last executing test programs: 7.148689375s ago: executing program 3 (id=316): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) r2 = socket$inet6(0xa, 0x800, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000003c0)=@ethtool_test={0x1a, 0x4, 0x4}}) (async, rerun: 64) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2cad"]) (async) read$FUSE(r3, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f00000021c0)='./file0/file0\x00', 0x6000, 0x88c, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000100)={0x1, 0x2, 0x7, 0xffffffffffff8000}) (async, rerun: 64) write$FUSE_INIT(r3, &(0x7f0000004240)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) (async, rerun: 64) syz_fuse_handle_req(r3, &(0x7f0000002240)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x4, {0xffffffffffffffff, 0x2, 0x9, 0x1ffffffffffff, 0x7, 0xc, {0x1, 0x9, 0x1, 0x4, 0x400000000000005, 0x6f, 0x8, 0x123, 0x7, 0x6000, 0x5, 0x0, r5, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002200)={0x10, 0x0, r7}, 0x10) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 32) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080002030500000204001000456f00780066000040ff9078eae75448ac1414bb4e204e21004d907802000000010000000100000055022d3df30000c80e441b0fe45c11310041e67eb140f1ebb9e2dd5eab99112d1a6a50b40e533d43dbceed833287627c0e62977e8aaa7be3f050cee8dbce947df30a129c69b5c042b2027a78"], 0x86) (rerun: 32) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r10, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r9, 0xf50f, 0x0) (async) write$P9_RLERROR(r10, &(0x7f00000042c0)=ANY=[@ANYBLOB="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"], 0xc) 7.087008407s ago: executing program 3 (id=317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async, rerun: 64) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000000c0)=0x20000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "d13f82efde47a881", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", "04000a00", "066580001e00"}, 0x38) (async) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000600)="44fb64cec586f8ac7c18d3763a8af31493c79c87115a49609fe6e695efc7fdc105d4ea57d12791274d330e41fd5f299a20eefdaa1978929b7ab8dd1d50d0b3cebb", 0x41}], 0x1) 7.044875239s ago: executing program 3 (id=318): ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x484100, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040841}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x7, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x6, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x8, 0xfe}}}}}]}}]}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r3, 0xc008aec1, &(0x7f00000007c0)={0xa, 0x0, [{0xd, 0x1, 0x4, 0x3, 0xe4a, 0x9, 0x1ff}, {0xc0000001, 0x7fffffff, 0x0, 0x9, 0x4, 0x1}, {0x6, 0x17c5, 0x0, 0x7, 0xa, 0xfffffc00, 0xffffffff}, {0x1, 0x4, 0x5, 0x1, 0x5, 0x8, 0x28a}, {0x80000000, 0x10001, 0x5, 0x76c64d7c, 0x3, 0xc2, 0xc3}, {0xd, 0x7, 0x1, 0x3764f7ae, 0xfff, 0x7, 0x7fff}, {0x40000000, 0x1000, 0x4, 0xe9b, 0x9119, 0x4, 0x8}, {0x4, 0x60000, 0x4, 0x0, 0xf6b5, 0x7, 0x5}, {0xc0000001, 0x9, 0x7, 0x2, 0xc47, 0x1, 0x1ff}, {0x40000006, 0x7, 0x4, 0xf, 0x1, 0x25e}]}) (async, rerun: 32) syz_usb_control_io$hid(r2, 0x0, 0x0) (async, rerun: 32) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x1b, 0x0, &(0x7f0000000000)) (async) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x10, 0x28, {0x28, 0x23, "f70fa3f30300f30000bf6fc9520871bd0000000009f158e2024572680000000000000087c08e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.021540913s ago: executing program 3 (id=330): syz_usb_connect$uac3(0x0, 0xa7, &(0x7f00000000c0)=ANY=[], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 3.112435192s ago: executing program 1 (id=334): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, {0xa, 0x4e22, 0x4, @loopback, 0x1}, 0x1, {[0x9, 0x8, 0x100, 0x800, 0x0, 0x101, 0x7, 0x6]}}, 0x5c) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 3.060440843s ago: executing program 1 (id=336): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0xc0d8, 0x1}, 0x44, 0x0) (async) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0xc0d8, 0x1}, 0x44, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$FIOCLEX(r1, 0x5451) umount2(&(0x7f0000000040)='./file0\x00', 0xa) r2 = socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2]) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x60000050) (async) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x60000050) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000062000/0x4000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) (async) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0xc, 0x6e}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r7 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) ioctl$KVM_X86_SETUP_MCE(r7, 0x1277, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) 3.059315313s ago: executing program 0 (id=337): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = dup2(r1, r2) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x40807) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x2, 0x40, &(0x7f0000000300)={0x4b5a9da54893e123, 0x1, 0x2, 0xfffe}, 0x8, 0x34, 0xb00, 0x0, 0x2, 0x20000, 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="02000000400000000200000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="000000000100000004040300008f3a130558194844"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0xc000) 3.016982285s ago: executing program 0 (id=338): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8841, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x101, [0x5, 0x6, 0x8000000000000001, 0x2e, 0x6, 0x6]}) lsm_get_self_attr(0x65, &(0x7f00000000c0)={0x0, 0x0, 0xd4, 0xb4, ""/180}, &(0x7f00000001c0)=0xd4, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000200)={0x80}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f00000002c0)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000340)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f00000003c0)={0x1f, @none}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000440)={'sit0\x00', 0x400}) lsm_get_self_attr(0x66, &(0x7f0000000480)={0x0, 0x0, 0xd6, 0xb6, ""/182}, &(0x7f0000000580)=0xd6, 0x0) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f00000005c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000600)={0xffffffffffffff3e, 0x4, 0x1, 0xffffffff, 0x1, [0x4, 0x200, 0x3, 0xc8c]}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000640)={0x8, 'syz_tun\x00', {'syzkaller1\x00'}, 0x4}) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000680)=0x7) r4 = syz_open_dev$mouse(&(0x7f00000006c0), 0x101, 0x400000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x70, r5, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x800, 0x32}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0x13, 0x4, "e8f8b1d851f98a5b60430481cd9d41"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000880)=0x1) lsm_set_self_attr(0x68, &(0x7f00000008c0)={0x0, 0xfffffffffffffff7, 0x5f, 0x3f, "9a0f2a84d97ea00b77c2e11c2491295ae90ca486e279a69e882c4dd578add6868da06b3acb50eae52e66ea481d9b7506c1b26bc194852bad765ec2b0d48c43"}, 0x5f, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write(r2, &(0x7f0000000940)="770b5f5c59a4fd879d84cf3391bfbedb4a7e00900fa877a26d4d", 0x1a) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000980)) r6 = openat$cgroup_ro(r4, &(0x7f00000009c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$OCFS2_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000a00)={0x1, 0x0, 0x4, 0x1, 0x1, 0x3de}) r7 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r7, &(0x7f0000000a80), &(0x7f0000000ac0)={'L-', 0x4}, 0x16, 0x2) 2.993100905s ago: executing program 0 (id=339): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x35c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x2000000, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, 0x0) 2.904729788s ago: executing program 0 (id=340): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5, 0x0, 0x0, 0x0, 0x74, 0x2, 0xa, 0x54}) (async, rerun: 32) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) (rerun: 32) lsetxattr(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002000)=@known='user.incfs.id\x00', 0x0, 0x0, 0x2) r2 = userfaultfd(0x801) socket$inet(0x2, 0x3, 0x2) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) (async) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f0000483000/0x4000)=nil) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x4], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffbfffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x0, 0x4, 0x80000}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (rerun: 64) 2.904305578s ago: executing program 1 (id=341): r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000a0100000005fe060c10880008000f00fff3c00e1400", 0x26}], 0x1}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x212d099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) pipe(0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) recvmsg$inet_nvme(r2, &(0x7f0000000940)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000480)=""/108, 0x6c}, {&(0x7f0000000780)=""/237, 0xed}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000a40)=""/169, 0xfffffd26}, {&(0x7f0000000400)=""/102, 0x66}], 0x5, &(0x7f0000000900)=""/24, 0x18}, 0x3) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000003c0)='./file0/file0/..\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x101800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000340)="66b9bd0800000f32f23e0f352664660f3881443e64660f2fc10fbab500180066b8000000000f23c80f21f86635080020000f23f8dbe10f782f64f30f09f30fc77607", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) timer_create(0x7, 0x0, &(0x7f0000000180)) bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, 0x0, 0x0) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000380)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x44) syz_usb_connect$uac2(0x5, 0x9d, &(0x7f0000000980)=ANY=[@ANYBLOB="12015002000000409904091540000102030109028b00030107600b080b010101ff200509040000000101200009240101800b1500070c24030501035d02008b000309040100000102200009040101010102200006240201003e10246f8467e2f80e29ae719c08562b01050103021000000309000000cd09050109ff0324020d082501813302feff09040200000102200009040201010102200009058209ff030410fc082501830c040700"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="0003ef4a3fbd79f0b9763292cb99e9e216c0053a3aa1401dd8901c9cd7183fbb62c00000000000000000"]}, {0xaf, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]}]}) 2.101882664s ago: executing program 0 (id=342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket(0x1e, 0x80805, 0x0) listen(r3, 0x7) accept$unix(r3, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0010141, 0x0, 0x7f}]}) syz_usb_connect$midi(0x0, 0x2b, &(0x7f0000002540)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x4, 0x10, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x4, [@midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x7f, 0x0, [], 0xfd}]}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f0000002680)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x1404}}, {0xda, &(0x7f0000000140)=@string={0xda, 0x3, "68bdafecc12a19a504281130c5b665e0a986ceed74f2036528eb0343107e319a7c26f81e3ecf61bb2b1b9b013452bad2068a0fa4d5b8849e8e8f4c989ee3cd8d9f8c69d02f9b8c94f84d35c62b1c87be2e8be99fa7a23d2acef0f23d21c7c092f995bf3fe7744ef5d2aa63424b73d16e23d3f15349e32a39d4f620138cd27bef7edacc49973fc02290738cae3fcbdd95f8def09f4d3436eacdbafba02cf01c31c237632226ee4f939d9f8762194af6b3878b1b54f71a7166d4199098589a283fac35b915d45d08d2c21959bb3489a80d26c062157431df34"}}]}) 1.58084076s ago: executing program 1 (id=348): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x35c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x3000000, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, 0x0) 1.5773843s ago: executing program 1 (id=349): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, 0x4}) write(r0, &(0x7f0000001c80)="b1", 0x1) syz_usb_connect$uac3(0x5, 0x8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000040820525004000010203010902780003017f7006080b0002012030230904000000010130000a24011014000a00000005240d080005240c40000904010000010230000904010101010230000905010960002503020a252508000000050500090402"], 0x0) 1.372883886s ago: executing program 2 (id=351): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1739, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x6, 0x60, 0xe, {0x8, 0xb, 0x0, 0x1, 0x1, 0x20, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa, 0x3d2a}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0xc, 0xb0, {0xa, 0x25, 0x25, 0x1, 0xf8, 0x401}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x7, 0x47, 0x0, {0xa, 0x25, 0x25, 0xa24, 0xe}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 949.14384ms ago: executing program 3 (id=352): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='wchan\x00') pread64(r1, &(0x7f0000000500)=""/31, 0x1f, 0x3) (async) pread64(r1, &(0x7f0000000500)=""/31, 0x1f, 0x3) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x7, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r2], 0x20}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r2], 0x20}}, 0x0) r3 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) (async) syz_pidfd_open(r3, 0x0) syz_clone3(&(0x7f0000000000)={0x44005000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0, r0, r0, r0, r3, r0, r3, r0], 0x8}, 0x58) 881.555632ms ago: executing program 3 (id=353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0x7e6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000100)=[@enter_looper], 0x5, 0x0, &(0x7f0000000180)="38490d52a3"}) write$tun(r0, &(0x7f0000000500)=ANY=[], 0xfdef) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000240)={{0x0, 0x6, 0x2, 0x8, 0x9}, &(0x7f0000000080)=[{}, {}]}) mmap(&(0x7f000048e000/0x4000)=nil, 0x4000, 0xb, 0x50, r0, 0xda2e6000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES16], 0x0) 686.518728ms ago: executing program 0 (id=354): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100020203010902240001b800a00309040074000909050e02000406051f"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, 'DmH{', {0x3, 0x101, 0x0, 0x6, 0xf102, 0x1, 0x8}}) 352.611758ms ago: executing program 1 (id=355): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB='rlog_pages=0000000020000000000']) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000080)="f6c9e32ae40f4dc0815fd0d897079a161cfb7702311e629acda76933ddd0c24165eb4d4d28d99f73071535534b2ce744440aa8cdc5aab34c689a95423df70dd6d743273b8f4edfe04c81", 0x4a}], 0x1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000050b000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x1, 0xcd) ppoll(&(0x7f0000000000)=[{r0, 0x8}, {r1, 0x1e8}, {r5, 0x212}, {0xffffffffffffffff, 0x20}, {r6, 0x4501}, {0xffffffffffffffff, 0x6002}], 0x6, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x96]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB='rlog_pages=0000000020000000000']) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async) pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000080)="f6c9e32ae40f4dc0815fd0d897079a161cfb7702311e629acda76933ddd0c24165eb4d4d28d99f73071535534b2ce744440aa8cdc5aab34c689a95423df70dd6d743273b8f4edfe04c81", 0x4a}], 0x1, 0x0, 0x0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES16], 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000050b000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x34, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) socket$inet6(0xa, 0x1, 0xcd) (async) ppoll(&(0x7f0000000000)=[{r0, 0x8}, {r1, 0x1e8}, {r5, 0x212}, {0xffffffffffffffff, 0x20}, {r6, 0x4501}, {0xffffffffffffffff, 0x6002}], 0x6, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x96]}, 0x8) (async) 176.368374ms ago: executing program 2 (id=356): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000200)={0x0, 0x0, 0xa542, 0x2, 0x1e4}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r5, &(0x7f0000000640)={0x0, 0x1463, 0x100, 0x2, 0xb2}, &(0x7f0000001180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x20, 0x401, 0x317, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0xbdf, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x3, 0x271, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x5, 0x64, 0x0, 0x0}}, 0x0) 153.502245ms ago: executing program 2 (id=357): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x35c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x8000000, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, 0x0) 56.868348ms ago: executing program 2 (id=358): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, r1, &(0x7f0000000180)='./file0\x00') ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(r0, r0) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) io_setup(0x1, &(0x7f00000001c0)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x440080, 0x0) read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0xfd10) 40.632118ms ago: executing program 2 (id=359): lremovexattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000340)={0x88ab1b249e3a04b3, 0x0, {[0xfffffffffffffffe, 0x12ad, 0x7611, 0x2000000000000a, 0xed, 0xa, 0x7, 0x81]}}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./bus/file0\x00', &(0x7f0000000240)={0x8c280, 0x10, 0xe}, 0x18) mkdirat(r3, &(0x7f00000002c0)='./bus\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x102) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0x6, 0xffffffffffffffff, 'id1\x00'}) r5 = openat$cgroup_ro(r4, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) write$FUSE_BMAP(r5, 0x0, 0x0) 0s ago: executing program 2 (id=360): syz_usb_connect$uac1(0x2, 0x72, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1739, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7, 0x10, 0xf6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0x5, 0x7, {0x7, 0x25, 0x1, 0x0, 0x18, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x5, 0xa7, {0x7, 0x25, 0x1, 0xc, 0x80, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x6, 0xfa, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x4752, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe8, 0x3, 0x1, 0x1, 0xb0, 0x1, {0x8, 0xb, 0x0, 0x1, 0x1, 0x3, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0xb, 0x3f, 0x10}, [@extension_unit={0xd, 0x24, 0x9, 0x3, 0xf659, 0x6, "aeac04dabe43"}, @source_unit={0x8, 0x24, 0xa, 0x36, 0x2, 0x40, 0x8d, 