last executing test programs: 14.5919207s ago: executing program 2 (id=260): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)={0x14, 0x14, 0x1, 0x20, 0x25dfdbfc, {0xa}}, 0x14}}, 0x20000000) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x60, r1, 0x4c1dad3e3d6a7499, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @remote, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x800000000000000, 0x532100) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r3, 0x40044591, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = dup(0xffffffffffffffff) ioctl$HIDIOCGRDESCSIZE(r5, 0x80044801, 0x0) 14.57108987s ago: executing program 2 (id=261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x12bb00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x800) waitid$P_PIDFD(0x3, r4, 0x0, 0x8, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) 14.476033582s ago: executing program 2 (id=264): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000673000/0x2000)=nil, 0x2000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=[@register_looper, @request_death, @clear_death], 0x0, 0x0, 0x0}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x20, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = gettid() r6 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_ep_write(r6, 0x81, 0x0, 0x0) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_ep_write(r6, 0x81, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="2f00000006000000000000000000000002000000000000000600000000059e3cf8db"], 0x2f) r8 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r8, &(0x7f00000003c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x4, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x80000000, 0xfffffffe, 0x8000, 0x40002, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x7}}}, 0xa0) ioctl$TUNGETFILTER(r8, 0x801054db, &(0x7f0000000080)=""/69) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x3, 0x100}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 13.854213665s ago: executing program 2 (id=265): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) socket$can_raw(0x1d, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001917e003e092810243d20a46a2e99f35528c81aab60a55d1d146dac75424b5f0ef8dccfa4e1774cb42ecadf96f9e950264f38122121f6ddddb8aed4ca41b192a764bd579b56e2012c58487c019f2f053af402a7dba8ff830e69213c37e2f9f23ea1274ed912c51917b82612f3802fa83bd455654c2592176ca17673c7c258f82a557eb0f7189cdbed05bc8c73fcff156716260fe9e54a52a545eecb618d294913e9dfe17d6fdeee9ea2e9e7589f3a78ba5778c8d27f4d324f0e0e5d262cff853dd0d1c", @ANYRES16=r4, @ANYBLOB="010027bd7000000000000c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) 13.61034163s ago: executing program 2 (id=270): syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x40080) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c166ba2100a067ee66ba2000b000ee6d2f2f820000c0d23266bac000533066b808008ed0660f38806f008ee0", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x2000) 13.523333752s ago: executing program 2 (id=275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 13.485546852s ago: executing program 32 (id=275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 9.096813963s ago: executing program 1 (id=320): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x327280, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) getsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) getsockname$netlink(r2, &(0x7f0000000140), &(0x7f0000000180)=0xc) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x1, 0x8080000, 0x2000, &(0x7f0000004000/0x2000)=nil}) 7.464002126s ago: executing program 4 (id=335): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x806, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500030000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e000fff04fcff", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f00000001c0)="69928873f6499ba4255820865af2b023f18f996cfb3c9bf09a78476629ca137943338c0d9bb5417b77ca4ac2b6e3b33fabc3d1ac0c170952ce198ba89904c0286c7d55ca8ffe2b4191d9c20ad7a4e646"}) 7.463600656s ago: executing program 4 (id=336): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000000c0)=@secondary) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$FUSE(r2, &(0x7f0000000e00)={0x2020}, 0x2020) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000000)={"ae424811be491ba5358338dfc9fbe400", 0x0, 0x0, {0x3, 0xf}, {0x2, 0x4}, 0x4, [0x1000, 0x9, 0x3, 0x450, 0x8, 0xc8d, 0x9, 0x0, 0xff, 0xef9, 0x8001, 0x66, 0x2, 0x80000000, 0x5, 0x9]}) write$UHID_DESTROY(r2, &(0x7f0000004200), 0x4) pipe2(&(0x7f0000004240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x2959, &(0x7f00000003c0)={0x0, 0x9891, 0x0, 0x302, 0xaa}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r7, r8, r9, &(0x7f0000000500)={0x2e, 0xe4, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xa1f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r6, r10, &(0x7f0000000200)={0x0, 0x1463, 0x10708, 0x2, 0x200af, 0x0, r5}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x84485, 0x0, 0x401, 0x31b, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a1e, 0x0, 0x1, 0x902c4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r2, r10, &(0x7f0000002e40)={0x0, 0xb3cf, 0x10000, 0x3, 0x350, 0x0, r2}, &(0x7f0000002ec0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb7f4, 0x400, 0x1, 0x3a4, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd28, 0x80, 0x3, 0x3ca, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x17d2, 0x8, 0x1, 0x3d2, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x95e0, 0x40, 0x0, 0xf2}}], 0x4, &(0x7f0000004140)={0x2e, 0xb, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x0, 0xf30, 0x0, &(0x7f0000003140)=@buf_max_buf="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"}}, &(0x7f00000041c0)) r11 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r11, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ex+\x88\xfe\xf7\x01') ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000200)={{r1}, r3, 0x18, @unused=[0xc00000, 0x10, 0x8000000000000000, 0x8], @subvolid}) ioctl$VHOST_SET_VRING_ERR(r1, 0x8001af84, &(0x7f00000001c0)) 6.621762623s ago: executing program 4 (id=340): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000000c0)) (async, rerun: 64) fremovexattr(0xffffffffffffffff, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) (async) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0xfffffffd}, 0x2) (async) socket$netlink(0x10, 0x3, 0x0) 6.466422977s ago: executing program 4 (id=341): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x80, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_usb_connect$midi(0x1, 0xd6, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x1, 0x1, 0xff, 0x40, 0x10, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x30, 0x1, [@ms_header={0x7, 0x24, 0x1, 0xfd8, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x2, 0x5}, @midi_out_jack={0xd, 0x24, 0x3, 0x1, 0x7, 0x3, [{0x3, 0xe}, {0x1}, {0x6, 0x2}], 0x1}, @midi_out_jack={0x19, 0x24, 0x3, 0x7, 0x3, 0x9, [{0xa, 0x2}, {0x9, 0x1}, {0x7, 0x2}, {0x7f, 0x7}, {0xfc, 0x7f}, {0xb4, 0x5}, {0x7, 0x81}, {0x0, 0x8}, {0x1, 0x4}], 0x7}], [{{0x9, 0x5, 0x8, 0x10, 0x400, 0x5, 0x9, 0x6, {0x8, 0x25, 0x1, 0x4, "db1a33e4"}}}, {{0x9, 0x5, 0xd, 0x10, 0x0, 0x5, 0x4, 0x3, {0xe, 0x25, 0x1, 0xa, "8efbc80634884bd4bdfa"}}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x5, 0x6, 0x44, {0xe, 0x25, 0x1, 0xa, "129ac1d316afd3a78d4c"}}}, {{0x9, 0x5, 0x2, 0x2, 0x240, 0x2, 0x4, 0x7, {0x7, 0x25, 0x1, 0x3, "ea937a"}}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x79, 0x34, 0x7f, {0xe, 0x25, 0x1, 0xa, "44a8db985c9b2ce5a2c0"}}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x8, 0x6f, 0xfb, {0x10, 0x25, 0x1, 0xc, "46b20189f217c1a5f306b27f"}}}]}}}}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x51, &(0x7f0000000540)={0x5, 0xf, 0x51, 0x1, [@generic={0x4c, 0x10, 0xa, "02efb88f574c69133427e171a7c673af4794c239b97bc9dde77eb73673f3bd1861f2b385bbc4a8aace6a209263e77c11fc84a5e34e2cd85bdab00bd25a0ea24963380866f10fe4bb09"}]}, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r3, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}], 0x20}}], 0x2, 0x4000010) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x2eb, @mcast2, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0x1c000}], 0x1) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r6, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x3, 0x6}}, 0x26) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0) openat$incfs(r7, &(0x7f0000000080)='.pending_reads\x00', 0x4103, 0x40) 6.362554659s ago: executing program 1 (id=343): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20000400000091"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0x0, 0x12, 0x28, "bcf5bae1d2e34ef63bdfb6573d1b364466aa23336209d396844a9f0b4cd6e9f25e83cf2a362b2a46"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x7f}, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x3, 0x1}}) 4.437225088s ago: executing program 4 (id=358): openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0x5460, 0xfffffffffffc) openat$rnullb(0xffffffffffffff9c, &(0x7f0000002140), 0x220000, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x7259d000) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, 0x0) eventfd2(0x672a, 0x1) eventfd(0x6) openat$rfkill(0xffffffffffffff9c, 0x0, 0x80, 0x0) eventfd(0x6) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) eventfd(0xfa5ac41) eventfd2(0x9, 0x1) io_submit(0x0, 0x0, 0x0) r6 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, &(0x7f0000000e80)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x20, 0xf}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x4}, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.717377563s ago: executing program 1 (id=359): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x39e6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x4c085, &(0x7f0000000180)={0x11, 0x88a8, r2, 0x1, 0x22, 0x6, @multicast}, 0x66) 3.717080423s ago: executing program 1 (id=360): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x486400, 0x0) ioctl$RTC_ALM_READ(r2, 0x40187014, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x3) syz_clone3(&(0x7f00000006c0)={0x42000000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0xa, &(0x7f0000001cc0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x2, r3, &(0x7f0000000280)="d988fe89563501b776d55b16cfa3b628aed857855b74555feb54790b0e2141dda8f3972aeca4706253c086ec6ae039a0efa8c481b6325c4598fc8342ac6a1fd8f88153603826d55a049ac0e7a08572b324afb84b022446d6fa4bcc77cc10add406408c5142d071aa3330c41d01048610f18e3b337e6ff7a328bda67302c200955cf8c7527094923731aefd5b2dac", 0x8e, 0x6, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x400, r2, &(0x7f0000000400)="3edee02d09ac801ba107f34c0736737c19c6d975099a615f43fb6adbe144df1cbde00a190663fc7021892c595dfed1f9b1a1aa9429aee0067e214abcdbb3401941fc1d47dc569233459a0beb97704908d94aeb2df753476a38cfb13a2c6a6362d98424093b676a99ef2853360fbc9f2f3a8b757c755af4dbaf9ff22596b0e6937a64a90c1cc42b497e86a45b5008a9b515d3afcbacba23b7b15334304613371af6767431e5a3845966eba56f8dcf063b22f459ea70f33c42913ce46aed88afed104bf0c7381cc5f1df2c4d6938ac3c93e4141cb28d5249d705268cd737a7b583de54d037d0", 0xe5, 0x8, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000540)="e596dec01fe0b9574f0b63446cb5a3de6bbf82c1abf55a2caab1606f88388baf865ff83526dba9d9846815f58300bcdadfbcf7c15c9878e416f01e7a4ac8d310b7e13f684131b60b321f3d788662b162694abb0c1f929d0bab5db0172eaafdf48cc6678d060f10771ab1bad67899a9bc5ceb7e4224406ab8dfdea62ce8c59f91460ad1ba5f5a42d0a76a46e4d7c25a", 0x8f, 0x347, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000000740)="ed49ad3563ce090a38d939c192feb06674bb4d52e6cae7078300fa2fefeec328cde576480f1f1214a78cf7e428c935e2d04d20801a7df8e5e7e5400b7722830526f16d28", 0x44, 0x7, 0x0, 0x1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000800)="87ab47fe1bac900790e746b61326208e4257fc56e467cbb6fd34b7d7adafcf8d9a0b8f9c9f1a1e8b", 0x28, 0x4}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, &(0x7f00000008c0)="6a22a7ac37f9636674e6b2e0fe9f2f4366e7d330ca4205399d0e3a8022fa4ffa01179ad09511329a90f156df6223f73128297167e3f04004adde7966392096afbb442cf86176a0c01d1204b796c32c4be98928e520abc0984bf0655dff885aa328564ce4e48739a816f5f84d880fd276eb50aa48e9f06c9d44c566d8293279b681bb1a171baade6e1df4c65fc019ae2a996a68b82d9617fe0f521bf6090db5d6fdbb37876ecc22831cf35d95da4381", 0xaf, 0x4, 0x0, 0x3}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x3, 0x9, r2, &(0x7f00000009c0)="bce6caabe59cfc129404363d7bdc9d00f2a1a63b439ad5cf205c8dbc72fb31b292d7fe9834f49b349132c0412672035e07112bd1", 0x34, 0x2, 0x0, 0x2}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x5, 0x2, r3, &(0x7f0000000a40)="6527b71e0b33b74b9e8cd573e5f88f01b9d4e98e3280047165cbfcab6ceb53df8d050ddfe2013acdc12df45a7cc6646ea76591e2052079dd1bb34bba2dac0db4965158dd0e104af8c2a8ba0a3b5c08cb76d9ff2c68bfa0a90b867d0808f08e39da9fb3273b1b0c9f77357d1ceb025defd968dbf2a86b77a36e1cb4bc426734f1d970fd0d82d8a7fc93ef28301aac9eb52671078c90e64c1ebfb57a2d9d0965c1ea517f4b2b2a55f57f1e58aaff2c99dc6df211288926afab8030c4008e2bd4a80a9d761e2f61103853fa94bbfd1d1536", 0xd0, 0x9, 0x0, 0x2}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, &(0x7f0000000bc0)="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", 0x1000, 0xee0, 0x0, 0x1}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x8, 0xe9, 0xffffffffffffffff, &(0x7f0000001c00)="17a7618c25feb4011c72cabf63f6378667d61b3cd0d882a396b3e0ada04fcaa0153c913d5219f770e0d37f97931821fc5305da651a418a2533acfa8887d2b903f1503df68bec4ed3f6681039ed71d86166c274ebdbf9fbc8f1294129fc7127cdac8f640b4c6766d3421bf67fe50e56cf4c34", 0x72, 0x9, 0x0, 0x3}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000200)=""/96, 0x60}], 0x1, 0xe, 0x7) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0xd8) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000000)=0x8) ioctl$KVM_CAP_HALT_POLL(r5, 0x4068aea3, &(0x7f0000000180)={0xb6, 0x0, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x3c0402d, 0x0) write$snapshot(r5, &(0x7f00000000c0)="65fd3f1893d9f1e246a6b1b5a243d324b78b48beb052da0b98c702096220f71aad07425848caf20d683f048cc638e1cd74cf741e24f0037a31747d3435e3206c26bdba7e9cb6e12ccce5feb6006eaca37f14c2b7c5d6cd90a29f2b0406f98141ff8b4da38a47a365c156d7344c06a7e41be5230f4f002c8dceb0ce427fdb7846d190d2216ca5d4f9d3627ce1ebfe10bbede4ba671018fb297e163503a1262644136e2edb8d0933eb57c6cbf800b332d5a66f13581545de5ef8", 0xb9) syz_usb_connect(0x2, 0x43, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a3233910eba658744d2d010203010902310001080010000904df0003080662ff09250c02200006060309050710000201020704"], 0x0) 2.379863421s ago: executing program 4 (id=361): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x20, 0x8, 0x84, {0x84, 0x31, "77b284cf753e92282707739ed2c50a8018aa0fd7debd5e24048287501c9983f44fffdbc400d1e43ecd2c71b4ad344ac8ab48e3795e17be926012a747afcef50bea56b5a481539a1f4c49e6568d1b74a232ec1d11c59c036a4eb6b1836a2ad736d97bc0ab53b19679ab098e172fdc1c8a0f823536baa5da422771a4ed23556efb308b"}}, &(0x7f0000000280)={0x0, 0x3, 0xbc, @string={0xbc, 0x3, "31eb85d0c66898ee11e3a75e2cf41c045527645588b2e5e04895b7e3ffa2bcb838131c8525288098d103d50f57ed861905c3e05cc8c7ac53cd72a02c5241f6eab04e2951aca39fea6426bb158b9ed1788f7aad3cfbf244d60793ca2f37bddf2996514e66b1aae78360a7932d0d07285456d81e1875a90bddad729d88daad896ddaa2284151733b4a3ed429f06bcc23d27b615ab5e1021ce53ef78abc404b86c97ce3e133e6d20580c77e48400cf5c16885908fddc22c73c5146c"}}, &(0x7f00000003c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "c4019a576849d9e438a99b6459e5e085"}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x8, 0x8c, 0x5, "77943803", "71dfa597"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xaf, 0x18, 0x2, 0x6, 0x7, 0x2, 0x4}}}, &(0x7f0000000ac0)={0x84, &(0x7f00000004c0)={0x0, 0xd, 0x43, "79d317a2de6d0a3dea9e92f6117daf03b884679af4beee3adff8c51dc6726ff2e2c35a0bdbf16c446557f3d36e079ab9df258527ff74d96806a80e6aa3468a5005e801"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0xe4}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "bb93"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0xffff}, &(0x7f0000000840)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000880)={0x40, 0x17, 0x6, @local}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "5d9b"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x205e}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x62}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x3}}) 