf23734abfb6aee16ae4818cd72384c84df596d7528139affc2afc2fce506fb829270697e9c409542fcdca28bc18f85f751fa32d0627f9ce5003c387"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x30, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xd, 0x35, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x30}], 0x1}, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.396205631s ago: executing program 7 (id=4797): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005a0001", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=r0], 0x1c}], 0x1, 0x0, 0x0, 0x800}, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xf7}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x80) splice(r0, &(0x7f0000000000)=0x616, r0, &(0x7f0000000140)=0x2, 0x1000, 0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x1000000}}, 0x10) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0xa) syz_usb_connect$uac1(0x5, 0x8a, &(0x7f0000000400)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902780003010990060904000000010100000a24010800080201020524040109052405060509040100000102000009040101010102000009050109ff0310400d07250101030100090402000001020000090402010101"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000380)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @nested={0x10, 0xf8, 0x0, 0x1, [@typed={0x4, 0xb1}, @typed={0x8, 0x21, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r3) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000200)="ee985bb345160a0cbcebb16eebb08fe072fb93a4574be5c983a8c3a173944e1af4e91316fb349a04b82bcdd57000ca51db7f4cff28b9b5c1020b0180bc14719da2ba8ce4f2dd56fa664fb2f67dbb36ceae09b91a5ba55eaa2b1b6877c57541085b59e0b15072559a34933145fffd4231f6844144b4df7ae32d37e494c7c2ce24610c4eb5cd125ad2bcf52b2f916981be6f0ede0a85afb6cdc41ff049025900c62157401a619f433c8c617f00dfb12326d1324b3ce24f8d3876d59a51f5fa884c6f7582541ab2a4fc1a8596276b52", 0xce}, {&(0x7f0000000300)="47d6c1d2c727c2c9d9f334d42e64ec821d34aef8b1acd6", 0x17}, {&(0x7f0000000480)="5dc338d7c671c77cd7c04ff7c150a72aee249504b9fbd1e042c07f17a72cebe75ad95a439dfbc920e3fa7c43439165646f2e9c7e01e3d5377b486143af5e800c78ec4e8113d4c57acfe1", 0x4a}], 0x3) 4.226978515s ago: executing program 4 (id=4804): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000040)={0x34, r0, 0x1, 0x70bd2a, 0x25dfdbfa, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x34}}, 0x4) 4.226611025s ago: executing program 4 (id=4805): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x4, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x20, 0x11, 0x8b, {0x8b, 0xd, "2d3fe504de51c26ffbe2a55318c11ecc089448bca96984f1abaa7f62bbc9ffffffff00e70000ae4420ed8c52c2b031c302fe726601d2622efd79af932039dc1a66251ff330ae186459862971970c5637ad016d7533587c1f5218cfd362fe517c1235c004e0626a200db47e2896a9ad8ec30c478ed80e3613be9f0391a4fe363104820e680230ffff4c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) write$uinput_user_dev(r1, &(0x7f0000001300)={'syz1\x00', {0x9, 0x207, 0x5, 0x8}, 0x3f, [0x9, 0x0, 0x18, 0x2, 0x2, 0x10000, 0x7ffffffe, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffe, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x10003, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x5, 0x8, 0x2, 0x100004, 0xd, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x4, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x7, 0x1000, 0x5, 0x3c, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x400, 0x8000, 0xfffffffd, 0x1, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0xbd7f, 0x5, 0xfffd, 0x3, 0x7ffd, 0x3, 0x2, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x9, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1001, 0x8, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xf8000000, 0x7, 0x1f, 0x402, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0xa, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x80000000, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x5, 0xbf23, 0x5, 0xa, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x3, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x20044, 0x409, 0x6, 0x0, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0xe, 0x7, 0x4, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read(r1, &(0x7f0000021000)=""/4096, 0x1000) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0xa, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000700)="580000001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) 4.018293174s ago: executing program 7 (id=4806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) io_setup(0xff, &(0x7f0000000380)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x8001}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000006, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x7, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 3.331487945s ago: executing program 2 (id=4808): syz_usb_connect(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330200020c0700"], 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xa013, r0, 0x380ed000) (async) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) sendto$packet(r0, 0x0, 0x0, 0x400c010, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) (async) rt_sigsuspend(0x0, 0x0) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0xd8cb, 0x4) (async) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) (async) landlock_create_ruleset(0x0, 0x0, 0x1) futex(0x0, 0x1, 0x4000000, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x325, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0xc) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x100000000]}, 0x8, 0x180000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000340)={0x4, 0x0, [{0xb51, 0x0, 0x4}, {0x2dd, 0x0, 0x9}, {0x0, 0x0, 0x3}, {0x2e8, 0x0, 0x1}]}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) close(r4) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r7, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES64=r4, @ANYRESDEC=r2, @ANYRES64=r1, @ANYRES8=r7, @ANYRES16=r4, @ANYRESOCT=r2, @ANYRESHEX=r7, @ANYRESDEC]) 3.331358474s ago: executing program 2 (id=4809): socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x334}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x80000001004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f00000005c0)}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.291815118s ago: executing program 2 (id=4810): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x700000c, 0x11, r4, 0x180000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.225320794s ago: executing program 2 (id=4811): syz_usb_connect$hid(0x4, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x49, &(0x7f0000000180)={0x5, 0xf, 0x49, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0xc1, 0x1, 0x7, 0x1, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x1, 0x2}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x1, 0x2, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x0, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "8bc365fdd84544d44a7c1b30c0e7d6c5"}]}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700400000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000ff0000001"], 0xffe) 3.030901971s ago: executing program 7 (id=4812): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0xc, [{{0x9, 0x4, 0x0, 0x2, 0xfe, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0xb, 0xb, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xb, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0}, 0x0) 2.657857814s ago: executing program 2 (id=4818): socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x334}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x80000001004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f00000005c0)}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.579671161s ago: executing program 2 (id=4819): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e", 0x68, 0x1, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x4c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x7f}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x96}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000008c}, 0x10) syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES8=r1, @ANYRESHEX=r0, @ANYRES16=0x0, @ANYRES8=r1, @ANYRES16=r0], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 2.47561645s ago: executing program 4 (id=4820): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x700000c, 0x11, r4, 0x180000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.474661111s ago: executing program 4 (id=4821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) io_setup(0xff, &(0x7f0000000380)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x8001}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000006, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x7, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 1.452902731s ago: executing program 7 (id=4829): syz_usb_connect$hid(0x4, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x49, &(0x7f0000000180)={0x5, 0xf, 0x49, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0xc1, 0x1, 0x7, 0x1, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x1, 0x2}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x1, 0x2, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x0, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "8bc365fdd84544d44a7c1b30c0e7d6c5"}]}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700400000004000000060ec97000fc83a00fe8000000000000000000000000000aaff02000000000000000000fff5000001"], 0xffe) 1.282802926s ago: executing program 1 (id=4832): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4, 0x2}, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) (async) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x4000000) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 1.260816858s ago: executing program 4 (id=4833): syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0xf4, 0x0, 0x1, [{0x37, &(0x7f0000000140)=@string={0x37, 0x3, "dcac542e3bfd6c38050c92d2a934e97e879aadbd514c5d54f0133cda9ef88eed62e526cf21a95fddd27e7cbde5a2c133fbc49f868e"}}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700400000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000050001"], 0xffe) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1.203434243s ago: executing program 1 (id=4834): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xe964, 0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x2000001, 0x4, 0xc2, 0x53, 0x3d, 0x2, 0x80, 0x41, 0x6b, 0x45, 0x8, 0x2, 0x1}, {0xb, 0xa7f3, 0x8, 0x8, 0x33, 0xff, 0x6, 0x3, 0xe, 0x7, 0x7, 0x6, 0x1}, {0x0, 0x7, 0xd, 0x10, 0x21, 0x9, 0x0, 0xbb, 0x4, 0x1d, 0x0, 0x2, 0xfffffffffffffb97}], 0x9}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x3e2a, 0x8a, 0x7fffffffffffe, 0x81, 0x105, 0xfffffffffbfffffd, 0x4002004c4, 0x1003, 0x2, 0x8, 0x10, 0x4, 0x4, 0x7, 0x3, 0xfffffffffffffffe], 0x10000, 0x2100}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x0, 0x0) getsockname$tipc(r7, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f00000002c0)="12eb00001200e7ef007b00000000000000a1", 0x12, 0x20000000, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/165, 0xa5}, {&(0x7f0000000a00)=""/4094, 0xffe}, {&(0x7f0000003100)=""/4089, 0xff9}, {&(0x7f0000001a00)=""/235, 0xeb}, {&(0x7f00000006c0)=""/167, 0xa7}, {&(0x7f0000001b00)=""/162, 0xa2}, {&(0x7f0000000580)=""/259, 0x103}, {&(0x7f0000001e40)=""/178, 0xb2}, {&(0x7f00000008c0)=""/107, 0x6b}], 0x9}, 0xc}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x103}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x97}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}], 0x8, 0x40000100, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0xa8041}, 0x8000) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r10 = socket$netlink(0x10, 0x3, 0xa) setsockopt$sock_int(r10, 0x1, 0x23, &(0x7f0000000200), 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000340)="0f01c366b80500000066b98f6839a10f01d9672ef0811c220a083ef30fa7d03e67660f1ee80f7892f9ff360f01c464ffa7040066b94103000066b80700000066ba000000000f3066b8fe0000000f23d80f21f86635400000200f23f8", 0x5c}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 907.10945ms ago: executing program 1 (id=4835): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$inet(0x2, 0x3, 0x5) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r3, &(0x7f0000000200)={@val={0xa, 0x9100}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0x2, 0x6, "ab5d68", 0x9, 0x2b, 0xff, @empty, @private1, [@srh={0x32, 0x0, 0x4, 0x0, 0x2, 0x28, 0x4}]}}}}}}}}, 0x72) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r2, 0x0, 0xfdef) r6 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/256, 0x107f, 0x0, 0x0}, &(0x7f0000000180)=0x8d) 818.470787ms ago: executing program 7 (id=4836): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0xa, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000700)="effd00001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) 763.592172ms ago: executing program 7 (id=4837): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x334}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x80000001004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f00000005c0)}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 761.795152ms ago: executing program 1 (id=4838): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 681.02691ms ago: executing program 4 (id=4839): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x9, 0x80c, 0x3, 0x1c, 0x7, 0x0, 0x10, 0x3, 0xe9, 0x1, 0x9, 0x1, 0x8000000000000001}, {0x3ff, 0x6, 0xa, 0xc1, 0xa, 0x1, 0x47, 0xf1, 0x8, 0x8b, 0xc4, 0x7d, 0x3ffffeffffe}, {0x7fffffff, 0xb, 0x1, 0x0, 0x4, 0x9, 0x8, 0x2, 0x7d, 0x3, 0x3, 0x3, 0x4}], 0x16d3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x424) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 214.118251ms ago: executing program 1 (id=4840): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0xa, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000700)="580000001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) (fail_nth: 4) 0s ago: executing program 1 (id=4841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) io_setup(0xff, &(0x7f0000000380)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x8001}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000006, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x7, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) kernel console output (not intermixed with test programs): d -16 [ 595.130627][T13374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.139462][T13374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.168769][ T31] usb 2-1: device descriptor read/64, error -71 [ 595.278958][ T31] usb usb2-port1: attempt power cycle [ 595.302060][ T46] usb 6-1: USB disconnect, device number 21 [ 595.314452][ T733] udevd[733]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 595.536924][T13391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.545634][T13391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.618870][ T31] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 595.640589][ T31] usb 2-1: device descriptor read/8, error -71 [ 595.769944][ T31] usb 2-1: device descriptor read/8, error -71 [ 595.821255][T13399] rust_binder: Error in use_page_slow: ESRCH [ 595.821283][T13399] rust_binder: use_range failure ESRCH [ 595.827424][T13399] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 595.833209][T13399] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 595.841301][T13399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:317 [ 595.854979][ T36] audit: type=1400 audit(2000000284.784:2277): avc: denied { relabelfrom } for pid=13396 comm="syz.5.4367" name="NETLINK" dev="sockfs" ino=100606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 595.889671][ T36] audit: type=1400 audit(2000000284.784:2278): avc: denied { relabelto } for pid=13396 comm="syz.5.4367" name="NETLINK" dev="sockfs" ino=100606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 596.025685][ T31] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 596.049816][ T31] usb 2-1: device descriptor read/8, error -71 [ 596.260304][ T31] usb 2-1: device descriptor read/8, error -71 [ 596.369303][ T31] usb usb2-port1: unable to enumerate USB device [ 597.128805][ T7979] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 597.278792][ T7979] usb 6-1: Using ep0 maxpacket: 32 [ 597.285535][ T7979] usb 6-1: unable to get BOS descriptor or descriptor too short [ 597.297824][ T7979] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 597.306802][ T7979] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 597.317133][ T7979] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 597.326247][ T7979] usb 6-1: config 128 has no interface number 0 [ 597.332788][ T7979] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 85, changing to 10 [ 597.344399][ T7979] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 50182, setting to 1024 [ 597.345666][T13429] rust_binder: Error in use_page_slow: ESRCH [ 597.355936][ T7979] usb 6-1: config 128 interface 127 has no altsetting 0 [ 597.357998][ T7979] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 597.362927][ T424] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 597.369142][ T7979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.378878][T13429] rust_binder: use_range failure ESRCH [ 597.385673][ T7979] usb 6-1: Product: syz [ 597.395496][T13429] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 597.399167][ T7979] usb 6-1: Manufacturer: syz [ 597.399190][ T7979] usb 6-1: SerialNumber: syz [ 597.410771][T13421] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 597.412388][T13429] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 597.427893][T13429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:330 [ 597.538818][ T424] usb 2-1: device descriptor read/64, error -71 [ 597.626168][ T7979] usb 6-1: USB disconnect, device number 22 [ 597.680263][ T733] udevd[733]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 597.894296][ T424] usb 2-1: device descriptor read/64, error -71 [ 598.148814][ T424] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 598.278877][ T424] usb 2-1: device descriptor read/64, error -71 [ 598.547586][ T424] usb 2-1: device descriptor read/64, error -71 [ 598.660225][ T424] usb usb2-port1: attempt power cycle [ 598.745027][T13467] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 598.764757][T13469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.773430][T13469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.818776][ T7979] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 598.840735][T13470] can0: slcan on ttyS3. [ 598.853296][T13469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.862467][T13469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.901119][T13468] can0 (unregistered): slcan off ttyS3. [ 598.968797][ T7979] usb 5-1: Using ep0 maxpacket: 32 [ 598.975277][ T7979] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 598.986939][ T7979] usb 5-1: config 0 interface 0 has no altsetting 0 [ 598.993726][ T7979] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 599.002998][ T7979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.008933][ T424] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 599.019747][ T7979] usb 5-1: config 0 descriptor?? [ 599.050022][ T424] usb 2-1: device descriptor read/8, error -71 [ 599.179960][ T424] usb 2-1: device descriptor read/8, error -71 [ 599.190922][T13506] rust_binder: Error in use_page_slow: ESRCH [ 599.190940][T13506] rust_binder: use_range failure ESRCH [ 599.196985][T13506] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 599.202692][T13506] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 599.210532][T13506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:333 [ 599.227691][T13463] input: syz0 as /devices/virtual/input/input119 [ 599.428793][ T424] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 599.463428][ T424] usb 2-1: device descriptor read/8, error -71 [ 599.465112][ T7979] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0081/input/input120 [ 599.509096][ T7979] sony 0003:054C:03D5.0081: input,hidraw0: USB HID v0.06 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 599.644044][T13514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.669001][T13514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.729939][ T424] usb 2-1: device descriptor read/8, error -71 [ 599.848809][ T424] usb usb2-port1: unable to enumerate USB device [ 600.223484][T13525] overlayfs: regular lower layers cannot follow data lower layers [ 600.558806][ T7979] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 600.710711][ T7979] usb 2-1: unable to get BOS descriptor or descriptor too short [ 600.719161][ T7979] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 600.726974][ T7979] usb 2-1: can't read configurations, error -71 [ 601.224582][T13538] rust_binder: Error in use_page_slow: ESRCH [ 601.224610][T13538] rust_binder: use_range failure ESRCH [ 601.230906][T13538] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 601.236447][T13538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 601.244419][T13538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:811 [ 601.558840][ T7979] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 601.598797][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 601.636718][ T722] usb 5-1: USB disconnect, device number 32 [ 601.698816][ T7979] usb 2-1: device descriptor read/64, error -71 [ 601.751692][ T10] usb 6-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 601.761091][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.769464][ T10] usb 6-1: Product: syz [ 601.773967][ T10] usb 6-1: Manufacturer: syz [ 601.778717][ T10] usb 6-1: SerialNumber: syz [ 601.938815][ T7979] usb 2-1: device descriptor read/64, error -71 [ 601.987912][T13536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.997929][T13536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.008236][T13536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.018143][T13536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.028288][T13536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.038510][T13536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.047074][T13536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.057332][ T7979] usb usb2-port1: attempt power cycle [ 602.065089][T13536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.418819][ T7979] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 602.439989][ T7979] usb 2-1: device descriptor read/8, error -71 [ 602.569905][ T7979] usb 2-1: device descriptor read/8, error -71 [ 602.589744][T13546] syzkaller1: entered promiscuous mode [ 602.595532][T13546] syzkaller1: entered allmulticast mode [ 602.611517][ T10] usb 6-1: USB disconnect, device number 23 [ 602.818786][ T7979] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 602.849970][ T7979] usb 2-1: device descriptor read/8, error -71 [ 602.980200][ T7979] usb 2-1: device descriptor read/8, error -71 [ 603.088959][ T7979] usb usb2-port1: unable to enumerate USB device [ 603.128815][ T424] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 603.300242][ T424] usb 5-1: unable to get BOS descriptor or descriptor too short [ 603.318791][ T424] usb 5-1: not running at top speed; connect to a high speed hub [ 603.327360][ T424] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 603.348814][ T424] usb 5-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 603.361907][ T424] usb 5-1: config 1 interface 0 has no altsetting 0 [ 603.370279][ T424] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 603.379547][ T424] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.387682][ T424] usb 5-1: Product: syz [ 603.392299][ T424] usb 5-1: Manufacturer: syz [ 603.397019][ T424] usb 5-1: SerialNumber: syz [ 603.606446][ T424] cdc_ether 5-1:1.0: skipping garbage [ 603.619126][ T424] cdc_ether 5-1:1.0: skipping garbage [ 603.626138][ T424] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 603.636082][ T424] usb 5-1: USB disconnect, device number 33 [ 603.673551][T13593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.682965][T13593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.968823][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 604.129946][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.140141][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 604.149733][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 604.158925][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 604.166985][ T10] usb 6-1: SerialNumber: syz [ 604.368972][ T7979] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 604.388573][ T10] usb 6-1: skipping empty audio interface (v1) [ 604.412830][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 604.420651][T13612] rust_binder: Error in use_page_slow: ESRCH [ 604.421907][T13612] rust_binder: use_range failure ESRCH [ 604.427978][T13612] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 604.434244][ T10] usb 6-1: USB disconnect, device number 24 [ 604.442509][T13612] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 604.448184][T13612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:373 [ 604.474313][ T733] udevd[733]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 604.578768][ T7979] usb 5-1: Using ep0 maxpacket: 16 [ 604.589562][ T7979] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.600288][ T7979] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 604.609956][T13613] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.617068][T13613] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.624767][T13613] bridge_slave_0: entered allmulticast mode [ 604.625252][ T7979] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 604.640495][T13613] bridge_slave_0: entered promiscuous mode [ 604.647223][T13613] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.654342][ T7979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.662430][T13613] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.669545][ T7979] usb 5-1: Product: syz [ 604.673891][ T7979] usb 5-1: Manufacturer: syz [ 604.678515][ T7979] usb 5-1: SerialNumber: syz [ 604.683643][T13613] bridge_slave_1: entered allmulticast mode [ 604.690154][T13613] bridge_slave_1: entered promiscuous mode [ 604.772714][T13613] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.779861][T13613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.787230][T13613] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.794305][T13613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.802674][T13629] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4432'. [ 604.822437][ T31] usb 3-1: USB disconnect, device number 91 [ 604.832114][T12978] tipc: Resetting bearer [ 604.851827][T12978] tipc: Disabling bearer [ 604.903823][ T7979] usb 5-1: 0:2 : does not exist [ 604.908888][ T7979] usb 5-1: unit 9 not found! [ 604.915837][ T7979] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4) [ 604.930612][ T7979] usb 5-1: 4:0: cannot get min/max values for control 2 (id 4) [ 604.942309][ T6978] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.950224][ T6978] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.951662][ T7979] usb 5-1: 4:0: cannot get min/max values for control 3 (id 4) [ 604.968354][ T6978] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.974070][ T7979] usb 5-1: 4:0: cannot get min/max values for control 4 (id 4) [ 604.975568][ T6978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.991550][T12978] tipc: Disabling bearer [ 604.997021][ T7979] usb 5-1: USB disconnect, device number 34 [ 604.997080][T12978] tipc: Left network mode [ 605.008001][ T6978] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.015103][ T6978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.026997][ T733] udevd[733]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 605.027069][T12978] veth0_vlan: left promiscuous mode [ 605.081105][T12978] wg0 (unregistering): left allmulticast mode [ 605.111548][T13613] veth0_vlan: entered promiscuous mode [ 605.127271][T13613] veth1_macvtap: entered promiscuous mode [ 605.178867][ T424] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 605.329937][ T424] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 605.339766][ T424] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 605.352663][ T424] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 605.362034][ T424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.370748][ T424] usb 2-1: Product: syz [ 605.375048][ T424] usb 2-1: Manufacturer: syz [ 605.380254][ T424] usb 2-1: SerialNumber: syz [ 605.387272][ T424] usb 2-1: config 0 descriptor?? [ 605.409205][T13639] fuse: Unknown parameter '' [ 605.414573][T13639] netlink: 'syz.2.4435': attribute type 40 has an invalid length. [ 605.483489][T13646] rust_binder: Error in use_page_slow: ESRCH [ 605.483520][T13646] rust_binder: use_range failure ESRCH [ 605.490186][T13646] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 605.495761][T13646] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 605.506345][T13646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:373 [ 605.602990][ T424] usb 2-1: USB disconnect, device number 59 [ 605.622196][ T348] udevd[348]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 605.650929][T13660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4442'. [ 605.839437][T13666] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4444'. [ 605.849105][T13666] veth1_macvtap: left promiscuous mode [ 605.898904][ T31] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 606.058887][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 606.065657][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.075879][ T31] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 606.085019][ T31] usb 5-1: config 1 has no interface number 1 [ 606.091174][ T31] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 606.101930][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 606.117813][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 606.131617][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.139894][ T31] usb 5-1: Product: syz [ 606.144097][ T31] usb 5-1: Manufacturer: syz [ 606.148848][ T31] usb 5-1: SerialNumber: syz [ 606.192137][ T36] audit: type=1400 audit(2000000295.124:2279): avc: denied { write } for pid=13674 comm="syz.1.4447" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 606.270984][T13682] kvm: pic: non byte write [ 606.373817][ T31] usb 5-1: USB disconnect, device number 35 [ 606.653507][T13702] UHID_CREATE from different security context by process 22 (syz.2.4457), this is not allowed. [ 607.079024][ T424] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 607.206976][ T36] audit: type=1400 audit(2000000296.134:2280): avc: denied { mount } for pid=13728 comm="syz.4.4466" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 607.278816][ T424] usb 3-1: Using ep0 maxpacket: 8 [ 607.284390][ T424] usb 3-1: no configurations [ 607.289418][ T424] usb 3-1: can't read configurations, error -22 [ 607.418823][ T424] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 607.498791][ T7979] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 607.568810][ T424] usb 3-1: Using ep0 maxpacket: 8 [ 607.574325][ T424] usb 3-1: no configurations [ 607.587071][ T424] usb 3-1: can't read configurations, error -22 [ 607.593772][ T424] usb usb3-port1: attempt power cycle [ 607.648811][ T7979] usb 2-1: Using ep0 maxpacket: 16 [ 607.655302][ T7979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.666571][ T7979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.676710][ T7979] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 607.689894][ T7979] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 607.699350][ T7979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.708398][ T7979] usb 2-1: config 0 descriptor?? [ 607.738328][T13734] tmpfs: Unknown parameter 'ÿÿÿÿ' [ 607.762498][T13736] rust_binder: Error in use_page_slow: ESRCH [ 607.762527][T13736] rust_binder: use_range failure ESRCH [ 607.769130][T13736] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 607.774873][T13736] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 607.782745][T13736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:415 [ 607.874472][T13742] incfs: mount failed -22 [ 607.888978][T13742] incfs: mount failed -22 [ 607.893501][T13742] incfs: mount failed -22 [ 607.898013][T13742] incfs: mount failed -22 [ 607.903064][T13742] incfs: mount failed -22 [ 607.907566][T13742] incfs: mount failed -22 [ 607.912650][T13742] incfs: mount failed -22 [ 607.917242][T13742] incfs: mount failed -22 [ 607.922310][T13742] incfs: mount failed -22 [ 607.926876][T13742] incfs: mount failed -22 [ 607.931880][T13742] incfs: mount failed -22 [ 607.936566][T13742] incfs: mount failed -22 [ 607.941443][T13742] incfs: mount failed -22 [ 607.946002][T13742] incfs: mount failed -22 [ 607.950846][T13742] incfs: mount failed -22 [ 607.955340][T13742] incfs: mount failed -22 [ 607.960321][T13742] incfs: mount failed -22 [ 607.964982][T13742] incfs: mount failed -22 [ 607.969872][T13742] incfs: mount failed -22 [ 607.974565][T13742] incfs: mount failed -22 [ 607.979421][T13742] incfs: mount failed -22 [ 607.984076][T13742] incfs: mount failed -22 [ 607.988702][T13742] incfs: mount failed -22 [ 607.989068][ T424] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 608.001693][T13742] incfs: mount failed -22 [ 608.006202][T13742] incfs: mount failed -22 [ 608.011094][T13742] incfs: mount failed -22 [ 608.015747][T13742] incfs: mount failed -22 [ 608.021296][T13742] incfs: mount failed -22 [ 608.026311][T13742] incfs: mount failed -22 [ 608.031153][T13742] incfs: mount failed -22 [ 608.035791][ T424] usb 3-1: Using ep0 maxpacket: 8 [ 608.041443][T13742] incfs: mount failed -22 [ 608.045980][T13742] incfs: mount failed -22 [ 608.050720][ T424] usb 3-1: no configurations [ 608.055343][ T424] usb 3-1: can't read configurations, error -22 [ 608.062094][T13742] incfs: mount failed -22 [ 608.066616][T13742] incfs: mount failed -22 [ 608.071879][T13742] incfs: mount failed -22 [ 608.076394][T13742] incfs: mount failed -22 [ 608.081189][T13742] incfs: mount failed -22 [ 608.085760][T13742] incfs: mount failed -22 [ 608.098990][T13742] incfs: mount failed -22 [ 608.103715][T13742] incfs: mount failed -22 [ 608.108304][T13742] incfs: mount failed -22 [ 608.113509][T13742] incfs: mount failed -22 [ 608.118402][T13742] incfs: mount failed -22 [ 608.123778][T13742] incfs: mount failed -22 [ 608.128567][T13742] incfs: mount failed -22 [ 608.133576][T13742] incfs: mount failed -22 [ 608.138355][T13742] incfs: mount failed -22 [ 608.143373][T13742] incfs: mount failed -22 [ 608.148059][T13742] incfs: mount failed -22 [ 608.152693][T13742] incfs: mount failed -22 [ 608.157290][T13742] incfs: mount failed -22 [ 608.162060][T13742] incfs: mount failed -22 [ 608.166882][T13742] incfs: mount failed -22 [ 608.171474][T13742] incfs: mount failed -22 [ 608.176159][T13742] incfs: mount failed -22 [ 608.180873][T13742] incfs: mount failed -22 [ 608.185511][T13742] incfs: mount failed -22 [ 608.190429][T13742] incfs: mount failed -22 [ 608.195315][T13742] incfs: mount failed -22 [ 608.198984][ T424] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 608.208063][T13742] incfs: mount failed -22 [ 608.212975][T13742] incfs: mount failed -22 [ 608.217921][T13742] incfs: mount failed -22 [ 608.219365][ T424] usb 3-1: Using ep0 maxpacket: 8 [ 608.223031][T13742] incfs: mount failed -22 [ 608.228970][ T424] usb 3-1: no configurations [ 608.236283][ T424] usb 3-1: can't read configurations, error -22 [ 608.244032][ T7979] microsoft 0003:045E:07DA.0082: ignoring exceeding usage max [ 608.258898][ T424] usb usb3-port1: unable to enumerate USB device [ 608.279921][ T7979] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 608.292001][ T7979] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 608.300562][ T7979] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 608.332935][ T7979] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 608.340518][ T7979] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 608.347788][ T7979] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 608.355140][ T7979] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 608.362412][ T7979] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 608.371449][ T7979] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 608.378798][ T7979] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 608.386280][ T7979] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 608.393605][ T7979] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 608.400985][ T7979] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 608.408236][ T7979] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 608.415586][ T7979] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 608.425384][ T12] bridge_slave_1: left allmulticast mode [ 608.431307][ T12] bridge_slave_1: left promiscuous mode [ 608.437434][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.462072][ T7979] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0082/input/input121 [ 608.474162][ T12] bridge_slave_0: left allmulticast mode [ 608.485527][ T12] bridge_slave_0: left promiscuous mode [ 608.491426][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.500158][ T7979] microsoft 0003:045E:07DA.0082: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 608.529034][ T7979] usb 2-1: USB disconnect, device number 60 [ 608.549008][T13747] fido_id[13747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 608.633438][ T12] tipc: Left network mode [ 608.713462][ T12] veth0_vlan: left promiscuous mode [ 608.772417][T13752] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.781444][T13752] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.788801][T13752] bridge_slave_0: entered allmulticast mode [ 608.795280][T13752] bridge_slave_0: entered promiscuous mode [ 608.802766][T13752] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.809958][T13752] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.817069][T13752] bridge_slave_1: entered allmulticast mode [ 608.823498][T13752] bridge_slave_1: entered promiscuous mode [ 608.875245][T13752] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.882377][T13752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.889724][T13752] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.896785][T13752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.920424][T12978] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.927837][T12978] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.938430][T12978] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.945626][T12978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.973319][T12978] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.980464][T12978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.994461][T13752] veth0_vlan: entered promiscuous mode [ 609.009748][T13752] veth1_macvtap: entered promiscuous mode [ 609.031395][T13767] rust_binder: Error in use_page_slow: ESRCH [ 609.031425][T13767] rust_binder: use_range failure ESRCH [ 609.037615][T13767] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 609.045359][T13767] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 609.054023][T13767] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:844 [ 609.182013][T13772] SELinux: security policydb version 18 (MLS) not backwards compatible [ 609.199506][T13772] SELinux: failed to load policy [ 609.548911][ T10] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 609.700590][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 609.709151][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 609.720330][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 609.732891][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.40 [ 609.742010][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.750137][ T10] usb 2-1: Product: 쿟ꧧ檉ᒪ [ 609.755123][ T10] usb 2-1: Manufacturer: ¹棃î¡É‰åœ³æ¿ç±²ã·¿å³‚㤫䯒è¯ï·“㡓೉ä‚껴Ⲣҡè¤ã‘§å·€â¦“࿗圻쳿꥘䟗çƒà¥‚뀬⯞艭æ§ä©Ÿà±Œäƒœå‚ˆê¶®çž é¸ç¤¦ï‡†è·—翱㳛﮵嚨㛩á£ä“ࢢ鴙߻擀娗㱔縄埇닚䛙䬽陦넪ⴎë ëŸ á«ˆî¯°ï…˜ë•£å¢Ÿâ‚å‘ﺤ頭â¾æ¨ïˆ–◩晛㾮䟧ⲥ匭뇴ç•â—½ [ 609.783726][ T10] usb 2-1: SerialNumber: ⻕姟욀㜚羊긹⺖柿잰ãˆïŠªì•ïŒ¼Åˆî‹‰ë¸¸æ€‘蚌楛特ï¿î‹î£¡æ´µç‹è‘Šä—´ä³¯è¿‹æ¦™æª£ã£¶ [ 609.797860][T13772] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 609.805411][T13772] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 609.903091][T13789] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4486'. [ 609.913489][ T36] audit: type=1400 audit(2000000298.844:2281): avc: denied { mounton } for pid=13788 comm="syz.2.4486" path="/file0" dev="ramfs" ino=103381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 610.099377][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 610.117059][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 610.127683][ T10] usb 2-1: USB disconnect, device number 61 [ 610.219361][T13791] random: crng reseeded on system resumption [ 610.247488][T13791] Restarting kernel threads ... done. [ 610.411103][T13798] rust_binder: Error in use_page_slow: ESRCH [ 610.411134][T13798] rust_binder: use_range failure ESRCH [ 610.417186][T13798] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 610.422802][T13798] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 610.430637][T13798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:46 [ 610.641705][T13818] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13818 comm=syz.1.4495 [ 610.664964][T13820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.674369][T13820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.888812][ T413] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 611.039892][ T413] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.050877][ T413] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.060710][ T413] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 611.073712][ T413] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 611.083022][ T413] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.091790][ T413] usb 2-1: config 0 descriptor?? [ 611.097871][ T413] hub 2-1:0.0: USB hub found [ 611.397621][T13832] rust_binder: Error in use_page_slow: ESRCH [ 611.397651][T13832] rust_binder: use_range failure ESRCH [ 611.405130][T13832] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 611.410821][T13832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 611.418631][T13832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:66 [ 611.678819][ T46] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 611.818817][ T424] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 611.838794][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 611.845182][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.855538][ T46] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 611.865376][ T46] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 611.877801][ T46] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 611.887197][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.895643][ T46] usb 3-1: Product: syz [ 611.899898][ T46] usb 3-1: Manufacturer: syz [ 611.904645][ T46] usb 3-1: SerialNumber: syz [ 611.969956][ T424] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.980970][ T424] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.990796][ T424] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.003669][ T424] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 612.012770][ T424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.021753][ T424] usb 5-1: config 0 descriptor?? [ 612.111588][T13834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.120367][T13834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.130937][ T46] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 612.138877][ T46] usb 3-1: 2:1 : unsupported format bits 0x100 [ 612.151622][ T46] usb 3-1: USB disconnect, device number 96 [ 612.164695][ T733] udevd[733]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 612.430177][ T424] steelseries 0003:1038:12B6.0083: unknown main item tag 0x0 [ 612.437659][ T424] steelseries 0003:1038:12B6.0083: unknown main item tag 0x0 [ 612.446712][ T424] steelseries 0003:1038:12B6.0083: unknown main item tag 0x0 [ 612.454293][ T424] steelseries 0003:1038:12B6.0083: unknown main item tag 0x0 [ 612.461859][ T424] steelseries 0003:1038:12B6.0083: unknown main item tag 0x0 [ 612.469421][ T424] steelseries 0003:1038:12B6.0083: unknown main item tag 0x0 [ 612.476860][ T424] steelseries 0003:1038:12B6.0083: unknown main item tag 0x0 [ 612.484374][ T424] steelseries 0003:1038:12B6.0083: unknown main item tag 0x0 [ 612.491868][ T424] steelseries 0003:1038:12B6.0083: unknown main item tag 0x0 [ 612.499343][ T424] steelseries 0003:1038:12B6.0083: unknown main item tag 0x0 [ 612.506780][ T424] steelseries 0003:1038:12B6.0083: unknown main item tag 0x0 [ 612.515226][ T424] steelseries 0003:1038:12B6.0083: hidraw0: USB HID vff.fc Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0 [ 612.642937][T13841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.652072][T13841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.682309][ T424] steelseries 0003:1038:12B6.0083: hid_hw_raw_request() failed with -71 [ 612.694742][ T424] usb 5-1: USB disconnect, device number 36 [ 612.898846][ T423] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 613.050043][ T423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.061166][ T423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.071023][ T423] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 613.080274][ T423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.089818][ T423] usb 3-1: config 0 descriptor?? [ 613.260512][ T36] audit: type=1400 audit(2000000302.194:2282): avc: denied { create } for pid=13847 comm="syz.4.4505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 613.655132][ T413] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 613.679131][ T413] usb 2-1: USB disconnect, device number 62 [ 613.702136][ T423] usbhid 3-1:0.0: can't add hid device: -71 [ 613.709159][ T423] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 613.718362][ T423] usb 3-1: USB disconnect, device number 97 [ 613.879677][T13864] rust_binder: Error in use_page_slow: ESRCH [ 613.879708][T13864] rust_binder: use_range failure ESRCH [ 613.885868][T13864] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 613.891440][T13864] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 613.899250][T13864] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:421 [ 613.949198][T13868] netlink: 288 bytes leftover after parsing attributes in process `syz.4.4513'. [ 613.969389][T13868] SELinux: Context system_u:object_r:semanage_read_lock_t:s0 is not valid (left unmapped). [ 613.979788][ T36] audit: type=1400 audit(2000000302.914:2283): avc: denied { relabelto } for pid=13867 comm="syz.4.4513" name="file0" dev="tmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:semanage_read_lock_t:s0" [ 614.007633][ T36] audit: type=1400 audit(2000000302.914:2284): avc: denied { associate } for pid=13867 comm="syz.4.4513" name="file0" dev="tmpfs" ino=764 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_read_lock_t:s0" [ 614.567161][ T36] audit: type=1400 audit(2000000303.494:2285): avc: denied { unlink } for pid=11803 comm="syz-executor" name="file0" dev="tmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:semanage_read_lock_t:s0" [ 614.615957][T13891] rust_binder: Error in use_page_slow: ESRCH [ 614.615986][T13891] rust_binder: use_range failure ESRCH [ 614.622098][T13891] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 614.627612][T13891] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 614.635494][T13891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:430 [ 614.730913][T13897] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 614.908855][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 614.999034][ T423] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 615.059941][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.069854][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 615.082870][ T10] usb 5-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 615.092000][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.100779][ T10] usb 5-1: config 0 descriptor?? [ 615.150047][ T423] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 615.159952][ T423] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 615.169882][ T423] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 615.179794][ T423] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 615.191039][ T423] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 615.200204][ T423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.208233][ T423] usb 2-1: Product: syz [ 615.212445][ T423] usb 2-1: Manufacturer: syz [ 615.217072][ T423] usb 2-1: SerialNumber: syz [ 615.222699][ T423] usb 2-1: config 0 descriptor?? [ 615.228688][ T423] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 615.308786][ T31] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 615.430194][T13900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.438986][T13900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.448873][ T423] scsi host1: usb-storage 2-1:0.0 [ 615.456290][ T423] usb 2-1: USB disconnect, device number 63 [ 615.465045][ T31] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.476232][ T31] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.486249][ T31] usb 3-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.499441][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 615.506410][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 615.511719][ T10] elecom 0003:056E:00FC.0084: unknown global tag 0xc [ 615.522353][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.531276][ T10] elecom 0003:056E:00FC.0084: item 0 0 1 12 parsing failed [ 615.534932][ T31] usb 3-1: config 0 descriptor?? [ 615.540798][ T10] elecom 0003:056E:00FC.0084: probe with driver elecom failed with error -22 [ 615.709549][ T423] usb 5-1: USB disconnect, device number 37 [ 615.955068][T13904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.963983][T13904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.974395][ T31] wacom 0003:056A:032F.0085: unknown main item tag 0x0 [ 615.981482][ T31] wacom 0003:056A:032F.0085: unknown main item tag 0x0 [ 615.988775][ T31] wacom 0003:056A:032F.0085: unknown main item tag 0x0 [ 615.995767][ T31] wacom 0003:056A:032F.0085: unknown main item tag 0x0 [ 616.002847][ T31] wacom 0003:056A:032F.0085: unknown main item tag 0x0 [ 616.011239][ T31] wacom 0003:056A:032F.0085: hidraw0: USB HID v0.09 Device [HID 056a:032f] on usb-dummy_hcd.2-1/input0 [ 616.183148][ T413] usb 3-1: USB disconnect, device number 98 [ 616.248787][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 616.353833][T13918] can0: slcan on ttyS3. [ 616.400001][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.411085][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 616.424117][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.434132][ T10] usb 2-1: config 0 descriptor?? [ 616.703810][T13936] rust_binder: Error in use_page_slow: ESRCH [ 616.703837][T13936] rust_binder: use_range failure ESRCH [ 616.709979][T13936] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 616.715493][T13936] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 616.723477][T13936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:95 [ 616.748001][T13938] 9pnet_fd: Insufficient options for proto=fd [ 617.046544][ T10] keytouch 0003:0926:3333.0086: fixing up Keytouch IEC report descriptor [ 617.056474][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0086/input/input125 [ 617.122597][ T10] keytouch 0003:0926:3333.0086: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 617.210539][T13917] can0 (unregistered): slcan off ttyS3. [ 617.248530][ T423] usb 2-1: USB disconnect, device number 64 [ 617.815425][T13998] rust_binder: Error in use_page_slow: ESRCH [ 617.815458][T13998] rust_binder: use_range failure ESRCH [ 617.821680][T13998] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 617.827169][T13998] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 617.835067][T13998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:109 [ 617.998812][ T10] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 618.148853][ T423] usb 3-1: new low-speed USB device number 99 using dummy_hcd [ 618.160001][ T10] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 618.168185][ T10] usb 2-1: config 0 has no interface number 0 [ 618.174372][ T10] usb 2-1: config 0 interface 41 has no altsetting 0 [ 618.182605][ T10] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 618.191715][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.199776][ T10] usb 2-1: Product: syz [ 618.203932][ T10] usb 2-1: Manufacturer: syz [ 618.208540][ T10] usb 2-1: SerialNumber: syz [ 618.214187][ T10] usb 2-1: config 0 descriptor?? [ 618.279413][ T423] usb 3-1: device descriptor read/64, error -71 [ 618.518862][ T423] usb 3-1: device descriptor read/64, error -71 [ 618.640201][ T10] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 618.651402][ T10] usb 2-1: USB disconnect, device number 65 [ 618.690153][T14025] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4549'. [ 618.803585][ T423] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 618.938793][ T423] usb 3-1: device descriptor read/64, error -71 [ 619.164917][T14035] rust_binder: Error in use_page_slow: ESRCH [ 619.164947][T14035] rust_binder: use_range failure ESRCH [ 619.171100][T14035] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 619.176620][T14035] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 619.184431][T14035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:887 [ 619.188861][ T423] usb 3-1: device descriptor read/64, error -71 [ 619.318942][ T423] usb usb3-port1: attempt power cycle [ 619.658875][ T423] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 619.704602][ T423] usb 3-1: device descriptor read/8, error -71 [ 