0x4}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x6, [0xe, 0x6, 0x4, 0xa]}, @extension_unit={0xd, 0x24, 0x9, 0x5, 0xf59b, 0x20, 'rdys(C'}, @multiply_unit={0x7, 0x24, 0xc, 0x4, 0x2, 0x8, 0x3c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0xb, 0xe, 0x2, 0x1002, 0x8, 0xffff, 0x7f}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x8, 0x12, 0x1, {0x8, 0x25, 0x1, 0x81, 0x3, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x3, 0x6, 0x1, 0x5, 0xf5, 0x7, 0x4}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x1, 0x3, 0x8f, "2447e10670"}, @as_header={0x10, 0x24, 0x1, 0xf9, 0x1, 0x2, 0x0, 0xff, 0xfffffffa, 0x6a}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x1, 0xf9, {0x8, 0x25, 0x1, 0x3, 0x30, 0x3, 0x3}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x6, 0x5, 0x0, 0x87, 0xfd}, 0x49, &(0x7f0000000140)={0x5, 0xf, 0x49, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x12, 0x31, 0x3, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc1, 0x2, 0x8, 0x600, 0x35}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x0, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "d93c672e9e6cda2e288e35848f1493c3"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "bbf90369bc9cde6cdd1c0e354e6dec33"}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc04}}, {0xa1, &(0x7f0000000200)=@string={0xa1, 0x3, "a3f384891b669ec0e8d2c5d9cf94486eda1bdddb2b117709edf11481e615c4f7607ee2bf48620677a294f780466a80a43368d7c61752b15dac8784e2235bf0a2733a175a34e1c151c77210b951a81b79f3eee0518ef956ba976d8fffd0e6a717d4965bddf74dfb75fb97fc5de493aaa031a83920f833585c48470a4e988b121d57ebbc70fffda0e3d9d41e198650ed0df9d9884541a64335b36076fadc9750"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2809}}, {0x9d, &(0x7f0000000440)=@string={0x9d, 0x3, "9df714df69ffa3ef6b8ddf906bbcb2df43a2cf0f17e454378ab2c4c5b8117dc611721be3e0574ec8ccc9f449381a03547f8b35d42aa582aa0d459261627c582c623076f4bc6af0a548ea95ad0ec652aa3e81a91fff36150dc075be98b116ce80f41250e66a6e59cb3b9ce9cafd17754ede33a93e1e009fdfae015782150ffce920878ae83ae0ecf15c8e34235f40fbed2a5110e6fc1d7ceaabfe3b"}}, {0x24, &(0x7f0000000500)=@string={0x24, 0x3, "fcacd7de6fa06b7e3f629b83405e6eb02c3abd8b9da7ea41ac4d5380fdb47c8cbe13"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2809}}]}) syz_usb_connect$uac1(0x2, 0x72, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1739, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7, 0x10, 0xf6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0x5, 0x7, {0x7, 0x25, 0x1, 0x0, 0x18, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x5, 0xa7, {0x7, 0x25, 0x1, 0xc, 0x80, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac2(0x6, 0xfa, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x4752, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe8, 0x3, 0x1, 0x1, 0xb0, 0x1, {0x8, 0xb, 0x0, 0x1, 0x1, 0x3, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0xb, 0x3f, 0x10}, [@extension_unit={0xd, 0x24, 0x9, 0x3, 0xf659, 0x6, "aeac04dabe43"}, @source_unit={0x8, 0x24, 0xa, 0x36, 0x2, 0x40, 0x8d, 0x4}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x6, [0xe, 0x6, 0x4, 0xa]}, @extension_unit={0xd, 0x24, 0x9, 0x5, 0xf59b, 0x20, 'rdys(C'}, @multiply_unit={0x7, 0x24, 0xc, 0x4, 0x2, 0x8, 0x3c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0xb, 0xe, 0x2, 0x1002, 0x8, 0xffff, 0x7f}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x8, 0x12, 0x1, {0x8, 0x25, 0x1, 0x81, 0x3, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x3, 0x6, 0x1, 0x5, 0xf5, 0x7, 0x4}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x1, 0x3, 0x8f, "2447e10670"}, @as_header={0x10, 0x24, 0x1, 0xf9, 0x1, 0x2, 0x0, 0xff, 0xfffffffa, 0x6a}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x1, 0xf9, {0x8, 0x25, 0x1, 0x3, 0x30, 0x3, 0x3}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x6, 0x5, 0x0, 0x87, 0xfd}, 0x49, &(0x7f0000000140)={0x5, 0xf, 0x49, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x12, 0x31, 0x3, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc1, 0x2, 0x8, 0x600, 0x35}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x0, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "d93c672e9e6cda2e288e35848f1493c3"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "bbf90369bc9cde6cdd1c0e354e6dec33"}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc04}}, {0xa1, &(0x7f0000000200)=@string={0xa1, 0x3, "a3f384891b669ec0e8d2c5d9cf94486eda1bdddb2b117709edf11481e615c4f7607ee2bf48620677a294f780466a80a43368d7c61752b15dac8784e2235bf0a2733a175a34e1c151c77210b951a81b79f3eee0518ef956ba976d8fffd0e6a717d4965bddf74dfb75fb97fc5de493aaa031a83920f833585c48470a4e988b121d57ebbc70fffda0e3d9d41e198650ed0df9d9884541a64335b36076fadc9750"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2809}}, {0x9d, &(0x7f0000000440)=@string={0x9d, 0x3, "9df714df69ffa3ef6b8ddf906bbcb2df43a2cf0f17e454378ab2c4c5b8117dc611721be3e0574ec8ccc9f449381a03547f8b35d42aa582aa0d459261627c582c623076f4bc6af0a548ea95ad0ec652aa3e81a91fff36150dc075be98b116ce80f41250e66a6e59cb3b9ce9cafd17754ede33a93e1e009fdfae015782150ffce920878ae83ae0ecf15c8e34235f40fbed2a5110e6fc1d7ceaabfe3b"}}, {0x24, &(0x7f0000000500)=@string={0x24, 0x3, "fcacd7de6fa06b7e3f629b83405e6eb02c3abd8b9da7ea41ac4d5380fdb47c8cbe13"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2809}}]}) (async) 0s ago: executing program 3 (id=361): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f00005a9000/0x3000)=nil, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0xd, 0x59}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) futex(0x0, 0x84, 0x2, 0x0, 0x0, 0x22) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@flat=@binder={0x73622a85, 0x1800}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x3c}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xc}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 36] usb 2-1: unable to get BOS descriptor or descriptor too short [ 36.245066][ T608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.248388][ T336] usb 2-1: not running at top speed; connect to a high speed hub [ 36.256146][ T608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.265473][ T336] usb 2-1: too many configurations: 211, using maximum allowed: 8 [ 36.280266][ T9] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 36.287289][ T9] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 36.294379][ T9] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 36.301438][ T9] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 36.308495][ T9] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 36.315504][ T9] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 36.322561][ T9] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 36.329802][ T336] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 36.337371][ T336] usb 2-1: can't read configurations, error -61 [ 36.343745][ T9] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 36.350835][ T336] usb usb2-port1: attempt power cycle [ 36.356450][ T9] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 36.363429][ T9] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 36.370419][ T9] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 36.377363][ T9] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 36.384372][ T9] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 36.391355][ T10] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 36.398946][ T9] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 36.405925][ T9] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 36.412957][ T9] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 36.420354][ T9] elecom 0003:056E:010C.0004: unknown main item tag 0x0 [ 36.427886][ T9] elecom 0003:056E:010C.0004: hidraw0: USB HID v2.08 Device [HID 056e:010c] on usb-dummy_hcd.3-1/input0 [ 36.481633][ T9] usb 4-1: USB disconnect, device number 9 [ 36.569757][ T10] usb 1-1: config 16 has an invalid interface number: 19 but max is 0 [ 36.577982][ T10] usb 1-1: config 16 has no interface number 0 [ 36.587122][ T10] usb 1-1: config 16 interface 19 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 36.599505][ T10] usb 1-1: config 16 interface 19 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 36.610914][ T10] usb 1-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 36.627004][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.636975][ T10] usb 1-1: Product: syz [ 36.641389][ T10] usb 1-1: Manufacturer: syz [ 36.646050][ T10] usb 1-1: SerialNumber: syz [ 36.649480][ T622] FAULT_INJECTION: forcing a failure. [ 36.649480][ T622] name failslab, interval 1, probability 0, space 0, times 0 [ 36.663359][ T622] CPU: 0 UID: 0 PID: 622 Comm: syz.2.87 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 36.663394][ T622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.663403][ T622] Call Trace: [ 36.663407][ T622] [ 36.663412][ T622] __dump_stack+0x21/0x30 [ 36.663434][ T622] dump_stack_lvl+0x140/0x1c0 [ 36.663452][ T622] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.663470][ T622] dump_stack+0x19/0x20 [ 36.663487][ T622] should_fail_ex+0x3d7/0x530 [ 36.663502][ T622] should_failslab+0xac/0x100 [ 36.663517][ T622] __kmalloc_node_noprof+0x6c/0x4f0 [ 36.663531][ T622] ? __kvmalloc_node_noprof+0x128/0x300 [ 36.663543][ T622] __kvmalloc_node_noprof+0x128/0x300 [ 36.663555][ T622] ? percpu_ref_init+0xde/0x4d0 [ 36.663571][ T622] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 36.663582][ T622] ? __kasan_check_read+0x20/0x20 [ 36.663595][ T622] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 36.663608][ T622] io_ring_ctx_alloc+0x4ee/0x1d60 [ 36.663621][ T622] io_uring_create+0x2e0/0x13d0 [ 36.663633][ T622] ? __kasan_check_write+0x18/0x20 [ 36.663645][ T622] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 36.663662][ T622] ? __kasan_check_write+0x18/0x20 [ 36.663674][ T622] ? __x64_sys_io_uring_setup+0x80/0x80 [ 36.663692][ T622] ? __kasan_check_read+0x15/0x20 [ 36.663704][ T622] __x64_sys_io_uring_setup+0x5f/0x80 [ 36.663720][ T622] x64_sys_call+0x22c0/0x2ee0 [ 36.663735][ T622] do_syscall_64+0x57/0xf0 [ 36.663752][ T622] ? clear_bhb_loop+0x50/0xa0 [ 36.663765][ T622] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.663783][ T622] RIP: 0033:0x7f1e9379ce59 [ 36.663795][ T622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.663805][ T622] RSP: 002b:00007f1e94648ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 36.663820][ T622] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f1e9379ce59 [ 36.663830][ T622] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 00000000000003c9 [ 36.663838][ T622] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 36.663847][ T622] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 36.663855][ T622] R13: 0000200000000890 R14: 00007f1e94648fd8 R15: 0000000000000000 [ 36.663865][ T622] [ 36.897837][ T336] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 36.913183][ T10] usb 1-1: USB disconnect, device number 10 [ 36.925577][ T336] usb 2-1: unable to get BOS descriptor or descriptor too short [ 36.933657][ T336] usb 2-1: not running at top speed; connect to a high speed hub [ 36.941449][ T336] usb 2-1: too many configurations: 211, using maximum allowed: 8 [ 36.951389][ T336] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 36.959011][ T336] usb 2-1: can't read configurations, error -61 [ 36.959957][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.088667][ T336] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 37.110287][ T336] usb 2-1: unable to get BOS descriptor or descriptor too short [ 37.118384][ T336] usb 2-1: not running at top speed; connect to a high speed hub [ 37.126184][ T336] usb 2-1: too many configurations: 211, using maximum allowed: 8 [ 37.135332][ T336] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 37.143152][ T336] usb 2-1: can't read configurations, error -61 [ 37.148649][ T45] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 37.149569][ T336] usb usb2-port1: unable to enumerate USB device [ 37.248646][ T470] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 37.300191][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 37.308247][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 37.318965][ T45] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 37.328056][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.336090][ T45] usb 3-1: Product: syz [ 37.340318][ T45] usb 3-1: Manufacturer: syz [ 37.344944][ T45] usb 3-1: SerialNumber: syz [ 37.399698][ T470] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 37.407757][ T470] usb 4-1: config 0 has no interface number 0 [ 37.413890][ T470] usb 4-1: too many endpoints for config 0 interface 4 altsetting 0: 254, using maximum allowed: 30 [ 37.424921][ T470] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.438617][ T470] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.448409][ T470] usb 4-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 37.462187][ T470] usb 4-1: New USB device found, idVendor=046d, idProduct=c70a, bcdDevice= 0.00 [ 37.471359][ T470] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.480409][ T470] usb 4-1: config 0 descriptor?? [ 37.553146][ T45] usb 3-1: invalid MIDI in EP 0 [ 37.560780][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 37.570954][ T45] usb 3-1: USB disconnect, device number 10 [ 37.580358][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.678652][ T336] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 37.828638][ T336] usb 1-1: Using ep0 maxpacket: 8 [ 37.834838][ T336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.845924][ T336] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 37.858861][ T336] usb 1-1: New USB device found, idVendor=0738, idProduct=1713, bcdDevice= 0.00 [ 37.867924][ T336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.876804][ T336] usb 1-1: config 0 descriptor?? [ 38.073107][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 38.073127][ T36] audit: type=1400 audit(1781737164.420:219): avc: denied { read } for pid=634 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.098532][ T36] audit: type=1400 audit(1781737164.430:220): avc: denied { accept } for pid=634 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.158150][ T470] usbhid 4-1:0.4: can't add hid device: -71 [ 38.164355][ T470] usbhid 4-1:0.4: probe with driver usbhid failed with error -71 [ 38.167866][ T642] overlayfs: missing 'lowerdir' [ 38.173433][ T470] usb 4-1: USB disconnect, device number 10 [ 38.216870][ T647] FAULT_INJECTION: forcing a failure. [ 38.216870][ T647] name failslab, interval 1, probability 0, space 0, times 0 [ 38.229742][ T647] CPU: 1 UID: 0 PID: 647 Comm: syz.3.96 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 38.229772][ T647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.229783][ T647] Call Trace: [ 38.229790][ T647] [ 38.229797][ T647] __dump_stack+0x21/0x30 [ 38.229829][ T647] dump_stack_lvl+0x140/0x1c0 [ 38.229855][ T647] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.229882][ T647] dump_stack+0x19/0x20 [ 38.229906][ T647] should_fail_ex+0x3d7/0x530 [ 38.229932][ T647] should_failslab+0xac/0x100 [ 38.229954][ T647] __kmalloc_node_noprof+0x6c/0x4f0 [ 38.229975][ T647] ? __kvmalloc_node_noprof+0x128/0x300 [ 38.229993][ T647] __kvmalloc_node_noprof+0x128/0x300 [ 38.230010][ T647] ? percpu_ref_init+0xde/0x4d0 [ 38.230033][ T647] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 38.230051][ T647] ? __kasan_check_read+0x20/0x20 [ 38.230071][ T647] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 38.230091][ T647] io_ring_ctx_alloc+0x5c3/0x1d60 [ 38.230110][ T647] io_uring_create+0x2e0/0x13d0 [ 38.230129][ T647] ? __kasan_check_write+0x18/0x20 [ 38.230148][ T647] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 38.230173][ T647] ? __kasan_check_write+0x18/0x20 [ 38.230193][ T647] ? __x64_sys_io_uring_setup+0x80/0x80 [ 38.230219][ T647] ? __kasan_check_read+0x15/0x20 [ 38.230238][ T647] __x64_sys_io_uring_setup+0x5f/0x80 [ 38.230263][ T647] x64_sys_call+0x22c0/0x2ee0 [ 38.230281][ T647] do_syscall_64+0x57/0xf0 [ 38.230306][ T647] ? clear_bhb_loop+0x50/0xa0 [ 38.230325][ T647] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.230354][ T647] RIP: 0033:0x7f02ad59ce59 [ 38.230370][ T647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.230385][ T647] RSP: 002b:00007f02ae43dee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 38.230407][ T647] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f02ad59ce59 [ 38.230421][ T647] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 00000000000003c9 [ 38.230434][ T647] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 38.230447][ T647] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 38.230460][ T647] R13: 0000200000000890 R14: 00007f02ae43dfd8 R15: 0000000000000000 [ 38.230476][ T647] [ 38.470264][ T336] saitek 0003:0738:1713.0005: unknown main item tag 0x0 [ 38.477315][ T336] saitek 0003:0738:1713.0005: unknown main item tag 0x0 [ 38.489497][ T653] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.492641][ T36] audit: type=1400 audit(1781737164.840:221): avc: denied { append } for pid=651 comm="syz.2.98" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 38.501590][ T652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 38.523833][ T336] saitek 0003:0738:1713.0005: unknown main item tag 0x0 [ 38.545343][ T336] saitek 0003:0738:1713.0005: unknown main item tag 0x0 [ 38.565785][ T336] saitek 0003:0738:1713.0005: unknown main item tag 0x0 [ 38.578750][ T336] saitek 0003:0738:1713.0005: unknown main item tag 0x0 [ 38.585769][ T336] saitek 0003:0738:1713.0005: unknown main item tag 0x0 [ 38.593055][ T336] saitek 0003:0738:1713.0005: unknown main item tag 0x0 [ 38.600450][ T336] saitek 0003:0738:1713.0005: unknown main item tag 0x0 [ 38.607783][ T336] saitek 0003:0738:1713.0005: unknown main item tag 0x0 [ 38.614839][ T336] saitek 0003:0738:1713.0005: unknown main item tag 0x0 [ 38.621895][ T336] saitek 0003:0738:1713.0005: unknown main item tag 0x0 [ 38.628923][ T336] saitek 0003:0738:1713.0005: unknown main item tag 0x0 [ 38.635918][ T336] saitek 0003:0738:1713.0005: unknown main item tag 0x0 [ 38.645711][ T336] saitek 0003:0738:1713.0005: hidraw0: USB HID v0.81 Device [HID 0738:1713] on usb-dummy_hcd.0-1/input0 [ 38.695022][ T632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.703770][ T632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.712239][ T336] usb 1-1: USB disconnect, device number 