1.982375069s ago: executing program 0 (id=362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x7, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0x8003000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) 1.807867353s ago: executing program 0 (id=363): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) 1.786126843s ago: executing program 0 (id=364): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x23, 0x0, 0x101}}) r1 = socket$inet6(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000100)=0x38, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x21, r3, 0x7fffffff, 0x4) syz_usb_connect$midi(0x3, 0x3e, 0x0, 0x0) syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x3, 0x100, 0x0, 0xa2}, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r4, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x3f, 0x20, 0x0, 0x0, 0x800, 0x3, 0x2}, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x27, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000002000)={0x6, 0x6}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000003f00)="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", 0x2000, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) sendto$inet(r8, &(0x7f0000003dc0)="62557ad804801870271fa7b6caaf8668864f33532c8b106b40aafb28df2db41a2f58d9c3a7f1df9bf3523ce63e25d7c7f3c92fbe1f3519f93be4de29d9f55167fbd151c92ebbc7a91d87ebe67dbba6a69862de0a7655f1ac60c53c2fa450901e1d09749aea396af1e77a16920402db918dd620b8088a3374ce695dfc49afe14b3113ff5de9d4d2c3dc4c864bc320717932a1ce2140d6f538fc6597e557896222ae02bfbe4ead4ea20df7a116298d7372c442401f820ec7bd9a2235b58afbabe2e54118b7538f054b1e3b8640b13bfb12b979674bbf279d10d125d76c736ad6f89a718eb754d47514657251f4f617399c8404", 0xf2, 0x20000004, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) read(r1, &(0x7f0000000880)=""/237, 0xed) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, r8) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) 1.699145625s ago: executing program 3 (id=365): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000005c0)={0x0, &(0x7f0000000180)=[@wr_drn={0x68, 0x20, {0x7, 0x20000000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro64=0x2400, 0x9, 0x80000000, 0x7fff}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x4, 0x2, 0x101, 0x1}}, @nested_create_vm={0x12d, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @in_dx={0x69, 0x20, {0x6cea, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x1000, 0x970b}}, @code={0xa, 0x81, {"b9800000c00f3235000400000f300f20d835200000000f22d866bad10466b82b7966efb928080000b82e750000ba000000000f3048b862610000000000000f23c80f21f8350c0030000f23f8673e430fc73cd72e652e0f01c9c4227918e0b9800000c00f3235001000000f30440f01c2"}}, @in_dx={0x69, 0x20, {0x5e88, 0x6}}, @nested_amd_vmload={0x182, 0x18}, @set_irq_handler={0xc8, 0x20, {0xdf, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x1}], 0x1f9}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0xff00}) 1.540013628s ago: executing program 3 (id=366): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000180), 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000000b80)=[{&(0x7f0000000240)="0c1a", 0x2}], 0x1, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x8880) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00221800000096231b06e53f77010000002aa90683749e821c9385900eb7"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b06e53f0708"], 0x0}, 0x0) 1.539911938s ago: executing program 3 (id=367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x26, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x61, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) fstatfs(0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x180000000) 1.071266798s ago: executing program 0 (id=368): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x602) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x7, 0x8, 0x9, 0x8, 0x2, 0x101}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0xd}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x9, 0x0, 0x2004cb, 0x0, 0xa7c, 0x28ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xf000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 992.269539ms ago: executing program 0 (id=369): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xffffd000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000740)={0x1, 0x12c, @pic={0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd, 0x0, 0x1}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf2503000000400001802c000400140001000200fffcac14142f00000000000000001400020002004e23ac1414aa000000000000000001adcfa6c07e956b73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="997425bd7000fbdbdf2515000000580001800d0001007564703a73797a320000000044000400200001000a004e2300000009fe8000000000000000000000000000bb01000000200002000a004e2400000005fe880000000000000000000000000001ecffffff"], 0x6c}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) 876.037022ms ago: executing program 0 (id=370): syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x2, 0x2, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x14, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)) r3 = mmap$IORING_OFF_PBUF_RING(0x0, 0xffffffff, 0x2000000, 0x20010, 0xffffffffffffffff, 0x818008f3) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = syz_ublk_setup_io_uring(0x7875, &(0x7f0000000280)={0x0, 0x2f33, 0x800, 0x2, 0x29e}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) r6 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x10, 0x2000000, 0x110, 0xffffffffffffffff, 0x20000000) syz_ublk_setup_io_uring(0x18e2, &(0x7f0000000480)={0x0, 0xf4d7, 0x4, 0x0, 0x12}, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=0x0) syz_ublk_add_dev(r5, r6, r4, r7, 0x0, &(0x7f0000000940)) r8 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000028c0), 0x2, 0x0) fcntl$setownex(r9, 0xf, &(0x7f0000002900)={0x2, 0xffffffffffffffff}) r10 = getpgrp(0x0) syz_pidfd_open(r10, 0x0) syz_io_uring_submit$UBLK(r0, r3, r7, &(0x7f0000000080)=@ublk_add_dev_sqe={0x2e, 0x18, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x1, 0x858, 0x0, 0x0, 0x1000, 0xffffffff, r10, 0x0, 0x22}}}) r11 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r12, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r12, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000040)=[{r12, 0x240}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r12, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_usb_control_io$printer(r11, 0x0, 0x0) syz_usb_control_io(r11, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x28, 0x5, 0x0) 875.450932ms ago: executing program 3 (id=371): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x2c, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6c00) exit(0x3) setresuid(r2, r2, 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RGETLOCK(r4, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r6, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10004084) readv(r3, 0x0, 0x0) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro_nat=0x6404, 0x7f, 0xa, 0x1}}, @nested_vmresume={0x130, 0x18, 0x2}, @wr_drn={0x68, 0x20, {0x2, 0xfc2}}, @wrmsr={0x65, 0x20, {0x3c3, 0x1}}, @nested_vmresume={0x130, 0x18, 0x3}], 0xa8}) ioctl$KVM_GET_XCRS(r7, 0x8188aea6, &(0x7f0000000100)) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(r8, &(0x7f00000093c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) 709.169285ms ago: executing program 1 (id=372): r0 = socket$unix(0x1, 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000000}) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r3, 0x0, r2, 0x0, 0x10000000000016, 0x4) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000040)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 680.878536ms ago: executing program 1 (id=373): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085507, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000400000109021b00011100000009040000", @ANYRES32], 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40082104, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x24, 0x3, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000480)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x314c, 0x4000, 0x1000604, 0xf6, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8000, 0x2, 0xdfffffff, 0x0, r6}}], 0x1, 0x0, 0x0) 180.34µs ago: executing program 3 (id=374): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 0s ago: executing program 3 (id=375): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000140)=',,\x00') r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000001300)={0x0, 0x0, 0x5c, &(0x7f00000011c0)={0x5, 0xf, 0x5c, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x7, 0xb4, 0x3, 0x4}, @generic={0x45, 0x10, 0x2, "63264b890f291767732ae842d58902eaff5f81c9bde282e21837b732d354d1ceb990ecc4a8ebca0548af9da82a255f0d0d847618cfd80fab88d5330f83a2c5ca85dd"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x2, 0x2}]}}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x6, 0x1, 0x3, {}, {0x77359400}, {0x3, 0x1, 0x1}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x3, 0x0, 0x0, "25b93bdcd8505bec"}}, 0x48}}, 0x44) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x3300, 0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, &(0x7f0000000380)='cache=mmap') kernel console output (not intermixed with test programs): _1) entered forwarding state [ 32.323693][ T294] veth0_vlan: entered promiscuous mode [ 32.342653][ T300] veth0_vlan: entered promiscuous mode [ 32.350369][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.357462][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.365588][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.372663][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.402315][ T300] veth1_macvtap: entered promiscuous mode [ 32.409322][ T298] veth0_vlan: entered promiscuous mode [ 32.423986][ T294] veth1_macvtap: entered promiscuous mode [ 32.437512][ T298] veth1_macvtap: entered promiscuous mode [ 32.464842][ T299] veth0_vlan: entered promiscuous mode [ 32.491188][ T299] veth1_macvtap: entered promiscuous mode [ 32.502661][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.560110][ T314] mmap: syz.1.2 (314) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.590035][ T321] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.816896][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.827504][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.976607][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 32.982934][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 32.988287][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.006975][ T45] usb 4-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 33.020832][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.020831][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.020861][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 33.037424][ T45] usb 4-1: Product: syz [ 33.042074][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 33.055594][ T45] usb 4-1: Manufacturer: syz [ 33.069697][ T45] usb 4-1: SerialNumber: syz [ 33.075992][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.092441][ T9] usb 3-1: config 0 descriptor?? [ 33.127992][ T340] input: syz0 as /devices/virtual/input/input4 [ 33.138356][ T340] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 33.150021][ T340] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 33.176580][ T75] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.280974][ T344] netlink: 84 bytes leftover after parsing attributes in process `syz.0.12'. [ 33.304305][ T45] usb 4-1: USB disconnect, device number 2 [ 33.326548][ T75] usb 2-1: Using ep0 maxpacket: 16 [ 33.332833][ T75] usb 2-1: config 1 has an invalid descriptor of length 169, skipping remainder of the config [ 33.343374][ T75] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.354097][ T75] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.364348][ T75] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.373787][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.389489][ T75] usb 2-1: Product: syz [ 33.393720][ T75] usb 2-1: Manufacturer: syz [ 33.398440][ T75] usb 2-1: SerialNumber: syz [ 33.455884][ T352] netlink: 180 bytes leftover after parsing attributes in process `syz.0.14'. [ 33.502189][ T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 33.511632][ T9] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 33.663980][ T336] tipc: Started in network mode [ 33.668981][ T336] tipc: Node identity 2007ff, cluster identity 4711 [ 33.675637][ T336] tipc: Node number set to 2099199 [ 33.684961][ T336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.693786][ T336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.705154][ T75] usb 2-1: 0:2 : does not exist [ 33.712713][ T75] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 33.725335][ T75] usb 2-1: USB disconnect, device number 2 [ 33.726699][ T65] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 33.742579][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.866582][ T65] usb 1-1: device descriptor read/64, error -71 [ 34.106688][ T65] usb 1-1: device descriptor read/64, error -71 [ 34.366574][ T65] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 34.506621][ T65] usb 1-1: device descriptor read/64, error -71 [ 34.626571][ T75] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.746555][ T65] usb 1-1: device descriptor read/64, error -71 [ 34.787633][ T75] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.797821][ T75] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.807691][ T75] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 34.817168][ T75] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 34.825205][ T75] usb 2-1: SerialNumber: syz [ 34.856996][ T65] usb usb1-port1: attempt power cycle [ 35.017221][ T379] FAULT_INJECTION: forcing a failure. [ 35.017221][ T379] name failslab, interval 1, probability 0, space 0, times 0 [ 35.029987][ T379] CPU: 0 UID: 0 PID: 379 Comm: syz.3.21 Not tainted syzkaller #0 e661c05697932dc72467e0ff9a1babb7f2c48647 [ 35.030053][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 35.030080][ T379] Call Trace: [ 35.030088][ T379] [ 35.030097][ T379] __dump_stack+0x21/0x30 [ 35.030144][ T379] dump_stack_lvl+0x140/0x1c0 [ 35.030166][ T379] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.030189][ T379] ? __kasan_check_write+0x18/0x20 [ 35.030227][ T379] ? copy_mm+0x307/0x1da0 [ 35.030265][ T379] dump_stack+0x19/0x20 [ 35.030313][ T379] should_fail_ex+0x3c2/0x510 [ 35.030332][ T379] should_failslab+0xac/0x100 [ 35.030375][ T379] kmem_cache_alloc_noprof+0x42/0x410 [ 35.030398][ T379] ? alloc_pid+0xa5/0xb80 [ 35.030423][ T379] ? __asan_memcpy+0x5a/0x80 [ 35.030447][ T379] alloc_pid+0xa5/0xb80 [ 35.030465][ T379] copy_process+0x1467/0x3350 [ 35.030488][ T379] ? __cfi_copy_process+0x10/0x10 [ 35.030527][ T379] ? __kmalloc_cache_noprof+0x23c/0x470 [ 35.030552][ T379] ? __kasan_check_write+0x18/0x20 [ 35.030573][ T379] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 35.030601][ T379] vhost_task_create+0x1f7/0x3f0 [ 35.030618][ T379] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 35.030638][ T379] ? __cfi_vhost_task_create+0x10/0x10 [ 35.030675][ T379] ? __cfi_vhost_task_fn+0x10/0x10 [ 35.030699][ T379] ? __kasan_check_write+0x18/0x20 [ 35.030719][ T379] ? mutex_lock+0x97/0x1d0 [ 35.030750][ T379] ? __cfi_mutex_lock+0x10/0x10 [ 35.030776][ T379] ? kernel_text_address+0xa9/0xe0 [ 35.030815][ T379] kvm_mmu_post_init_vm+0x161/0x300 [ 35.030849][ T379] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 35.030880][ T379] ? _parse_integer_limit+0x195/0x1e0 [ 35.030903][ T379] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 35.030925][ T379] ? kstrtoull+0x13b/0x1e0 [ 35.030941][ T379] ? kstrtouint+0x78/0xf0 [ 35.030976][ T379] ? ioctl_has_perm+0x1bc/0x500 [ 35.030998][ T379] ? __asan_memcpy+0x5a/0x80 [ 35.031020][ T379] ? ioctl_has_perm+0x408/0x500 [ 35.031040][ T379] ? has_cap_mac_admin+0xd0/0xd0 [ 35.031066][ T379] ? __kasan_check_write+0x18/0x20 [ 35.031081][ T379] ? mutex_lock_killable+0x97/0x1d0 [ 35.031119][ T379] ? __cfi_mutex_lock_killable+0x10/0x10 [ 35.031150][ T379] ? proc_fail_nth_write+0x184/0x220 [ 35.031186][ T379] kvm_vcpu_ioctl+0xa43/0x1000 [ 35.031208][ T379] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 35.031223][ T379] ? __cfi_vfs_write+0x10/0x10 [ 35.031239][ T379] ? __kasan_check_write+0x18/0x20 [ 35.031270][ T379] ? mutex_unlock+0x90/0x240 [ 35.031300][ T379] ? __cfi_mutex_unlock+0x10/0x10 [ 35.031332][ T379] ? bpf_lsm_file_ioctl+0xd/0x20 [ 35.031361][ T379] ? security_file_ioctl+0x3e/0x110 [ 35.031386][ T379] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 35.031400][ T379] __se_sys_ioctl+0x132/0x1b0 [ 35.031442][ T379] __x64_sys_ioctl+0x7f/0xa0 [ 35.031468][ T379] x64_sys_call+0x1878/0x2ee0 [ 35.031490][ T379] do_syscall_64+0x57/0xf0 [ 35.031513][ T379] ? clear_bhb_loop+0x50/0xa0 [ 35.031535][ T379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.031569][ T379] RIP: 0033:0x7f7f7339de99 [ 35.031606][ T379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.031624][ T379] RSP: 002b:00007f7f7422b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 35.031654][ T379] RAX: ffffffffffffffda RBX: 00007f7f73625fa0 RCX: 00007f7f7339de99 [ 35.031666][ T379] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 35.031675][ T379] RBP: 00007f7f7422b090 R08: 0000000000000000 R09: 0000000000000000 [ 35.031685][ T379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.031711][ T379] R13: 00007f7f73626038 R14: 00007f7f73625fa0 R15: 00007ffd4b145f68 [ 35.031744][ T379] [ 35.033507][ T75] usb 2-1: 0:2 : does not exist [ 35.207953][ T65] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 35.209282][ T75] usb 2-1: unit 5 not found! [ 35.238323][ T65] usb 1-1: device descriptor read/8, error -71 [ 35.276985][ T75] usb 2-1: USB disconnect, device number 3 [ 35.418271][ T65] usb 1-1: device descriptor read/8, error -71 [ 35.476559][ T327] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 35.589339][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 35.589358][ T36] audit: type=1400 audit(1784729547.960:154): avc: denied { write } for pid=386 comm="syz.1.23" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.593762][ T387] netlink: 396 bytes leftover after parsing attributes in process `syz.1.23'. [ 35.630313][ T36] audit: type=1400 audit(1784729548.000:155): avc: denied { mmap_zero } for pid=386 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 35.640524][ T387] Zero length message leads to an empty skb [ 35.686568][ T65] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 35.707522][ T65] usb 1-1: device descriptor read/8, error -71 [ 35.756599][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.837954][ T65] usb 1-1: device descriptor read/8, error -71 [ 35.906554][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 35.913424][ T31] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 241, changing to 11 [ 35.924803][ T31] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x2 has an invalid bInterval 132, changing to 11 [ 35.935900][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 35.944016][ T31] usb 4-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.40 [ 35.953141][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.956871][ T65] usb usb1-port1: unable to enumerate USB device [ 35.961451][ T31] usb 4-1: Product: Є [ 35.971611][ T31] usb 4-1: Manufacturer: 䇄崋토è¤î…§å€±ã‚©é–†á£¢è£‘ë³í•î§ˆë¿¢ê‹è²­ëˆè·žê•ƒè¨–弡긅맸攞謔槆魺鵡摳蠽䉗ꈲ髚鑉㈉騣ä´ì‡¦á±¦ë­²å•’íˆé¸ƒà®–ᛓߎͨᣱ항ꜯ壠帘粒玛ᬼ㩇ìŒà¿‚醢餸䌻䓗쌀껭挙ྻ覊⌎䈪䕧渳鑨텖䢙ë­åœ…豕ⰵ㟢﷟㹒絺â¨ì¹Šã²¹ë„¦á‹ïŸ‚襒Ӝⳬ [ 36.001047][ T31] usb 4-1: SerialNumber: äŠ [ 36.014399][ T36] audit: type=1400 audit(1784729548.380:156): avc: denied { unmount } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.133282][ T395] netlink: 76 bytes leftover after parsing attributes in process `syz.2.26'. [ 36.143297][ T36] audit: type=1400 audit(1784729548.510:157): avc: denied { bind } for pid=394 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.144566][ T395] SELinux: policydb string length 0 does not match expected length 8 [ 36.163279][ T36] audit: type=1400 audit(1784729548.510:158): avc: denied { load_policy } for pid=394 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 36.182367][ T395] SELinux: failed to load policy [ 36.249734][ T399] netlink: 'syz.2.28': attribute type 39 has an invalid length. [ 36.259340][ T372] usb 3-1: USB disconnect, device number 2 [ 36.353412][ T36] audit: type=1400 audit(1784729548.720:159): avc: denied { append } for pid=406 comm="syz.2.30" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.409983][ T36] audit: type=1400 audit(1784729548.780:160): avc: denied { read } for pid=410 comm="syz.2.31" dev="nsfs" ino=4026532465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.431330][ T36] audit: type=1400 audit(1784729548.780:161): avc: denied { open } for pid=410 comm="syz.2.31" path="net:[4026532465]" dev="nsfs" ino=4026532465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.457491][ T31] usbhid 4-1:1.0: can't add hid device: -71 [ 36.464514][ T31] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 36.477550][ T31] usb 4-1: USB disconnect, device number 3 [ 36.513765][ T413] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 36.807855][ T36] audit: type=1400 audit(1784729549.180:162): avc: denied { name_bind } for pid=424 comm="syz.0.36" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 36.830806][ T36] audit: type=1400 audit(1784729549.210:163): avc: denied { create } for pid=424 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.144396][ T447] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.196585][ T327] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 37.216711][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 37.358196][ T327] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.368380][ T327] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.378168][ T327] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 37.387336][ T327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 37.395446][ T327] usb 3-1: SerialNumber: syz [ 37.395658][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 37.426906][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 37.437086][ T31] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 37.437650][ T9] usb 4-1: too many configurations: 166, using maximum allowed: 8 [ 37.468062][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 37.475683][ T9] usb 4-1: can't read configurations, error -61 [ 37.617536][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.629195][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.639015][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 37.639048][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 37.655942][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.666900][ T31] usb 2-1: config 0 descriptor?? [ 37.818137][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 37.826248][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 37.834410][ T9] usb 4-1: too many configurations: 166, using maximum allowed: 8 [ 37.844516][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 37.854455][ T9] usb 4-1: can't read configurations, error -61 [ 37.866898][ T9] usb usb4-port1: attempt power cycle [ 37.883077][ T449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.897356][ T449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.113150][ T31] kye 0003:0458:5016.0002: control desc unexpectedly large [ 38.129426][ T31] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0002/input/input5 [ 38.158319][ T31] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0002/input/input6 [ 38.188836][ T31] kye 0003:0458:5016.0002: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 38.221569][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 38.258296][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 38.276557][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 38.284373][ T9] usb 4-1: too many configurations: 166, using maximum allowed: 8 [ 38.297630][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 38.305252][ T9] usb 4-1: can't read configurations, error -61 [ 38.325921][ T463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.338350][ T463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.358073][ T31] usb 2-1: USB disconnect, device number 4 [ 38.446577][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 38.461214][ T470] netlink: 80 bytes leftover after parsing attributes in process `syz.1.49'. [ 38.478787][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 38.486944][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 38.494709][ T9] usb 4-1: too many configurations: 166, using maximum allowed: 8 [ 38.505066][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 38.512743][ T9] usb 4-1: can't read configurations, error -61 [ 38.519200][ T9] usb usb4-port1: unable to enumerate USB device [ 38.986540][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.157655][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 39.176623][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 39.187683][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 39.197465][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 39.210574][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 39.219668][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.228534][ T9] usb 1-1: config 0 descriptor?? [ 39.547087][ T491] batadv_slave_0: entered allmulticast mode [ 39.553360][ T491] netlink: 148 bytes leftover after parsing attributes in process `syz.1.56'. [ 39.567119][ T491] batadv_slave_0 (unregistering): left allmulticast mode [ 39.841084][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 39.856742][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 39.865758][ T9] usb 1-1: USB disconnect, device number 6 [ 40.010927][ T327] usb 3-1: 0:2 : does not exist [ 40.026072][ T327] usb 3-1: USB disconnect, device number 3 [ 40.031977][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.048455][ T440] udevd[440]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.188091][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 40.196711][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.207010][ T31] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.221403][ T31] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 40.230498][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.238538][ T31] usb 2-1: Product: syz [ 40.242738][ T31] usb 2-1: Manufacturer: syz [ 40.247569][ T31] usb 2-1: SerialNumber: syz [ 40.376563][ T327] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 40.456624][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 40.467398][ T31] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 40.498762][ T31] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 40.514371][ T31] usb 2-1: USB disconnect, device number 5 [ 40.532254][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.597391][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 40.597410][ T36] audit: type=1400 audit(1784729552.970:197): avc: denied { ioctl } for pid=516 comm="syz.3.66" path="socket:[4921]" dev="sockfs" ino=4921 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.634615][ T517] bridge0: port 3(dummy0) entered blocking state [ 40.645623][ T36] audit: type=1400 audit(1784729553.000:198): avc: denied { ioctl } for pid=516 comm="syz.3.66" path="socket:[5754]" dev="sockfs" ino=5754 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.666701][ T517] bridge0: port 3(dummy0) entered disabled state [ 40.677542][ T517] dummy0: entered allmulticast mode [ 40.683154][ T517] dummy0: entered promiscuous mode [ 40.689025][ T517] bridge0: port 3(dummy0) entered blocking state [ 40.695401][ T517] bridge0: port 3(dummy0) entered forwarding state [ 40.709919][ T518] dummy0: left allmulticast mode [ 40.714957][ T518] dummy0: left promiscuous mode [ 40.720336][ T518] bridge0: port 3(dummy0) entered disabled state [ 40.941025][ T528] rust_binder: 527:528 transaction to 0 failed: ENOENT [ 41.026535][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 41.188944][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 41.196853][ T36] audit: type=1400 audit(1784729553.570:199): avc: denied { write } for pid=542 comm="syz.0.74" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 41.210393][ T543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 41.222297][ T36] audit: type=1400 audit(1784729553.570:200): avc: denied { open } for pid=542 comm="syz.0.74" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 41.233221][ T543] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 41.255445][ T36] audit: type=1400 audit(1784729553.570:201): avc: denied { write } for pid=542 comm="syz.0.74" name="ipv6_route" dev="proc" ino=4026532637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 41.287015][ T31] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 41.287651][ T544] netlink: 32 bytes leftover after parsing attributes in process `syz.1.73'. [ 41.295133][ T31] usb 4-1: config 0 has no interface number 0 [ 41.311711][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 41.312757][ T544] netlink: 'syz.1.73': attribute type 1 has an invalid length. [ 41.323349][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.332284][ T544] overlayfs: failed to resolve './file0/file1': -2 [ 41.344572][ T544] netlink: 84 bytes leftover after parsing attributes in process `syz.1.73'. [ 41.358743][ T31] usb 4-1: Product: syz [ 41.362999][ T31] usb 4-1: Manufacturer: syz [ 41.368014][ T31] usb 4-1: SerialNumber: syz [ 41.378243][ T31] usb 4-1: config 0 descriptor?? [ 41.388795][ T548] process 'syz.1.76' launched './file0' with NULL argv: empty string added [ 41.397449][ T36] audit: type=1400 audit(1784729553.760:202): avc: denied { execute } for pid=547 comm="syz.1.76" name="file0" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.587265][ T31] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 41.593807][ T31] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 41.604012][ T31] usb 4-1: USB disconnect, device number 8 [ 41.626546][ T388] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 41.780418][ T388] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.794840][ T388] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 41.803982][ T388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 41.812106][ T388] usb 1-1: Product: syz [ 41.816297][ T388] usb 1-1: Manufacturer: syz [ 41.820959][ T388] usb 1-1: SerialNumber: syz [ 41.948456][ T36] audit: type=1400 audit(1784729554.320:203): avc: denied { mounton } for pid=555 comm="syz.1.78" path="/33/file0" dev="tmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 42.028195][ T388] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 42.228874][ T36] audit: type=1400 audit(1784729554.600:204): avc: denied { read write } for pid=545 comm="syz.0.75" name="lp0" dev="devtmpfs" ino=492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 42.252293][ T36] audit: type=1400 audit(1784729554.600:205): avc: denied { open } for pid=545 comm="syz.0.75" path="/dev/usb/lp0" dev="devtmpfs" ino=492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 42.346529][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 42.497713][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.508706][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.518520][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 42.531484][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.540568][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.549491][ T9] usb 4-1: config 0 descriptor?? [ 43.176470][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 43.182556][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 43.191471][ T9] usb 4-1: USB disconnect, device number 9 [ 43.503953][ T327] usb 3-1: device descriptor read/64, error -71 [ 43.707656][ T36] audit: type=1400 audit(1784729556.046:206): avc: denied { write } for pid=563 comm="syz.3.81" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.733259][ T564] rust_binder: Read failure Err(EAGAIN) in pid:39 [ 43.772141][ T327] usb 3-1: Using ep0 maxpacket: 16 [ 43.790053][ T327] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 43.798546][ T327] usb 3-1: config 0 has no interface number 0 [ 43.804753][ T327] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 43.814742][ T327] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 43.826991][ T327] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 43.836151][ T327] usb 3-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 43.845116][ T327] usb 3-1: Product: syz [ 43.849302][ T327] usb 3-1: Manufacturer: syz [ 43.860723][ T327] usb 3-1: SerialNumber: syz [ 43.866884][ T327] usb 3-1: config 0 descriptor?? [ 43.873517][ T562] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 43.880735][ T562] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 43.892760][ T569] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.970032][ T571] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 44.095706][ T562] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 44.103026][ T562] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 44.307817][ T388] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 44.463802][ T388] usb 4-1: unable to get BOS descriptor or descriptor too short [ 44.471547][ T388] usb 4-1: too many configurations: 173, using maximum allowed: 8 [ 44.480244][ T388] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.491128][ T388] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.501985][ T388] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.512834][ T388] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.523661][ T388] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.524451][ T562] can: request_module (can-proto-0) failed. [ 44.535516][ T388] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.555154][ T327] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 44.565348][ T327] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 44.577439][ T327] asix 3-1:0.251: probe with driver asix failed with error -71 [ 44.585564][ T388] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.596694][ T327] usb 3-1: USB disconnect, device number 4 [ 44.603772][ T579] netlink: 5 bytes leftover after parsing attributes in process `syz.1.87'. [ 44.608300][ T388] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.631310][ T388] usb 4-1: New USB device found, idVendor=09e8, idProduct=c703, bcdDevice=b3.01 [ 44.640544][ T388] usb 4-1: New USB device strings: Mfr=239, Product=52, SerialNumber=226 [ 44.649052][ T388] usb 4-1: Product: syz [ 44.653229][ T388] usb 4-1: Manufacturer: syz [ 44.657838][ T388] usb 4-1: SerialNumber: syz [ 44.875910][ T388] usb 4-1: USB disconnect, device number 10 [ 44.898760][ T604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 44.907571][ T604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 45.161980][ T327] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 45.295647][ T327] usb 2-1: device descriptor read/64, error -71 [ 45.326501][ T388] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 45.412851][ T608] netlink: 'syz.3.100': attribute type 3 has an invalid length. [ 45.420626][ T608] netlink: 944 bytes leftover after parsing attributes in process `syz.3.100'. [ 45.481783][ T388] usb 3-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 45.492965][ T388] usb 3-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 45.503973][ T388] usb 3-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 45.517057][ T388] usb 3-1: config 0 interface 0 has no altsetting 0 [ 45.523849][ T388] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 45.533051][ T388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.541904][ T388] usb 3-1: config 0 descriptor?? [ 45.547037][ T327] usb 2-1: device descriptor read/64, error -71 [ 45.553662][ T606] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 45.758314][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 45.799369][ T327] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 45.923975][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 45.932492][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.932870][ T327] usb 2-1: device descriptor read/64, error -71 [ 45.942844][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 45.961173][ T9] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 45.970286][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 45.977526][ T606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.980970][ T9] usb 4-1: Product: syz [ 45.987837][ T606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.993766][ T9] usb 4-1: Manufacturer: syz [ 46.003395][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.009309][ T9] usb 4-1: SerialNumber: syz [ 46.011003][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.022769][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.030284][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.037646][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.044897][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.052157][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.059474][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.066788][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.074107][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.081417][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.088684][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.095955][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.103593][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.110976][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.118202][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.125429][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.132766][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.140026][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.147247][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.154493][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.161750][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.169004][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.176250][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.183909][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.191164][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.198421][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.205668][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.212918][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.220211][ T388] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 46.228802][ T388] greenasia 0003:0E8F:0012.0003: hidraw0: USB HID v0.01 Device [HID 0e8f:0012] on usb-dummy_hcd.2-1/input0 [ 46.240431][ T388] greenasia 0003:0E8F:0012.0003: no inputs found [ 46.246843][ T327] usb 2-1: device descriptor read/64, error -71 [ 46.254339][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 46.263990][ T388] usb 3-1: USB disconnect, device number 5 [ 46.272079][ T9] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 46.286477][ T611] fido_id[611]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 46.313359][ T9] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 46.324269][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.340856][ T9] usb 4-1: USB disconnect, device number 11 [ 46.365883][ T327] usb usb2-port1: attempt power cycle [ 46.712896][ T327] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 46.734423][ T327] usb 2-1: device descriptor read/8, error -71 [ 46.779117][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 46.779135][ T36] audit: type=1400 audit(1784729559.032:230): avc: denied { write } for pid=612 comm="syz.2.102" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 46.783228][ T613] /dev/rnullb0: Can't open blockdev [ 46.785658][ T36] audit: type=1400 audit(1784729559.032:231): avc: denied { open } for pid=612 comm="syz.2.102" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 46.836535][ T36] audit: type=1400 audit(1784729559.032:232): avc: denied { mounton } for pid=612 comm="syz.2.102" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 46.874916][ T36] audit: type=1400 audit(1784729559.120:233): avc: denied { create } for pid=614 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 46.876118][ T615] Unsupported ieee802154 address type: 0 [ 46.900166][ T36] audit: type=1400 audit(1784729559.120:234): avc: denied { bind } for pid=614 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 46.907331][ T327] usb 2-1: device descriptor read/8, error -71 [ 46.978241][ T36] audit: type=1400 audit(1784729559.217:235): avc: denied { map } for pid=620 comm="syz.3.106" path="/23/file2" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.025199][ T36] audit: type=1400 audit(1784729559.276:236): avc: denied { wake_alarm } for pid=625 comm="syz.2.108" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.174079][ T327] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 47.195659][ T327] usb 2-1: device descriptor read/8, error -71 [ 47.266310][ T65] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 47.297037][ T75] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 47.328773][ T327] usb 2-1: device descriptor read/8, error -71 [ 47.430243][ T75] usb 3-1: device descriptor read/64, error -71 [ 47.432261][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 47.444335][ T65] usb 4-1: too many configurations: 173, using maximum allowed: 8 [ 47.451097][ T327] usb usb2-port1: unable to enumerate USB device [ 47.453535][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.469358][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.480293][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.491170][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.502163][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.513046][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.523967][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.534835][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.546517][ T65] usb 4-1: New USB device found, idVendor=09e8, idProduct=c703, bcdDevice=b3.01 [ 47.555624][ T65] usb 4-1: New USB device strings: Mfr=239, Product=52, SerialNumber=226 [ 47.564112][ T65] usb 4-1: Product: syz [ 47.568394][ T65] usb 4-1: Manufacturer: syz [ 47.573016][ T65] usb 4-1: SerialNumber: syz [ 47.676291][ T75] usb 3-1: device descriptor read/64, error -71 [ 47.789991][ T65] usb 4-1: USB disconnect, device number 12 [ 47.932125][ T75] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 48.065196][ T75] usb 3-1: device descriptor read/64, error -71 [ 48.310900][ T75] usb 3-1: device descriptor read/64, error -71 [ 48.392551][ T65] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 48.433582][ T75] usb usb3-port1: attempt power cycle [ 48.491784][ T36] audit: type=1400 audit(1784729560.702:237): avc: denied { getopt } for pid=636 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.535896][ T65] usb 2-1: device descriptor read/64, error -71 [ 48.595378][ T643] rust_binder: 76: no such ref 1 [ 48.613992][ T645] FAULT_INJECTION: forcing a failure. [ 48.613992][ T645] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 48.627116][ T645] CPU: 1 UID: 0 PID: 645 Comm: syz.3.115 Not tainted syzkaller #0 e661c05697932dc72467e0ff9a1babb7f2c48647 [ 48.627151][ T645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 48.627165][ T645] Call Trace: [ 48.627173][ T645] [ 48.627181][ T645] __dump_stack+0x21/0x30 [ 48.627215][ T645] dump_stack_lvl+0x140/0x1c0 [ 48.627247][ T645] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.627270][ T645] dump_stack+0x19/0x20 [ 48.627291][ T645] should_fail_ex+0x3c2/0x510 [ 48.627338][ T645] should_fail+0xf/0x20 [ 48.627359][ T645] should_fail_usercopy+0x1e/0x30 [ 48.627389][ T645] _copy_from_user+0x20/0xa0 [ 48.627410][ T645] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x983/0x4000 [ 48.627434][ T645] ? __asan_set_shadow_00+0x12/0x20 [ 48.627476][ T645] ? do_vfs_ioctl+0x182d/0x2010 [ 48.627502][ T645] ? arch_stack_walk+0x10a/0x170 [ 48.627523][ T645] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 48.627551][ T645] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 48.627574][ T645] ? _parse_integer+0x2e/0x40 [ 48.627592][ T645] ? ioctl_has_perm+0x39a/0x500 [ 48.627627][ T645] ? has_cap_mac_admin+0xd0/0xd0 [ 48.627648][ T645] ? proc_fail_nth_write+0x184/0x220 [ 48.627684][ T645] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 48.627708][ T645] ? selinux_file_ioctl+0x732/0x1480 [ 48.627723][ T645] ? vfs_write+0xbcf/0xfd0 [ 48.627738][ T645] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 48.627771][ T645] ? __cfi_vfs_write+0x10/0x10 [ 48.627793][ T645] ? __kasan_check_write+0x18/0x20 [ 48.627816][ T645] ? mutex_unlock+0x90/0x240 [ 48.627846][ T645] ? __cfi_mutex_unlock+0x10/0x10 [ 48.627877][ T645] ? bpf_lsm_file_ioctl+0xd/0x20 [ 48.627908][ T645] ? security_file_ioctl+0x3e/0x110 [ 48.627942][ T645] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 48.627972][ T645] __se_sys_ioctl+0x132/0x1b0 [ 48.628002][ T645] __x64_sys_ioctl+0x7f/0xa0 [ 48.628038][ T645] x64_sys_call+0x1878/0x2ee0 [ 48.628079][ T645] do_syscall_64+0x57/0xf0 [ 48.628103][ T645] ? clear_bhb_loop+0x50/0xa0 [ 48.628131][ T645] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.628159][ T645] RIP: 0033:0x7f7f7339de99 [ 48.628173][ T645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.628186][ T645] RSP: 002b:00007f7f7422b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.628217][ T645] RAX: ffffffffffffffda RBX: 00007f7f73625fa0 RCX: 00007f7f7339de99 [ 48.628235][ T645] RDX: 00002000000005c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 48.628250][ T645] RBP: 00007f7f7422b090 R08: 0000000000000000 R09: 0000000000000000 [ 48.628264][ T645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.628277][ T645] R13: 00007f7f73626038 R14: 00007f7f73625fa0 R15: 00007ffd4b145f68 [ 48.628300][ T645] [ 48.832693][ T65] usb 2-1: device descriptor read/64, error -71 [ 48.893945][ T75] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 48.916254][ T75] usb 3-1: device descriptor read/8, error -71 [ 48.939665][ T647] capability: warning: `syz.3.116' uses deprecated v2 capabilities in a way that may be insecure [ 48.971844][ T9] usb 1-1: USB disconnect, device number 7 [ 48.980090][ T9] usblp0: removed [ 49.020258][ T651] FAULT_INJECTION: forcing a failure. [ 49.020258][ T651] name failslab, interval 1, probability 0, space 0, times 0 [ 49.032986][ T651] CPU: 1 UID: 0 PID: 651 Comm: syz.3.118 Not tainted syzkaller #0 e661c05697932dc72467e0ff9a1babb7f2c48647 [ 49.033017][ T651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 49.033029][ T651] Call Trace: [ 49.033036][ T651] [ 49.033045][ T651] __dump_stack+0x21/0x30 [ 49.033077][ T651] dump_stack_lvl+0x140/0x1c0 [ 49.033110][ T651] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.033132][ T651] dump_stack+0x19/0x20 [ 49.033151][ T651] should_fail_ex+0x3c2/0x510 [ 49.033168][ T651] should_failslab+0xac/0x100 [ 49.033186][ T651] __kmalloc_cache_noprof+0x41/0x470 [ 49.033203][ T651] ? cgroup_init_fs_context+0x65/0x4d0 [ 49.033219][ T651] ? __kasan_kmalloc+0x96/0xb0 [ 49.033236][ T651] cgroup_init_fs_context+0x65/0x4d0 [ 49.033252][ T651] alloc_fs_context+0x5c4/0x800 [ 49.033272][ T651] fs_context_for_mount+0x26/0x40 [ 49.033291][ T651] do_new_mount+0x116/0xb40 [ 49.033305][ T651] ? security_capable+0x44/0x130 [ 49.033322][ T651] path_mount+0x66a/0xff0 [ 49.033335][ T651] ? putname+0x113/0x150 [ 49.033351][ T651] __se_sys_mount+0x2bf/0x480 [ 49.033366][ T651] ? ksys_write+0x1f3/0x260 [ 49.033399][ T651] ? __x64_sys_mount+0xf0/0xf0 [ 49.033416][ T651] __x64_sys_mount+0xc3/0xf0 [ 49.033432][ T651] x64_sys_call+0x2021/0x2ee0 [ 49.033446][ T651] do_syscall_64+0x57/0xf0 [ 49.033465][ T651] ? clear_bhb_loop+0x50/0xa0 [ 49.033486][ T651] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.033506][ T651] RIP: 0033:0x7f7f7339de99 [ 49.033519][ T651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.033542][ T651] RSP: 002b:00007f7f7422b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 49.033558][ T651] RAX: ffffffffffffffda RBX: 00007f7f73625fa0 RCX: 00007f7f7339de99 [ 49.033568][ T651] RDX: 0000200000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 49.033578][ T651] RBP: 00007f7f7422b090 R08: 0000000000000000 R09: 0000000000000000 [ 49.033587][ T651] R10: 0000000000004006 R11: 0000000000000246 R12: 0000000000000001 [ 49.033596][ T651] R13: 00007f7f73626038 R14: 00007f7f73625fa0 R15: 00007ffd4b145f68 [ 49.033608][ T651] [ 49.274474][ T75] usb 3-1: device descriptor read/8, error -71 [ 49.384306][ T65] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 49.517042][ T65] usb 2-1: device descriptor read/64, error -71 [ 49.517042][ T75] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 49.538628][ T75] usb 3-1: device descriptor read/8, error -71 [ 49.671505][ T75] usb 3-1: device descriptor read/8, error -71 [ 49.772474][ T65] usb 2-1: device descriptor read/64, error -71 [ 49.782776][ T75] usb usb3-port1: unable to enumerate USB device [ 49.860965][ T36] audit: type=1400 audit(1784729562.042:238): avc: denied { write } for pid=665 comm="syz.0.123" name="001" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.883634][ T36] audit: type=1400 audit(1784729562.042:239): avc: denied { map } for pid=665 comm="syz.0.123" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.908133][ T65] usb usb2-port1: attempt power cycle [ 50.157956][ T677] netlink: 104 bytes leftover after parsing attributes in process `syz.2.127'. [ 50.167566][ T677] overlayfs: failed to resolve './bus': -2 [ 50.253813][ T65] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 50.278744][ T65] usb 2-1: device descriptor read/8, error -71 [ 50.333646][ T311] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 50.426560][ T65] usb 2-1: device descriptor read/8, error -71 [ 50.487827][ T311] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 50.496126][ T311] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 50.506516][ T311] usb 1-1: config 220 has no interface number 2 [ 50.512850][ T311] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 50.517386][ T75] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 50.526070][ T311] usb 1-1: config 220 interface 0 has no altsetting 0 [ 50.540472][ T311] usb 1-1: config 220 interface 76 has no altsetting 0 [ 50.547347][ T311] usb 1-1: config 220 interface 1 has no altsetting 0 [ 50.554170][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 50.563526][ T311] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 50.572645][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.580668][ T311] usb 1-1: Product: syz [ 50.584855][ T311] usb 1-1: Manufacturer: syz [ 50.589492][ T311] usb 1-1: SerialNumber: syz [ 50.681642][ T75] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 50.689810][ T75] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 50.700059][ T75] usb 3-1: config 0 has no interface number 0 [ 50.701078][ T65] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 50.708252][ T75] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 50.722802][ T75] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.730832][ T75] usb 3-1: Product: syz [ 50.735036][ T75] usb 3-1: Manufacturer: syz [ 50.739657][ T75] usb 3-1: SerialNumber: syz [ 50.743611][ T65] usb 2-1: device descriptor read/8, error -71 [ 50.747255][ T75] usb 3-1: config 0 descriptor?? [ 50.756611][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 50.764496][ T9] usb 4-1: too many configurations: 173, using maximum allowed: 8 [ 50.773094][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.783284][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 50.794227][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 50.804005][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.817682][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.827922][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 50.839355][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 50.849685][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.862757][ T311] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 50.869191][ T311] usb 1-1: No valid video chain found. [ 50.874789][ T311] usb 1-1: selecting invalid altsetting 0 [ 50.881154][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.891366][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 50.902377][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 50.912950][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.927452][ T311] usb 1-1: USB disconnect, device number 8 [ 50.933391][ T65] usb 2-1: device descriptor read/8, error -71 [ 50.940601][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.951458][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 50.962980][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 50.972792][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.986346][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.996498][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 51.007504][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 51.017273][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.030838][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.040963][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 51.052025][ T65] usb usb2-port1: unable to enumerate USB device [ 51.058942][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 51.068731][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.082293][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.092535][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 51.103664][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 51.113592][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.127366][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.137770][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 51.148701][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 51.158503][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.173334][ T75] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 51.174297][ T9] usb 4-1: New USB device found, idVendor=09e8, idProduct=c703, bcdDevice=b3.01 [ 51.179712][ T75] usb 3-1: No valid video chain found. [ 51.188847][ T9] usb 4-1: New USB device strings: Mfr=239, Product=52, SerialNumber=226 [ 51.203441][ T75] usb 3-1: USB disconnect, device number 10 [ 51.212010][ T9] usb 4-1: Product: syz [ 51.216228][ T9] usb 4-1: Manufacturer: syz [ 51.220880][ T9] usb 4-1: SerialNumber: syz [ 51.425613][ T703] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 51.435852][ T703] kvm: pic: level sensitive irq not supported [ 51.435942][ T703] kvm: pic: non byte read [ 51.447573][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 51.467038][ T9] usb 4-1: USB disconnect, device number 13 [ 51.578163][ T707] bridge0: port 3(erspan0) entered blocking state [ 51.584891][ T707] bridge0: port 3(erspan0) entered disabled state [ 51.591602][ T707] erspan0: entered allmulticast mode [ 51.598000][ T707] erspan0: entered promiscuous mode [ 51.603380][ T707] bridge0: port 3(erspan0) entered blocking state [ 51.609855][ T707] bridge0: port 3(erspan0) entered forwarding state [ 51.617802][ T707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 51.750706][ T730] rust_binder: Write failure EINVAL in pid:151 [ 51.750815][ T730] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 51.774621][ T730] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 51.953146][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 51.953164][ T36] audit: type=1400 audit(1784729564.092:257): avc: denied { read } for pid=734 comm="syz.1.150" path="socket:[6677]" dev="sockfs" ino=6677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.077869][ T36] audit: type=1400 audit(1784729564.220:258): avc: denied { mount } for pid=744 comm="syz.3.152" name="/" dev="pstore" ino=2607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 52.171380][ T36] audit: type=1400 audit(1784729564.308:259): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 52.738971][ T36] audit: type=1400 audit(1784729564.868:260): avc: denied { create } for pid=755 comm="syz.2.156" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 52.741343][ T756] 9pnet_fd: Insufficient options for proto=fd [ 52.766082][ T36] audit: type=1400 audit(1784729564.868:261): avc: denied { read write } for pid=755 comm="syz.2.156" name="file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 52.789265][ T36] audit: type=1400 audit(1784729564.868:262): avc: denied { open } for pid=755 comm="syz.2.156" path="/22/file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 52.812246][ T36] audit: type=1400 audit(1784729564.868:263): avc: denied { ioctl } for pid=755 comm="syz.2.156" path="/22/file0" dev="tmpfs" ino=140 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 53.122832][ T36] audit: type=1400 audit(1784729565.242:264): avc: denied { getopt } for pid=765 comm="syz.3.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.210211][ T36] audit: type=1400 audit(1784729565.330:265): avc: denied { append } for pid=767 comm="syz.3.160" name="file2" dev="tmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.428099][ T36] audit: type=1400 audit(1784729565.547:266): avc: denied { mount } for pid=772 comm="syz.0.162" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 53.460077][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 53.542012][ T778] SELinux: policydb magic number 0x6e756f6d does not match expected magic number 0xf97cff8c [ 53.552288][ T778] SELinux: failed to load policy [ 53.614425][ T9] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 53.625532][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 53.634060][ T9] usb 4-1: string descriptor 0 read error: -22 [ 53.640299][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 53.649398][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.718328][ T788] ÿÿÿÿÿÿÌ: renamed from veth0_vlan (while UP) [ 53.821024][ T791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'. [ 54.068544][ T9] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 54.070011][ T388] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 54.085181][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:0926:3333.0004/input/input8 [ 54.165036][ T9] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 54.232786][ T388] usb 3-1: too many configurations: 134, using maximum allowed: 8 [ 54.241565][ T388] usb 3-1: config index 0 descriptor too short (expected 72, got 70) [ 54.249725][ T388] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.259890][ T388] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.273577][ T388] usb 3-1: config index 1 descriptor too short (expected 72, got 70) [ 54.281723][ T388] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.292049][ T388] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.305699][ T388] usb 3-1: config index 2 descriptor too short (expected 72, got 70) [ 54.313053][ T311] usb 4-1: USB disconnect, device number 14 [ 54.313962][ T388] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.331717][ T388] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.347478][ T388] usb 3-1: config index 3 descriptor too short (expected 72, got 70) [ 54.355736][ T388] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.365956][ T388] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.379588][ T388] usb 3-1: config index 4 descriptor too short (expected 72, got 70) [ 54.387771][ T388] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.397951][ T388] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.411588][ T388] usb 3-1: config index 5 descriptor too short (expected 72, got 70) [ 54.419715][ T388] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.430373][ T388] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.443965][ T388] usb 3-1: config index 6 descriptor too short (expected 72, got 70) [ 54.452186][ T388] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.462365][ T388] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.476257][ T388] usb 3-1: config index 7 descriptor too short (expected 72, got 70) [ 54.484456][ T388] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.494822][ T388] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.523412][ T791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.533730][ T791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.556802][ T795] SELinux: policydb version 0 does not match my version range 15-33 [ 54.564994][ T795] SELinux: failed to load policy [ 54.811291][ T327] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 54.877858][ T802] netlink: 'syz.3.172': attribute type 27 has an invalid length. [ 54.933208][ T807] capability: warning: `syz.3.173' uses 32-bit capabilities (legacy support in use) [ 54.953563][ T327] usb 1-1: device descriptor read/64, error -71 [ 55.129899][ T820] kvm: pic: non byte write [ 55.189354][ T824] usb usb8: usbfs: process 824 (syz.2.178) did not claim interface 0 before use [ 55.202990][ T826] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=262 sclass=netlink_tcpdiag_socket pid=826 comm=syz.3.180 [ 55.207230][ T327] usb 1-1: device descriptor read/64, error -71 [ 55.460848][ T327] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 55.592650][ T327] usb 1-1: device descriptor read/64, error -71 [ 55.602857][ T311] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 55.756096][ T311] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 55.767074][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 88, setting to 64 [ 55.778046][ T311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 55.791118][ T311] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 55.800257][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.809189][ T311] usb 4-1: config 0 descriptor?? [ 55.814500][ T828] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 55.834084][ T833] rust_binder: Write failure EINVAL in pid:163 [ 55.836149][ T327] usb 1-1: device descriptor read/64, error -71 [ 55.971076][ T327] usb usb1-port1: attempt power cycle [ 56.026033][ T828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.039442][ T828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.065971][ T311] usbhid 4-1:0.0: can't add hid device: -71 [ 56.072294][ T311] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 56.083032][ T311] usb 4-1: USB disconnect, device number 15 [ 56.256315][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 56.296857][ T926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.305504][ T926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.343086][ T327] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 56.364399][ T327] usb 1-1: device descriptor read/8, error -71 [ 56.414012][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 56.420352][ T9] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 56.428556][ T9] usb 2-1: config 0 has no interface number 0 [ 56.436265][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 56.445374][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.453398][ T9] usb 2-1: Product: syz [ 56.457599][ T9] usb 2-1: Manufacturer: syz [ 56.462219][ T9] usb 2-1: SerialNumber: syz [ 56.467676][ T9] usb 2-1: config 0 descriptor?? [ 56.496197][ T327] usb 1-1: device descriptor read/8, error -71 [ 56.628481][ T934] overlayfs: conflicting options: userxattr,verity=on [ 56.744507][ T327] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 56.757632][ T9] usb 2-1: USB disconnect, device number 14 [ 56.769825][ T327] usb 1-1: device descriptor read/8, error -71 [ 56.836223][ T944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.844890][ T944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.901681][ T327] usb 1-1: device descriptor read/8, error -71 [ 57.022278][ T327] usb usb1-port1: unable to enumerate USB device [ 57.052557][ T75] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 57.206953][ T75] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.217975][ T75] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.227797][ T75] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 57.236923][ T75] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.245972][ T75] usb 4-1: config 0 descriptor?? [ 57.378357][ T948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.387849][ T948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.547612][ T36] kauditd_printk_skb: 608 callbacks suppressed [ 57.547630][ T36] audit: type=1400 audit(1784729569.607:875): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.591807][ T953] netlink: 56 bytes leftover after parsing attributes in process `syz.0.204'. [ 57.679425][ T959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 57.704942][ T964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'. [ 57.824548][ T969] netlink: 100 bytes leftover after parsing attributes in process `syz.0.210'. [ 57.951977][ T978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.960560][ T978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.045027][ T45] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 58.198399][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 58.206239][ T45] usb 2-1: too many configurations: 173, using maximum allowed: 8 [ 58.215123][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.225438][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 