619.792727][T14047] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4558'. [ 619.802274][T14047] 0ªî{X¹¦: entered promiscuous mode [ 619.807582][T14047] 0ªî{X¹¦: left allmulticast mode [ 619.849819][ T423] usb 3-1: device descriptor read/8, error -71 [ 620.078831][ T31] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 620.088928][ T423] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 620.110040][ T423] usb 3-1: device descriptor read/8, error -71 [ 620.230420][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 620.241519][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.251399][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 620.260625][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.269194][ T423] usb 3-1: device descriptor read/8, error -71 [ 620.275888][ T31] usb 2-1: config 0 descriptor?? [ 620.352644][T14057] rust_binder: Error in use_page_slow: ESRCH [ 620.352675][T14057] rust_binder: use_range failure ESRCH [ 620.358774][T14057] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 620.364283][T14057] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 620.372085][T14057] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:480 [ 620.391571][ T423] usb usb3-port1: unable to enumerate USB device [ 620.683189][ T31] isku 0003:1E7D:319C.0087: item fetching failed at offset 5/7 [ 620.693002][ T31] isku 0003:1E7D:319C.0087: parse failed [ 620.698776][ T31] isku 0003:1E7D:319C.0087: probe with driver isku failed with error -22 [ 620.883468][T14053] tmpfs: Cannot retroactively limit inodes [ 620.889820][ T423] usb 2-1: USB disconnect, device number 66 [ 620.945636][ T36] audit: type=1400 audit(2000000309.874:2286): avc: denied { watch watch_reads } for pid=14068 comm="syz.2.4566" path=2F34352FE91F7189591E9233614B dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 621.445750][T14083] rust_binder: Error in use_page_slow: ESRCH [ 621.445785][T14083] rust_binder: use_range failure ESRCH [ 621.452720][T14083] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 621.458234][T14083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 621.466080][T14083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:906 [ 621.544146][T14089] SELinux: policydb table sizes (0,0) do not match mine (5,6) [ 621.561473][T14089] SELinux: failed to load policy [ 621.825620][T14110] netlink: 'syz.2.4581': attribute type 1 has an invalid length. [ 621.833575][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4581'. [ 621.842675][T14110] bridge0: port 1(bridge_slave_0) entered listening state [ 621.982365][T14112] rust_binder: Error in use_page_slow: ESRCH [ 621.982387][T14112] rust_binder: use_range failure ESRCH [ 621.988441][T14112] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 621.994071][T14112] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 622.001910][T14112] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:494 [ 622.958774][ T7979] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 623.119933][ T7979] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 623.128340][ T7979] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 623.138884][ T7979] usb 2-1: config 220 has no interface number 2 [ 623.145349][ T7979] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 623.158594][ T7979] usb 2-1: config 220 interface 0 has no altsetting 0 [ 623.165548][ T7979] usb 2-1: config 220 interface 76 has no altsetting 0 [ 623.172505][ T7979] usb 2-1: config 220 interface 1 has no altsetting 0 [ 623.180939][ T7979] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 623.190095][ T7979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.198146][ T7979] usb 2-1: Product: syz [ 623.202385][ T7979] usb 2-1: Manufacturer: syz [ 623.207036][ T7979] usb 2-1: SerialNumber: syz [ 623.361788][T14145] rust_binder: Error in use_page_slow: ESRCH [ 623.361824][T14145] rust_binder: use_range failure ESRCH [ 623.367961][T14145] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 623.373599][T14145] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 623.381445][T14145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:151 [ 623.425722][T14149] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4596'. [ 624.078761][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 624.228775][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 624.235132][ T10] usb 5-1: config 4 has an invalid interface number: 228 but max is 0 [ 624.243465][ T10] usb 5-1: config 4 has no interface number 0 [ 624.249657][ T10] usb 5-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30 [ 624.260780][ T10] usb 5-1: config 4 interface 228 altsetting 12 endpoint 0x7 has invalid wMaxPacketSize 0 [ 624.270838][ T10] usb 5-1: config 4 interface 228 altsetting 12 bulk endpoint 0x7 has invalid maxpacket 0 [ 624.280830][ T10] usb 5-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 624.294245][ T10] usb 5-1: config 4 interface 228 has no altsetting 0 [ 624.302579][ T10] usb 5-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 624.311739][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.319815][ T10] usb 5-1: Product: syz [ 624.324048][ T10] usb 5-1: Manufacturer: syz [ 624.328679][ T10] usb 5-1: SerialNumber: syz [ 624.542358][ T10] snd-usb-audio 5-1:4.228: probe with driver snd-usb-audio failed with error -12 [ 624.552757][ T10] usb 5-1: USB disconnect, device number 38 [ 624.562920][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.228/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 624.603310][T14171] rust_binder: Error in use_page_slow: ESRCH [ 624.603338][T14171] rust_binder: use_range failure ESRCH [ 624.609589][T14171] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 624.615088][T14171] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 624.623085][T14171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:165 [ 624.692510][T14173] SELinux: failed to load policy [ 624.781910][T14179] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.789126][T14179] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.796249][T14179] bridge_slave_0: entered allmulticast mode [ 624.802767][T14179] bridge_slave_0: entered promiscuous mode [ 624.819527][T14179] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.826660][T14179] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.834221][T14179] bridge_slave_1: entered allmulticast mode [ 624.840774][T14179] bridge_slave_1: entered promiscuous mode [ 624.914323][T14179] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.921465][T14179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.928813][T14179] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.935875][T14179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.974088][T12978] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.981857][T12978] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.993456][T12978] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.000566][T12978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.010999][T12978] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.018113][T12978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.061779][T14179] veth0_vlan: entered promiscuous mode [ 625.075661][T14179] veth1_macvtap: entered promiscuous mode [ 625.689868][ T7979] usb 2-1: selecting invalid altsetting 0 [ 625.695822][ T7979] usb 2-1: selecting invalid altsetting 0 [ 625.701956][ T7979] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 625.708499][ T7979] usb 2-1: No valid video chain found. [ 625.718669][ T7979] usb 2-1: USB disconnect, device number 67 [ 625.793335][T14219] rust_binder: Error in use_page_slow: ESRCH [ 625.793369][T14219] rust_binder: use_range failure ESRCH [ 625.799781][T14219] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 625.805717][T14219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 625.813533][T14219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:933 [ 625.909058][T14224] incfs: ino conflict with backing FS 1 [ 625.941544][T14226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4619'. [ 625.950782][T14226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4619'. [ 626.046821][T14233] fuse: Unknown parameter '¾Zÿ|ò4â‡{ fÅB6ª­‘ü}…g~' [ 626.078881][ T423] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 626.090915][T14237] x_tables: duplicate entry at hook 1 [ 626.208822][ T7979] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 626.229827][ T423] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 626.240192][ T423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.249437][ T423] usb 3-1: config 0 descriptor?? [ 626.368818][ T7979] usb 5-1: Using ep0 maxpacket: 8 [ 626.375182][ T7979] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 626.383718][ T7979] usb 5-1: config 179 has no interface number 0 [ 626.390171][ T7979] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 626.401275][ T7979] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 626.412598][ T7979] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 626.424286][ T7979] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 626.435865][ T7979] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 626.449191][ T7979] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 626.458257][ T7979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.467684][T14226] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 626.488811][ T31] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 626.638766][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 626.645402][ T31] usb 8-1: unable to get BOS descriptor or descriptor too short [ 626.654117][ T31] usb 8-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 108 [ 626.664449][ T31] usb 8-1: config 12 interface 0 has no altsetting 0 [ 626.672175][ T423] usb 3-1: Cannot set MAC address [ 626.677922][ T423] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 626.690477][ T423] usb 3-1: USB disconnect, device number 103 [ 626.697963][ T31] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 626.708008][ T7979] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input126 [ 626.726475][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.741122][ T31] usb 8-1: Product: syz [ 626.748752][ T31] usb 8-1: Manufacturer: syz [ 626.753587][ T31] usb 8-1: SerialNumber: syz [ 626.763157][T14244] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 626.880170][T14226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.888901][T14226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.972894][ T31] usb 8-1: selecting invalid altsetting 0 [ 626.982209][ T31] usb 8-1: USB disconnect, device number 2 [ 626.993995][ T348] udevd[348]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:12.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 627.067069][T14251] rust_binder: Error in use_page_slow: ESRCH [ 627.067091][T14251] rust_binder: use_range failure ESRCH [ 627.073691][T14251] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 627.080119][T14251] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 627.087832][T14251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:942 [ 627.101089][T14226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.119658][T14226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.130294][T14256] cgroup: Unknown subsys name 'rdma' [ 627.141102][ T7979] usb 5-1: USB disconnect, device number 39 [ 627.141159][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 627.141195][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 627.601696][ T31] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 627.752713][T14275] rust_binder: Error in use_page_slow: ESRCH [ 627.752742][T14275] rust_binder: use_range failure ESRCH [ 627.759017][ T31] usb 2-1: Invalid ep0 maxpacket: 64 [ 627.770106][T14275] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 627.770133][T14275] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 627.777902][T14275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:37 [ 627.787979][T14277] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4637'. [ 627.870281][T14281] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1949250678 (3898501356 ns) > initial count (3739541598 ns). Using initial count to start timer. [ 627.928790][ T31] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 628.118797][ T31] usb 2-1: Invalid ep0 maxpacket: 64 [ 628.124387][ T31] usb usb2-port1: attempt power cycle [ 628.238825][ T424] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 628.389913][ T424] usb 3-1: config 4 has an invalid interface number: 72 but max is 0 [ 628.398154][ T424] usb 3-1: config 4 has no interface number 0 [ 628.404550][ T424] usb 3-1: config 4 interface 72 has no altsetting 0 [ 628.412955][ T424] usb 3-1: New USB device found, idVendor=19d2, idProduct=9c8b, bcdDevice=30.ba [ 628.422099][ T424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.430156][ T424] usb 3-1: Product: syz [ 628.434353][ T424] usb 3-1: Manufacturer: syz [ 628.439015][ T424] usb 3-1: SerialNumber: syz [ 628.468790][ T31] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 628.489145][ T31] usb 2-1: Invalid ep0 maxpacket: 64 [ 628.618874][ T31] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 628.639264][ T31] usb 2-1: Invalid ep0 maxpacket: 64 [ 628.644709][ T31] usb usb2-port1: unable to enumerate USB device [ 628.653511][ T424] usb 3-1: bad CDC descriptors [ 628.663189][ T424] usb 3-1: USB disconnect, device number 104 [ 628.683891][T14304] rust_binder: Error in use_page_slow: ESRCH [ 628.683918][T14304] rust_binder: use_range failure ESRCH [ 628.690022][T14304] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 628.695547][T14304] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 628.703424][T14304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:543 [ 629.354892][T14327] rust_binder: Error in use_page_slow: ESRCH [ 629.364121][T14327] rust_binder: use_range failure ESRCH [ 629.370239][T14327] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 629.375767][T14327] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 629.383574][T14327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:549 [ 629.523885][T14339] can: request_module (can-proto-0) failed. [ 630.021601][T14354] rust_binder: Error in use_page_slow: ESRCH [ 630.021634][T14354] rust_binder: use_range failure ESRCH [ 630.027734][T14354] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 630.033390][T14354] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 630.041267][T14354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:558 [ 630.528763][ T424] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 630.709001][ T424] usb 3-1: Using ep0 maxpacket: 32 [ 630.719556][ T424] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.748813][ T424] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.759827][ T424] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 630.769003][ T424] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 630.777608][ T424] usb 3-1: Product: syz [ 630.782283][ T424] usb 3-1: Manufacturer: syz [ 630.790424][ T424] hub 3-1:4.0: USB hub found [ 630.838969][ T31] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 630.961551][T14377] FAULT_INJECTION: forcing a failure. [ 630.961551][T14377] name failslab, interval 1, probability 0, space 0, times 0 [ 630.974515][T14377] CPU: 0 UID: 0 PID: 14377 Comm: syz.4.4675 Not tainted syzkaller #0 73dd41fee924560e78783f72ff837ca22365b77d [ 630.974549][T14377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 630.974564][T14377] Call Trace: [ 630.974572][T14377] [ 630.974580][T14377] __dump_stack+0x21/0x30 [ 630.974613][T14377] dump_stack_lvl+0x140/0x1c0 [ 630.974638][T14377] ? __cfi_dump_stack_lvl+0x10/0x10 [ 630.974667][T14377] ? __cfi_avc_has_perm+0x10/0x10 [ 630.974694][T14377] ? kasan_save_alloc_info+0x40/0x50 [ 630.974716][T14377] dump_stack+0x19/0x20 [ 630.974741][T14377] should_fail_ex+0x3d7/0x530 [ 630.974764][T14377] should_failslab+0xac/0x100 [ 630.974796][T14377] __kmalloc_cache_noprof+0x41/0x470 [ 630.974824][T14377] ? vhost_task_create+0x12c/0x400 [ 630.974857][T14377] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 630.974900][T14377] vhost_task_create+0x12c/0x400 [ 630.974971][T14377] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 630.975008][T14377] ? __cfi_vhost_task_create+0x10/0x10 [ 630.975047][T14377] ? __cfi_vhost_task_fn+0x10/0x10 [ 630.975071][T14377] ? __kasan_check_write+0x18/0x20 [ 630.975089][T14377] ? mutex_lock+0x97/0x1d0 [ 630.975128][T14377] ? __cfi_mutex_lock+0x10/0x10 [ 630.975152][T14377] ? kernel_text_address+0xa9/0xe0 [ 630.975178][T14377] kvm_mmu_post_init_vm+0x161/0x300 [ 630.975208][T14377] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 630.975229][T14377] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 630.975248][T14377] ? kstrtoull+0x13b/0x1e0 [ 630.975284][T14377] ? kstrtouint+0x78/0xf0 [ 630.975304][T14377] ? ioctl_has_perm+0x1bc/0x500 [ 630.975326][T14377] ? __asan_memcpy+0x5a/0x80 [ 630.975354][T14377] ? ioctl_has_perm+0x408/0x500 [ 630.975370][T14377] ? has_cap_mac_admin+0xd0/0xd0 [ 630.975386][T14377] ? __kasan_check_write+0x18/0x20 [ 630.975422][T14377] ? mutex_lock_killable+0x97/0x1d0 [ 630.975448][T14377] ? __cfi_mutex_lock_killable+0x10/0x10 [ 630.975474][T14377] ? proc_fail_nth_write+0x184/0x220 [ 630.975501][T14377] kvm_vcpu_ioctl+0xa48/0x1000 [ 630.975525][T14377] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 630.975569][T14377] ? __cfi_vfs_write+0x10/0x10 [ 630.975595][T14377] ? __kasan_check_write+0x18/0x20 [ 630.975620][T14377] ? mutex_unlock+0x90/0x240 [ 630.975645][T14377] ? __cfi_mutex_unlock+0x10/0x10 [ 630.975675][T14377] ? __fget_files+0x2c5/0x340 [ 630.975717][T14377] ? __fget_files+0x2c5/0x340 [ 630.975748][T14377] ? bpf_lsm_file_ioctl+0xd/0x20 [ 630.975768][T14377] ? security_file_ioctl+0x3e/0x110 [ 630.975793][T14377] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 630.975816][T14377] __se_sys_ioctl+0x135/0x1b0 [ 630.975838][T14377] __x64_sys_ioctl+0x7f/0xa0 [ 630.975880][T14377] x64_sys_call+0x1878/0x2ee0 [ 630.975919][T14377] do_syscall_64+0x57/0xf0 [ 630.975943][T14377] ? clear_bhb_loop+0x50/0xa0 [ 630.975959][T14377] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 630.975983][T14377] RIP: 0033:0x7f4658d9c629 [ 630.976012][T14377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.976033][T14377] RSP: 002b:00007f4659b7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 630.976057][T14377] RAX: ffffffffffffffda RBX: 00007f4659015fa0 RCX: 00007f4658d9c629 [ 630.976073][T14377] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 630.976094][T14377] RBP: 00007f4659b7d090 R08: 0000000000000000 R09: 0000000000000000 [ 630.976104][T14377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.976114][T14377] R13: 00007f4659016038 R14: 00007f4659015fa0 R15: 00007ffd8552cec8 [ 630.976128][T14377] [ 630.992112][ T424] hub 3-1:4.0: 2 ports detected [ 631.334497][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.345493][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.356629][ T31] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 631.366466][ T31] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 631.374535][ T31] usb 8-1: Manufacturer: syz [ 631.385598][ T31] usb 8-1: config 0 descriptor?? [ 631.723101][T14396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=14396 comm=syz.1.4682 [ 631.968777][ T339] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 632.087654][T14398] rust_binder: Error in use_page_slow: ESRCH [ 632.087705][T14398] rust_binder: use_range failure ESRCH [ 632.093826][T14398] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 632.099407][T14398] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 632.107215][T14398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:576 [ 632.118765][ T339] usb 2-1: Using ep0 maxpacket: 16 [ 632.141053][ T339] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.151347][ T339] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 632.164069][ T339] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 632.176940][ T339] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 632.186107][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.194214][ T339] usb 2-1: Product: syz [ 632.198489][ T339] usb 2-1: Manufacturer: syz [ 632.203171][ T339] usb 2-1: SerialNumber: syz [ 632.376350][ T424] hub 3-1:4.0: activate --> -90 [ 632.399725][T14371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.408326][T14371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.418105][ T339] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 632.420026][ T31] uclogic 0003:256C:006D.0088: failed retrieving string descriptor #100: -71 [ 632.432847][ T339] usb 2-1: 2:1 : unsupported format bits 0x100 [ 632.437187][ T31] uclogic 0003:256C:006D.0088: failed retrieving pen parameters: -71 [ 632.449500][ T31] uclogic 0003:256C:006D.0088: failed probing pen v1 parameters: -71 [ 632.453320][ T339] usb 2-1: USB disconnect, device number 72 [ 632.458879][ T31] uclogic 0003:256C:006D.0088: failed probing parameters: -71 [ 632.473253][ T31] uclogic 0003:256C:006D.0088: probe with driver uclogic failed with error -71 [ 632.485482][ T733] udevd[733]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 632.486169][ T31] usb 8-1: USB disconnect, device number 3 [ 632.780799][T14360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4668'. [ 632.790917][ T46] usb 3-1: USB disconnect, device number 105 [ 632.969303][ T31] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 632.977749][T14409] FAULT_INJECTION: forcing a failure. [ 632.977749][T14409] name failslab, interval 1, probability 0, space 0, times 0 [ 632.990507][T14409] CPU: 0 UID: 0 PID: 14409 Comm: syz.7.4688 Not tainted syzkaller #0 73dd41fee924560e78783f72ff837ca22365b77d [ 632.990541][T14409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 632.990555][T14409] Call Trace: [ 632.990563][T14409] [ 632.990572][T14409] __dump_stack+0x21/0x30 [ 632.990605][T14409] dump_stack_lvl+0x140/0x1c0 [ 632.990632][T14409] ? __cfi_dump_stack_lvl+0x10/0x10 [ 632.990661][T14409] dump_stack+0x19/0x20 [ 632.990686][T14409] should_fail_ex+0x3d7/0x530 [ 632.990711][T14409] should_failslab+0xac/0x100 [ 632.990742][T14409] kmem_cache_alloc_node_noprof+0x45/0x420 [ 632.990783][T14409] ? dup_task_struct+0xc1/0xd50 [ 632.990806][T14409] ? kasan_save_alloc_info+0x40/0x50 [ 632.990829][T14409] ? __kasan_kmalloc+0x96/0xb0 [ 632.990864][T14409] ? __kmalloc_cache_noprof+0x23c/0x470 [ 632.990891][T14409] dup_task_struct+0xc1/0xd50 [ 632.990915][T14409] ? copy_process+0x3220/0x3220 [ 632.990938][T14409] ? __kasan_check_write+0x18/0x20 [ 632.990964][T14409] copy_process+0x55a/0x3220 [ 632.990990][T14409] ? __cfi_copy_process+0x10/0x10 [ 632.991013][T14409] ? __kmalloc_cache_noprof+0x23c/0x470 [ 632.991039][T14409] ? __kasan_check_write+0x18/0x20 [ 632.991065][T14409] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 632.991099][T14409] vhost_task_create+0x1f7/0x400 [ 632.991131][T14409] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 632.991166][T14409] ? __cfi_vhost_task_create+0x10/0x10 [ 632.991199][T14409] ? __cfi_vhost_task_fn+0x10/0x10 [ 632.991230][T14409] ? __kasan_check_write+0x18/0x20 [ 632.991256][T14409] ? mutex_lock+0x97/0x1d0 [ 632.991281][T14409] ? __cfi_mutex_lock+0x10/0x10 [ 632.991305][T14409] ? kernel_text_address+0xa9/0xe0 [ 632.991330][T14409] kvm_mmu_post_init_vm+0x161/0x300 [ 632.991357][T14409] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 632.991384][T14409] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 632.991410][T14409] ? kstrtoull+0x13b/0x1e0 [ 632.991431][T14409] ? kstrtouint+0x78/0xf0 [ 632.991450][T14409] ? ioctl_has_perm+0x1bc/0x500 [ 632.991472][T14409] ? __asan_memcpy+0x5a/0x80 [ 632.991497][T14409] ? ioctl_has_perm+0x408/0x500 [ 632.991520][T14409] ? has_cap_mac_admin+0xd0/0xd0 [ 632.991541][T14409] ? __kasan_check_write+0x18/0x20 [ 632.991565][T14409] ? mutex_lock_killable+0x97/0x1d0 [ 632.991591][T14409] ? __cfi_mutex_lock_killable+0x10/0x10 [ 632.991616][T14409] ? proc_fail_nth_write+0x184/0x220 [ 632.991640][T14409] kvm_vcpu_ioctl+0xa48/0x1000 [ 632.991671][T14409] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 632.991701][T14409] ? __cfi_vfs_write+0x10/0x10 [ 632.991726][T14409] ? __kasan_check_write+0x18/0x20 [ 632.991750][T14409] ? mutex_unlock+0x90/0x240 [ 632.991774][T14409] ? __cfi_mutex_unlock+0x10/0x10 [ 632.991798][T14409] ? __fget_files+0x2c5/0x340 [ 632.991830][T14409] ? __fget_files+0x2c5/0x340 [ 632.991866][T14409] ? bpf_lsm_file_ioctl+0xd/0x20 [ 632.991886][T14409] ? security_file_ioctl+0x3e/0x110 [ 632.991906][T14409] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 632.991936][T14409] __se_sys_ioctl+0x135/0x1b0 [ 632.991966][T14409] __x64_sys_ioctl+0x7f/0xa0 [ 632.991995][T14409] x64_sys_call+0x1878/0x2ee0 [ 632.992023][T14409] do_syscall_64+0x57/0xf0 [ 632.992043][T14409] ? clear_bhb_loop+0x50/0xa0 [ 632.992064][T14409] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 632.992096][T14409] RIP: 0033:0x7fb1c039c629 [ 632.992116][T14409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.992135][T14409] RSP: 002b:00007fb1c11f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.992157][T14409] RAX: ffffffffffffffda RBX: 00007fb1c0615fa0 RCX: 00007fb1c039c629 [ 632.992175][T14409] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 632.992189][T14409] RBP: 00007fb1c11f4090 R08: 0000000000000000 R09: 0000000000000000 [ 632.992203][T14409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.992218][T14409] R13: 00007fb1c0616038 R14: 00007fb1c0615fa0 R15: 00007fff692da568 [ 632.992237][T14409] [ 633.198909][ T31] usb 5-1: device descriptor read/64, error -71 [ 633.485415][T14424] rust_binder: Error in use_page_slow: ESRCH [ 633.485447][T14424] rust_binder: use_range failure ESRCH [ 633.491867][T14424] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 633.497571][T14424] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 633.505644][T14424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:66 [ 633.649210][ T31] usb 5-1: device descriptor read/64, error -71 [ 633.908813][ T31] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 634.038804][ T31] usb 5-1: device descriptor read/64, error -71 [ 634.279142][ T7979] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 634.280741][ T31] usb 5-1: device descriptor read/64, error -71 [ 634.398957][ T31] usb usb5-port1: attempt power cycle [ 634.428839][ T7979] usb 2-1: Using ep0 maxpacket: 32 [ 634.435143][ T7979] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 634.443459][ T7979] usb 2-1: config 0 has no interface number 0 [ 634.449995][ T7979] usb 2-1: config 0 interface 184 has no altsetting 0 [ 634.458193][ T7979] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 634.467286][ T7979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.475559][ T7979] usb 2-1: Product: syz [ 634.479809][ T339] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 634.487336][ T7979] usb 2-1: Manufacturer: syz [ 634.492020][ T7979] usb 2-1: SerialNumber: syz [ 634.497655][ T7979] usb 2-1: config 0 descriptor?? [ 634.503495][ T7979] smsc75xx v1.0.0 [ 634.618832][ T10] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 634.638750][ T339] usb 8-1: Using ep0 maxpacket: 32 [ 634.645102][ T339] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 634.653418][ T339] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.663570][ T339] usb 8-1: config 0 has no interface number 0 [ 634.669750][ T339] usb 8-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 634.682904][ T339] usb 8-1: config 0 interface 184 has no altsetting 0 [ 634.691384][ T339] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 634.700624][ T339] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.708986][ T339] usb 8-1: Product: syz [ 634.713668][ T339] usb 8-1: Manufacturer: syz [ 634.718306][ T339] usb 8-1: SerialNumber: syz [ 634.723788][ T339] usb 8-1: config 0 descriptor?? [ 634.738777][ T31] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 634.759938][ T31] usb 5-1: device descriptor read/8, error -71 [ 634.778867][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 634.785225][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 634.793677][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 634.802796][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.810828][ T10] usb 3-1: Product: syz [ 634.815013][ T10] usb 3-1: Manufacturer: syz [ 634.819674][ T10] usb 3-1: SerialNumber: syz [ 634.889961][ T31] usb 5-1: device descriptor read/8, error -71 [ 634.934295][ T339] smsc75xx v1.0.0 [ 634.938078][ T339] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 634.948421][ T339] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -22 [ 634.957971][ T339] usb 8-1: USB disconnect, device number 4 [ 635.027301][T14442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.036287][T14442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.045805][ T10] usblp0: Disabling reads from problematic bidirectional printer [ 635.054446][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 106 if 0 alt 242 proto 2 vid 0x03F0 pid 0x0004 [ 635.067186][ T10] usb 3-1: USB disconnect, device number 106 [ 635.075222][ T10] usblp0: removed [ 635.138827][ T31] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 635.159907][ T31] usb 5-1: device descriptor read/8, error -71 [ 635.290003][ T31] usb 5-1: device descriptor read/8, error -71 [ 635.398894][ T31] usb usb5-port1: unable to enumerate USB device [ 635.456017][T14444] FAULT_INJECTION: forcing a failure. [ 635.456017][T14444] name failslab, interval 1, probability 0, space 0, times 0 [ 635.468795][T14444] CPU: 1 UID: 0 PID: 14444 Comm: syz.7.4703 Not tainted syzkaller #0 73dd41fee924560e78783f72ff837ca22365b77d [ 635.468829][T14444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 635.468851][T14444] Call Trace: [ 635.468859][T14444] [ 635.468869][T14444] __dump_stack+0x21/0x30 [ 635.468905][T14444] dump_stack_lvl+0x140/0x1c0 [ 635.468932][T14444] ? __cfi_dump_stack_lvl+0x10/0x10 [ 635.468961][T14444] dump_stack+0x19/0x20 [ 635.468979][T14444] should_fail_ex+0x3d7/0x530 [ 635.468996][T14444] should_failslab+0xac/0x100 [ 635.469038][T14444] __kmalloc_cache_node_noprof+0x46/0x430 [ 635.469066][T14444] ? kasan_save_track+0x4f/0x80 [ 635.469097][T14444] ? __get_vm_area_node+0x14d/0x3d0 [ 635.469114][T14444] ? __kasan_slab_alloc+0x73/0x90 [ 635.469135][T14444] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 635.469154][T14444] ? dup_task_struct+0xc1/0xd50 [ 635.469190][T14444] __get_vm_area_node+0x14d/0x3d0 [ 635.469213][T14444] __vmalloc_node_range_noprof+0x30e/0x1480 [ 635.469238][T14444] ? copy_process+0x55a/0x3220 [ 635.469263][T14444] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 635.469281][T14444] ? kasan_save_alloc_info+0x40/0x50 [ 635.469299][T14444] ? __kasan_slab_alloc+0x73/0x90 [ 635.469338][T14444] ? arch_dup_task_struct+0x5b/0xe0 [ 635.469367][T14444] ? __asan_memcpy+0x5a/0x80 [ 635.469396][T14444] dup_task_struct+0x5d6/0xd50 [ 635.469413][T14444] ? copy_process+0x55a/0x3220 [ 635.469430][T14444] ? copy_process+0x3220/0x3220 [ 635.469447][T14444] ? __kasan_check_write+0x18/0x20 [ 635.469483][T14444] copy_process+0x55a/0x3220 [ 635.469510][T14444] ? __cfi_copy_process+0x10/0x10 [ 635.469533][T14444] ? __kmalloc_cache_noprof+0x23c/0x470 [ 635.469559][T14444] ? __kasan_check_write+0x18/0x20 [ 635.469578][T14444] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 635.469619][T14444] vhost_task_create+0x1f7/0x400 [ 635.469651][T14444] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 635.469690][T14444] ? __cfi_vhost_task_create+0x10/0x10 [ 635.469720][T14444] ? __cfi_vhost_task_fn+0x10/0x10 [ 635.469744][T14444] ? __kasan_check_write+0x18/0x20 [ 635.469781][T14444] ? mutex_lock+0x97/0x1d0 [ 635.469806][T14444] ? __cfi_mutex_lock+0x10/0x10 [ 635.469830][T14444] ? kernel_text_address+0xa9/0xe0 [ 635.469860][T14444] kvm_mmu_post_init_vm+0x161/0x300 [ 635.469880][T14444] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 635.469915][T14444] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 635.469942][T14444] ? kstrtoull+0x13b/0x1e0 [ 635.469963][T14444] ? kstrtouint+0x78/0xf0 [ 635.469985][T14444] ? ioctl_has_perm+0x1bc/0x500 [ 635.470002][T14444] ? __asan_memcpy+0x5a/0x80 [ 635.470021][T14444] ? ioctl_has_perm+0x408/0x500 [ 635.470037][T14444] ? has_cap_mac_admin+0xd0/0xd0 [ 635.470069][T14444] ? __kasan_check_write+0x18/0x20 [ 635.470095][T14444] ? mutex_lock_killable+0x97/0x1d0 [ 635.470121][T14444] ? __cfi_mutex_lock_killable+0x10/0x10 [ 635.470146][T14444] ? proc_fail_nth_write+0x184/0x220 [ 635.470163][T14444] kvm_vcpu_ioctl+0xa48/0x1000 [ 635.470187][T14444] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 635.470228][T14444] ? __cfi_vfs_write+0x10/0x10 [ 635.470254][T14444] ? __kasan_check_write+0x18/0x20 [ 635.470282][T14444] ? mutex_unlock+0x90/0x240 [ 635.470299][T14444] ? __cfi_mutex_unlock+0x10/0x10 [ 635.470317][T14444] ? __fget_files+0x2c5/0x340 [ 635.470352][T14444] ? __fget_files+0x2c5/0x340 [ 635.470382][T14444] ? bpf_lsm_file_ioctl+0xd/0x20 [ 635.470402][T14444] ? security_file_ioctl+0x3e/0x110 [ 635.470427][T14444] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 635.470448][T14444] __se_sys_ioctl+0x135/0x1b0 [ 635.470471][T14444] __x64_sys_ioctl+0x7f/0xa0 [ 635.470508][T14444] x64_sys_call+0x1878/0x2ee0 [ 635.470538][T14444] do_syscall_64+0x57/0xf0 [ 635.470558][T14444] ? clear_bhb_loop+0x50/0xa0 [ 635.470580][T14444] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 635.470606][T14444] RIP: 0033:0x7fb1c039c629 [ 635.470620][T14444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.470647][T14444] RSP: 002b:00007fb1c11f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 635.470672][T14444] RAX: ffffffffffffffda RBX: 00007fb1c0615fa0 RCX: 00007fb1c039c629 [ 635.470688][T14444] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 635.470702][T14444] RBP: 00007fb1c11f4090 R08: 0000000000000000 R09: 0000000000000000 [ 635.470720][T14444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.470730][T14444] R13: 00007fb1c0616038 R14: 00007fb1c0615fa0 R15: 00007fff692da568 [ 635.470744][T14444] [ 635.470753][T14444] syz.7.4703: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 635.616433][T14446] rust_binder: Error in use_page_slow: ESRCH [ 635.622087][T14444] ,cpuset= [ 635.626939][T14446] rust_binder: use_range failure ESRCH [ 635.631160][T14444] syz7 [ 635.637989][T14446] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 635.643875][T14444] ,mems_allowed=0 [ 635.649631][T14446] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 635.653690][T14444] [ 635.666985][T14446] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:235 [ 635.674433][T14444] CPU: 1 UID: 0 PID: 14444 Comm: syz.7.4703 Not tainted syzkaller #0 73dd41fee924560e78783f72ff837ca22365b77d [ 635.674520][T14444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 635.674562][T14444] Call Trace: [ 635.674584][T14444] [ 635.674613][T14444] __dump_stack+0x21/0x30 [ 635.674698][T14444] dump_stack_lvl+0x140/0x1c0 [ 635.674770][T14444] ? __cfi_dump_stack_lvl+0x10/0x10 [ 635.674847][T14444] dump_stack+0x19/0x20 [ 635.674918][T14444] warn_alloc+0x1e7/0x2c0 [ 635.674965][T14444] ? __kasan_kmalloc+0x28/0xb0 [ 635.675048][T14444] ? __cfi_warn_alloc+0x10/0x10 [ 635.675103][T14444] ? kasan_save_track+0x4f/0x80 [ 635.675170][T14444] ? dup_task_struct+0xc1/0xd50 [ 635.675234][T14444] ? __get_vm_area_node+0x3bd/0x3d0 [ 635.675296][T14444] __vmalloc_node_range_noprof+0x333/0x1480 [ 635.675376][T14444] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 635.675440][T14444] ? kasan_save_alloc_info+0x40/0x50 [ 635.675501][T14444] ? __kasan_slab_alloc+0x73/0x90 [ 635.675605][T14444] ? arch_dup_task_struct+0x5b/0xe0 [ 635.675680][T14444] ? __asan_memcpy+0x5a/0x80 [ 635.675751][T14444] dup_task_struct+0x5d6/0xd50 [ 635.675813][T14444] ? copy_process+0x55a/0x3220 [ 635.675879][T14444] ? copy_process+0x3220/0x3220 [ 635.675943][T14444] ? __kasan_check_write+0x18/0x20 [ 635.676015][T14444] copy_process+0x55a/0x3220 [ 635.676087][T14444] ? __cfi_copy_process+0x10/0x10 [ 635.676151][T14444] ? __kmalloc_cache_noprof+0x23c/0x470 [ 635.676224][T14444] ? __kasan_check_write+0x18/0x20 [ 635.676289][T14444] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 635.676376][T14444] vhost_task_create+0x1f7/0x400 [ 635.676437][T14444] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 635.676543][T14444] ? __cfi_vhost_task_create+0x10/0x10 [ 635.676665][T14444] ? __cfi_vhost_task_fn+0x10/0x10 [ 635.676748][T14444] ? __kasan_check_write+0x18/0x20 [ 635.676806][T14444] ? mutex_lock+0x97/0x1d0 [ 635.676869][T14444] ? __cfi_mutex_lock+0x10/0x10 [ 635.676932][T14444] ? kernel_text_address+0xa9/0xe0 [ 635.677004][T14444] kvm_mmu_post_init_vm+0x161/0x300 [ 635.677079][T14444] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 635.677152][T14444] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 635.677223][T14444] ? kstrtoull+0x13b/0x1e0 [ 635.677277][T14444] ? kstrtouint+0x78/0xf0 [ 635.677329][T14444] ? ioctl_has_perm+0x1bc/0x500 [ 635.677391][T14444] ? __asan_memcpy+0x5a/0x80 [ 635.677461][T14444] ? ioctl_has_perm+0x408/0x500 [ 635.677523][T14444] ? has_cap_mac_admin+0xd0/0xd0 [ 635.677586][T14444] ? __kasan_check_write+0x18/0x20 [ 635.677658][T14444] ? mutex_lock_killable+0x97/0x1d0 [ 635.677724][T14444] ? __cfi_mutex_lock_killable+0x10/0x10 [ 635.677796][T14444] ? proc_fail_nth_write+0x184/0x220 [ 635.677857][T14444] kvm_vcpu_ioctl+0xa48/0x1000 [ 635.677951][T14444] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 635.678051][T14444] ? __cfi_vfs_write+0x10/0x10 [ 635.678133][T14444] ? __kasan_check_write+0x18/0x20 [ 635.678190][T14444] ? mutex_unlock+0x90/0x240 [ 635.678254][T14444] ? __cfi_mutex_unlock+0x10/0x10 [ 635.678318][T14444] ? __fget_files+0x2c5/0x340 [ 635.678402][T14444] ? __fget_files+0x2c5/0x340 [ 635.678477][T14444] ? bpf_lsm_file_ioctl+0xd/0x20 [ 635.678537][T14444] ? security_file_ioctl+0x3e/0x110 [ 635.678601][T14444] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 635.678686][T14444] __se_sys_ioctl+0x135/0x1b0 [ 635.678774][T14444] __x64_sys_ioctl+0x7f/0xa0 [ 635.678840][T14444] x64_sys_call+0x1878/0x2ee0 [ 635.678918][T14444] do_syscall_64+0x57/0xf0 [ 635.678971][T14444] ? clear_bhb_loop+0x50/0xa0 [ 635.679012][T14444] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 635.679096][T14444] RIP: 0033:0x7fb1c039c629 [ 635.679148][T14444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.679200][T14444] RSP: 002b:00007fb1c11f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 635.679263][T14444] RAX: ffffffffffffffda RBX: 00007fb1c0615fa0 RCX: 00007fb1c039c629 [ 635.679321][T14444] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 635.679368][T14444] RBP: 00007fb1c11f4090 R08: 0000000000000000 R09: 0000000000000000 [ 635.679424][T14444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.679464][T14444] R13: 00007fb1c0616038 R14: 00007fb1c0615fa0 R15: 00007fff692da568 [ 635.679515][T14444] [ 635.679920][T14444] Mem-Info: [ 636.404638][T14444] active_anon:53392 inactive_anon:648 isolated_anon:0 [ 636.404638][T14444] active_file:13098 inactive_file:11860 isolated_file:0 [ 636.404638][T14444] unevictable:0 dirty:221 writeback:0 [ 636.404638][T14444] slab_reclaimable:6036 slab_unreclaimable:83857 [ 636.404638][T14444] mapped:40632 shmem:32082 pagetables:1067 [ 636.404638][T14444] sec_pagetables:0 bounce:0 [ 636.404638][T14444] kernel_misc_reclaimable:0 [ 636.404638][T14444] free:1421980 free_pcp:1989 free_cma:0 [ 636.450645][T14444] Node 0 active_anon:213568kB inactive_anon:2592kB active_file:52392kB inactive_file:47440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162528kB dirty:884kB writeback:0kB shmem:128328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6496kB pagetables:4268kB sec_pagetables:0kB all_unreclaimable? no [ 636.483197][T14444] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963368kB mlocked:0kB bounce:0kB free_pcp:5204kB local_pcp:68kB free_cma:0kB [ 636.513161][T14444] lowmem_reserve[]: [ 636.514599][ T7979] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 636.529552][T14444] 0 3921 3921 [ 636.532828][ T7979] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 636.533714][T14444] Normal free:2729628kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:213568kB inactive_anon:2592kB active_file:52392kB inactive_file:47440kB unevictable:0kB writepending:884kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:2928kB local_pcp:1660kB free_cma:0kB [ 636.543234][ T7979] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 636.574844][T14444] lowmem_reserve[]: [ 636.584770][ T7979] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 636.585379][T14444] 0 [ 636.588658][ T7979] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 636.599410][T14444] 0 [ 636.601553][ T7979] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 636.612243][T14444] 0 [ 636.615101][ T7979] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 636.624852][T14444] [ 636.630543][ T7979] usb 2-1: USB disconnect, device number 73 [ 636.642453][T14444] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 636.658174][T14444] Normal: 431*4kB (UME) 229*8kB (UME) 357*16kB (UME) 224*32kB (UME) 82*64kB (ME) 32*128kB (ME) 101*256kB (UME) 75*512kB (UME) 39*1024kB (UM) 9*2048kB (UM) 631*4096kB (UME) = 2732980kB [ 636.676723][T14444] 57739 total pagecache pages [ 636.681510][T14444] 704 pages in swap cache [ 636.685914][T14444] Free swap = 121728kB [ 636.690382][T14444] Total swap = 124996kB [ 636.694570][T14444] 2097051 pages RAM [ 636.698373][T14444] 0 pages HighMem/MovableOnly [ 636.703102][T14444] 352243 pages reserved [ 636.707284][T14444] 0 pages cma reserved [ 636.713753][T14444] Memory allocations: [ 636.723242][T14444] 0 B 0 init/main.c:1477 func:do_initcalls [ 636.730684][T14444] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 636.738832][T14444] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 636.746506][T14444] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 636.754483][T14444] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 636.762713][T14444] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 636.771670][T14444] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 636.779973][T14444] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 636.787912][T14444] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 636.797152][T14444] 0 B 0 init/initramfs.c:101 func:find_link [ 637.187203][T14474] rust_binder: Error in use_page_slow: ESRCH [ 637.187230][T14474] rust_binder: use_range failure ESRCH [ 637.193537][T14474] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 637.200242][T14474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 637.263259][T14474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:989 [ 637.648805][ T7979] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 637.849800][ T7979] usb 2-1: config 1 has an invalid interface number: 64 but max is 0 [ 637.857942][ T7979] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.888779][ T7979] usb 2-1: config 1 has no interface number 0 [ 637.899373][ T7979] usb 2-1: too many endpoints for config 1 interface 64 altsetting 0: 255, using maximum allowed: 30 [ 637.918786][ T7979] usb 2-1: config 1 interface 64 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 637.949503][ T7979] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 637.958918][ T424] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 637.964134][ T7979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 637.989560][ T7979] usb 2-1: SerialNumber: syz [ 638.003858][T14505] rust_binder: Error in use_page_slow: ESRCH [ 638.003887][T14505] rust_binder: use_range failure ESRCH [ 638.011255][T14505] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 638.016766][T14505] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 638.024586][T14505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:84 [ 638.130544][ T424] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 638.149989][ T424] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 638.159930][ T424] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 638.176754][ T424] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 638.206212][ T424] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 638.216724][ T36] audit: type=1400 audit(2000000327.144:2287): avc: denied { setattr } for pid=14489 comm="syz.1.4721" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 638.238936][ T424] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 638.250022][ T424] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 638.268160][ T424] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 638.269182][ T339] usb 2-1: USB disconnect, device number 74 [ 638.279560][ T424] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 638.297839][ T424] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 638.307065][ T424] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0000, bcdDevice= 0.00 [ 638.317974][ T424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.418787][ T7979] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 638.531555][T14503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.540184][T14503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.548439][T14503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.557495][T14503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.558812][T14523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.574560][T14523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.582830][ T424] usb 5-1: string descriptor 0 read error: -71 [ 638.589986][ T7979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.601877][ T424] usb 5-1: USB disconnect, device number 44 [ 638.608110][ T7979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.618426][ T7979] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 638.632605][ T7979] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 638.641734][ T7979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.650436][ T7979] usb 3-1: config 0 descriptor?? [ 638.656919][ T7979] hub 3-1:0.0: USB hub found [ 638.863771][ T7979] hub 3-1:0.0: 12 ports detected [ 638.869062][ T7979] hub 3-1:0.0: insufficient power available to use all downstream ports [ 638.933950][T14531] rust_binder: Error in use_page_slow: ESRCH [ 638.934002][T14531] rust_binder: use_range failure ESRCH [ 638.940251][T14531] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 638.945763][T14531] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 638.953678][T14531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:996 [ 639.066547][T14519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.085361][T14519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.102672][ T7979] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 639.128970][ T7979] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 639.159278][ T7979] usb 3-1: USB disconnect, device number 107 [ 639.630648][T14570] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 639.630798][T14570] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:278 [ 639.891324][ T36] audit: type=1326 audit(2000000328.824:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14578 comm="syz.1.4751" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67d439c629 code=0x0 [ 639.908893][ T7979] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 640.018773][ T340] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 640.079978][ T7979] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.089995][ T7979] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 640.103116][ T7979] usb 8-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 640.112208][ T7979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.120898][ T7979] usb 8-1: config 0 descriptor?? [ 640.138992][ T7979] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 640.179922][ T340] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 640.190957][ T340] usb 3-1: config 0 interface 0 has no altsetting 0 [ 640.197671][ T340] usb 3-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 640.206932][ T340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.216082][ T340] usb 3-1: config 0 descriptor?? [ 640.221711][T14577] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 640.327451][T14573] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4748'. [ 640.399015][T14573] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=34144512 (68289024 ns) > initial count (200000 ns). Using initial count to start timer. [ 640.421214][T14573] kvm: pic: non byte write [ 640.470861][ T31] usb 8-1: USB disconnect, device number 5 [ 640.634446][ T340] input: HID 28bd:0934 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0934.0089/input/input127 [ 640.652708][ T340] uclogic 0003:28BD:0934.0089: input,hidraw0: USB HID v0.02 Mouse [HID 28bd:0934] on usb-dummy_hcd.2-1/input0 [ 640.704836][ T36] audit: type=1326 audit(2000000329.634:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14589 comm="syz.1.4754" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67d439c629 code=0x0 [ 640.835233][T14577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.844458][T14577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.853104][ T7979] usb 3-1: USB disconnect, device number 108 [ 641.102621][T14604] syzkaller1: entered promiscuous mode [ 641.108440][T14604] syzkaller1: entered allmulticast mode [ 641.566106][T14612] rust_binder: Error in use_page_slow: ESRCH [ 641.566143][T14612] rust_binder: use_range failure ESRCH [ 641.618848][T14612] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 641.629558][T14612] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 641.654084][T14612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1014 [ 642.660725][ T36] audit: type=1400 audit(2000000331.574:2290): avc: denied { create } for pid=14627 comm="syz.4.4766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 642.762620][T14638] devpts: called with bogus options [ 642.790623][T14642] rust_binder: Error in use_page_slow: ESRCH [ 642.790650][T14642] rust_binder: use_range failure ESRCH [ 642.796723][T14642] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 642.802339][T14642] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 642.810140][T14642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:634 [ 643.118764][ T424] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 643.278769][ T424] usb 5-1: Using ep0 maxpacket: 32 [ 643.285305][ T424] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 643.293828][ T424] usb 5-1: config 0 has no interface number 0 [ 643.300191][ T424] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 643.312191][ T424] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 643.321610][ T424] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.329909][ T424] usb 5-1: Product: syz [ 643.334234][ T424] usb 5-1: Manufacturer: syz [ 643.339165][ T424] usb 5-1: SerialNumber: syz [ 643.347132][ T424] usb 5-1: config 0 descriptor?? [ 643.353066][T14649] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 643.561163][T14649] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 643.777081][ T424] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 643.787484][ T424] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 643.798147][ T424] asix 5-1:0.188: probe with driver asix failed with error -71 [ 643.809028][ T424] usb 5-1: USB disconnect, device number 45 [ 646.821108][ T110] udevd[110]: worker [349] /devices/virtual/block/loop6 is taking a long time [ 652.148843][ T7979] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 652.158816][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 652.288788][ T10] usb 8-1: device descriptor read/64, error -71 [ 652.298803][ T7979] usb 5-1: Using ep0 maxpacket: 32 [ 652.306728][ T7979] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 652.315302][ T7979] usb 5-1: config 0 has no interface number 0 [ 652.321698][ T7979] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 652.333803][ T7979] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 652.343153][ T7979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.351499][ T7979] usb 5-1: Product: syz [ 652.355758][ T7979] usb 5-1: Manufacturer: syz [ 652.360613][ T7979] usb 5-1: SerialNumber: syz [ 652.369429][ T7979] usb 5-1: config 0 descriptor?? [ 652.375695][T14666] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 652.528894][ T10] usb 8-1: device descriptor read/64, error -71 [ 652.590629][T14666] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 652.650625][T14678] rust_binder: Error in use_page_slow: ESRCH [ 652.650706][T14678] rust_binder: use_range failure ESRCH [ 652.656894][T14678] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 652.662641][T14678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 652.670642][T14678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:300 [ 652.768957][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 652.908830][ T10] usb 8-1: device descriptor read/64, error -71 [ 653.148816][ T10] usb 8-1: device descriptor read/64, error -71 [ 653.268800][ T10] usb usb8-port1: attempt power cycle [ 653.608804][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 653.629899][ T10] usb 8-1: device descriptor read/8, error -71 [ 653.704297][ T36] audit: type=1400 audit(2000000342.634:2291): avc: denied { accept } for pid=14690 comm="syz.2.4790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 653.769695][ T10] usb 8-1: device descriptor read/8, error -71 [ 653.808790][ T66] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 653.959993][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 653.972961][ T66] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 653.982061][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.991018][ T66] usb 2-1: config 0 descriptor?? [ 654.008794][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 