11 [ 38.788692][ T470] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 38.798657][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 38.848220][ T661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 38.938661][ T470] usb 4-1: Using ep0 maxpacket: 16 [ 38.945271][ T470] usb 4-1: unable to get BOS descriptor or descriptor too short [ 38.953932][ T470] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 53, changing to 7 [ 38.965378][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.976481][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.986308][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.999680][ T45] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 39.008941][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.017134][ T470] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 39.026202][ T470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.034450][ T470] usb 4-1: Product: syz [ 39.038895][ T45] usb 3-1: config 0 descriptor?? [ 39.043921][ T470] usb 4-1: Manufacturer: syz [ 39.048542][ T470] usb 4-1: SerialNumber: syz [ 39.281422][ T667] overlayfs: missing 'lowerdir' [ 39.311202][ T671] FAULT_INJECTION: forcing a failure. [ 39.311202][ T671] name failslab, interval 1, probability 0, space 0, times 0 [ 39.323976][ T671] CPU: 1 UID: 0 PID: 671 Comm: syz.0.105 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 39.324006][ T671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 39.324018][ T671] Call Trace: [ 39.324024][ T671] [ 39.324031][ T671] __dump_stack+0x21/0x30 [ 39.324070][ T671] dump_stack_lvl+0x140/0x1c0 [ 39.324090][ T671] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.324109][ T671] dump_stack+0x19/0x20 [ 39.324125][ T671] should_fail_ex+0x3d7/0x530 [ 39.324143][ T671] should_failslab+0xac/0x100 [ 39.324157][ T671] __kmalloc_node_noprof+0x6c/0x4f0 [ 39.324171][ T671] ? __kvmalloc_node_noprof+0x128/0x300 [ 39.324183][ T671] __kvmalloc_node_noprof+0x128/0x300 [ 39.324194][ T671] ? percpu_ref_init+0xde/0x4d0 [ 39.324211][ T671] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 39.324223][ T671] ? __kasan_check_read+0x20/0x20 [ 39.324235][ T671] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 39.324248][ T671] io_ring_ctx_alloc+0x5c3/0x1d60 [ 39.324261][ T671] io_uring_create+0x2e0/0x13d0 [ 39.324273][ T671] ? __kasan_check_write+0x18/0x20 [ 39.324286][ T671] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 39.324303][ T671] ? __kasan_check_write+0x18/0x20 [ 39.324315][ T671] ? __x64_sys_io_uring_setup+0x80/0x80 [ 39.324336][ T671] ? __kasan_check_read+0x15/0x20 [ 39.324348][ T671] __x64_sys_io_uring_setup+0x5f/0x80 [ 39.324365][ T671] x64_sys_call+0x22c0/0x2ee0 [ 39.324377][ T671] do_syscall_64+0x57/0xf0 [ 39.324394][ T671] ? clear_bhb_loop+0x50/0xa0 [ 39.324406][ T671] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.324426][ T671] RIP: 0033:0x7faa5559ce59 [ 39.324438][ T671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.324448][ T671] RSP: 002b:00007faa564e8ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 39.324463][ T671] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007faa5559ce59 [ 39.324473][ T671] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 00000000000003c9 [ 39.324481][ T671] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 39.324490][ T671] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 39.324498][ T671] R13: 0000200000000890 R14: 00007faa564e8fd8 R15: 0000000000000000 [ 39.324508][ T671] [ 39.559071][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 39.565082][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 39.565491][ T36] audit: type=1400 audit(1781737165.910:222): avc: denied { ioctl } for pid=649 comm="syz.3.97" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4987 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.574033][ T45] usb 3-1: USB disconnect, device number 11 [ 39.599283][ T675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.623150][ T675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.637469][ T36] audit: type=1400 audit(1781737165.980:223): avc: denied { ioctl } for pid=677 comm="syz.0.108" path="socket:[5365]" dev="sockfs" ino=5365 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.696756][ T470] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 39.703799][ T470] usb 4-1: unit 5 not found! [ 39.712151][ T470] usb 4-1: USB disconnect, device number 11 [ 39.725276][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.868684][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 39.908640][ T336] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 39.985717][ T683] rust_binder: 682:683 transaction to 0 failed: ENOENT [ 40.020733][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 40.034161][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.047342][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.057265][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.070455][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 40.079638][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.089224][ T10] usb 2-1: config 0 descriptor?? [ 40.097554][ T336] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 40.107443][ T336] usb 1-1: can't read configurations, error -61 [ 40.238647][ T336] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 40.268647][ T470] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 40.307836][ T692] overlayfs: missing 'lowerdir' [ 40.332327][ T694] veth1_macvtap: left promiscuous mode [ 40.337888][ T694] macsec0: entered promiscuous mode [ 40.344934][ T694] veth1_macvtap: entered promiscuous mode [ 40.350897][ T694] macsec0: left promiscuous mode [ 40.389833][ T36] audit: type=1400 audit(1781737166.740:224): avc: denied { read } for pid=701 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.409239][ T336] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 40.417083][ T336] usb 1-1: can't read configurations, error -61 [ 40.423552][ T336] usb usb1-port1: attempt power cycle [ 40.440124][ T470] usb 3-1: unable to get BOS descriptor or descriptor too short [ 40.448212][ T470] usb 3-1: not running at top speed; connect to a high speed hub [ 40.458302][ T470] usb 3-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 40.467427][ T470] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.475584][ T470] usb 3-1: Product: syz [ 40.479863][ T470] usb 3-1: Manufacturer: syz [ 40.484469][ T470] usb 3-1: SerialNumber: syz [ 40.510356][ T10] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0006/input/input9 [ 40.535424][ T10] sony 0003:054C:03D5.0006: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 40.692454][ T690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.701173][ T690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.712689][ T676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.722323][ T676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.727012][ T690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.730829][ T36] audit: type=1400 audit(1781737167.080:225): avc: denied { connect } for pid=689 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.739412][ T690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.761237][ T45] usb 2-1: USB disconnect, device number 11 [ 40.772219][ T36] audit: type=1400 audit(1781737167.080:226): avc: denied { getopt } for pid=689 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.778669][ T336] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 40.792497][ T36] audit: type=1400 audit(1781737167.080:227): avc: denied { ioctl } for pid=689 comm="syz.2.112" path="socket:[5027]" dev="sockfs" ino=5027 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.825681][ T690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.837834][ T690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.840927][ T336] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 40.855069][ T336] usb 1-1: can't read configurations, error -61 [ 40.893430][ T470] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 40.904524][ T470] usb 3-1: failed to enable PITCH for EP 0x1 [ 40.911061][ T470] usb 3-1: unit 2 not found! [ 40.915670][ T470] usb 3-1: unit 8 not found! [ 40.923448][ T470] usb 3-1: USB disconnect, device number 12 [ 40.932151][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.998645][ T336] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 41.020480][ T336] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 41.028109][ T336] usb 1-1: can't read configurations, error -61 [ 41.034626][ T336] usb usb1-port1: unable to enumerate USB device [ 41.275634][ T36] audit: type=1400 audit(1781737167.620:228): avc: denied { setattr } for pid=712 comm="syz.1.119" name="KEY" dev="sockfs" ino=5108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.411415][ T721] overlayfs: missing 'lowerdir' [ 41.448640][ T470] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 41.609895][ T470] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.621065][ T470] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.631235][ T470] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 41.644668][ T470] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 41.648670][ T336] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 41.653981][ T470] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.670792][ T470] usb 4-1: config 0 descriptor?? [ 41.698690][ T45] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 41.818642][ T336] usb 2-1: Using ep0 maxpacket: 8 [ 41.824845][ T336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.835780][ T336] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 41.848646][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 41.848642][ T336] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 41.848671][ T336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.854897][ T45] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 41.863582][ T336] usb 2-1: config 0 descriptor?? [ 41.871725][ T45] usb 3-1: config 0 has no interface number 0 [ 41.890224][ T45] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 41.900322][ T45] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 41.911637][ T45] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 41.920759][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.928817][ T45] usb 3-1: Product: syz [ 41.933011][ T45] usb 3-1: Manufacturer: syz [ 41.937627][ T45] usb 3-1: SerialNumber: syz [ 41.943424][ T45] usb 3-1: config 0 descriptor?? [ 41.948922][ T726] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 41.956208][ T726] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 42.091982][ T470] usbhid 4-1:0.0: can't add hid device: -71 [ 42.098066][ T470] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 42.107506][ T470] usb 4-1: USB disconnect, device number 12 [ 42.164613][ T726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.173238][ T726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.181921][ T726] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 42.189192][ T726] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 42.283785][ T336] hid (null): unknown global tag 0xa3 [ 42.397005][ T45] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 42.407175][ T45] asix 3-1:0.34: probe with driver asix failed with error -61 [ 42.489705][ T336] usb 2-1: string descriptor 0 read error: -71 [ 42.499308][ T336] uclogic 0003:5543:0047.0007: failed retrieving string descriptor #200: -71 [ 42.508202][ T336] uclogic 0003:5543:0047.0007: failed retrieving pen parameters: -71 [ 42.516393][ T336] uclogic 0003:5543:0047.0007: failed probing pen v2 parameters: -71 [ 42.524544][ T336] uclogic 0003:5543:0047.0007: failed probing parameters: -71 [ 42.532166][ T336] uclogic 0003:5543:0047.0007: probe with driver uclogic failed with error -71 [ 42.542956][ T336] usb 2-1: USB disconnect, device number 12 [ 42.620784][ T728] tmpfs: Unknown parameter '' [ 42.628029][ T728] fuse: Bad value for 'fd' [ 42.681179][ T730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.126'. [ 42.938644][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 42.953737][ T754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.962496][ T754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.990940][ T753] netlink: 'syz.0.130': attribute type 4 has an invalid length. [ 43.046200][ T760] overlayfs: missing 'lowerdir' [ 43.079867][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 43.079887][ T36] audit: type=1400 audit(1781737169.430:237): avc: denied { setopt } for pid=763 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.088647][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 43.111214][ T764] sit0: entered promiscuous mode [ 43.117574][ T764] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 43.125318][ T764] netlink: 1 bytes leftover after parsing attributes in process `syz.0.134'. [ 43.134204][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 43.142017][ T764] netlink: 122 bytes leftover after parsing attributes in process `syz.0.134'. [ 43.143445][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.161284][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 43.170523][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 67, changing to 7 [ 43.183474][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 43.192571][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.200644][ T10] usb 4-1: Product: syz [ 43.204813][ T10] usb 4-1: Manufacturer: syz [ 43.209426][ T10] usb 4-1: SerialNumber: syz [ 43.408653][ T470] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 43.419778][ T10] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 43.427702][ T10] usb 4-1: found format II with max.bitrate = 128, frame size=3249 [ 43.435743][ T10] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 43.442063][ T10] usb 4-1: 0:2 : does not exist [ 43.446988][ T10] usb 4-1: unit 6 not found! [ 43.455876][ T10] usb 4-1: USB disconnect, device number 13 [ 43.466363][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.538741][ T470] usb 1-1: device descriptor read/64, error -71 [ 43.778663][ T470] usb 1-1: device descriptor read/64, error -71 [ 43.888670][ T45] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 43.938151][ T36] audit: type=1400 audit(1781737170.280:238): avc: denied { listen } for pid=779 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 44.018714][ T470] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 44.040395][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.050617][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 44.060209][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 44.075456][ T45] usb 2-1: string descriptor 0 read error: -22 [ 44.081718][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.090961][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.102905][ T45] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 44.109779][ T45] cdc_ncm 2-1:1.0: bind() failure [ 44.158669][ T470] usb 1-1: device descriptor read/64, error -71 [ 44.188688][ T663] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 44.304553][ T777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.313181][ T777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.322530][ T45] usb 2-1: USB disconnect, device number 13 [ 44.338678][ T663] usb 4-1: Using ep0 maxpacket: 8 [ 44.345231][ T663] usb 4-1: unable to get BOS descriptor or descriptor too short [ 44.353653][ T663] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 146, changing to 7 [ 44.366123][ T663] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 44.375291][ T663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.377379][ T782] netlink: 'syz.2.124': attribute type 28 has an invalid length. [ 44.383348][ T663] usb 4-1: Product: syz [ 44.395293][ T663] usb 4-1: Manufacturer: syz [ 44.399953][ T470] usb 1-1: device descriptor read/64, error -71 [ 44.406252][ T663] usb 4-1: SerialNumber: syz [ 44.508750][ T470] usb usb1-port1: attempt power cycle [ 44.612863][ T780] sit0: entered promiscuous mode [ 44.618990][ T780] netlink: 'syz.3.138': attribute type 1 has an invalid length. [ 44.626639][ T780] netlink: 1 bytes leftover after parsing attributes in process `syz.3.138'. [ 44.659286][ T663] usb 4-1: selecting invalid altsetting 1 [ 44.665173][ T663] usb 4-1: unit 7 not found! [ 44.670407][ T663] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 44.681701][ T663] usb 4-1: selecting invalid altsetting 1 [ 44.687587][ T663] usb 4-1: unit 7 not found! [ 44.692808][ T663] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 44.702486][ T663] usb 4-1: selecting invalid altsetting 1 [ 44.708337][ T663] usb 4-1: unit 7 not found! [ 44.714854][ T663] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 44.725293][ T663] usb 4-1: USB disconnect, device number 14 [ 44.744050][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.848694][ T470] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 44.869839][ T470] usb 1-1: device descriptor read/8, error -71 [ 44.886710][ T784] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 44.896894][ T36] audit: type=1400 audit(1781737171.240:239): avc: denied { bind } for pid=783 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.916041][ T36] audit: type=1400 audit(1781737171.240:240): avc: denied { name_bind } for pid=783 comm="syz.1.139" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 44.936612][ T36] audit: type=1400 audit(1781737171.240:241): avc: denied { node_bind } for pid=783 comm="syz.1.139" saddr=255.255.255.255 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 44.962345][ T36] audit: type=1400 audit(1781737171.240:242): avc: denied { ioctl } for pid=783 comm="syz.1.139" path="socket:[6302]" dev="sockfs" ino=6302 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.986585][ T36] audit: type=1400 audit(1781737171.240:243): avc: denied { bind } for pid=783 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.006485][ T470] usb 1-1: device descriptor read/8, error -71 [ 45.198634][ T10] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 45.258665][ T470] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 45.290094][ T470] usb 1-1: device descriptor read/8, error -71 [ 45.359778][ T10] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 45.368132][ T10] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 45.376445][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 