58.235429][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.249499][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.259982][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 58.267708][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 58.278222][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.292057][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.302470][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 58.312524][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.326565][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.336992][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 58.347074][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.361171][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.371568][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 58.398583][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.412171][ T75] usbhid 4-1:0.0: can't add hid device: -71 [ 58.418203][ T75] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 58.427178][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.438501][ T75] usb 4-1: USB disconnect, device number 16 [ 58.444498][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 58.449777][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 58.461138][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.471898][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.485035][ T31] usb 1-1: config 0 has no interfaces? [ 58.491539][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 58.500882][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.509516][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.520151][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 58.520705][ T36] audit: type=1326 audit(1784729570.566:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=984 comm="syz.3.217" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f7339de99 code=0x0 [ 58.531025][ T31] usb 1-1: config 0 descriptor?? [ 58.560177][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.577808][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.588427][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 58.605884][ T988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.615517][ T988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.623558][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.640319][ T45] usb 2-1: New USB device found, idVendor=09e8, idProduct=c703, bcdDevice=b3.01 [ 58.649709][ T45] usb 2-1: New USB device strings: Mfr=239, Product=52, SerialNumber=226 [ 58.658705][ T45] usb 2-1: Product: syz [ 58.663094][ T45] usb 2-1: Manufacturer: syz [ 58.667757][ T45] usb 2-1: SerialNumber: syz [ 58.802511][ T983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.812150][ T983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.821413][ T31] usb 1-1: USB disconnect, device number 13 [ 58.880849][ T45] usb 2-1: MIDIStreaming interface descriptor not found [ 58.895310][ T45] usb 2-1: USB disconnect, device number 15 [ 58.908640][ T793] udevd[793]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.166810][ T36] audit: type=1400 audit(1784729571.198:877): avc: denied { cmd } for pid=990 comm="iou-wrk-991" path="socket:[9072]" dev="sockfs" ino=9072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 59.369176][ T1001] syzkaller1: entered promiscuous mode [ 59.375180][ T1001] syzkaller1: entered allmulticast mode [ 59.421138][ T36] audit: type=1400 audit(1784729571.455:878): avc: granted { setsecparam } for pid=1003 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 59.452234][ T36] audit: type=1400 audit(1784729571.455:879): avc: denied { map } for pid=1003 comm="syz.1.222" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.477397][ T36] audit: type=1400 audit(1784729571.455:880): avc: granted { setsecparam } for pid=1003 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 59.504114][ T36] audit: type=1400 audit(1784729571.465:881): avc: granted { setsecparam } for pid=1003 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 59.559188][ T1012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.568733][ T1012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.582804][ T311] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 59.593867][ T1012] fuseblk: Bad value for 'fd' [ 59.613867][ T388] usb 3-1: string descriptor 0 read error: -32 [ 59.620245][ T388] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 59.629479][ T388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.650501][ T388] usb 3-1: can't set config #1, error -32 [ 59.662756][ T1019] syz.1.225: attempt to access beyond end of device [ 59.662756][ T1019] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 59.679022][ T1019] EXT4-fs (loop1): unable to read superblock [ 59.685498][ T36] audit: type=1400 audit(1784729571.722:882): avc: denied { create } for pid=1017 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 59.743095][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 59.752693][ T311] usb 4-1: config 1 has an invalid interface number: 139 but max is 0 [ 59.761797][ T1021] netlink: 'syz.0.228': attribute type 4 has an invalid length. [ 59.762705][ T311] usb 4-1: config 1 has no interface number 0 [ 59.775843][ T311] usb 4-1: config 1 interface 139 has no altsetting 0 [ 59.782776][ T1021] netlink: 17 bytes leftover after parsing attributes in process `syz.0.228'. [ 59.793014][ T311] usb 4-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice=6f.ec [ 59.802337][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.813949][ T311] usb 4-1: Product: syz [ 59.818495][ T311] usb 4-1: Manufacturer: syz [ 59.823309][ T311] usb 4-1: SerialNumber: syz [ 59.829382][ T36] audit: type=1400 audit(1784729571.861:883): avc: denied { mounton } for pid=1020 comm="syz.0.228" path="/49/file0" dev="incremental-fs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.922199][ T36] audit: type=1400 audit(1784729571.950:884): avc: denied { write } for pid=1027 comm="syz.1.231" name="igmp6" dev="proc" ino=4026532346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 60.063642][ T311] usb 4-1: unsupported MDLM descriptors [ 60.072337][ T311] usb 4-1: USB disconnect, device number 17 [ 60.159079][ T65] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 60.210518][ T1053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.219058][ T1053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.322337][ T65] usb 1-1: unable to get BOS descriptor or descriptor too short [ 60.330067][ T65] usb 1-1: too many configurations: 173, using maximum allowed: 8 [ 60.338725][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.348923][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 60.358727][ T65] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.372282][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.382426][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 60.392181][ T65] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.405759][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.415901][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 60.425721][ T65] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.439185][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.449303][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 60.459070][ T65] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.472638][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.482817][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 60.492613][ T65] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.506125][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.516248][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 60.526007][ T65] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.539718][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.549842][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 60.559619][ T65] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.563370][ T45] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 60.573764][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.590073][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 60.599858][ T65] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.614184][ T65] usb 1-1: New USB device found, idVendor=09e8, idProduct=c703, bcdDevice=b3.01 [ 60.623249][ T65] usb 1-1: New USB device strings: Mfr=239, Product=52, SerialNumber=226 [ 60.631917][ T65] usb 1-1: Product: syz [ 60.636313][ T65] usb 1-1: Manufacturer: syz [ 60.640966][ T65] usb 1-1: SerialNumber: syz [ 60.736285][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.747443][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.757490][ T45] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 60.767054][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.776407][ T45] usb 2-1: config 0 descriptor?? [ 60.856050][ T65] usb 1-1: MIDIStreaming interface descriptor not found [ 60.878805][ T65] usb 1-1: USB disconnect, device number 14 [ 60.913147][ T793] udevd[793]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.981019][ T1076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.990697][ T1076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.998914][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 61.004978][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 61.013816][ T45] usb 2-1: USB disconnect, device number 16 [ 61.575469][ T1088] tipc: Enabling of bearer rejected, failed to enable media [ 61.584740][ T1087] rust_binder: 151: no such ref 2 [ 61.589880][ T1087] rust_binder: 151: no such ref 0 [ 61.595026][ T1087] rust_binder: 151: no such ref 0 [ 61.600118][ T1087] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 61.987522][ T65] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 62.284467][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 62.291331][ T1110] 9pnet_fd: p9_fd_create_tcp (1110): problem connecting socket to 127.0.0.1 [ 62.293888][ T9] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 62.325105][ T1111] fido_id[1111]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 62.629037][ T1126] 9pnet_fd: Insufficient options for proto=fd [ 62.746836][ T1137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.755462][ T1137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.764656][ T1137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.773244][ T1137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.805004][ T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 62.957805][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 62.965567][ T45] usb 1-1: too many configurations: 173, using maximum allowed: 8 [ 62.974203][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.984381][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 62.994151][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.007876][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.018044][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 63.027830][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.041364][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.051524][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 63.061287][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.074862][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.077556][ T65] usb 4-1: device descriptor read/64, error -71 [ 63.085172][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 63.101269][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.114874][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.125026][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 63.134793][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.148442][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.158595][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 63.168373][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.181924][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.192073][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 63.201847][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.216613][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.226768][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 63.236531][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.252804][ T45] usb 1-1: New USB device found, idVendor=09e8, idProduct=c703, bcdDevice=b3.01 [ 63.262056][ T45] usb 1-1: New USB device strings: Mfr=239, Product=52, SerialNumber=226 [ 63.270580][ T45] usb 1-1: Product: syz [ 63.274751][ T45] usb 1-1: Manufacturer: syz [ 63.279380][ T45] usb 1-1: SerialNumber: syz [ 63.365214][ T65] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.378625][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 63.390837][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 63.400904][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.414093][ T65] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.423425][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.433200][ T65] usb 4-1: config 0 descriptor?? [ 63.438479][ T1139] ======================================================= [ 63.438479][ T1139] WARNING: The mand mount option has been deprecated and [ 63.438479][ T1139] and is ignored by this kernel. Remove the mand [ 63.438479][ T1139] option from the mount to silence this warning. [ 63.438479][ T1139] ======================================================= [ 63.489959][ T1145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 63.498882][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 63.498912][ T36] audit: type=1400 audit(1784729575.485:894): avc: denied { nlmsg_read } for pid=1144 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.529768][ T45] usb 1-1: MIDIStreaming interface descriptor not found [ 63.543615][ T45] usb 1-1: USB disconnect, device number 15 [ 63.560923][ T793] udevd[793]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.580970][ T36] audit: type=1400 audit(1784729575.574:895): avc: denied { connect } for pid=1148 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.647412][ T388] usb 3-1: USB disconnect, device number 11 [ 63.792120][ T36] audit: type=1400 audit(1784729575.783:896): avc: denied { mounton } for pid=1161 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.849440][ T65] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 63.857923][ T861] bridge_slave_1: left allmulticast mode [ 63.863605][ T861] bridge_slave_1: left promiscuous mode [ 63.869927][ T65] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 63.874808][ T861] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.890150][ T861] bridge_slave_0: left allmulticast mode [ 63.896239][ T861] bridge_slave_0: left promiscuous mode [ 63.901889][ T861] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.958850][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.965999][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.973113][ T1161] bridge_slave_0: entered allmulticast mode [ 63.975331][ T45] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 63.980398][ T1161] bridge_slave_0: entered promiscuous mode [ 63.993096][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.000190][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.007299][ T1161] bridge_slave_1: entered allmulticast mode [ 64.013541][ T1161] bridge_slave_1: entered promiscuous mode [ 64.033917][ T861] veth1_macvtap: left promiscuous mode [ 64.039603][ T861] ÿÿÿÿÿÿÌ: left promiscuous mode [ 64.126514][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.133572][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.137095][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 64.141022][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.148699][ T45] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 64.152978][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.162048][ T45] usb 2-1: config 0 has no interface number 0 [ 64.174805][ T45] usb 2-1: config 0 interface 184 has no altsetting 0 [ 64.188303][ T45] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 64.200772][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.209423][ T45] usb 2-1: Product: syz [ 64.214053][ T45] usb 2-1: Manufacturer: syz [ 64.214247][ T889] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.219784][ T45] usb 2-1: SerialNumber: syz [ 64.231842][ T889] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.241976][ T45] usb 2-1: config 0 descriptor?? [ 64.254166][ T45] smsc75xx v1.0.0 [ 64.258160][ T883] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.265247][ T883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.279535][ T889] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.286590][ T889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.323690][ T1161] veth0_vlan: entered promiscuous mode [ 64.341386][ T1161] veth1_macvtap: entered promiscuous mode [ 64.350764][ T36] audit: type=1400 audit(1784729576.338:897): avc: denied { write } for pid=1175 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.382816][ T36] audit: type=1400 audit(1784729576.368:898): avc: denied { mounton } for pid=1161 comm="syz-executor" path="/root/syzkaller.PS3AvL/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.424215][ T36] audit: type=1400 audit(1784729576.417:899): avc: denied { read } for pid=1181 comm="syz.4.276" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 64.472299][ T1185] tmpfs: Unknown parameter 'noinode32' [ 64.478378][ T1185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.283'. [ 64.691034][ T65] usb 4-1: USB disconnect, device number 18 [ 64.751480][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.862541][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 64.873479][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 64.892618][ T373] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 64.912754][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 64.919145][ T9] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.930266][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 64.937032][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 64.946129][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.955110][ T9] usb 5-1: config 0 descriptor?? [ 65.046617][ T373] usb 1-1: unable to get BOS descriptor or descriptor too short [ 65.054428][ T373] usb 1-1: too many configurations: 173, using maximum allowed: 8 [ 65.062904][ T373] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 65.070589][ T373] usb 1-1: can't read configurations, error -71 [ 65.086311][ T1160] 9p: Unknown Cache mode or invalid value dev/kvm [ 65.215334][ T1194] netlink: 232 bytes leftover after parsing attributes in process `syz.3.287'. [ 65.226744][ T1194] netlink: 'syz.3.287': attribute type 46 has an invalid length. [ 65.234820][ T1194] netlink: 'syz.3.287': attribute type 27 has an invalid length. [ 65.301392][ T36] audit: type=1400 audit(1784729577.280:900): avc: denied { setopt } for pid=1195 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.365805][ T9] lua 0003:1E7D:2C2E.0007: invalid report_size 24941 [ 65.372618][ T9] lua 0003:1E7D:2C2E.0007: item 0 2 1 7 parsing failed [ 65.382207][ T9] lua 0003:1E7D:2C2E.0007: parse failed [ 65.387919][ T9] lua 0003:1E7D:2C2E.0007: probe with driver lua failed with error -22 [ 65.418834][ T36] audit: type=1400 audit(1784729577.399:901): avc: denied { accept } for pid=1200 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 65.438610][ T36] audit: type=1400 audit(1784729577.399:902): avc: denied { append } for pid=1200 comm="syz.3.290" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.528522][ T1160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.537243][ T1160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.575993][ T9] usb 5-1: USB disconnect, device number 2 [ 65.583809][ T1208] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 65.627086][ T36] audit: type=1400 audit(1784729577.598:903): avc: denied { accept } for pid=1211 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.872183][ T1223] kvm: pic: single mode not supported [ 65.872198][ T1223] kvm: pic: level sensitive irq not supported [ 66.222626][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 66.274767][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 66.285734][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 66.295757][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 66.305327][ T45] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 66.315154][ T45] usb 2-1: USB disconnect, device number 17 [ 66.389075][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 66.396913][ T9] usb 4-1: too many configurations: 173, using maximum allowed: 8 [ 66.406071][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 66.413672][ T9] usb 4-1: can't read configurations, error -71 [ 66.424026][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 66.576146][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.587782][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 66.598962][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 66.608937][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.621874][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.630947][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.639951][ T31] usb 1-1: config 0 descriptor?? [ 66.746327][ T388] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 66.910157][ T388] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 66.919335][ T388] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 66.927469][ T388] usb 5-1: Product: syz [ 66.935668][ T388] ftdi_sio 5-1:5.0: FTDI USB Serial Device converter detected [ 66.943727][ T388] usb 5-1: Detected FT4233HP [ 67.050551][ T31] plantronics 0003:047F:FFFF.0008: item fetching failed at offset 0/15 [ 67.059110][ T31] plantronics 0003:047F:FFFF.0008: parse failed [ 67.065405][ T31] plantronics 0003:047F:FFFF.0008: probe with driver plantronics failed with error -22 [ 67.098802][ T311] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 67.137924][ T388] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 67.145371][ T388] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 67.152962][ T388] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 67.162296][ T388] usb 5-1: USB disconnect, device number 3 [ 67.169057][ T388] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 67.178971][ T388] ftdi_sio 5-1:5.0: device disconnected [ 67.249814][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 67.255048][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 67.263822][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.274034][ T311] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 67.284339][ T311] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 67.295564][ T311] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 67.304675][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.312735][ T311] usb 2-1: Product: syz [ 67.316927][ T311] usb 2-1: Manufacturer: syz [ 67.321679][ T311] usb 2-1: SerialNumber: syz [ 67.411827][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.422039][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 67.431772][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 67.440867][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 67.449038][ T9] usb 4-1: SerialNumber: syz [ 67.537112][ T311] usb 2-1: USB disconnect, device number 18 [ 67.594885][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.668857][ T1268] FAULT_INJECTION: forcing a failure. [ 67.668857][ T1268] name failslab, interval 1, probability 0, space 0, times 0 [ 67.681745][ T1268] CPU: 0 UID: 0 PID: 1268 Comm: syz.4.314 Not tainted syzkaller #0 e661c05697932dc72467e0ff9a1babb7f2c48647 [ 67.681783][ T1268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 67.681801][ T1268] Call Trace: [ 67.681809][ T1268] [ 67.681817][ T1268] __dump_stack+0x21/0x30 [ 67.681852][ T1268] dump_stack_lvl+0x140/0x1c0 [ 67.681882][ T1268] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.681915][ T1268] dump_stack+0x19/0x20 [ 67.681943][ T1268] should_fail_ex+0x3c2/0x510 [ 67.681974][ T1268] should_failslab+0xac/0x100 [ 67.681994][ T1268] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 67.682023][ T1268] ? vfs_mkdir+0x58e/0x810 [ 67.682044][ T1268] ? __x64_sys_mkdir+0x70/0x80 [ 67.682063][ T1268] ? sidtab_sid2str_get+0x135/0x360 [ 67.682085][ T1268] ? do_syscall_64+0x57/0xf0 [ 67.682102][ T1268] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.682122][ T1268] kmemdup_noprof+0x31/0x80 [ 67.682144][ T1268] sidtab_sid2str_get+0x135/0x360 [ 67.682166][ T1268] security_sid_to_context_core+0x30d/0x5d0 [ 67.682187][ T1268] security_sid_to_context_force+0x31/0x40 [ 67.682207][ T1268] selinux_inode_init_security+0x659/0x950 [ 67.682229][ T1268] ? __cfi_selinux_inode_init_security+0x10/0x10 [ 67.682251][ T1268] ? security_inode_init_security+0x11c/0x600 [ 67.682269][ T1268] ? __cfi_shmem_initxattrs+0x10/0x10 [ 67.682291][ T1268] ? __cfi_shmem_initxattrs+0x10/0x10 [ 67.682317][ T1268] security_inode_init_security+0x1ab/0x600 [ 67.682336][ T1268] ? __cfi_security_inode_init_security+0x10/0x10 [ 67.682355][ T1268] ? set_cached_acl+0xe1/0x1a0 [ 67.682398][ T1268] ? simple_acl_create+0x190/0x1c0 [ 67.682413][ T1268] shmem_mknod+0xd5/0x200 [ 67.682435][ T1268] shmem_mkdir+0x3b/0x80 [ 67.682456][ T1268] vfs_mkdir+0x58e/0x810 [ 67.682478][ T1268] dir_mkdir+0x3a3/0x5b0 [ 67.682496][ T1268] ? __cfi_dir_mkdir+0x10/0x10 [ 67.682513][ T1268] ? selinux_inode_mkdir+0x26/0x30 [ 67.682534][ T1268] ? bpf_lsm_inode_mkdir+0xd/0x20 [ 67.682552][ T1268] ? security_inode_mkdir+0x7e/0x180 [ 67.682573][ T1268] vfs_mkdir+0x58e/0x810 [ 67.682615][ T1268] do_mkdirat+0x240/0x530 [ 67.682643][ T1268] ? strncpy_from_user+0x14f/0x280 [ 67.682669][ T1268] ? __cfi_do_mkdirat+0x10/0x10 [ 67.682700][ T1268] ? getname_flags+0x203/0x6b0 [ 67.682718][ T1268] __x64_sys_mkdir+0x70/0x80 [ 67.682740][ T1268] x64_sys_call+0x26c8/0x2ee0 [ 67.682754][ T1268] do_syscall_64+0x57/0xf0 [ 67.682770][ T1268] ? clear_bhb_loop+0x50/0xa0 [ 67.682791][ T1268] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.682813][ T1268] RIP: 0033:0x7f1d7759de99 [ 67.682826][ T1268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.682840][ T1268] RSP: 002b:00007f1d78392028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 67.682857][ T1268] RAX: ffffffffffffffda RBX: 00007f1d77825fa0 RCX: 00007f1d7759de99 [ 67.682869][ T1268] RDX: 0000000000000000 RSI: 0000000000000137 RDI: 00002000000003c0 [ 67.682880][ T1268] RBP: 00007f1d78392090 R08: 0000000000000000 R09: 0000000000000000 [ 67.682890][ T1268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.682899][ T1268] R13: 00007f1d77826038 R14: 00007f1d77825fa0 R15: 00007ffce9b572a8 [ 67.682913][ T1268] [ 68.239843][ T1287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.249080][ T1287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.357011][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 68.507993][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 68.514505][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.524856][ T31] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 68.533933][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 68.543028][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.551848][ T31] usb 5-1: config 0 descriptor?? [ 68.767870][ T311] usb 5-1: USB disconnect, device number 4 [ 68.924530][ T36] kauditd_printk_skb: 79 callbacks suppressed [ 68.924548][ T36] audit: type=1400 audit(1784729580.886:983): avc: denied { map } for pid=1293 comm="syz.3.324" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.935656][ T1294] FAULT_INJECTION: forcing a failure. [ 68.935656][ T1294] name failslab, interval 1, probability 0, space 0, times 0 [ 68.954695][ T36] audit: type=1400 audit(1784729580.886:984): avc: denied { execute } for pid=1293 comm="syz.3.324" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.968449][ T1294] CPU: 0 UID: 0 PID: 1294 Comm: syz.3.324 Not tainted syzkaller #0 e661c05697932dc72467e0ff9a1babb7f2c48647 [ 68.968547][ T1294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 68.968587][ T1294] Call Trace: [ 68.968607][ T1294] [ 68.968626][ T1294] __dump_stack+0x21/0x30 [ 68.968727][ T1294] dump_stack_lvl+0x140/0x1c0 [ 68.968806][ T1294] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.968881][ T1294] ? kasan_save_track+0x4f/0x80 [ 68.968947][ T1294] ? kasan_save_alloc_info+0x3a/0x50 [ 68.969028][ T1294] dump_stack+0x19/0x20 [ 68.969105][ T1294] should_fail_ex+0x3c2/0x510 [ 68.969197][ T1294] should_failslab+0xac/0x100 [ 68.969280][ T1294] kmem_cache_alloc_noprof+0x42/0x410 [ 68.969339][ T1294] ? mas_wr_store_type+0x13f3/0x1b40 [ 68.969417][ T1294] ? mas_alloc_nodes+0x254/0x9d0 [ 68.969497][ T1294] mas_alloc_nodes+0x254/0x9d0 [ 68.969584][ T1294] mas_preallocate+0x79b/0xc90 [ 68.969672][ T1294] ? __cfi_mas_preallocate+0x10/0x10 [ 68.969751][ T1294] ? __kasan_check_read+0x15/0x20 [ 68.969803][ T1294] ? anon_vma_name+0x51/0xa0 [ 68.969889][ T1294] ? vm_area_dup+0x415/0x560 [ 68.969944][ T1294] __split_vma+0x449/0xc10 [ 68.970005][ T1294] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 68.970067][ T1294] ? _parse_integer_limit+0x195/0x1e0 [ 68.970127][ T1294] ? can_vma_merge_left+0x184/0x4b0 [ 68.970176][ T1294] vma_modify+0x60c/0x1540 [ 68.970245][ T1294] vma_modify_flags+0x182/0x1c0 [ 68.970315][ T1294] mlock_fixup+0x1c9/0x740 [ 68.970394][ T1294] apply_vma_lock_flags+0x28a/0x3b0 [ 68.970481][ T1294] ? do_mlock+0xa10/0xa10 [ 68.970581][ T1294] ? __cfi_down_write_killable+0x10/0x10 [ 68.970689][ T1294] ? __kasan_check_write+0x18/0x20 [ 68.970741][ T1294] ? mutex_unlock+0x90/0x240 [ 68.970818][ T1294] do_mlock+0x71d/0xa10 [ 68.970890][ T1294] ? fput+0x1a4/0x230 [ 68.970969][ T1294] ? lru_gen_add_folio+0x880/0x880 [ 68.971051][ T1294] ? ksys_write+0x1f3/0x260 [ 68.971114][ T1294] ? xfd_validate_state+0x68/0x140 [ 68.971206][ T1294] ? __cfi_ksys_write+0x10/0x10 [ 68.971262][ T1294] ? __kasan_check_read+0x15/0x20 [ 68.971311][ T1294] __x64_sys_mlock+0x64/0x80 [ 68.971384][ T1294] x64_sys_call+0x670/0x2ee0 [ 68.971424][ T1294] do_syscall_64+0x57/0xf0 [ 68.971481][ T1294] ? clear_bhb_loop+0x50/0xa0 [ 68.971553][ T1294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.971617][ T1294] RIP: 0033:0x7f7f7339de99 [ 68.971667][ T1294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.971712][ T1294] RSP: 002b:00007f7f7422b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 68.971764][ T1294] RAX: ffffffffffffffda RBX: 00007f7f73625fa0 RCX: 00007f7f7339de99 [ 68.971802][ T1294] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 68.971839][ T1294] RBP: 00007f7f7422b090 R08: 0000000000000000 R09: 0000000000000000 [ 68.971876][ T1294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.971918][ T1294] R13: 00007f7f73626038 R14: 00007f7f73625fa0 R15: 00007ffd4b145f68 [ 68.971983][ T1294] [ 69.054044][ T1296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=1296 comm=syz.3.325 [ 69.253504][ T31] usb 1-1: USB disconnect, device number 18 [ 69.545479][ T1308] SELinux: failed to load policy [ 69.712186][ T1325] rust_binder: Read failure Err(EAGAIN) in pid:52 [ 69.783233][ T36] audit: type=1400 audit(1784729581.731:985): avc: denied { map } for pid=1326 comm="syz.4.336" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 69.944342][ T36] audit: type=1400 audit(1784729581.890:986): avc: denied { getopt } for pid=1331 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.967249][ T36] audit: type=1400 audit(1784729581.890:987): avc: denied { ioctl } for pid=1331 comm="syz.3.337" path="socket:[13058]" dev="sockfs" ino=13058 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.667167][ T36] audit: type=1400 audit(1784729583.587:988): avc: denied { append } for pid=1339 comm="syz.4.340" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.131286][ T1354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=1354 comm=syz.0.344 [ 71.302318][ T373] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 71.463785][ T1362] netlink: 'syz.0.347': attribute type 16 has an invalid length. [ 71.479546][ T1362] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.347'. [ 71.511411][ T373] usb 5-1: No LPM exit latency info found, disabling LPM. [ 71.549210][ T373] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 8 [ 71.573366][ T373] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 71.580146][ T1365] FAULT_INJECTION: forcing a failure. [ 71.580146][ T1365] name failslab, interval 1, probability 0, space 0, times 0 [ 71.596401][ T373] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 is Bulk; changing to Interrupt [ 71.596429][ T1365] CPU: 1 UID: 0 PID: 1365 Comm: syz.0.348 Not tainted syzkaller #0 e661c05697932dc72467e0ff9a1babb7f2c48647 [ 71.596462][ T1365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 71.596493][ T1365] Call Trace: [ 71.596517][ T1365] [ 71.596554][ T1365] __dump_stack+0x21/0x30 [ 71.596674][ T1365] dump_stack_lvl+0x140/0x1c0 [ 71.596747][ T1365] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.596830][ T1365] ? __kasan_kmalloc+0x96/0xb0 [ 71.596907][ T1365] dump_stack+0x19/0x20 [ 71.596990][ T1365] should_fail_ex+0x3c2/0x510 [ 71.597075][ T1365] should_failslab+0xac/0x100 [ 71.597141][ T1365] __kmalloc_node_noprof+0x69/0x500 [ 71.597199][ T1365] ? __kvmalloc_node_noprof+0x128/0x300 [ 71.597278][ T1365] __kvmalloc_node_noprof+0x128/0x300 [ 71.597362][ T1365] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 71.597445][ T1365] ? __kasan_check_write+0x18/0x20 [ 71.597500][ T1365] ? _raw_spin_lock+0x92/0x120 [ 71.597558][ T1365] ? __cfi__raw_spin_lock+0x10/0x10 [ 71.597617][ T1365] simple_xattr_alloc+0x67/0x140 [ 71.597676][ T1365] shmem_initxattrs+0x24f/0x530 [ 71.597752][ T1365] ? security_inode_init_security+0x11c/0x600 [ 71.597821][ T1365] security_inode_init_security+0x431/0x600 [ 71.597895][ T1365] ? __cfi_shmem_initxattrs+0x10/0x10 [ 71.597998][ T1365] ? __cfi_security_inode_init_security+0x10/0x10 [ 71.598077][ T1365] ? set_cached_acl+0xe1/0x1a0 [ 71.598153][ T1365] ? simple_acl_create+0x190/0x1c0 [ 71.598209][ T1365] shmem_mknod+0xd5/0x200 [ 71.598285][ T1365] shmem_mkdir+0x3b/0x80 [ 71.598353][ T1365] vfs_mkdir+0x58e/0x810 [ 71.598432][ T1365] dir_mkdir+0x3a3/0x5b0 [ 71.598491][ T1365] ? __cfi_dir_mkdir+0x10/0x10 [ 71.598551][ T1365] ? selinux_inode_mkdir+0x26/0x30 [ 71.598634][ T1365] ? bpf_lsm_inode_mkdir+0xd/0x20 [ 71.598701][ T1365] ? security_inode_mkdir+0x7e/0x180 [ 71.598779][ T1365] vfs_mkdir+0x58e/0x810 [ 71.598854][ T1365] do_mkdirat+0x240/0x530 [ 71.598935][ T1365] ? strncpy_from_user+0x14f/0x280 [ 71.599039][ T1365] ? __cfi_do_mkdirat+0x10/0x10 [ 71.599111][ T1365] ? getname_flags+0x203/0x6b0 [ 71.599173][ T1365] __x64_sys_mkdir+0x70/0x80 [ 71.599252][ T1365] x64_sys_call+0x26c8/0x2ee0 [ 71.599304][ T1365] do_syscall_64+0x57/0xf0 [ 71.599384][ T1365] ? clear_bhb_loop+0x50/0xa0 [ 71.599478][ T1365] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.599554][ T1365] RIP: 0033:0x7fc54ef9de99 [ 71.599603][ T1365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.599652][ T1365] RSP: 002b:00007fc54fe12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 71.599730][ T1365] RAX: ffffffffffffffda RBX: 00007fc54f225fa0 RCX: 00007fc54ef9de99 [ 71.599769][ T1365] RDX: 0000000000000000 RSI: 0000000000000137 RDI: 00002000000003c0 [ 71.599806][ T1365] RBP: 00007fc54fe12090 R08: 0000000000000000 R09: 0000000000000000 [ 71.599843][ T1365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.599873][ T1365] R13: 00007fc54f226038 R14: 00007fc54f225fa0 R15: 00007ffd868c2378 [ 71.599927][ T1365] [ 71.669651][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 71.673226][ T373] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 32, setting to 8 [ 71.729801][ T1369] block device autoloading is deprecated and will be removed. [ 71.743280][ T373] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 71.746527][ T373] usb 5-1: string descriptor 0 read error: -22 [ 71.839658][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 71.858935][ T373] usb 5-1: New USB device found, idVendor=0499, idProduct=1014, bcdDevice= 0.40 [ 71.887842][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.952533][ T373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.994215][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.019593][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 72.028785][ T1347] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 72.039523][ T373] usb 5-1: invalid MIDI in EP 0 [ 72.052838][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.077492][ T31] usb 2-1: config 0 descriptor?? [ 72.096434][ T373] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 72.117499][ T31] hub 2-1:0.0: USB hub found [ 72.118893][ T440] udevd[440]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.143985][ T36] audit: type=1400 audit(1784729585.097:989): avc: denied { ioctl } for pid=1376 comm="syz.3.351" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.246084][ T36] audit: type=1400 audit(1784729585.197:990): avc: denied { write } for pid=1346 comm="syz.4.341" path="socket:[13160]" dev="sockfs" ino=13160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.254365][ T311] usb 5-1: USB disconnect, device number 5 [ 72.276724][ T36] audit: type=1400 audit(1784729585.197:991): avc: denied { read } for pid=1346 comm="syz.4.341" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.302918][ T31] hub 2-1:0.0: 1 port detected [ 72.449557][ T373] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 72.501052][ T9] usb 4-1: 0:2 : does not exist [ 72.508874][ T36] audit: type=1400 audit(1784729585.457:992): avc: denied { bind } for pid=1348 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.532861][ T1397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.541765][ T1397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.550947][ T1397] rust_binder: Error while translating object. [ 72.550999][ T1397] rust_binder: Failure in copy_transaction_data: EINVAL [ 72.557281][ T1397] rust_binder: 1395:1397 transaction to 1395 failed: EINVAL [ 72.565148][ T1397] rust_binder: 1395:1397 netlink report failed: ESRCH [ 72.609545][ T373] usb 1-1: Using ep0 maxpacket: 32 [ 72.615949][ T373] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 72.624181][ T373] usb 1-1: config 0 has no interface number 0 [ 72.630399][ T373] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 72.641866][ T373] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 72.650981][ T373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.658996][ T373] usb 1-1: Product: syz [ 72.663200][ T373] usb 1-1: Manufacturer: syz [ 72.667969][ T373] usb 1-1: SerialNumber: syz [ 72.673566][ T373] usb 1-1: config 0 descriptor?? [ 72.678849][ T1387] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 72.886659][ T1387] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 72.932947][ T31] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 72.940005][ T31] usb 2-1: USB disconnect, device number 19 [ 73.079563][ T311] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 73.096011][ T373] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 73.106228][ T373] asix 1-1:0.188: probe with driver asix failed with error -61 [ 73.230910][ T311] usb 5-1: unable to get BOS descriptor or descriptor too short [ 73.239422][ T311] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 73.251961][ T311] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 73.261082][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.269058][ T311] usb 5-1: Product: syz [ 73.273279][ T311] usb 5-1: Manufacturer: syz [ 73.277904][ T311] usb 5-1: SerialNumber: syz [ 73.487220][ T311] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 73.849553][ T31] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 74.010677][ T31] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 74.018977][ T31] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 74.029380][ T31] usb 2-1: config 8 has no interface number 0 [ 74.035652][ T31] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 74.046754][ T31] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 74.061463][ T31] usb 2-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 74.070779][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.078852][ T31] usb 2-1: Product: syz [ 74.083298][ T31] usb 2-1: Manufacturer: syz [ 74.088070][ T31] usb 2-1: SerialNumber: syz [ 74.288646][ T311] usb 5-1: failed to enable PITCH for EP 0x82 [ 74.309801][ T311] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 74.318469][ T311] usb 5-1: clock source 0 is not valid, cannot use [ 74.339775][ T311] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 74.346384][ T311] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 74.373317][ T311] usb 5-1: USB disconnect, device number 6 [ 74.412166][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 75.079548][ T311] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 75.217028][ T373] usb 1-1: USB disconnect, device number 19 [ 75.229867][ T311] usb 5-1: Using ep0 maxpacket: 16 [ 75.249385][ T311] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 75.267965][ T311] usb 5-1: config 0 has no interface number 0 [ 75.278100][ T311] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 75.299534][ T311] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 75.320913][ T311] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 75.330783][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.338810][ T311] usb 5-1: Product: syz [ 75.343021][ T311] usb 5-1: Manufacturer: syz [ 75.347634][ T311] usb 5-1: SerialNumber: syz [ 75.357236][ T311] usb 5-1: config 0 descriptor?? [ 75.362529][ T1409] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 75.378657][ T1409] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 75.388523][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 75.388551][ T36] audit: type=1400 audit(1784729588.337:999): avc: denied { audit_read } for pid=1412 comm="syz.0.363" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.554046][ T36] audit: type=1400 audit(1784729588.507:1000): avc: denied { connect } for pid=1414 comm="syz.0.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.581254][ T36] audit: type=1400 audit(1784729588.537:1001): avc: denied { read } for pid=1414 comm="syz.0.364" path="socket:[14417]" dev="sockfs" ino=14417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.611838][ T1409] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 75.619038][ T1409] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 75.637234][ T1422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.646091][ T1422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.843237][ T311] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 75.869583][ T311] asix 5-1:0.34: probe with driver asix failed with error -61 [ 76.246045][ T1435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.369'. [ 76.482011][ T31] usb 2-1: USB disconnect, device number 20 [ 76.502387][ T36] audit: type=1400 audit(1784729589.457:1002): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.549582][ T311] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 76.700697][ T311] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 76.708972][ T311] usb 1-1: config 0 has no interface number 0 [ 76.716436][ T311] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 76.725564][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.733599][ T311] usb 1-1: Product: syz [ 76.737885][ T311] usb 1-1: Manufacturer: syz [ 76.742563][ T311] usb 1-1: SerialNumber: syz [ 76.747957][ T311] usb 1-1: config 0 descriptor?? [ 76.979651][ T31] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 77.130679][ T31] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 77.141099][ T31] usb 2-1: too many endpoints for config 17 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 77.152150][ T31] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 77.166355][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 77.175578][ T31] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 77.183705][ T31] usb 2-1: Manufacturer: syz [ 77.194395][ T31] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 77.220415][ T1452] ------------[ cut here ]------------ [ 77.225948][ T1452] WARNING: CPU: 0 PID: 1452 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 77.235512][ T1452] Modules linked in: [ 77.239438][ T1452] CPU: 0 UID: 0 PID: 1452 Comm: syz.3.375 Not tainted syzkaller #0 e661c05697932dc72467e0ff9a1babb7f2c48647 [ 77.250958][ T1452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 77.261086][ T1452] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 77.267106][ T1452] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 53 df 0b 06 00 0f 85 c2 00 00 00 c6 05 46 df 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 77.286829][ T1452] RSP: 0018:ffffc9000eacf560 EFLAGS: 00010246 [ 77.293122][ T1452] RAX: 0000000000000000 RBX: 0000000000000011 RCX: 0000000000000000 [ 77.301195][ T1452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000eacf618 [ 77.309221][ T1452] RBP: ffffc9000eacf6a0 R08: ffffc9000eacf617 R09: 0000000000000000 [ 77.317261][ T1452] R10: ffffc9000eacf600 R11: fffff52001d59ec3 R12: ffffc9000eacf5a0 [ 77.325316][ T1452] R13: dffffc0000000000 R14: 1ffff92001d59eb0 R15: 0000000000000000 [ 77.333386][ T1452] FS: 00007f7f7422b6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 77.342497][ T1452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.349133][ T1452] CR2: 000020000000f000 CR3: 0000000134c84000 CR4: 00000000003526b0 [ 77.357152][ T1452] Call Trace: [ 77.360489][ T1452] [ 77.363440][ T1452] ? vfs_write+0x3c4/0xfd0 [ 77.367903][ T1452] ? ksys_write+0x145/0x260 [ 77.372491][ T1452] ? x64_sys_call+0x271c/0x2ee0 [ 77.377382][ T1452] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 77.383505][ T1452] ? hashtab_init+0xd6/0x1f0 [ 77.388119][ T1452] ___kmalloc_large_node+0x81/0x220 [ 77.393426][ T1452] ? hashtab_init+0xd6/0x1f0 [ 77.398067][ T1452] __kmalloc_large_node_noprof+0x1e/0xd0 [ 77.403742][ T1452] ? hashtab_init+0xd6/0x1f0 [ 77.408363][ T1452] __kmalloc_noprof+0x326/0x510 [ 77.413269][ T1452] ? kasan_save_alloc_info+0x3a/0x50 [ 77.418648][ T1452] hashtab_init+0xd6/0x1f0 [ 77.423114][ T1452] ? common_read+0x175/0x490 [ 77.427731][ T1452] symtab_init+0x44/0x70 [ 77.432012][ T1452] common_read+0x1e7/0x490 [ 77.436459][ T1452] ? hashtab_init+0xd6/0x1f0 [ 77.441097][ T1452] ? __cfi_common_read+0x10/0x10 [ 77.446060][ T1452] ? hashtab_init+0x100/0x1f0 [ 77.450797][ T1452] policydb_read+0xa83/0x2860 [ 77.455510][ T1452] ? __kasan_kmalloc+0x96/0xb0 [ 77.460339][ T1452] ? __cfi_policydb_read+0x10/0x10 [ 77.465500][ T1452] ? security_load_policy+0x130/0x12d0 [ 77.471023][ T1452] security_load_policy+0x16a/0x12d0 [ 77.476343][ T1452] ? irqentry_exit+0x4a/0x60 [ 77.480986][ T1452] ? __kasan_check_write+0x18/0x20 [ 77.486126][ T1452] ? mutex_lock+0x97/0x1d0 [ 77.490616][ T1452] ? __cfi_security_load_policy+0x10/0x10 [ 77.496366][ T1452] ? rep_movs_alternative+0x4a/0xa0 [ 77.501629][ T1452] sel_write_load+0x258/0x600 [ 77.506338][ T1452] ? __cfi_sel_write_load+0x10/0x10 [ 77.511570][ T1452] ? ref_tracker_free+0x64b/0x810 [ 77.516633][ T1452] ? bpf_lsm_file_permission+0xd/0x20 [ 77.522065][ T1452] ? __cfi_sel_write_load+0x10/0x10 [ 77.527287][ T1452] vfs_write+0x3c4/0xfd0 [ 77.531588][ T1452] ? __cfi_vfs_write+0x10/0x10 [ 77.536381][ T1452] ? __kasan_check_write+0x18/0x20 [ 77.541541][ T1452] ? mutex_lock+0x97/0x1d0 [ 77.545986][ T1452] ? __cfi_mutex_lock+0x10/0x10 [ 77.550896][ T1452] ksys_write+0x145/0x260 [ 77.555256][ T1452] ? __cfi_ksys_write+0x10/0x10 [ 77.560160][ T1452] ? __kasan_check_write+0x18/0x20 [ 77.565296][ T1452] ? fpregs_restore_userregs+0x11c/0x260 [ 77.570992][ T1452] __x64_sys_write+0x7f/0x90 [ 77.575619][ T1452] x64_sys_call+0x271c/0x2ee0 [ 77.580350][ T1452] do_syscall_64+0x57/0xf0 [ 77.584799][ T1452] ? clear_bhb_loop+0x50/0xa0 [ 77.589532][ T1452] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.595463][ T1452] RIP: 0033:0x7f7f7339de99 [ 77.599925][ T1452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.619612][ T1452] RSP: 002b:00007f7f7422b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.628059][ T1452] RAX: ffffffffffffffda RBX: 00007f7f73625fa0 RCX: 00007f7f7339de99 [ 77.636087][ T1452] RDX: 000000000000ffaf RSI: 0000200000000000 RDI: 0000000000000003 [ 77.644152][ T1452] RBP: 00007f7f73433eaf R08: 0000000000000000 R09: 0000000000000000 [ 77.652171][ T1452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.660184][ T1452] R13: 00007f7f73626038 R14: 00007f7f73625fa0 R15: 00007ffd4b145f68 [ 77.668194][ T1452] [ 77.671249][ T1452] ---[ end trace 0000000000000000 ]--- [ 77.677600][ T1452] SELinux: failed to load policy [ 77.678546][ T311] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 77.692737][ T311] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 77.704799][ T311] asix 1-1:0.251: probe with driver asix failed with error -71 [ 77.713689][ T311] usb 1-1: USB disconnect, device number 20 [ 77.854375][ T373] usb 5-1: USB disconnect, device number 7 [ 79.542329][ T373] usb 2-1: USB disconnect, device number 21