654.029840][ T10] usb 8-1: device descriptor read/8, error -71 [ 654.159997][ T10] usb 8-1: device descriptor read/8, error -71 [ 654.268957][ T10] usb usb8-port1: unable to enumerate USB device [ 654.399692][ T66] waltop 0003:172F:0034.008A: unknown main item tag 0xe [ 654.407717][ T66] waltop 0003:172F:0034.008A: hidraw0: USB HID vff.fc Device [HID 172f:0034] on usb-dummy_hcd.1-1/input0 [ 654.598880][ T413] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 654.728777][ T413] usb 3-1: device descriptor read/64, error -71 [ 654.825209][ T7979] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 654.835961][ T7979] asix 5-1:0.188: probe with driver asix failed with error -71 [ 654.845220][ T7979] usb 5-1: USB disconnect, device number 46 [ 654.946483][T14702] rust_binder: Error in use_page_slow: ESRCH [ 654.946506][T14702] rust_binder: use_range failure ESRCH [ 654.952681][T14702] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 654.958189][T14702] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 654.966117][T14702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:135 [ 654.978838][ T413] usb 3-1: device descriptor read/64, error -71 [ 655.228986][ T413] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 655.368811][ T413] usb 3-1: device descriptor read/64, error -71 [ 655.609028][ T413] usb 3-1: device descriptor read/64, error -71 [ 655.719285][ T413] usb usb3-port1: attempt power cycle [ 655.940239][T14711] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4797'. [ 656.058815][ T413] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 656.099858][ T413] usb 3-1: device descriptor read/8, error -71 [ 656.229861][ T413] usb 3-1: device descriptor read/8, error -71 [ 656.238975][ T424] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 656.390116][ T424] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.400550][ T424] usb 8-1: config 1 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 656.413892][ T424] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 656.427317][ T424] usb 8-1: config 1 interface 1 has no altsetting 0 [ 656.435913][ T424] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 656.445583][ T424] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.453903][ T424] usb 8-1: Product: syz [ 656.458310][ T424] usb 8-1: Manufacturer: syz [ 656.463323][ T424] usb 8-1: SerialNumber: syz [ 656.478778][ T413] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 656.499834][ T413] usb 3-1: device descriptor read/8, error -71 [ 656.570743][ T31] usb 2-1: USB disconnect, device number 75 [ 656.636248][ T413] usb 3-1: device descriptor read/8, error -71 [ 656.690040][T14711] netlink: 'syz.7.4797': attribute type 33 has an invalid length. [ 656.719343][ T424] usb 8-1: USB disconnect, device number 10 [ 656.748876][ T413] usb usb3-port1: unable to enumerate USB device [ 656.916150][T14726] FAULT_INJECTION: forcing a failure. [ 656.916150][T14726] name failslab, interval 1, probability 0, space 0, times 0 [ 656.929112][T14726] CPU: 0 UID: 0 PID: 14726 Comm: syz.4.4803 Not tainted syzkaller #0 73dd41fee924560e78783f72ff837ca22365b77d [ 656.929148][T14726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 656.929166][T14726] Call Trace: [ 656.929172][T14726] [ 656.929179][T14726] __dump_stack+0x21/0x30 [ 656.929204][T14726] dump_stack_lvl+0x140/0x1c0 [ 656.929225][T14726] ? __cfi_dump_stack_lvl+0x10/0x10 [ 656.929246][T14726] ? release_sock+0x171/0x1f0 [ 656.929266][T14726] dump_stack+0x19/0x20 [ 656.929285][T14726] should_fail_ex+0x3d7/0x530 [ 656.929302][T14726] should_failslab+0xac/0x100 [ 656.929325][T14726] kmem_cache_alloc_node_noprof+0x45/0x420 [ 656.929346][T14726] ? netlink_data_ready+0x20/0x20 [ 656.929368][T14726] ? __alloc_skb+0x108/0x370 [ 656.929388][T14726] __alloc_skb+0x108/0x370 [ 656.929423][T14726] netlink_alloc_large_skb+0xf7/0x1b0 [ 656.929453][T14726] netlink_sendmsg+0x594/0xb10 [ 656.929487][T14726] ? __cfi_netlink_sendmsg+0x10/0x10 [ 656.929520][T14726] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 656.929543][T14726] ? security_socket_sendmsg+0x3d/0x100 [ 656.929566][T14726] sock_write_iter+0x4d9/0x530 [ 656.929583][T14726] ? __cfi_sock_write_iter+0x10/0x10 [ 656.929601][T14726] ? selinux_file_permission+0x8a4/0xb60 [ 656.929618][T14726] do_iter_readv_writev+0x62f/0x820 [ 656.929640][T14726] ? vfs_iter_read+0x5f0/0x5f0 [ 656.929661][T14726] ? bpf_lsm_file_permission+0xd/0x20 [ 656.929676][T14726] vfs_writev+0x4a8/0xe50 [ 656.929700][T14726] ? do_writev+0x2e0/0x2e0 [ 656.929721][T14726] ? vfs_write+0x9a4/0xf90 [ 656.929744][T14726] do_writev+0x151/0x2e0 [ 656.929766][T14726] ? vfs_readv+0xa10/0xa10 [ 656.929787][T14726] ? fd_install+0x174/0x2e0 [ 656.929809][T14726] ? __kasan_check_read+0x15/0x20 [ 656.929827][T14726] __x64_sys_writev+0x81/0x90 [ 656.929847][T14726] x64_sys_call+0x1fbb/0x2ee0 [ 656.929870][T14726] do_syscall_64+0x57/0xf0 [ 656.929884][T14726] ? clear_bhb_loop+0x50/0xa0 [ 656.929900][T14726] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 656.929923][T14726] RIP: 0033:0x7f4658d9c629 [ 656.929938][T14726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.929952][T14726] RSP: 002b:00007f4659b7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 656.929975][T14726] RAX: ffffffffffffffda RBX: 00007f4659015fa0 RCX: 00007f4658d9c629 [ 656.929988][T14726] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000004 [ 656.929999][T14726] RBP: 00007f4659b7d090 R08: 0000000000000000 R09: 0000000000000000 [ 656.930010][T14726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.930020][T14726] R13: 00007f4659016038 R14: 00007f4659015fa0 R15: 00007ffd8552cec8 [ 656.930034][T14726] [ 657.088935][ T31] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 657.368864][ T413] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 657.410343][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.421355][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.431184][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 657.440412][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.449910][ T31] usb 2-1: config 0 descriptor?? [ 657.529796][ T413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.543643][ T413] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 657.556637][ T413] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 657.565917][ T413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.574906][ T413] usb 5-1: config 0 descriptor?? [ 657.860701][T14720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.869347][T14720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.043882][ T413] belkin 0003:050D:3201.008B: hiddev96,hidraw0: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.4-1/input0 [ 658.048031][T14747] rust_binder: Error in use_page_slow: ESRCH [ 658.056077][T14747] rust_binder: use_range failure ESRCH [ 658.062336][T14747] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 658.067988][T14747] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 658.076724][T14747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:324 [ 658.242180][T14730] input: syz1 as /devices/virtual/input/input128 [ 658.267145][ T66] usb 5-1: USB disconnect, device number 47 [ 658.386953][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 658.393126][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 658.402456][ T31] usb 2-1: USB disconnect, device number 76 [ 658.538867][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 658.688744][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 658.695099][ T10] usb 8-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 658.706011][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.716939][ T10] usb 8-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 658.735069][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 658.742018][ T10] usb 8-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 658.751294][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.761458][ T10] usb 8-1: config 0 descriptor?? [ 658.810442][T14772] rust_binder: Error in use_page_slow: ESRCH [ 658.810486][T14772] rust_binder: use_range failure ESRCH [ 658.816603][T14772] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 658.822319][T14772] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 658.830137][T14772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:658 [ 659.008789][ T31] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 659.149048][ T31] usb 3-1: device descriptor read/64, error -71 [ 659.173710][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 659.189465][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 659.198784][ T10] usb 8-1: USB disconnect, device number 11 [ 659.418806][ T31] usb 3-1: device descriptor read/64, error -71 [ 659.432893][T14786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4825'. [ 659.571228][T14793] FAULT_INJECTION: forcing a failure. [ 659.571228][T14793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.584411][T14793] CPU: 1 UID: 0 PID: 14793 Comm: syz.1.4828 Not tainted syzkaller #0 73dd41fee924560e78783f72ff837ca22365b77d [ 659.584456][T14793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 659.584467][T14793] Call Trace: [ 659.584474][T14793] [ 659.584481][T14793] __dump_stack+0x21/0x30 [ 659.584506][T14793] dump_stack_lvl+0x140/0x1c0 [ 659.584526][T14793] ? __cfi_dump_stack_lvl+0x10/0x10 [ 659.584547][T14793] dump_stack+0x19/0x20 [ 659.584566][T14793] should_fail_ex+0x3d7/0x530 [ 659.584583][T14793] should_fail+0xf/0x20 [ 659.584598][T14793] should_fail_usercopy+0x1e/0x30 [ 659.584616][T14793] _copy_from_iter+0x1a9/0x1510 [ 659.584636][T14793] ? kmalloc_reserve+0xcf/0x4f0 [ 659.584658][T14793] ? __virt_addr_valid+0x2a6/0x380 [ 659.584674][T14793] ? __cfi__copy_from_iter+0x10/0x10 [ 659.584694][T14793] ? __check_object_size+0x527/0x830 [ 659.584714][T14793] ? __cfi___check_object_size+0x10/0x10 [ 659.584734][T14793] ? skb_put+0x112/0x1f0 [ 659.584754][T14793] netlink_sendmsg+0x68e/0xb10 [ 659.584780][T14793] ? __cfi_netlink_sendmsg+0x10/0x10 [ 659.584805][T14793] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 659.584827][T14793] ? security_socket_sendmsg+0x3d/0x100 [ 659.584851][T14793] sock_write_iter+0x4d9/0x530 [ 659.584868][T14793] ? __cfi_sock_write_iter+0x10/0x10 [ 659.584888][T14793] ? selinux_file_permission+0x8a4/0xb60 [ 659.584906][T14793] do_iter_readv_writev+0x62f/0x820 [ 659.584927][T14793] ? vfs_iter_read+0x5f0/0x5f0 [ 659.584948][T14793] ? bpf_lsm_file_permission+0xd/0x20 [ 659.584963][T14793] vfs_writev+0x4a8/0xe50 [ 659.584987][T14793] ? do_writev+0x2e0/0x2e0 [ 659.585009][T14793] ? vfs_write+0x9a4/0xf90 [ 659.585037][T14793] do_writev+0x151/0x2e0 [ 659.585060][T14793] ? vfs_readv+0xa10/0xa10 [ 659.585082][T14793] ? fd_install+0x174/0x2e0 [ 659.585103][T14793] ? __kasan_check_read+0x15/0x20 [ 659.585122][T14793] __x64_sys_writev+0x81/0x90 [ 659.585143][T14793] x64_sys_call+0x1fbb/0x2ee0 [ 659.585165][T14793] do_syscall_64+0x57/0xf0 [ 659.585179][T14793] ? clear_bhb_loop+0x50/0xa0 [ 659.585195][T14793] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 659.585219][T14793] RIP: 0033:0x7f67d439c629 [ 659.585233][T14793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.585246][T14793] RSP: 002b:00007f67d51e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 659.585264][T14793] RAX: ffffffffffffffda RBX: 00007f67d4615fa0 RCX: 00007f67d439c629 [ 659.585276][T14793] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000004 [ 659.585287][T14793] RBP: 00007f67d51e7090 R08: 0000000000000000 R09: 0000000000000000 [ 659.585298][T14793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.585308][T14793] R13: 00007f67d4616038 R14: 00007f67d4615fa0 R15: 00007ffdcdaa26d8 [ 659.585323][T14793] [ 659.884754][T14797] syzkaller0: entered promiscuous mode [ 659.890317][T14797] syzkaller0: entered allmulticast mode [ 659.918931][ T31] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 659.992472][T14799] rust_binder: Error in use_page_slow: ESRCH [ 659.992503][T14799] rust_binder: use_range failure ESRCH [ 659.998561][T14799] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 660.004111][T14799] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 660.012028][T14799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1079 [ 660.060238][ T31] usb 3-1: device descriptor read/64, error -71 [ 660.261889][T14807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=14807 comm=syz.1.4834 [ 660.275893][ T36] audit: type=1400 audit(2000000349.204:2292): avc: denied { setopt } for pid=14806 comm="syz.1.4834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 660.308855][ T31] usb 3-1: device descriptor read/64, error -71 [ 660.418913][ T31] usb usb3-port1: attempt power cycle [ 660.657963][ T36] audit: type=1400 audit(2000000349.584:2293): avc: denied { watch } for pid=14820 comm="syz.4.4839" path="/232/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 660.768777][ T31] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 660.789961][ T31] usb 3-1: device descriptor read/8, error -71 [ 660.921026][ T31] usb 3-1: device descriptor read/8, error -71 [ 660.928913][ T46] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 661.080047][ T46] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 661.096389][ T46] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 661.107656][ T46] usb 5-1: config 220 has no interface number 2 [ 661.114292][ T46] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 661.129845][ T46] usb 5-1: config 220 interface 0 has no altsetting 0 [ 661.136884][ T46] usb 5-1: config 220 interface 76 has no altsetting 0 [ 661.144292][ T46] usb 5-1: config 220 interface 1 has no altsetting 0 [ 661.144684][T14823] FAULT_INJECTION: forcing a failure. [ 661.144684][T14823] name failslab, interval 1, probability 0, space 0, times 0 [ 661.154525][ T46] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 661.173200][ T31] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 661.181218][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.189631][ T46] usb 5-1: Product: syz [ 661.193841][ T46] usb 5-1: Manufacturer: syz [ 661.198561][ T46] usb 5-1: SerialNumber: syz [ 661.218808][T14823] CPU: 1 UID: 0 PID: 14823 Comm: syz.1.4840 Not tainted syzkaller #0 73dd41fee924560e78783f72ff837ca22365b77d [ 661.218843][T14823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 661.218856][T14823] Call Trace: [ 661.218864][T14823] [ 661.218873][T14823] __dump_stack+0x21/0x30 [ 661.218907][T14823] dump_stack_lvl+0x140/0x1c0 [ 661.218948][T14823] ? __cfi_dump_stack_lvl+0x10/0x10 [ 661.218995][T14823] dump_stack+0x19/0x20 [ 661.219029][T14823] should_fail_ex+0x3d7/0x530 [ 661.219064][T14823] should_failslab+0xac/0x100 [ 661.219107][T14823] kmem_cache_alloc_node_noprof+0x45/0x420 [ 661.219142][T14823] ? __alloc_skb+0x108/0x370 [ 661.219181][T14823] __alloc_skb+0x108/0x370 [ 661.219218][T14823] ? __kasan_check_read+0x15/0x20 [ 661.219254][T14823] netlink_ack+0x155/0xa50 [ 661.219293][T14823] ? avc_has_perm_noaudit+0x28a/0x360 [ 661.219332][T14823] ? __cfi_inet_diag_handler_cmd+0x10/0x10 [ 661.219371][T14823] ? sock_diag_rcv_msg+0x179/0x530 [ 661.219411][T14823] netlink_rcv_skb+0x2dd/0x4f0 [ 661.219450][T14823] ? __cfi_sock_diag_rcv_msg+0x10/0x10 [ 661.219490][T14823] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 661.219535][T14823] ? netlink_autobind+0x1c0/0x1c0 [ 661.219576][T14823] ? is_vmalloc_addr+0x11/0x40 [ 661.219616][T14823] sock_diag_rcv+0x20/0x30 [ 661.219656][T14823] netlink_unicast+0x8c3/0xa60 [ 661.219696][T14823] netlink_sendmsg+0x7fe/0xb10 [ 661.219739][T14823] ? __cfi_netlink_sendmsg+0x10/0x10 [ 661.219780][T14823] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 661.219822][T14823] ? security_socket_sendmsg+0x3d/0x100 [ 661.219863][T14823] sock_write_iter+0x4d9/0x530 [ 661.219895][T14823] ? __cfi_sock_write_iter+0x10/0x10 [ 661.219928][T14823] ? selinux_file_permission+0x8a4/0xb60 [ 661.219967][T14823] do_iter_readv_writev+0x62f/0x820 [ 661.220008][T14823] ? vfs_iter_read+0x5f0/0x5f0 [ 661.220044][T14823] ? bpf_lsm_file_permission+0xd/0x20 [ 661.220075][T14823] vfs_writev+0x4a8/0xe50 [ 661.220115][T14823] ? do_writev+0x2e0/0x2e0 [ 661.220154][T14823] ? vfs_write+0x9a4/0xf90 [ 661.220196][T14823] do_writev+0x151/0x2e0 [ 661.220237][T14823] ? vfs_readv+0xa10/0xa10 [ 661.220278][T14823] ? __kasan_check_read+0x15/0x20 [ 661.220311][T14823] __x64_sys_writev+0x81/0x90 [ 661.220349][T14823] x64_sys_call+0x1fbb/0x2ee0 [ 661.220390][T14823] do_syscall_64+0x57/0xf0 [ 661.220415][T14823] ? clear_bhb_loop+0x50/0xa0 [ 661.220447][T14823] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 661.220489][T14823] RIP: 0033:0x7f67d439c629 [ 661.220513][T14823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.220538][T14823] RSP: 002b:00007f67d51e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 661.220569][T14823] RAX: ffffffffffffffda RBX: 00007f67d4615fa0 RCX: 00007f67d439c629 [ 661.220593][T14823] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000004 [ 661.220612][T14823] RBP: 00007f67d51e7090 R08: 0000000000000000 R09: 0000000000000000 [ 661.220632][T14823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.220653][T14823] R13: 00007f67d4616038 R14: 00007f67d4615fa0 R15: 00007ffdcdaa26d8 [ 661.220678][T14823] [ 661.224394][ T31] usb 3-1: device descriptor read/8, error -71 [ 661.228973][ T37] INFO: task udevd:349 blocked for more than 122 seconds. [ 661.390327][ T31] usb 3-1: device descriptor read/8, error -71 [ 661.393279][ T37] Not tainted syzkaller #0 [ 661.572412][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 661.582380][ T37] task:udevd state:D stack:0 pid:349 tgid:349 ppid:110 flags:0x00000000 [ 661.594610][ T37] Call Trace: [ 661.597929][ T37] [ 661.601053][ T37] __schedule+0x134f/0x1ea0 [ 661.605734][ T37] ? __sched_text_start+0x10/0x10 [ 661.611163][ T37] ? irqentry_exit+0x4a/0x60 [ 661.616435][ T31] usb usb3-port1: unable to enumerate USB device [ 661.626882][ T37] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 661.628976][ T46] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 661.633970][ T37] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 661.644704][ T46] usb 5-1: No valid video chain found. [ 661.648226][ T37] schedule+0xc5/0x240 [ 661.651630][ T46] usb 5-1: selecting invalid altsetting 0 [ 661.655570][ T37] schedule_preempt_disabled+0x14/0x30 [ 661.666608][ T37] __mutex_lock+0x960/0x1bb0 [ 661.671540][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 661.678053][ T46] usb 5-1: USB disconnect, device number 48 [ 661.680294][ T37] ? __kasan_check_write+0x18/0x20 [ 661.690704][ T37] ? _raw_spin_lock+0x92/0x120 [ 661.695569][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 661.727709][ T37] ? __asan_memcpy+0x5a/0x80 [ 661.732648][ T37] __mutex_lock_slowpath+0xe/0x20 [ 661.737867][ T37] mutex_lock+0x113/0x1d0 [ 661.742457][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 661.747578][ T37] ? disk_block_events+0xaf/0x120 [ 661.753441][ T37] ? _atomic_dec_and_lock+0x98/0x120 [ 661.772270][ T37] bdev_open+0xd5/0xd60 [ 661.776506][ T37] blkdev_open+0x3d1/0x560 [ 661.780975][ T37] ? __cfi_blkdev_open+0x10/0x10 [ 661.785968][ T37] do_dentry_open+0x97b/0x1510 [ 661.790763][ T37] vfs_open+0x86/0x240 [ 661.794853][ T37] ? __cfi_vfs_open+0x10/0x10 [ 661.799685][ T37] ? may_open+0x352/0x430 [ 661.804057][ T37] path_openat+0x2bb1/0x34f0 [ 661.808673][ T37] ? stack_depot_save_flags+0x38/0x800 [ 661.814172][ T37] ? kasan_save_track+0x3e/0x80 [ 661.819146][ T37] ? kasan_save_alloc_info+0x40/0x50 [ 661.824462][ T37] ? do_sys_openat2+0xda/0x1d0 [ 661.829254][ T37] ? __x64_sys_openat+0x13a/0x170 [ 661.834302][ T37] ? x64_sys_call+0xe69/0x2ee0 [ 661.839102][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 661.845197][ T37] ? do_filp_open+0x440/0x440 [ 661.849924][ T37] do_filp_open+0x1f5/0x440 [ 661.854460][ T37] ? __cfi_do_filp_open+0x10/0x10 [ 661.859536][ T37] ? alloc_fd+0x4e6/0x5a0 [ 661.863889][ T37] do_sys_openat2+0x134/0x1d0 [ 661.868588][ T37] ? do_sys_open+0x100/0x100 [ 661.873221][ T37] __x64_sys_openat+0x13a/0x170 [ 661.878090][ T37] x64_sys_call+0xe69/0x2ee0 [ 661.882720][ T37] do_syscall_64+0x57/0xf0 [ 661.887156][ T37] ? clear_bhb_loop+0x50/0xa0 [ 661.891864][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 661.897788][ T37] RIP: 0033:0x7fe8fbdca407 [ 661.902230][ T37] RSP: 002b:00007ffda210ad00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 661.910672][ T37] RAX: ffffffffffffffda RBX: 00007fe8fbd3e880 RCX: 00007fe8fbdca407 [ 661.918725][ T37] RDX: 00000000000a0800 RSI: 00005648f3961700 RDI: ffffffffffffff9c [ 661.926712][ T37] RBP: 00005648f395e2c0 R08: 0000000000000000 R09: 0000000000000000 [ 661.934708][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 00005648f3b93a80 [ 661.942711][ T37] R13: 00005648f3b9f0f0 R14: 0000000000000000 R15: 00005648f3b93a80 [ 661.950719][ T37] [ 661.956097][ T37] INFO: task syz.3.3709:11369 blocked for more than 123 seconds. [ 661.968864][ T37] Not tainted syzkaller #0 [ 661.973846][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 661.982566][ T37] task:syz.3.3709 state:D stack:0 pid:11369 tgid:11368 ppid:6959 flags:0x00004004 [ 661.992759][ T37] Call Trace: [ 661.996106][ T37] [ 661.999071][ T37] __schedule+0x134f/0x1ea0 [ 662.003599][ T37] ? __sched_text_start+0x10/0x10 [ 662.008670][ T37] ? kasan_save_track+0x4f/0x80 [ 662.013601][ T37] ? kasan_save_track+0x3e/0x80 [ 662.018473][ T37] ? kasan_save_free_info+0x4a/0x60 [ 662.023701][ T37] ? __kasan_slab_free+0x5f/0x80 [ 662.028665][ T37] ? kfree+0x158/0x440 [ 662.032775][ T37] ? bdev_disk_changed+0x825/0x1610 [ 662.037998][ T37] ? loop_reread_partitions+0x64/0x110 [ 662.043515][ T37] ? loop_configure+0x1068/0x13a0 [ 662.048576][ T37] ? lo_ioctl+0xa8b/0x2070 [ 662.053036][ T37] ? blkdev_ioctl+0x54b/0x690 [ 662.057735][ T37] ? __se_sys_ioctl+0x135/0x1b0 [ 662.062630][ T37] ? __kasan_check_write+0x18/0x20 [ 662.067799][ T37] schedule+0xc5/0x240 [ 662.072107][ T37] io_schedule+0x88/0xe0 [ 662.076381][ T37] folio_wait_bit_common+0x6d8/0x950 [ 662.081727][ T37] ? folio_wait_bit+0x50/0x50 [ 662.086445][ T37] ? __filemap_get_folio+0x938/0xba0 [ 662.091785][ T37] ? __cfi_wake_page_function+0x10/0x10 [ 662.097379][ T37] ? __cfi___filemap_get_folio+0x10/0x10 [ 662.103078][ T37] ? efi_partition+0x450/0x3280 [ 662.107983][ T37] do_read_cache_folio+0x14d/0x4c0 [ 662.113129][ T37] ? __cfi_blkdev_read_folio+0x10/0x10 [ 662.118624][ T37] read_cache_folio+0x54/0x90 [ 662.123333][ T37] read_part_sector+0xcc/0x250 [ 662.128122][ T37] msdos_partition+0x116/0x2fd0 [ 662.133102][ T37] ? __cfi_efi_partition+0x10/0x10 [ 662.138253][ T37] ? vsnprintf+0x19ef/0x1ad0 [ 662.142896][ T37] ? snprintf+0xe9/0x140 [ 662.147227][ T37] ? __cfi_msdos_partition+0x10/0x10 [ 662.152551][ T37] ? __cfi_snprintf+0x10/0x10 [ 662.157256][ T37] ? bdev_disk_changed+0x501/0x1610 [ 662.162513][ T37] bdev_disk_changed+0x825/0x1610 [ 662.167603][ T37] ? __cfi_bdev_disk_changed+0x10/0x10 [ 662.173107][ T37] ? __kasan_check_write+0x18/0x20 [ 662.178248][ T37] ? mutex_unlock+0x90/0x240 [ 662.182874][ T37] ? __cfi_mutex_unlock+0x10/0x10 [ 662.187927][ T37] loop_reread_partitions+0x64/0x110 [ 662.193284][ T37] loop_configure+0x1068/0x13a0 [ 662.198166][ T37] ? __cfi_loop_configure+0x10/0x10 [ 662.203401][ T37] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 662.209164][ T37] ? is_bpf_text_address+0x17b/0x1a0 [ 662.214477][ T37] ? __kasan_check_write+0x18/0x20 [ 662.219637][ T37] lo_ioctl+0xa8b/0x2070 [ 662.223912][ T37] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 662.230095][ T37] ? update_curr+0x6c1/0x9e0 [ 662.234718][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 662.239430][ T37] ? __calc_delta+0x280/0x280 [ 662.244132][ T37] ? stack_trace_save+0xaa/0x100 [ 662.249101][ T37] ? update_entity_lag+0x28f/0x2c0 [ 662.254238][ T37] ? dequeue_entity+0x809/0x1380 [ 662.259198][ T37] ? path_openat+0x2d49/0x34f0 [ 662.264021][ T37] ? do_filp_open+0x1f5/0x440 [ 662.268810][ T37] ? do_syscall_64+0x57/0xf0 [ 662.273456][ T37] ? tg_unthrottle_up+0x9a0/0x9a0 [ 662.278505][ T37] ? __cfi_update_misfit_status+0x10/0x10 [ 662.284485][ T37] ? dequeue_entities+0x1d7/0x1400 [ 662.289666][ T37] ? sched_balance_newidle+0x75e/0xba0 [ 662.295161][ T37] ? xfd_validate_state+0x68/0x140 [ 662.300312][ T37] ? save_fpregs_to_fpstate+0x196/0x220 [ 662.305884][ T37] ? __kasan_check_write+0x18/0x20 [ 662.311060][ T37] ? __switch_to+0xc4f/0x1300 [ 662.315796][ T37] ? __cfi___switch_to+0x10/0x10 [ 662.320843][ T37] ? psi_task_switch+0x4f2/0xa10 [ 662.325812][ T37] ? _raw_spin_unlock+0x45/0x60 [ 662.330704][ T37] ? finish_task_switch+0x139/0x760 [ 662.336012][ T37] ? __switch_to_asm+0x3d/0x70 [ 662.340827][ T37] ? __schedule+0x1357/0x1ea0 [ 662.345527][ T37] ? avc_has_extended_perms+0x80b/0xe70 [ 662.351192][ T37] ? __asan_memcpy+0x5a/0x80 [ 662.355803][ T37] ? avc_has_extended_perms+0x969/0xe70 [ 662.361390][ T37] ? __asan_set_shadow_00+0x12/0x20 [ 662.366607][ T37] ? do_vfs_ioctl+0x182d/0x2010 [ 662.371500][ T37] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 662.377163][ T37] ? schedule+0xc5/0x240 [ 662.381449][ T37] ? futex_unqueue+0x136/0x160 [ 662.386237][ T37] ? __asan_set_shadow_00+0x12/0x20 [ 662.391463][ T37] ? blkdev_common_ioctl+0x11d8/0x2730 [ 662.396949][ T37] ? blkdev_bszset+0x230/0x230 [ 662.401761][ T37] ? has_cap_mac_admin+0xd0/0xd0 [ 662.406719][ T37] ? futex_wait+0x2ac/0x7b0 [ 662.411262][ T37] ? __cfi_do_futex+0x10/0x10 [ 662.415964][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 662.420677][ T37] blkdev_ioctl+0x54b/0x690 [ 662.425202][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 662.430288][ T37] ? bpf_lsm_file_ioctl+0xd/0x20 [ 662.435245][ T37] ? security_file_ioctl+0x3e/0x110 [ 662.440523][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 662.445580][ T37] __se_sys_ioctl+0x135/0x1b0 [ 662.450396][ T37] __x64_sys_ioctl+0x7f/0xa0 [ 662.455023][ T37] x64_sys_call+0x1878/0x2ee0 [ 662.459756][ T37] do_syscall_64+0x57/0xf0 [ 662.464283][ T37] ? clear_bhb_loop+0x50/0xa0 [ 662.468996][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 662.474923][ T37] RIP: 0033:0x7ff1bf99c629 [ 662.479367][ T37] RSP: 002b:00007ff1c085c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 662.487809][ T37] RAX: ffffffffffffffda RBX: 00007ff1bfc15fa0 RCX: 00007ff1bf99c629 [ 662.495945][ T37] RDX: 0000200000000280 RSI: 0000000000004c0a RDI: 0000000000000003 [ 662.503964][ T37] RBP: 00007ff1bfa32b39 R08: 0000000000000000 R09: 0000000000000000 [ 662.511969][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.520013][ T37] R13: 00007ff1bfc16038 R14: 00007ff1bfc15fa0 R15: 00007ffcd8263c78 [ 662.528011][ T37] [ 662.535101][ T37] INFO: task syz.0.3859:11796 blocked for more than 124 seconds. [ 662.543079][ T37] Not tainted syzkaller #0 [ 662.548131][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 662.556849][ T37] task:syz.0.3859 state:D stack:0 pid:11796 tgid:11795 ppid:6168 flags:0x00004004 [ 662.567081][ T37] Call Trace: [ 662.570422][ T37] [ 662.573374][ T37] __schedule+0x134f/0x1ea0 [ 662.577904][ T37] ? __sched_text_start+0x10/0x10 [ 662.583006][ T37] ? __cfi_blkdev_writepages+0x10/0x10 [ 662.588500][ T37] ? __mutex_add_waiter+0xd0/0x2a0 [ 662.593668][ T37] ? __kasan_check_write+0x18/0x20 [ 662.598818][ T37] ? trace_contention_begin+0xc0/0xc0 [ 662.604327][ T37] schedule+0xc5/0x240 [ 662.608441][ T37] schedule_preempt_disabled+0x14/0x30 [ 662.613946][ T37] __mutex_lock+0x960/0x1bb0 [ 662.618564][ T37] ? I_BDEV+0x11/0x30 [ 662.622576][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 662.629544][ T37] ? filemap_fdatawrite+0x119/0x1c0 [ 662.634780][ T37] ? __cfi_filemap_fdatawrite+0x10/0x10 [ 662.640372][ T37] __mutex_lock_slowpath+0xe/0x20 [ 662.645420][ T37] mutex_lock+0x113/0x1d0 [ 662.649790][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 662.654669][ T37] ? iput+0x2b1/0x8d0 [ 662.658682][ T37] sync_bdevs+0x1af/0x350 [ 662.663062][ T37] ksys_sync+0xc6/0x170 [ 662.667238][ T37] ? __cfi_ksys_sync+0x10/0x10 [ 662.672030][ T37] ? switch_fpu_return+0x12/0x20 [ 662.676985][ T37] __ia32_sys_sync+0x12/0x20 [ 662.681606][ T37] x64_sys_call+0x2a58/0x2ee0 [ 662.686318][ T37] do_syscall_64+0x57/0xf0 [ 662.690764][ T37] ? clear_bhb_loop+0x50/0xa0 [ 662.695465][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 662.701411][ T37] RIP: 0033:0x7fef6379c629 [ 662.705847][ T37] RSP: 002b:00007fef621f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 662.714312][ T37] RAX: ffffffffffffffda RBX: 00007fef63a15fa0 RCX: 00007fef6379c629 [ 662.722311][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 662.730311][ T37] RBP: 00007fef63a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 662.738494][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.747007][ T37] R13: 00007fef63a16038 R14: 00007fef63a15fa0 R15: 00007fff2ada2148 [ 662.755222][ T37] [ 662.758465][ T37] NMI backtrace for cpu 0 [ 662.758481][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 73dd41fee924560e78783f72ff837ca22365b77d [ 662.758512][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 662.758522][ T37] Call Trace: [ 662.758527][ T37] [ 662.758534][ T37] __dump_stack+0x21/0x30 [ 662.758558][ T37] dump_stack_lvl+0x140/0x1c0 [ 662.758578][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 662.758599][ T37] dump_stack+0x19/0x20 [ 662.758623][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 662.758648][ T37] ? rcu_read_unlock_special+0xb7/0x420 [ 662.758668][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 662.758695][ T37] ? sched_show_task+0x371/0x530 [ 662.758740][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 662.758765][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 662.758791][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 662.758817][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 662.758851][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 662.758878][ T37] watchdog+0xdad/0xf00 [ 662.758908][ T37] ? __kasan_check_write+0x18/0x20 [ 662.758937][ T37] ? __cfi_watchdog+0x10/0x10 [ 662.758967][ T37] ? __kasan_check_read+0x15/0x20 [ 662.758992][ T37] ? __kthread_parkme+0x137/0x180 [ 662.759022][ T37] ? schedule+0xc5/0x240 [ 662.759045][ T37] kthread+0x2c9/0x370 [ 662.759065][ T37] ? __cfi_watchdog+0x10/0x10 [ 662.759097][ T37] ? __cfi_kthread+0x10/0x10 [ 662.759118][ T37] ret_from_fork+0x67/0xa0 [ 662.759146][ T37] ? __cfi_kthread+0x10/0x10 [ 662.759167][ T37] ret_from_fork_asm+0x1a/0x30 [ 662.759199][ T37] [ 662.918103][ T37] Sending NMI from CPU 0 to CPUs 1: [ 662.923780][ C1] NMI backtrace for cpu 1 [ 662.923795][ C1] CPU: 1 UID: 0 PID: 14825 Comm: syz.1.4841 Not tainted syzkaller #0 73dd41fee924560e78783f72ff837ca22365b77d [ 662.923817][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 662.923828][ C1] RIP: 0010:arch_stack_walk+0x13f/0x170 [ 662.923864][ C1] Code: 4d 89 f3 41 ba 3a c7 f0 cd 45 03 53 f1 74 02 0f 0b 2e e8 88 e0 c1 1e 84 c0 74 11 4c 89 ff e8 d8 96 06 00 83 bd 78 ff ff ff 00 <75> c1 65 48 8b 04 25 28 00 00 00 48 3b 45 d8 75 12 48 83 c4 68 5b [ 662.923878][ C1] RSP: 0018:ffffc900027a6da8 EFLAGS: 00000002 [ 662.923894][ C1] RAX: 00000000027a6d01 RBX: ffffc900027a6e60 RCX: 00000000027a6d01 [ 662.923907][ C1] RDX: ffffc900027a7f48 RSI: 1ffff920004f4db6 RDI: ffffc900027a6e00 [ 662.923919][ C1] RBP: ffffc900027a6e30 R08: ffffc900027a6e70 R09: ffffc900027a6e68 [ 662.923932][ C1] R10: 0000000000000010 R11: ffffffff8175cbd0 R12: ffff888114c35f00 [ 662.923943][ C1] R13: 0000000000000001 R14: ffffffff8175cbd0 R15: ffffc900027a6da8 [ 662.923954][ C1] FS: 00007f67d51e76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 662.923969][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 662.923980][ C1] CR2: 00005555656e74e8 CR3: 0000000127592000 CR4: 00000000003526b0 [ 662.923995][ C1] Call Trace: [ 662.924001][ C1] [ 662.924008][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 662.924036][ C1] stack_trace_save+0xaa/0x100 [ 662.924051][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 662.924066][ C1] ? stack_depot_save_flags+0x38/0x800 [ 662.924086][ C1] kasan_save_stack+0x3e/0x60 [ 662.924108][ C1] ? kasan_save_stack+0x3e/0x60 [ 662.924128][ C1] ? __kasan_record_aux_stack+0xb2/0xd0 [ 662.924145][ C1] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 662.924162][ C1] ? irq_work_queue_on+0xea/0x210 [ 662.924180][ C1] ? tell_cpu_to_push+0x5bc/0x660 [ 662.924198][ C1] ? balance_rt+0x2a0/0x440 [ 662.924214][ C1] ? __schedule+0x964/0x1ea0 [ 662.924230][ C1] ? schedule+0xc5/0x240 [ 662.924244][ C1] ? schedule_timeout+0xc7/0x3b0 [ 662.924266][ C1] ? unix_wait_for_peer+0x1f6/0x300 [ 662.924287][ C1] ? unix_dgram_sendmsg+0x1173/0x1ac0 [ 662.924308][ C1] ? ____sys_sendmsg+0xa8c/0xae0 [ 662.924331][ C1] ? ___sys_sendmsg+0x2a6/0x370 [ 662.924354][ C1] ? __sys_sendmmsg+0x2b4/0x4e0 [ 662.924377][ C1] ? __x64_sys_sendmmsg+0xa4/0xc0 [ 662.924400][ C1] ? x64_sys_call+0xfec/0x2ee0 [ 662.924422][ C1] ? do_syscall_64+0x57/0xf0 [ 662.924441][ C1] __kasan_record_aux_stack+0xb2/0xd0 [ 662.924459][ C1] kasan_record_aux_stack_noalloc+0xf/0x20 [ 662.924476][ C1] irq_work_queue_on+0xea/0x210 [ 662.924494][ C1] tell_cpu_to_push+0x5bc/0x660 [ 662.924513][ C1] ? pull_rt_task+0x120/0x120 [ 662.924531][ C1] balance_rt+0x2a0/0x440 [ 662.924547][ C1] ? __cfi_balance_rt+0x10/0x10 [ 662.924563][ C1] ? _raw_spin_unlock+0x45/0x60 [ 662.924578][ C1] __schedule+0x964/0x1ea0 [ 662.924598][ C1] ? __sched_text_start+0x10/0x10 [ 662.924614][ C1] ? __asan_memcpy+0x5a/0x80 [ 662.924632][ C1] ? avc_has_perm_noaudit+0x28a/0x360 [ 662.924654][ C1] schedule+0xc5/0x240 [ 662.924670][ C1] schedule_timeout+0xc7/0x3b0 [ 662.924692][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 662.924714][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 662.924730][ C1] ? prepare_to_wait_exclusive+0x195/0x1d0 [ 662.924755][ C1] unix_wait_for_peer+0x1f6/0x300 [ 662.924776][ C1] ? unix_find_other+0x930/0x930 [ 662.924795][ C1] ? __cfi_autoremove_wake_function+0x10/0x10 [ 662.924819][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 662.924850][ C1] ? bpf_lsm_unix_may_send+0xd/0x20 [ 662.924872][ C1] unix_dgram_sendmsg+0x1173/0x1ac0 [ 662.924897][ C1] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 662.924918][ C1] ? __switch_to_asm+0x3d/0x70 [ 662.924940][ C1] ? __schedule+0x1357/0x1ea0 [ 662.924955][ C1] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 662.924977][ C1] ? security_socket_sendmsg+0x3d/0x100 [ 662.924999][ C1] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 662.925020][ C1] ____sys_sendmsg+0xa8c/0xae0 [ 662.925044][ C1] ? __import_iovec+0x3ef/0x7c0 [ 662.925066][ C1] ? __sys_sendmsg_sock+0x50/0x50 [ 662.925090][ C1] ? import_iovec+0x80/0xb0 [ 662.925111][ C1] ___sys_sendmsg+0x2a6/0x370 [ 662.925136][ C1] ? __sys_sendmsg+0x2a0/0x2a0 [ 662.925158][ C1] ? __futex_wait+0x33c/0x3e0 [ 662.925180][ C1] ? __cfi___futex_wait+0x10/0x10 [ 662.925201][ C1] ? futex_wake+0x666/0x950 [ 662.925225][ C1] __sys_sendmmsg+0x2b4/0x4e0 [ 662.925247][ C1] ? __kasan_check_write+0x18/0x20 [ 662.925267][ C1] ? __cfi___sys_sendmmsg+0x10/0x10 [ 662.925294][ C1] ? __kasan_check_write+0x18/0x20 [ 662.925312][ C1] ? fpregs_restore_userregs+0x11c/0x260 [ 662.925329][ C1] __x64_sys_sendmmsg+0xa4/0xc0 [ 662.925353][ C1] x64_sys_call+0xfec/0x2ee0 [ 662.925374][ C1] do_syscall_64+0x57/0xf0 [ 662.925388][ C1] ? clear_bhb_loop+0x50/0xa0 [ 662.925403][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 662.925426][ C1] RIP: 0033:0x7f67d439c629 [ 662.925439][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.925453][ C1] RSP: 002b:00007f67d51e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 662.925469][ C1] RAX: ffffffffffffffda RBX: 00007f67d4615fa0 RCX: 00007f67d439c629 [ 662.925481][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000007 [ 662.925492][ C1] RBP: 00007f67d4432b39 R08: 0000000000000000 R09: 0000000000000000 [ 662.925502][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.925513][ C1] R13: 00007f67d4616038 R14: 00007f67d4615fa0 R15: 00007ffdcdaa26d8 [ 662.925526][ C1]