45.385369][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 45.396173][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 45.405951][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 45.411393][ T663] usb 3-1: USB disconnect, device number 13 [ 45.421372][ T10] usb 2-1: string descriptor 0 read error: -22 [ 45.430119][ T470] usb 1-1: device descriptor read/8, error -71 [ 45.433760][ T10] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 45.452299][ T36] audit: type=1400 audit(1781737171.800:244): avc: denied { validate_trans } for pid=807 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 45.458635][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.472981][ T36] audit: type=1400 audit(1781737171.800:245): avc: denied { mounton } for pid=807 comm="syz.2.145" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.503842][ T10] usb 2-1: config 0 descriptor?? [ 45.509559][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 45.515488][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 45.538758][ T470] usb usb1-port1: unable to enumerate USB device [ 45.578145][ T809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 45.597098][ T36] audit: type=1400 audit(1781737171.940:246): avc: denied { connect } for pid=807 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 45.898740][ T10] usb 2-1: USB disconnect, device number 14 [ 45.952349][ T827] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 45.962239][ T827] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 46.117366][ T833] netlink: 36 bytes leftover after parsing attributes in process `syz.3.152'. [ 46.216340][ T835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=835 comm=syz.0.153 [ 46.228688][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 46.368664][ T663] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 46.388663][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 46.394788][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 46.401436][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 46.410503][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.419300][ T10] usb 3-1: config 0 descriptor?? [ 46.518662][ T663] usb 4-1: Using ep0 maxpacket: 16 [ 46.525065][ T663] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.536144][ T663] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 46.546007][ T663] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 46.556023][ T663] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 46.569776][ T663] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.578862][ T663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 46.586878][ T663] usb 4-1: SerialNumber: syz [ 46.592559][ T833] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 46.599863][ T833] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 46.607608][ T663] hub 4-1:1.0: bad descriptor, ignoring hub [ 46.613575][ T663] hub 4-1:1.0: probe with driver hub failed with error -5 [ 46.807821][ T833] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 46.815119][ T833] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 46.834619][ T10] lenovo 0003:17EF:60A4.0008: unknown main item tag 0x2 [ 46.841981][ T10] lenovo 0003:17EF:60A4.0008: unknown main item tag 0x6 [ 46.849422][ T10] lenovo 0003:17EF:60A4.0008: ignoring exceeding usage max [ 46.877954][ T10] lenovo 0003:17EF:60A4.0008: hidraw0: USB HID v0.c1 Device [HID 17ef:60a4] on usb-dummy_hcd.2-1/input0 [ 46.912384][ T850] syz.1.157 uses obsolete (PF_INET,SOCK_PACKET) [ 46.955378][ T856] overlayfs: missing 'lowerdir' [ 47.208663][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 47.224813][ T663] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 47.338656][ T10] usb 1-1: device descriptor read/64, error -71 [ 47.425758][ T833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.434988][ T833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.588686][ T10] usb 1-1: device descriptor read/64, error -71 [ 47.828653][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 47.948639][ T311] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 47.958653][ T10] usb 1-1: device descriptor read/64, error -71 [ 48.098689][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 48.104910][ T311] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 48.116021][ T311] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 95, changing to 7 [ 48.128389][ T311] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 48.137690][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.145834][ T311] usb 2-1: Product: syz [ 48.150439][ T311] usb 2-1: Manufacturer: syz [ 48.155079][ T311] usb 2-1: SerialNumber: syz [ 48.208668][ T10] usb 1-1: device descriptor read/64, error -71 [ 48.318732][ T10] usb usb1-port1: attempt power cycle [ 48.362412][ T875] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.378902][ T311] usb 2-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 48.386444][ T311] usb 2-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 48.395724][ T311] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 48.406883][ T311] usb 2-1: USB disconnect, device number 15 [ 48.416764][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.658728][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 48.679921][ T10] usb 1-1: device descriptor read/8, error -71 [ 48.809705][ T10] usb 1-1: device descriptor read/8, error -71 [ 48.994991][ T311] usb 3-1: USB disconnect, device number 14 [ 49.048720][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 49.065498][ T663] usb 4-1: USB disconnect, device number 15 [ 49.072999][ T10] usb 1-1: device descriptor read/8, error -71 [ 49.074878][ T663] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 49.124039][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 49.124060][ T36] audit: type=1400 audit(1781737175.470:259): avc: denied { append } for pid=887 comm="syz.3.165" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.158682][ T470] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 49.209625][ T10] usb 1-1: device descriptor read/8, error -71 [ 49.318759][ T10] usb usb1-port1: unable to enumerate USB device [ 49.338653][ T470] usb 2-1: Using ep0 maxpacket: 32 [ 49.344985][ T470] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 49.353316][ T470] usb 2-1: config 0 has no interface number 0 [ 49.358675][ T311] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 49.359554][ T470] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 49.377098][ T470] usb 2-1: config 0 interface 196 has no altsetting 0 [ 49.385592][ T470] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 49.394739][ T470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.402795][ T470] usb 2-1: Product: syz [ 49.407039][ T470] usb 2-1: Manufacturer: syz [ 49.411702][ T470] usb 2-1: SerialNumber: syz [ 49.418847][ T470] usb 2-1: config 0 descriptor?? [ 49.424196][ T878] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 49.520090][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 49.528749][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.538904][ T311] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 49.547871][ T311] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 49.559101][ T311] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 49.568252][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.576294][ T311] usb 3-1: Product: syz [ 49.580502][ T311] usb 3-1: Manufacturer: syz [ 49.585112][ T311] usb 3-1: SerialNumber: syz [ 49.618868][ T663] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 49.768627][ T663] usb 4-1: Using ep0 maxpacket: 16 [ 49.774860][ T663] usb 4-1: config 1 has an invalid descriptor of length 74, skipping remainder of the config [ 49.785098][ T663] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.794838][ T663] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 49.796073][ T311] usb 3-1: unit 6 not found! [ 49.804600][ T663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 49.810114][ T311] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 49.816969][ T663] usb 4-1: SerialNumber: syz [ 49.825340][ T311] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 49.831885][ T663] usb 4-1: 0:2 : does not exist [ 49.848655][ T663] usb 4-1: unit 101 not found! [ 49.857607][ T311] usb 3-1: unit 6 not found! [ 49.860697][ T878] netlink: 'syz.1.162': attribute type 12 has an invalid length. [ 49.865408][ T311] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 49.889039][ T311] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 49.905275][ T311] usb 3-1: USB disconnect, device number 15 [ 49.913778][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 49.994281][ T928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.003423][ T928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.036533][ T663] usb 4-1: USB disconnect, device number 16 [ 50.072038][ T470] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 50.080505][ T470] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 50.276704][ C0] ipheth 2-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 50.398672][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 50.555191][ T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 50.564495][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.572772][ T10] usb 1-1: Product: syz [ 50.577290][ T10] usb 1-1: Manufacturer: syz [ 50.582158][ T311] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 50.590120][ T10] usb 1-1: SerialNumber: syz [ 50.739646][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.750645][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.760418][ T311] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 50.769503][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.778082][ T311] usb 3-1: config 0 descriptor?? [ 50.818692][ T10] rtl8150 1-1:1.0: couldn't reset the device [ 50.824880][ T10] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 50.834227][ T10] usb 1-1: USB disconnect, device number 24 [ 50.858638][ T663] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 50.982842][ T470] usb 2-1: USB disconnect, device number 16 [ 50.989448][ T663] usb 4-1: device descriptor read/64, error -71 [ 51.030028][ T470] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 51.189989][ T311] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 51.197470][ T311] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 51.204932][ T311] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 51.212359][ T311] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 51.219869][ T311] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 51.227883][ T311] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 51.231141][ T663] usb 4-1: device descriptor read/64, error -71 [ 51.368465][ T971] overlayfs: conflicting options: userxattr,verity=on [ 51.375325][ T470] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 51.393518][ T948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.402067][ T948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.410395][ T311] playstation 0003:054C:0DF2.0009: Invalid byte count transferred, expected 20 got 0 [ 51.420053][ T311] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense pairing info: -22 [ 51.429323][ T311] playstation 0003:054C:0DF2.0009: Failed to get MAC address from DualSense [ 51.438107][ T311] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 51.446216][ T311] playstation 0003:054C:0DF2.0009: probe with driver playstation failed with error -22 [ 51.478663][ T663] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 51.518673][ T470] usb 2-1: device descriptor read/64, error -71 [ 51.608640][ T663] usb 4-1: device descriptor read/64, error -71 [ 51.618656][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 51.758650][ T470] usb 2-1: device descriptor read/64, error -71 [ 51.768671][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 51.774886][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.785900][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 51.798788][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 51.807819][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.816545][ T10] usb 1-1: config 0 descriptor?? [ 51.848653][ T663] usb 4-1: device descriptor read/64, error -71 [ 51.958746][ T663] usb usb4-port1: attempt power cycle [ 51.998648][ T470] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 52.128643][ T470] usb 2-1: device descriptor read/64, error -71 [ 52.298644][ T663] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 52.319771][ T663] usb 4-1: device descriptor read/8, error -71 [ 52.368638][ T470] usb 2-1: device descriptor read/64, error -71 [ 52.449774][ T663] usb 4-1: device descriptor read/8, error -71 [ 52.478720][ T470] usb usb2-port1: attempt power cycle [ 52.688643][ T663] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 52.709712][ T663] usb 4-1: device descriptor read/8, error -71 [ 52.819100][ T470] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 52.839823][ T470] usb 2-1: device descriptor read/8, error -71 [ 52.846072][ T663] usb 4-1: device descriptor read/8, error -71 [ 52.958749][ T663] usb usb4-port1: unable to enumerate USB device [ 52.979696][ T470] usb 2-1: device descriptor read/8, error -71 [ 53.218658][ T470] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 53.239700][ T470] usb 2-1: device descriptor read/8, error -71 [ 53.347255][ T311] usb 3-1: USB disconnect, device number 16 [ 53.379979][ T470] usb 2-1: device descriptor read/8, error -71 [ 53.488715][ T470] usb usb2-port1: unable to enumerate USB device [ 53.828656][ T311] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 53.918639][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 53.989664][ T311] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 53.997941][ T311] usb 3-1: config 0 has no interface number 0 [ 54.009747][ T311] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 54.018911][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.026950][ T311] usb 3-1: Product: syz [ 54.031401][ T311] usb 3-1: Manufacturer: syz [ 54.036057][ T311] usb 3-1: SerialNumber: syz [ 54.048887][ T311] usb 3-1: config 0 descriptor?? [ 54.053939][ T9] usb 4-1: device descriptor read/64, error -71 [ 54.069355][ T311] ftdi_sio 3-1:0.188: FTDI USB Serial Device converter detected [ 54.077320][ T311] ftdi_sio ttyUSB0: unknown device type: 0x223 [ 54.110429][ T989] netlink: 'syz.1.178': attribute type 4 has an invalid length. [ 54.118218][ T989] netlink: 17 bytes leftover after parsing attributes in process `syz.1.178'. [ 54.171330][ T992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.180748][ T992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.262788][ T311] usb 3-1: USB disconnect, device number 17 [ 54.269557][ T311] ftdi_sio 3-1:0.188: device disconnected [ 54.322201][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 54.329130][ T9] usb 4-1: device descriptor read/64, error -71 [ 54.335675][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 54.344636][ T10] usb 1-1: USB disconnect, device number 25 [ 54.455070][ T998] syzkaller1: entered promiscuous mode [ 54.460654][ T998] syzkaller1: entered allmulticast mode [ 54.467477][ T36] audit: type=1400 audit(1781737180.810:260): avc: denied { listen } for pid=997 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.498644][ T470] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 54.589055][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 54.649792][ T470] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 54.660716][ T470] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 54.673592][ T470] usb 2-1: config 0 interface 0 has no altsetting 0 [ 54.680227][ T470] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 54.689268][ T470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.697839][ T470] usb 2-1: config 0 descriptor?? [ 54.703151][ T991] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 54.718647][ T9] usb 4-1: device descriptor read/64, error -71 [ 54.778662][ T663] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 54.901933][ T36] audit: type=1326 audit(1781737181.250:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1008 comm="syz.2.186" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e9379ce59 code=0x0 [ 54.927719][ T470] usbhid 2-1:0.0: can't add hid device: -71 [ 54.933776][ T470] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 54.942817][ T663] usb 1-1: config index 0 descriptor too short (expected 1051, got 27) [ 54.951219][ T470] usb 2-1: USB disconnect, device number 21 [ 54.957738][ T663] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 54.969263][ T663] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 54.978668][ T9] usb 4-1: device descriptor read/64, error -71 [ 54.980536][ T663] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 54.994318][ T663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.002326][ T663] usb 1-1: Product: syz [ 55.006498][ T663] usb 1-1: Manufacturer: syz [ 55.011195][ T663] usb 1-1: SerialNumber: syz [ 55.016488][ T663] usb 1-1: config 0 descriptor?? [ 55.088739][ T9] usb usb4-port1: attempt power cycle [ 55.138648][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 55.224919][ T1000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.233501][ T1000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.242053][ T1000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.250599][ T1000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.258978][ T311] usb 1-1: USB disconnect, device number 26 [ 55.289743][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 55.300770][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 55.313216][ T10] usb 3-1: New USB device found, idVendor=0499, idProduct=1024, bcdDevice= 0.40 [ 55.322584][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.330723][ T10] usb 3-1: Product: syz [ 55.334906][ T10] usb 3-1: Manufacturer: syz [ 55.339611][ T10] usb 3-1: SerialNumber: syz [ 55.428914][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 55.449775][ T9] usb 4-1: device descriptor read/8, error -71 [ 55.464223][ T36] audit: type=1400 audit(1781737181.810:262): avc: denied { read } for pid=1017 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.510182][ T1020] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 55.547760][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 55.557373][ T10] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 55.568824][ T10] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 55.578521][ T10] usb 3-1: USB disconnect, device number 18 [ 55.586067][ T9] usb 4-1: device descriptor read/8, error -71 [ 55.593941][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.778619][ T36] audit: type=1400 audit(1781737182.120:263): avc: denied { setopt } for pid=1028 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.828705][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 55.830912][ T1037] netlink: 'syz.1.196': attribute type 46 has an invalid length. [ 55.844168][ T1037] netlink: 'syz.1.196': attribute type 28 has an invalid length. [ 55.870006][ T9] usb 4-1: device descriptor read/8, error -71 [ 55.960969][ T36] audit: type=1400 audit(1781737182.310:264): avc: denied { write } for pid=1043 comm="syz.1.198" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.005136][ T9] usb 4-1: device descriptor read/8, error -71 [ 56.017790][ T36] audit: type=1400 audit(1781737182.370:265): avc: denied { cmd } for pid=1045 comm="iou-wrk-1046" path="socket:[6926]" dev="sockfs" ino=6926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.090458][ T36] audit: type=1400 audit(1781737182.440:266): avc: denied { read } for pid=1053 comm="syz.0.202" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.114489][ T36] audit: type=1400 audit(1781737182.440:267): avc: denied { open } for pid=1053 comm="syz.0.202" path="/48/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.139642][ T9] usb usb4-port1: unable to enumerate USB device [ 56.146262][ T36] audit: type=1400 audit(1781737182.440:268): avc: denied { ioctl } for pid=1053 comm="syz.0.202" path="/48/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.173292][ T36] audit: type=1400 audit(1781737182.440:269): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.458623][ T663] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 56.558694][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 56.608667][ T663] usb 2-1: Using ep0 maxpacket: 8 [ 56.615182][ T663] usb 2-1: unable to get BOS descriptor or descriptor too short [ 56.625138][ T663] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 56.634263][ T663] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.642314][ T663] usb 2-1: Product: syz [ 56.646497][ T663] usb 2-1: Manufacturer: syz [ 56.651122][ T663] usb 2-1: SerialNumber: syz [ 56.688818][ T10] usb 3-1: device descriptor read/64, error -71 [ 56.860858][ T663] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 56.867863][ T663] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 56.877850][ T663] usb 2-1: USB disconnect, device number 22 [ 56.938658][ T10] usb 3-1: device descriptor read/64, error -71 [ 56.946639][ T1083] FAULT_INJECTION: forcing a failure. [ 56.946639][ T1083] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 56.959777][ T1083] CPU: 1 UID: 0 PID: 1083 Comm: syz.0.211 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 56.959805][ T1083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 56.959815][ T1083] Call Trace: [ 56.959821][ T1083] [ 56.959826][ T1083] __dump_stack+0x21/0x30 [ 56.959849][ T1083] dump_stack_lvl+0x140/0x1c0 [ 56.959867][ T1083] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.959887][ T1083] ? check_stack_object+0x12b/0x150 [ 56.959902][ T1083] dump_stack+0x19/0x20 [ 56.959918][ T1083] should_fail_ex+0x3d7/0x530 [ 56.959950][ T1083] should_fail+0xf/0x20 [ 56.959965][ T1083] should_fail_usercopy+0x1e/0x30 [ 56.959982][ T1083] _copy_to_user+0x24/0xa0 [ 56.959994][ T1083] simple_read_from_buffer+0xed/0x160 [ 56.960012][ T1083] proc_fail_nth_read+0x1aa/0x220 [ 56.960030][ T1083] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 56.960047][ T1083] ? __cfi_ovl_file_end_write+0x10/0x10 [ 56.960069][ T1083] ? bpf_lsm_file_permission+0xd/0x20 [ 56.960085][ T1083] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 56.960102][ T1083] vfs_read+0x289/0xcb0 [ 56.960116][ T1083] ? __cfi_vfs_read+0x10/0x10 [ 56.960128][ T1083] ? __kasan_check_write+0x18/0x20 [ 56.960140][ T1083] ? mutex_lock+0x97/0x1d0 [ 56.960153][ T1083] ? __cfi_mutex_lock+0x10/0x10 [ 56.960166][ T1083] ? __fget_files+0x2c5/0x340 [ 56.960185][ T1083] ksys_read+0x145/0x260 [ 56.960198][ T1083] ? __cfi_ksys_read+0x10/0x10 [ 56.960210][ T1083] ? __se_sys_chdir+0x1ad/0x280 [ 56.960225][ T1083] ? __kasan_check_read+0x15/0x20 [ 56.960238][ T1083] __x64_sys_read+0x7f/0x90 [ 56.960251][ T1083] x64_sys_call+0x2638/0x2ee0 [ 56.960263][ T1083] do_syscall_64+0x57/0xf0 [ 56.960280][ T1083] ? clear_bhb_loop+0x50/0xa0 [ 56.960293][ T1083] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.960315][ T1083] RIP: 0033:0x7faa5555d68e [ 56.960327][ T1083] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 56.960338][ T1083] RSP: 002b:00007faa564e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.960354][ T1083] RAX: ffffffffffffffda RBX: 00007faa564e96c0 RCX: 00007faa5555d68e [ 56.960364][ T1083] RDX: 000000000000000f RSI: 00007faa564e90a0 RDI: 0000000000000004 [ 56.960373][ T1083] RBP: 00007faa564e9090 R08: 0000000000000000 R09: 0000000000000000 [ 56.960391][ T1083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.960399][ T1083] R13: 00007faa55816038 R14: 00007faa55815fa0 R15: 00007ffdc082ae38 [ 56.960410][ T1083] [ 57.028712][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 57.349220][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 57.378637][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 57.389680][ T9] usb 4-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 57.398788][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.407671][ T9] usb 4-1: config 0 descriptor?? [ 57.478708][ T311] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 57.486571][ T10] usb 3-1: device descriptor read/64, error -71 [ 57.497194][ T1102] netlink: 76 bytes leftover after parsing attributes in process `syz.1.216'. [ 57.639817][ T311] usb 1-1: config 0 has no interfaces? [ 57.646745][ T311] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 57.656009][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.664045][ T311] usb 1-1: Product: syz [ 57.668234][ T311] usb 1-1: Manufacturer: syz [ 57.673130][ T311] usb 1-1: SerialNumber: syz [ 57.678310][ T311] usb 1-1: config 0 descriptor?? [ 57.738622][ T10] usb 3-1: device descriptor read/64, error -71 [ 57.818611][ T9] ntrig 0003:1B96:000C.000A: unexpected long global item [ 57.825792][ T9] ntrig 0003:1B96:000C.000A: parse failed [ 57.831573][ T9] ntrig 0003:1B96:000C.000A: probe with driver ntrig failed with error -22 [ 57.848739][ T10] usb usb3-port1: attempt power cycle [ 57.858642][ T470] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 57.885179][ T1089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.893746][ T1089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.902528][ T9] usb 1-1: USB disconnect, device number 27 [ 58.021774][ T311] usb 4-1: USB disconnect, device number 25 [ 58.029109][ T470] usb 2-1: Using ep0 maxpacket: 16 [ 58.035488][ T470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.046519][ T470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.056295][ T470] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.069137][ T470] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 58.078201][ T470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.086854][ T470] usb 2-1: config 0 descriptor?? [ 58.188690][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 58.209696][ T10] usb 3-1: device descriptor read/8, error -71 [ 58.339709][ T10] usb 3-1: device descriptor read/8, error -71 [ 58.498547][ T470] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.000B/input/input10 [ 58.514113][ T470] sony 0003:054C:03D5.000B: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 58.599460][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 58.619691][ T10] usb 3-1: device descriptor read/8, error -71 [ 58.658655][ T663] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 58.749730][ T10] usb 3-1: device descriptor read/8, error -71 [ 58.809737][ T663] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.819938][ T663] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.833564][ T663] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 58.842657][ T663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 58.850670][ T663] usb 1-1: SerialNumber: syz [ 58.857291][ T663] usb 1-1: bad CDC descriptors [ 58.862298][ T663] usb-storage 1-1:1.0: USB Mass Storage device detected [ 58.868756][ T10] usb usb3-port1: unable to enumerate USB device [ 58.877151][ T663] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 59.058550][ T10] usb 1-1: USB disconnect, device number 28 [ 59.436452][ T1143] netlink: 'syz.3.228': attribute type 10 has an invalid length. [ 59.444275][ T1143] netlink: 40 bytes leftover after parsing attributes in process `syz.3.228'. [ 59.453216][ T1143] veth1: entered promiscuous mode [ 59.458963][ T1143] netlink: 'syz.3.228': attribute type 10 has an invalid length. [ 59.466911][ T1143] netlink: 40 bytes leftover after parsing attributes in process `syz.3.228'. [ 59.488521][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 59.488542][ T36] audit: type=1400 audit(1781737185.830:276): avc: denied { read } for pid=1140 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.516903][ T36] audit: type=1400 audit(1781737185.850:277): avc: denied { setopt } for pid=1145 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.630943][ T31] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 59.644939][ T31] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 59.988656][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 60.139739][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 60.150892][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.40 [ 60.160017][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.168014][ T10] usb 1-1: Product: syz [ 60.172242][ T10] usb 1-1: Manufacturer: syz [ 60.176845][ T10] usb 1-1: SerialNumber: syz [ 60.386342][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 60.396113][ T10] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 60.407240][ T10] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 60.417087][ T10] usb 1-1: USB disconnect, device number 29 [ 60.429137][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.493351][ T1173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56310 sclass=netlink_route_socket pid=1173 comm=syz.3.238 [ 60.509199][ T426] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 60.517009][ T311] usb 2-1: USB disconnect, device number 23 [ 60.524390][ T1173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=1173 comm=syz.3.238 [ 60.538635][ T36] audit: type=1400 audit(1781737186.880:278): avc: denied { accept } for pid=1172 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.628239][ T36] audit: type=1400 audit(1781737186.970:279): avc: denied { create } for pid=1178 comm="syz.3.241" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 60.649126][ T36] audit: type=1400 audit(1781737186.970:280): avc: denied { write } for pid=1178 comm="syz.3.241" name="file2" dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 60.671514][ T36] audit: type=1400 audit(1781737186.970:281): avc: denied { open } for pid=1178 comm="syz.3.241" path="/58/file2" dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 60.674183][ T426] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=ab.79 [ 60.694429][ T36] audit: type=1400 audit(1781737186.970:282): avc: denied { ioctl } for pid=1178 comm="syz.3.241" path="/58/file2" dev="tmpfs" ino=360 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 60.704038][ T426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.735259][ T426] usb 3-1: Product: syz [ 60.739709][ T426] usb 3-1: Manufacturer: syz [ 60.744351][ T426] usb 3-1: SerialNumber: syz [ 60.751741][ T426] ftdi_sio 3-1:4.0: FTDI USB Serial Device converter detected [ 60.759574][ T426] ftdi_sio ttyUSB0: unknown device type: 0xab79 [ 60.967387][ T1171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.977034][ T1171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.026691][ T663] usb 3-1: USB disconnect, device number 23 [ 61.033130][ T663] ftdi_sio 3-1:4.0: device disconnected [ 61.078637][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 61.228610][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 61.239374][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.250882][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.260657][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.273587][ T31] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 61.282667][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.298646][ T426] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 61.298839][ T31] usb 2-1: config 0 descriptor?? [ 61.460224][ T426] usb 1-1: unable to get BOS descriptor or descriptor too short [ 61.468938][ T426] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1023 [ 61.480477][ T426] usb 1-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 61.489831][ T426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.497829][ T426] usb 1-1: Product: syz [ 61.502261][ T426] usb 1-1: Manufacturer: syz [ 61.506872][ T426] usb 1-1: SerialNumber: syz [ 61.516430][ T1198] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 61.717143][ T31] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.000D/input/input12 [ 61.728190][ T1198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.747855][ T31] sony 0003:054C:03D5.000D: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 61.754785][ T1198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.900501][ T36] audit: type=1400 audit(1781737188.250:283): avc: denied { nlmsg_read } for pid=1234 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 61.921307][ T1235] futex_wake_op: syz.2.250 tries to shift op by -1; fix this program [ 62.064525][ T1182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.073982][ T1182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.138653][ T311] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 63.289680][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.300862][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.310814][ T311] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 63.320149][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.333011][ T311] usb 3-1: config 0 descriptor?? [ 63.745971][ T311] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 63.757190][ T311] hid-thrustmaster 0003:044F:B65D.000E: item fetching failed at offset 6/7 [ 63.771216][ T311] hid-thrustmaster 0003:044F:B65D.000E: parse failed with error -22 [ 63.780419][ T311] hid-thrustmaster 0003:044F:B65D.000E: probe with driver hid-thrustmaster failed with error -22 [ 63.859185][ T311] usb 2-1: USB disconnect, device number 24 [ 63.899454][ T36] audit: type=1400 audit(1781737190.250:284): avc: denied { unlink } for pid=299 comm="syz-executor" name="file2" dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 63.944281][ T470] usb 3-1: USB disconnect, device number 24 [ 63.970747][ T1215] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.014766][ T426] usb 1-1: MIDIStreaming interface descriptor not found [ 64.029908][ T426] usb 1-1: USB disconnect, device number 30 [ 64.040890][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.079522][ T1256] overlayfs: missing 'lowerdir' [ 64.198633][ T311] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 64.348627][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 64.355349][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 64.363806][ T311] usb 2-1: config 16 has an invalid interface number: 138 but max is 0 [ 64.372126][ T311] usb 2-1: config 16 has no interface number 0 [ 64.378305][ T311] usb 2-1: config 16 interface 138 has no altsetting 0 [ 64.386622][ T311] usb 2-1: New USB device found, idVendor=19d2, idProduct=0602, bcdDevice=72.ab [ 64.395705][ T426] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 64.403279][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.411359][ T311] usb 2-1: Product: syz [ 64.415555][ T311] usb 2-1: Manufacturer: syz [ 64.420319][ T311] usb 2-1: SerialNumber: syz [ 64.578650][ T426] usb 1-1: Using ep0 maxpacket: 32 [ 64.586394][ T426] usb 1-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 64.595576][ T426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.603619][ T426] usb 1-1: Product: syz [ 64.607849][ T426] usb 1-1: Manufacturer: syz [ 64.612474][ T426] usb 1-1: SerialNumber: syz [ 64.631039][ T311] usb 2-1: USB disconnect, device number 25 [ 64.822470][ T426] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 64.829426][ T426] usb 1-1: unit 5 not found! [ 64.837020][ T426] usb 1-1: USB disconnect, device number 31 [ 64.847018][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.214666][ T36] audit: type=1400 audit(1781737191.560:285): avc: denied { connect } for pid=1273 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.269691][ T1276] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 65.324259][ T1279] Invalid architecture in ELF header: 6 [ 65.329916][ T36] audit: type=1400 audit(1781737191.670:286): avc: denied { module_load } for pid=1278 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 65.368727][ T1284] netlink: 200 bytes leftover after parsing attributes in process `syz.1.266'. [ 65.368732][ T36] audit: type=1400 audit(1781737191.710:287): avc: denied { ioctl } for pid=1282 comm="syz.1.266" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 65.402303][ T1284] tc_dump_action: action bad kind [ 65.588701][ T426] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 65.638695][ T311] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 65.740118][ T426] usb 1-1: unable to get BOS descriptor or descriptor too short [ 65.748472][ T426] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.758646][ T426] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.768659][ T311] usb 2-1: device descriptor read/64, error -71 [ 65.775637][ T426] usb 1-1: string descriptor 0 read error: -22 [ 65.781878][ T426] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 65.790955][ T426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.801606][ T426] usb 1-1: selecting invalid altsetting 1 [ 65.807564][ T426] usb 1-1: unit 6 not found! [ 65.943045][ T36] audit: type=1400 audit(1781737192.290:288): avc: denied { bind } for pid=1286 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.963071][ T36] audit: type=1400 audit(1781737192.290:289): avc: denied { bind } for pid=1286 comm="syz.2.267" laddr=::ffff:172.20.20.10 lport=47 faddr=::ffff:172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.988034][ T36] audit: type=1400 audit(1781737192.290:290): avc: denied { name_bind } for pid=1286 comm="syz.2.267" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 66.008982][ T36] audit: type=1400 audit(1781737192.290:291): avc: denied { node_bind } for pid=1286 comm="syz.2.267" saddr=fe80::bb src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 66.019399][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.031078][ T1252] Bluetooth: hci0: command 0x1003 tx timeout [ 66.038614][ T311] usb 2-1: device descriptor read/64, error -71 [ 66.218641][ T663] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 66.288665][ T311] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 66.369766][ T663] usb 3-1: config 1 has an invalid interface number: 93 but max is 0 [ 66.377928][ T663] usb 3-1: config 1 has no interface number 0 [ 66.384097][ T663] usb 3-1: config 1 interface 93 has no altsetting 0 [ 66.390838][ T663] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02 [ 66.399904][ T663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.418808][ T311] usb 2-1: device descriptor read/64, error -71 [ 66.560467][ T1290] netlink: 'syz.3.268': attribute type 2 has an invalid length. [ 66.569037][ T1291] input: syz0 as /devices/virtual/input/input13 [ 66.609712][ T36] audit: type=1400 audit(1781737192.960:292): avc: denied { create } for pid=1286 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 66.616326][ T663] usb 3-1: string descriptor 0 read error: -71 [ 66.637638][ T1281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.655112][ T1281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.669017][ T663] gl620a 3-1:1.93: probe with driver gl620a failed with error -22 [ 66.686914][ T663] usb 3-1: USB disconnect, device number 25 [ 66.698627][ T311] usb 2-1: device descriptor read/64, error -71 [ 66.737069][ T1309] rust_binder: Write failure EFAULT in pid:193 [ 66.737470][ T1309] netlink: 'syz.3.273': attribute type 5 has an invalid length. [ 66.751646][ T1309] netlink: 45 bytes leftover after parsing attributes in process `syz.3.273'. [ 66.756878][ T426] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 66.774955][ T426] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 66.786128][ T426] usb 1-1: USB disconnect, device number 32 [ 66.788140][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.808694][ T311] usb usb2-port1: attempt power cycle [ 66.843129][ T1315] loop2: detected capacity change from 0 to 2 [ 66.879885][ T322] buffer_io_error: 26 callbacks suppressed [ 66.879906][ T322] Buffer I/O error on dev loop2, logical block 0, async page read [ 66.893821][ T322] Buffer I/O error on dev loop2, logical block 0, async page read [ 66.902024][ T322] Buffer I/O error on dev loop2, logical block 0, async page read [ 66.910272][ T322] Buffer I/O error on dev loop2, logical block 0, async page read [ 66.918196][ T322] Buffer I/O error on dev loop2, logical block 0, async page read [ 66.926354][ T322] Buffer I/O error on dev loop2, logical block 0, async page read [ 66.934391][ T322] Buffer I/O error on dev loop2, logical block 0, async page read [ 66.942371][ T322] Buffer I/O error on dev loop2, logical block 0, async page read [ 66.950460][ T322] Buffer I/O error on dev loop2, logical block 0, async page read [ 66.958433][ T322] Buffer I/O error on dev loop2, logical block 0, async page read [ 67.018654][ T663] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 67.095043][ T36] audit: type=1400 audit(1781737193.440:293): avc: denied { create } for pid=1322 comm="syz.3.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 67.095918][ T1323] overlayfs: workdir and upperdir must reside under the same mount [ 67.148699][ T311] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 67.168680][ T663] usb 3-1: Using ep0 maxpacket: 32 [ 67.169765][ T311] usb 2-1: device descriptor read/8, error -71 [ 67.175044][ T663] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 67.188481][ T663] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 67.197102][ T663] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 67.206099][ T663] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 67.215769][ T663] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 67.225458][ T663] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 67.238433][ T663] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 67.247510][ T663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.256128][ T663] usb 3-1: config 0 descriptor?? [ 67.289809][ T36] audit: type=1400 audit(1781737193.640:294): avc: denied { read append } for pid=1324 comm="syz.0.280" name="usbmon1" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 67.314873][ T311] usb 2-1: device descriptor read/8, error -71 [ 67.368670][ T426] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 67.462826][ T663] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 67.475193][ T663] usb 3-1: USB disconnect, device number 26 [ 67.482042][ T663] usblp0: removed [ 67.518666][ T426] usb 4-1: Using ep0 maxpacket: 16 [ 67.524922][ T426] usb 4-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 67.535391][ T426] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 67.545054][ T426] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 67.554328][ T426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 67.562465][ T311] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 67.570096][ T426] usb 4-1: SerialNumber: syz [ 67.577583][ T426] usb 4-1: 0:2 : does not exist [ 67.589677][ T311] usb 2-1: device descriptor read/8, error -71 [ 67.719683][ T311] usb 2-1: device descriptor read/8, error -71 [ 67.768652][ T663] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 67.779885][ T426] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 67.790888][ T426] usb 4-1: 5:0: failed to get current value for ch 2 (-22) [ 67.801681][ T426] usb 4-1: 5:0: failed to get current value for ch 3 (-22) [ 67.812832][ T426] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 67.823817][ T426] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 67.831597][ T311] usb usb2-port1: unable to enumerate USB device [ 67.840266][ T426] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 67.849984][ T426] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 67.859742][ T426] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 67.869530][ T426] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 67.879176][ T426] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 67.890251][ T426] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 67.898614][ T663] usb 3-1: device descriptor read/64, error -71 [ 67.901843][ T426] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5) [ 67.914719][ T426] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5) [ 67.925271][ T426] usb 4-1: USB disconnect, device number 26 [ 68.138637][ T663] usb 3-1: device descriptor read/64, error -71 [ 68.382357][ T1336] 9pnet: Could not find request transport: $= [ 68.398637][ T663] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 68.409836][ T1338] syzkaller1: entered promiscuous mode [ 68.415383][ T1338] syzkaller1: entered allmulticast mode [ 68.472404][ T1342] rust_binder: 1341:1342 transaction to 0 failed: BR_DEAD_REPLY [ 68.511963][ T1342] syzkaller1: entered promiscuous mode [ 68.525130][ T1342] syzkaller1: entered allmulticast mode [ 68.538631][ T663] usb 3-1: device descriptor read/64, error -71 [ 68.778630][ T663] usb 3-1: device descriptor read/64, error -71 [ 68.858634][ T470] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 68.888705][ T663] usb usb3-port1: attempt power cycle [ 69.010103][ T470] usb 2-1: unable to get BOS descriptor or descriptor too short [ 69.018620][ T470] usb 2-1: config index 0 descriptor too short (expected 40744, got 96) [ 69.027018][ T470] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.028106][ T1350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.038142][ T470] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 69.046017][ T1350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.055273][ T470] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 69.062559][ T311] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 69.073156][ T470] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 69.081765][ T1350] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 69.092390][ T470] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 69.115830][ T470] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 69.124956][ T470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.134229][ T470] usb 2-1: Product: syz [ 69.138461][ T470] usb 2-1: Manufacturer: syz [ 69.143324][ T470] usb 2-1: SerialNumber: syz [ 69.238633][ T663] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 69.269637][ T663] usb 3-1: device descriptor read/8, error -71 [ 69.399693][ T663] usb 3-1: device descriptor read/8, error -71 [ 69.638660][ T663] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 69.638668][ T311] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 69.669643][ T663] usb 3-1: device descriptor read/8, error -71 [ 69.701074][ T1360] loop2: detected capacity change from 0 to 2 [ 69.789687][ T311] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.799149][ T663] usb 3-1: device descriptor read/8, error -71 [ 69.800727][ T311] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 69.816592][ T311] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 69.826397][ T311] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 72, changing to 10 [ 69.837442][ T311] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 41368, setting to 1024 [ 69.849915][ T311] usb 4-1: New USB device found, idVendor=0525, idProduct=99a1, bcdDevice= 0.f0 [ 69.859040][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.867042][ T311] usb 4-1: Product: syz [ 69.871221][ T311] usb 4-1: Manufacturer: syz [ 69.875907][ T311] usb 4-1: SerialNumber: syz [ 69.908739][ T663] usb usb3-port1: unable to enumerate USB device [ 70.083711][ T1370] tipc: Enabling of bearer rejected, failed to enable media [ 70.198639][ T663] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 70.284317][ T311] cdc_ncm 4-1:1.0: bind() failure [ 70.291759][ T311] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 70.300150][ T311] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 70.310211][ T311] usb 4-1: USB disconnect, device number 28 [ 70.358637][ T663] usb 3-1: Using ep0 maxpacket: 32 [ 70.365187][ T663] usb 3-1: unable to get BOS descriptor or descriptor too short [ 70.374864][ T663] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 70.383981][ T663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.392023][ T663] usb 3-1: Product: syz [ 70.396217][ T663] usb 3-1: Manufacturer: syz [ 70.400839][ T663] usb 3-1: SerialNumber: syz [ 70.611750][ T663] usb 3-1: BAAD GENERIC IO: no channels? [ 70.619239][ T663] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 70.630163][ T663] usb 3-1: USB disconnect, device number 31 [ 70.640785][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.981910][ T1385] overlayfs: workdir and upperdir must be separate subtrees [ 71.078637][ T426] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 71.229454][ T426] usb 4-1: Using ep0 maxpacket: 32 [ 71.237385][ T426] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 71.250431][ T426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.258508][ T426] usb 4-1: Product: syz [ 71.268264][ T426] usb 4-1: Manufacturer: syz [ 71.278605][ T426] usb 4-1: SerialNumber: syz [ 71.486352][ T426] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 71.512959][ T426] usb 4-1: USB disconnect, device number 29 [ 71.540193][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.588631][ T663] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 71.633536][ T470] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 71.657142][ T470] usb 2-1: USB disconnect, device number 30 [ 71.680406][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 71.680424][ T36] audit: type=1400 audit(1781737198.030:300): avc: denied { write } for pid=1410 comm="syz.1.304" path="socket:[8923]" dev="sockfs" ino=8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 71.682314][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.739724][ T663] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.749953][ T663] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 71.761077][ T663] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 71.772315][ T663] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 71.786622][ T663] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.795764][ T663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.803939][ T663] usb 1-1: Product: syz [ 71.808107][ T663] usb 1-1: Manufacturer: syz [ 71.812744][ T663] usb 1-1: SerialNumber: syz [ 71.818339][ T1409] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 71.826132][ T663] cdc_mbim 1-1:1.0: skipping garbage [ 71.978628][ T470] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 72.041897][ T663] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 72.049352][ T663] cdc_mbim 1-1:1.0: bind() failure [ 72.056026][ T663] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 72.061928][ T36] audit: type=1400 audit(1781737198.410:301): avc: denied { accept } for pid=1420 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.068714][ T663] cdc_ncm 1-1:1.1: bind() failure [ 72.093008][ T663] usb 1-1: USB disconnect, device number 33 [ 72.129956][ T470] usb 2-1: unable to get BOS descriptor or descriptor too short [ 72.138343][ T470] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.150485][ T470] usb 2-1: string descriptor 0 read error: -22 [ 72.156679][ T470] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 72.165736][ T470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.278638][ T426] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 72.328630][ T336] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 72.376828][ T1411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.385433][ T1411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.393588][ T1411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.402208][ T1411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.410599][ T1411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.419116][ T1411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.427172][ T1411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.435573][ T426] usb 3-1: Using ep0 maxpacket: 32 [ 72.438969][ T1411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.442444][ T426] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 72.449041][ T1411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.457616][ T426] usb 3-1: config 0 has no interface number 0 [ 72.465483][ T1411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.472085][ T426] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 72.488940][ T336] usb 4-1: Using ep0 maxpacket: 32 [ 72.490080][ T470] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 72.496924][ T336] usb 4-1: unable to get BOS descriptor or descriptor too short [ 72.503806][ T470] usb 2-1: USB disconnect, device number 31 [ 72.514617][ T426] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 72.525820][ T426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.536885][ T426] usb 3-1: Product: syz [ 72.541333][ T336] usb 4-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 72.550439][ T336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.558416][ T336] usb 4-1: Product: syz [ 72.562609][ T426] usb 3-1: Manufacturer: syz [ 72.567215][ T426] usb 3-1: SerialNumber: syz [ 72.571872][ T336] usb 4-1: Manufacturer: syz [ 72.576471][ T336] usb 4-1: SerialNumber: syz [ 72.581733][ T426] usb 3-1: config 0 descriptor?? [ 72.587027][ T1419] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 72.792535][ T336] usb 4-1: BAAD GENERIC IO: no channels? [ 72.795785][ T1419] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 72.801355][ T336] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 72.818183][ T336] usb 4-1: USB disconnect, device number 30 [ 72.827393][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.932073][ T1425] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.309'. [ 72.942148][ T1425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'. [ 72.951757][ T1425] overlayfs: workdir and upperdir must reside under the same mount [ 72.974376][ T1428] /dev/nullb0: Can't lookup blockdev [ 72.990497][ T1430] netlink: 122 bytes leftover after parsing attributes in process `syz.0.311'. [ 73.248642][ T470] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 73.327769][ T1443] netlink: 'syz.3.313': attribute type 27 has an invalid length. [ 73.337948][ T1443] sit0: left promiscuous mode [ 73.353854][ T1443] veth1: left promiscuous mode [ 73.401327][ T470] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 73.415037][ T470] usb 2-1: config 0 has no interface number 0 [ 73.429137][ T470] usb 2-1: config 0 interface 41 has no altsetting 0 [ 73.440594][ T470] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 73.450152][ T470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.458313][ T470] usb 2-1: Product: syz [ 73.463242][ T470] usb 2-1: Manufacturer: syz [ 73.467912][ T470] usb 2-1: SerialNumber: syz [ 73.474148][ T470] usb 2-1: config 0 descriptor?? [ 73.621744][ T426] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 73.631971][ T426] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 73.642471][ T426] asix 3-1:0.188: probe with driver asix failed with error -32 [ 73.668888][ T64] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 73.818704][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 73.830314][ T64] usb 4-1: config 9 has an invalid interface number: 174 but max is 2 [ 73.842416][ T64] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 73.852977][ T64] usb 4-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 73.863079][ T64] usb 4-1: config 9 has no interface number 0 [ 73.874110][ T64] usb 4-1: config 9 interface 174 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 73.907652][ T64] usb 4-1: config 9 interface 174 has no altsetting 0 [ 73.919286][ T36] audit: type=1400 audit(1781737200.260:302): avc: denied { write } for pid=1433 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.940529][ T64] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=33.14 [ 73.949637][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.957633][ T64] usb 4-1: Product: syz [ 73.962548][ T64] usb 4-1: Manufacturer: syz [ 73.967171][ T64] usb 4-1: SerialNumber: syz [ 74.128732][ T426] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 74.182184][ T64] usb 4-1: USB disconnect, device number 31 [ 74.278655][ T426] usb 1-1: Using ep0 maxpacket: 8 [ 74.285646][ T426] usb 1-1: unable to get BOS descriptor or descriptor too short [ 74.294127][ T426] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.304291][ T426] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 74.314799][ T426] usb 1-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 74.319370][ T470] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 74.323953][ T426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.344936][ T426] usb 1-1: Product: syz [ 74.349321][ T426] usb 1-1: Manufacturer: syz [ 74.354029][ T426] usb 1-1: SerialNumber: syz [ 74.563825][ T426] usb 1-1: USB disconnect, device number 34 [ 74.701402][ T1468] overlayfs: conflicting lowerdir path [ 74.860331][ T36] audit: type=1400 audit(1781737201.210:303): avc: denied { ioctl } for pid=1474 comm="syz.3.317" path="socket:[9738]" dev="sockfs" ino=9738 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.132024][ T36] audit: type=1400 audit(1781737201.480:304): avc: denied { map } for pid=1482 comm="syz.0.319" path="socket:[9744]" dev="sockfs" ino=9744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 75.138659][ T64] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 75.158828][ T36] audit: type=1400 audit(1781737201.480:305): avc: denied { accept } for pid=1482 comm="syz.0.319" path="socket:[9744]" dev="sockfs" ino=9744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 75.227743][ T1488] overlayfs: missing 'workdir' [ 75.318622][ T64] usb 4-1: Using ep0 maxpacket: 8 [ 75.324817][ T64] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 75.337758][ T64] usb 4-1: config 0 interface 0 has no altsetting 0 [ 75.345375][ T64] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 75.354735][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.363871][ T64] usb 4-1: config 0 descriptor?? [ 75.367404][ T426] usb 3-1: USB disconnect, device number 32 [ 75.478708][ T1349] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 75.572638][ T64] isku 0003:1E7D:3264.000F: unknown main item tag 0x2 [ 75.579533][ T64] isku 0003:1E7D:3264.000F: unknown main item tag 0x0 [ 75.586328][ T64] isku 0003:1E7D:3264.000F: unknown main item tag 0x7 [ 75.593218][ T64] isku 0003:1E7D:3264.000F: unknown main item tag 0x0 [ 75.595454][ T1434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.600073][ T64] isku 0003:1E7D:3264.000F: unknown main item tag 0x0 [ 75.608673][ T1434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.615294][ T64] isku 0003:1E7D:3264.000F: unknown main item tag 0x0 [ 75.629851][ T64] isku 0003:1E7D:3264.000F: unknown main item tag 0x0 [ 75.636732][ T64] isku 0003:1E7D:3264.000F: unknown main item tag 0xe [ 75.643617][ T64] isku 0003:1E7D:3264.000F: unknown main item tag 0x7 [ 75.650452][ T1349] usb 1-1: Using ep0 maxpacket: 32 [ 75.655655][ T64] isku 0003:1E7D:3264.000F: unknown main item tag 0x0 [ 75.662824][ T64] isku 0003:1E7D:3264.000F: unknown main item tag 0x0 [ 75.669722][ T64] isku 0003:1E7D:3264.000F: unknown main item tag 0x0 [ 75.676647][ T64] isku 0003:1E7D:3264.000F: unknown main item tag 0x0 [ 75.683927][ T64] isku 0003:1E7D:3264.000F: unknown main item tag 0x0 [ 75.690807][ T64] isku 0003:1E7D:3264.000F: unknown main item tag 0x0 [ 75.697646][ T1349] usb 1-1: unable to get BOS descriptor or descriptor too short [ 75.705377][ T64] isku 0003:1E7D:3264.000F: item fetching failed at offset 37/40 [ 75.713703][ T64] isku 0003:1E7D:3264.000F: parse failed [ 75.719478][ T470] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 75.728629][ T426] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 75.730236][ T64] isku 0003:1E7D:3264.000F: probe with driver isku failed with error -22 [ 75.746273][ T470] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 75.760269][ T470] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 75.768736][ T1349] usb 1-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 75.777818][ T1349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.786992][ T470] usb 2-1: USB disconnect, device number 32 [ 75.793726][ T1349] usb 1-1: Product: syz [ 75.798356][ T1349] usb 1-1: Manufacturer: syz [ 75.803007][ T1349] usb 1-1: SerialNumber: syz [ 75.889716][ T426] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 75.900672][ T426] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 75.914098][ T426] usb 3-1: config 0 interface 0 has no altsetting 0 [ 75.920749][ T426] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 75.929932][ T426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.938628][ T426] usb 3-1: config 0 descriptor?? [ 75.944023][ T1493] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 76.012028][ T1349] usb 1-1: BAAD GENERIC IO: no channels? [ 76.019565][ T1349] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 76.030304][ T1349] usb 1-1: USB disconnect, device number 35 [ 76.041303][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.352817][ T426] hid (null): unknown global tag 0xd [ 76.359606][ T426] lenovo 0003:17EF:6062.0010: unknown main item tag 0x0 [ 76.366684][ T426] lenovo 0003:17EF:6062.0010: unknown global tag 0xd [ 76.373393][ T426] lenovo 0003:17EF:6062.0010: item 0 1 1 13 parsing failed [ 76.380750][ T426] lenovo 0003:17EF:6062.0010: hid_parse failed [ 76.386916][ T426] lenovo 0003:17EF:6062.0010: probe with driver lenovo failed with error -22 [ 76.527831][ T1500] netlink: 'syz.0.324': attribute type 27 has an invalid length. [ 76.537112][ T1500] sit0: left promiscuous mode [ 76.557018][ T470] usb 3-1: USB disconnect, device number 33 [ 76.818721][ T426] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 76.968639][ T426] usb 1-1: Using ep0 maxpacket: 32 [ 76.974875][ T426] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.986041][ T426] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.996073][ T426] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 77.008954][ T426] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 77.017998][ T426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.026667][ T426] usb 1-1: config 0 descriptor?? [ 77.240831][ T426] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0011/input/input14 [ 77.259459][ T426] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0011/input/input15 [ 77.277100][ T426] kye 0003:0458:5011.0011: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 77.418724][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 77.588658][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 77.594937][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.606096][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.616073][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 77.629068][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 77.638249][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.647391][ T10] usb 2-1: config 0 descriptor?? [ 77.906270][ T426] usb 4-1: USB disconnect, device number 32 [ 78.064439][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0012/input/input16 [ 78.084026][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0012/input/input17 [ 78.102664][ T10] kye 0003:0458:5011.0012: input,hiddev97,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 78.179029][ T311] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 78.268664][ T426] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 78.288805][ C0] kye 0003:0458:5011.0011: usb_submit_urb(ctrl) failed: -1 [ 78.300979][ T470] usb 2-1: USB disconnect, device number 33 [ 78.328638][ T311] usb 3-1: Using ep0 maxpacket: 8 [ 78.334789][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.344993][ T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.355552][ T311] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 78.364709][ T311] usb 3-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 78.372953][ T311] usb 3-1: Product: syz [ 78.377133][ T311] usb 3-1: Manufacturer: syz [ 78.381753][ T311] usb 3-1: SerialNumber: syz [ 78.408635][ T426] usb 4-1: device descriptor read/64, error -71 [ 78.588436][ T1520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.597082][ T1520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.622081][ T311] usb 3-1: USB disconnect, device number 34 [ 78.627036][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.668651][ T426] usb 4-1: device descriptor read/64, error -71 [ 78.835891][ T1531] syz.1.334 (1531): attempted to duplicate a private mapping with mremap. This is not supported. [ 78.894847][ T1537] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 78.908633][ T426] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 78.920067][ T311] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 78.942175][ T1535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1535 comm=syz.1.336 [ 78.954703][ T1534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1534 comm=syz.1.336 [ 79.068834][ T426] usb 4-1: device descriptor read/64, error -71 [ 79.088620][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 79.095164][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 79.105191][ T311] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 79.114312][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.122341][ T311] usb 3-1: Product: syz [ 79.126549][ T311] usb 3-1: Manufacturer: syz [ 79.131380][ T311] usb 3-1: SerialNumber: syz [ 79.288636][ T425] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 79.308627][ T426] usb 4-1: device descriptor read/64, error -71 [ 79.340020][ T336] usb 1-1: reset high-speed USB device number 36 using dummy_hcd [ 79.349708][ T311] usb 3-1: BAAD GENERIC IO: no channels? [ 79.356771][ T311] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 79.368733][ T311] usb 3-1: USB disconnect, device number 35 [ 79.380553][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.419049][ T426] usb usb4-port1: attempt power cycle [ 79.440125][ T425] usb 2-1: unable to get BOS descriptor or descriptor too short [ 79.448612][ T425] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 79.457412][ T425] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.467813][ T425] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 79.476817][ T425] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.490365][ T425] usb 2-1: string descriptor 0 read error: -22 [ 79.496557][ T425] usb 2-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 79.505751][ T425] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.715691][ T1543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.724375][ T1543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.734150][ T1543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.740563][ T425] usb 2-1: USB disconnect, device number 34 [ 79.743966][ T1543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.758899][ T1543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.760710][ T426] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 79.768257][ T1543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.784249][ T1543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.792976][ T1543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.801193][ T1543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.809801][ T1543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.811627][ T426] usb 4-1: device descriptor read/8, error -71 [ 79.825310][ T470] usb 1-1: USB disconnect, device number 36 [ 79.848756][ T36] audit: type=1400 audit(1781737206.200:306): avc: denied { listen } for pid=1550 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.856891][ T1553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=1553 comm=syz.2.343 [ 79.872057][ T36] audit: type=1400 audit(1781737206.220:307): avc: denied { accept } for pid=1550 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.949788][ T426] usb 4-1: device descriptor read/8, error -71 [ 79.971581][ T36] audit: type=1400 audit(1781737206.320:308): avc: denied { mount } for pid=1559 comm="syz.2.346" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 79.994576][ T36] audit: type=1400 audit(1781737206.340:309): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 80.188697][ T426] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 80.209767][ T426] usb 4-1: device descriptor read/8, error -71 [ 80.238641][ T470] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 80.305681][ T36] audit: type=1400 audit(1781737206.650:310): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.339728][ T426] usb 4-1: device descriptor read/8, error -71 [ 80.388621][ T470] usb 1-1: Using ep0 maxpacket: 32 [ 80.396663][ T470] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 80.406055][ T470] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.414430][ T470] usb 1-1: Product: syz [ 80.419045][ T470] usb 1-1: Manufacturer: 뵨⫁ꔙ⠄】뛅蚩攃䌃縐騱♼Ỹ켾뭡ᬫƛ刴튺訆ꐏ룕麄辎題跍貟큩鬯钌䷸옵ᰫ뺇謮鿩ꊧ⨽㷲육鋀闹㾿瓧꫒䉣獋滑팣叱㤪ጠ튌䧌㾗⋀玐꺌쬿闝鿰㑍뫍ꃻㄜ㟂≣鍏龝抇䨙돶讇君᫷晱᧔颐驘㼨㖬ᖹ巔툈ᧂ뭙褴ඨ쀦ᕢㅴ㓟 [ 80.452928][ T470] usb 1-1: SerialNumber: syz [ 80.458772][ T426] usb usb4-port1: unable to enumerate USB device [ 80.546219][ T1569] netlink: 440 bytes leftover after parsing attributes in process `syz.2.350'. [ 80.598649][ T1349] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 80.660811][ T470] usb 1-1: selecting invalid altsetting 1 [ 80.669338][ T470] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 80.681207][ T470] usb 1-1: USB disconnect, device number 37 [ 80.685670][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.749816][ T1349] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.760182][ T1349] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 80.772548][ T1349] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 80.781624][ T1349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.789824][ T1349] usb 2-1: Product: syz [ 80.794170][ T1349] usb 2-1: Manufacturer: syz [ 80.798803][ T1349] usb 2-1: SerialNumber: syz [ 80.808639][ T426] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 80.958626][ T426] usb 3-1: Using ep0 maxpacket: 32 [ 80.965235][ T426] usb 3-1: unable to get BOS descriptor or descriptor too short [ 80.975264][ T426] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 80.988611][ T426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.996655][ T426] usb 3-1: Product: syz [ 81.003266][ T426] usb 3-1: Manufacturer: syz [ 81.013784][ T426] usb 3-1: SerialNumber: syz [ 81.019409][ T1349] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 81.039373][ T1349] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 81.058201][ T1349] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 81.068673][ T1349] usb 2-1: USB disconnect, device number 35 [ 81.085349][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.102973][ T36] audit: type=1400 audit(1781737207.450:311): avc: denied { map } for pid=1576 comm="syz.3.353" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 81.241535][ T426] usb 3-1: BAAD GENERIC IO: no channels? [ 81.257094][ T426] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 81.272463][ T426] usb 3-1: USB disconnect, device number 36 [ 81.291909][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.338632][ T425] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 81.488691][ T336] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 81.499780][ T425] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.511609][ T425] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 81.522621][ T425] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 81.532499][ T425] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 81.541638][ T425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.547550][ T1581] incfs: Options parsing error. -22 [ 81.555024][ T1581] incfs: mount failed -22 [ 81.638627][ T336] usb 1-1: Invalid ep0 maxpacket: 9 [ 81.763114][ T425] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 81.771440][ T336] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 81.781353][ T425] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input18 [ 81.799636][ T425] usb 4-1: USB disconnect, device number 37 [ 81.816321][ T1349] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 81.904400][ T1589] overlayfs: failed to resolve './file0': -2 [ 81.939880][ T336] usb 1-1: Invalid ep0 maxpacket: 9 [ 81.945323][ T336] usb usb1-port1: attempt power cycle [ 81.978684][ T1349] usb 2-1: Using ep0 maxpacket: 32 [ 81.984918][ T1349] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.996596][ T1349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.007609][ T1349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 82.017424][ T1349] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 82.026705][ T1349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.035366][ T1349] usb 2-1: config 0 descriptor?? [ 82.041420][ T1349] hub 2-1:0.0: USB hub found [ 82.178697][ T64] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 82.245139][ T1349] hub 2-1:0.0: 1 port detected [ 82.288641][ T336] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 82.308997][ T336] usb 1-1: Invalid ep0 maxpacket: 9 [ 82.340169][ T64] usb 3-1: unable to get BOS descriptor or descriptor too short [ 82.345481][ T1594] rust_binder: validate_parent_fixup: new_min_offset=20, sg_entry.length=0 [ 82.347892][ T36] audit: type=1400 audit(1781737208.690:312): avc: denied { transfer } for pid=1593 comm="syz.3.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 82.352506][ T1594] rust_binder: Error while translating object. [ 82.375783][ T64] usb 3-1: not running at top speed; connect to a high speed hub [ 82.383586][ C0] BUG: TASK stack guard page was hit at ffffc9000e9bffd8 (stack is ffffc9000e9c0000..ffffc9000e9c8000) [ 82.383613][ C0] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 82.383632][ C0] CPU: 0 UID: 0 PID: 1594 Comm: syz.3.361 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 82.383654][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 82.383665][ C0] RIP: 0010:update_stack_state+0x115/0x4b0 [ 82.383694][ C0] Code: 4b 10 4c 89 7d b0 4c 01 f8 48 89 85 78 ff ff ff 48 8d 53 18 48 8d 43 28 48 8d 73 20 48 89 b5 60 ff ff ff 4c 89 f6 48 c1 ee 03 <48> 89 b5 40 ff ff ff 48 89 8d 70 ff ff ff 48 c1 e9 03 48 89 8d 48 [ 82.383709][ C0] RSP: 0018:ffffc9000e9bffe0 EFLAGS: 00010a02 [ 82.383727][ C0] RAX: ffffc9000e9c0150 RBX: ffffc9000e9c0128 RCX: ffffc9000e9c0138 [ 82.383741][ C0] RDX: ffffc9000e9c0140 RSI: 1ffff92001d38026 RDI: ffffc9000e9c0180 [ 82.383755][ C0] RBP: ffffc9000e9c00a0 R08: ffffc9000e9c0101 R09: 0000000000000000 [ 82.383767][ C0] R10: ffffc9000e9c0128 R11: fffff52001d38031 R12: 0000000000000000 [ 82.383779][ C0] R13: dffffc0000000000 R14: ffffc9000e9c0130 R15: ffffc9000e9c0118 [ 82.383793][ C0] FS: 00007f02ae43e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 82.383809][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.383822][ C0] CR2: ffffc9000e9bffd8 CR3: 000000011a99c000 CR4: 00000000003526b0 [ 82.383841][ C0] Call Trace: [ 82.383849][ C0] [ 82.383857][ C0] ? __unwind_start+0x216/0x410 [ 82.383881][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 82.383903][ C0] ? arch_stack_walk+0xf2/0x170 [ 82.383922][ C0] ? stack_trace_save+0xaa/0x100 [ 82.383941][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 82.383962][ C0] ? __asan_memset+0x39/0x50 [ 82.383980][ C0] ? save_stack+0x125/0x240 [ 82.384001][ C0] ? free_contig_range+0x260/0x260 [ 82.384019][ C0] ? __reset_page_owner+0x450/0x450 [ 82.384039][ C0] ? zone_page_state_add+0x43/0x90 [ 82.384061][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 82.384081][ C0] ? sched_clock_noinstr+0xd/0x30 [ 82.384099][ C0] ? __set_page_owner+0x8e/0x600 [ 82.384120][ C0] ? __zone_watermark_ok+0x134/0x630 [ 82.384144][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 82.384174][ C0] ? kasan_unpoison+0x4a/0x70 [ 82.384192][ C0] ? post_alloc_hook+0x37d/0x3b0 [ 82.384214][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 82.384236][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 82.384255][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 82.384277][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 82.384301][ C0] ? prep_new_page+0x2d/0x190 [ 82.384323][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 82.384352][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 82.384376][ C0] ? static_key_count+0x45/0x70 [ 82.384398][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 82.384416][ C0] ? lruvec_init+0x231/0x280 [ 82.384436][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 82.384460][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 82.384483][ C0] ? unwind_get_return_address+0x51/0x90 [ 82.384504][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 82.384525][ C0] ? arch_stack_walk+0x10a/0x170 [ 82.384544][ C0] ? stack_trace_save+0xaa/0x100 [ 82.384563][ C0] ? stack_depot_save_flags+0x672/0x800 [ 82.384587][ C0] ? kasan_save_track+0x4f/0x80 [ 82.384607][ C0] ? kasan_save_track+0x3e/0x80 [ 82.384625][ C0] ? kasan_save_free_info+0x4a/0x60 [ 82.384641][ C0] ? __kasan_slab_free+0x5f/0x80 [ 82.384660][ C0] ? kfree+0x158/0x440 [ 82.384676][ C0] ? krealloc_noprof+0xfa/0x130 [ 82.384694][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECs2tVsXcF29le_11rust_binder+0x114/0x360 [ 82.384736][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x18b7/0x2660 [ 82.384760][ C0] ? _RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x1715/0x5dd0 [ 82.384785][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCs2tVsXcF29le_11rust_binder10allocation10AllocationEBK_+0x1a/0xf0 [ 82.384816][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c54/0x9460 [ 82.384840][ C0] ? _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3f8/0x29c0 [ 82.384864][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0xa3e/0x4380 [ 82.384886][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 82.384918][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 82.384943][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 82.384963][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 82.384983][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 82.385000][ C0] ? do_syscall_64+0x57/0xf0 [ 82.385023][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.385052][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 82.385077][ C0] ? kasan_save_free_info+0x4a/0x60 [ 82.385093][ C0] ? __kasan_slab_free+0x5f/0x80 [ 82.385113][ C0] ? kfree+0x158/0x440 [ 82.385128][ C0] ? krealloc_noprof+0xfa/0x130 [ 82.385147][ C0] ? krealloc_noprof+0xfa/0x130 [ 82.385172][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECs2tVsXcF29le_11rust_binder+0x114/0x360 [ 82.385212][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECs2tVsXcF29le_11rust_binder+0x10/0x10 [ 82.385250][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 82.385286][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 82.385322][ C0] ? __kasan_check_write+0x18/0x20 [ 82.385339][ C0] ? _raw_spin_lock+0x92/0x120 [ 82.385360][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 82.385384][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x18b7/0x2660 [ 82.385411][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 82.385453][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 82.385483][ C0] ? __asan_memcpy+0x5a/0x80 [ 82.385500][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 82.385529][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 82.385557][ C0] ? __kasan_check_write+0x18/0x20 [ 82.385574][ C0] ? _raw_spin_lock+0x92/0x120 [ 82.385596][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 82.385618][ C0] ? _RINvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6a9/0xc70 [ 82.385647][ C0] ? __asan_memcpy+0x5a/0x80 [ 82.385664][ C0] ? _RINvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x5f4/0xc70 [ 82.385692][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 82.385722][ C0] ? __cfi__RINvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 82.385749][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 82.385777][ C0] ? __asan_memcpy+0x5a/0x80 [ 82.385794][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 82.385822][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 82.385849][ C0] ? _RNvMs9_NtCsb7ts3l0a5c3_4core3fmtNtB5_9Formatter12pad_integral+0x307/0x810 [ 82.385878][ C0] ? __cfi__RNvMsk_NtNtNtCsb7ts3l0a5c3_4core3fmt3num3impj10__fmt_inner+0x10/0x10 [ 82.385902][ C0] ? __kasan_check_write+0x18/0x20 [ 82.385919][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 82.385941][ C0] ? _RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x30c/0x5dd0 [ 82.385967][ C0] ? __asan_memcpy+0x5a/0x80 [ 82.385984][ C0] ? _RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x1715/0x5dd0 [ 82.386012][ C0] ? desc_read+0x202/0x3e0 [ 82.386031][ C0] ? __kasan_check_write+0x18/0x20 [ 82.386048][ C0] ? desc_read+0x1ab/0x3e0 [ 82.386068][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 82.386092][ C0] ? __cfi_prb_first_seq+0x10/0x10 [ 82.386111][ C0] ? __kasan_check_write+0x18/0x20 [ 82.386128][ C0] ? __cfi__RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 82.386154][ C0] ? cgroup_rstat_updated+0x141/0x810 [ 82.386181][ C0] ? this_cpu_in_panic+0x56/0x90 [ 82.386202][ C0] ? __kasan_check_read+0x15/0x20 [ 82.386219][ C0] ? resched_curr+0xb0/0x440 [ 82.386236][ C0] ? __cfi_resched_curr+0x10/0x10 [ 82.386254][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 82.386278][ C0] ? xfd_validate_state+0x68/0x140 [ 82.386302][ C0] ? put_dec_trunc8+0x229/0x380 [ 82.386325][ C0] ? put_dec+0xd7/0xf0 [ 82.386346][ C0] ? __asan_memset+0x39/0x50 [ 82.386363][ C0] ? move_right+0x8e/0xb0 [ 82.386385][ C0] ? format_decode+0x1bb/0x1610 [ 82.386406][ C0] ? vsnprintf+0x7b4/0x1ad0 [ 82.386427][ C0] ? __asan_memcpy+0x5a/0x80 [ 82.386444][ C0] ? vsnprintf+0x19ef/0x1ad0 [ 82.386466][ C0] ? desc_read+0x202/0x3e0 [ 82.386485][ C0] ? __kasan_check_write+0x18/0x20 [ 82.386501][ C0] ? desc_read+0x1ab/0x3e0 [ 82.386521][ C0] ? prb_first_seq+0x109/0x1d0 [ 82.386539][ C0] ? __cfi_prb_first_seq+0x10/0x10 [ 82.386558][ C0] ? __kasan_check_write+0x18/0x20 [ 82.386575][ C0] ? desc_read+0x1ab/0x3e0 [ 82.386597][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 82.386622][ C0] ? kernel_text_address+0xa9/0xe0 [ 82.386646][ C0] ? __kernel_text_address+0x11/0x40 [ 82.386668][ C0] ? __kasan_check_write+0x18/0x20 [ 82.386685][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 82.386708][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 82.386733][ C0] ? stack_trace_save+0xaa/0x100 [ 82.386752][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 82.386776][ C0] ? stack_depot_save_flags+0x399/0x800 [ 82.386799][ C0] ? __cfi___switch_to+0x10/0x10 [ 82.386814][ C0] ? kasan_save_track+0x4f/0x80 [ 82.386833][ C0] ? kasan_save_track+0x3e/0x80 [ 82.386852][ C0] ? kasan_save_free_info+0x4a/0x60 [ 82.386867][ C0] ? __kasan_slab_free+0x5f/0x80 [ 82.386886][ C0] ? kfree+0x158/0x440 [ 82.386902][ C0] ? krealloc_noprof+0xfa/0x130 [ 82.386919][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCs2tVsXcF29le_11rust_binder6thread18ScatterGatherStateEEB16_+0x371/0x820 [ 82.386952][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c18/0x9460 [ 82.386976][ C0] ? _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3f8/0x29c0 [ 82.387000][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0xa3e/0x4380 [ 82.387021][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 82.387050][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 82.387075][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 82.387095][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 82.387114][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 82.387131][ C0] ? do_syscall_64+0x57/0xf0 [ 82.387153][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.387191][ C0] ? __kasan_slab_free+0x6a/0x80 [ 82.387211][ C0] ? kfree+0x158/0x440 [ 82.387227][ C0] ? krealloc_noprof+0xfa/0x130 [ 82.387245][ C0] ? __cfi_preempt_schedule+0x10/0x10 [ 82.387262][ C0] ? krealloc_noprof+0xfa/0x130 [ 82.387281][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 82.387304][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCs2tVsXcF29le_11rust_binder6thread18ScatterGatherStateEEB16_+0x396/0x820 [ 82.387336][ C0] ? irq_work_queue+0xc2/0x160 [ 82.387359][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCs2tVsXcF29le_11rust_binder6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 82.387390][ C0] ? vprintk_emit+0x3e3/0x650 [ 82.387412][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 82.387435][ C0] ? vprintk_default+0x2a/0x40 [ 82.387478][ C0] ? vprintk+0x93/0xa0 [ 82.387494][ C0] ? _printk+0xde/0x140 [ 82.387515][ C0] ? __cfi__printk+0x10/0x10 [ 82.387534][ C0] ? kfree+0x158/0x440 [ 82.387551][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCs2tVsXcF29le_11rust_binder10allocation10AllocationEBK_+0x1a/0xf0 [ 82.387579][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c47/0x9460 [ 82.387605][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c54/0x9460 [ 82.387640][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 82.387712][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 82.387736][ C0] ? kernel_text_address+0xa9/0xe0 [ 82.387759][ C0] ? __kasan_check_write+0x18/0x20 [ 82.387775][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 82.387799][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 82.387823][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 82.387847][ C0] ? stack_depot_save_flags+0x399/0x800 [ 82.387870][ C0] ? kasan_save_track+0x4f/0x80 [ 82.387889][ C0] ? kasan_save_track+0x3e/0x80 [ 82.387907][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 82.387923][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 82.387943][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 82.387962][ C0] ? krealloc_noprof+0x8d/0x130 [ 82.387979][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process23insert_or_update_handle+0x51e/0x2c70 [ 82.388005][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x7c0/0x2660 [ 82.388029][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1a91/0xa690 [ 82.388058][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 82.388083][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 82.388103][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 82.388122][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 82.388138][ C0] ? do_syscall_64+0x57/0xf0 [ 82.388167][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.388194][ C0] ? __kasan_check_write+0x18/0x20 [ 82.388211][ C0] ? _raw_spin_lock+0x92/0x120 [ 82.388234][ C0] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 82.388258][ C0] ? _raw_spin_unlock+0x45/0x60 [ 82.388281][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 82.388317][ C0] ? __kasan_check_write+0x18/0x20 [ 82.388334][ C0] ? mutex_unlock+0x90/0x240 [ 82.388351][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 82.388370][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 82.388396][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 82.388423][ C0] ? __kasan_check_write+0x18/0x20 [ 82.388440][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 82.388463][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 82.388486][ C0] ? _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3f8/0x29c0 [ 82.388514][ C0] ? __cfi__RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x10/0x10 [ 82.388540][ C0] ? _RNvMs0_NtCs2tVsXcF29le_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8e0 [ 82.388574][ C0] ? __cfi__RNvMs0_NtCs2tVsXcF29le_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 82.388604][ C0] ? __kasan_check_write+0x18/0x20 [ 82.388621][ C0] ? _raw_spin_lock+0x92/0x120 [ 82.388642][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 82.388665][ C0] ? __kasan_check_write+0x18/0x20 [ 82.388682][ C0] ? avc_has_perm_noaudit+0x26c/0x360 [ 82.388702][ C0] ? __asan_memcpy+0x5a/0x80 [ 82.388719][ C0] ? avc_has_perm_noaudit+0x28a/0x360 [ 82.388739][ C0] ? avc_has_perm+0x155/0x240 [ 82.388759][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 82.388780][ C0] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 82.388802][ C0] ? __kasan_check_write+0x18/0x20 [ 82.388818][ C0] ? _raw_spin_lock+0x92/0x120 [ 82.388841][ C0] ? selinux_binder_transaction+0x165/0x1d0 [ 82.388862][ C0] ? bpf_lsm_binder_transaction+0xd/0x20 [ 82.388887][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0xa3e/0x4380 [ 82.388910][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0xc7a/0x2660 [ 82.388938][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x10/0x10 [ 82.388974][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 82.388997][ C0] ? __kasan_check_write+0x18/0x20 [ 82.389015][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 82.389056][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x10/0x10 [ 82.389121][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 82.389146][ C0] ? kernel_text_address+0xa9/0xe0 [ 82.389175][ C0] ? __kernel_text_address+0x11/0x40 [ 82.389198][ C0] ? unwind_get_return_address+0x51/0x90 [ 82.389220][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 82.389241][ C0] ? arch_stack_walk+0x10a/0x170 [ 82.389259][ C0] ? stack_depot_save_flags+0x38/0x800 [ 82.389283][ C0] ? kasan_save_track+0x4f/0x80 [ 82.389302][ C0] ? kasan_save_track+0x3e/0x80 [ 82.389319][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 82.389335][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 82.389355][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 82.389374][ C0] ? krealloc_noprof+0x8d/0x130 [ 82.389392][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process8get_node+0x920/0x1aa0 [ 82.389418][ C0] ? _RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCs2tVsXcF29le_11rust_binder7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x43a/0x6c0 [ 82.389453][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 82.389473][ C0] ? __cfi__RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCs2tVsXcF29le_11rust_binder7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x10/0x10 [ 82.389509][ C0] ? __kasan_check_write+0x18/0x20 [ 82.389525][ C0] ? _RNvMs0_NtCs2tVsXcF29le_11rust_binder4nodeNtB5_4Node28incr_refcount_allow_zero2one+0x502/0xee0 [ 82.389555][ C0] ? __kasan_check_write+0x18/0x20 [ 82.389571][ C0] ? _raw_spin_lock+0x92/0x120 [ 82.389593][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 82.389617][ C0] ? _raw_spin_unlock+0x45/0x60 [ 82.389639][ C0] ? _RNvMs0_NtCs2tVsXcF29le_11rust_binder7processNtB5_12ProcessInner24new_node_ref_with_thread+0x5ec/0x950 [ 82.389669][ C0] ? __cfi__RNvMs0_NtCs2tVsXcF29le_11rust_binder7processNtB5_12ProcessInner24new_node_ref_with_thread+0x10/0x10 [ 82.389698][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x403/0x500 [ 82.389731][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x10/0x10 [ 82.389765][ C0] ? __kasan_check_write+0x18/0x20 [ 82.389781][ C0] ? _raw_spin_lock+0x92/0x120 [ 82.389804][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 82.389826][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process8get_node+0x11f1/0x1aa0 [ 82.389852][ C0] ? __asan_memcpy+0x5a/0x80 [ 82.389869][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 82.389892][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process8get_node+0x127e/0x1aa0 [ 82.389922][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process8get_node+0x10/0x10 [ 82.389948][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCs2tVsXcF29le_11rust_binder6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 82.389986][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCs2tVsXcF29le_11rust_binder6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 82.390023][ C0] ? __kasan_check_write+0x18/0x20 [ 82.390040][ C0] ? _raw_spin_lock+0x92/0x120 [ 82.390062][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 82.390085][ C0] ? _raw_spin_unlock+0x45/0x60 [ 82.390107][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 82.390130][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x1008/0x1c70 [ 82.390169][ C0] ? 0xffffffff81000000 [ 82.390182][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 82.390214][ C0] ? avc_has_perm_noaudit+0x26c/0x360 [ 82.390234][ C0] ? __asan_memcpy+0x5a/0x80 [ 82.390252][ C0] ? __kasan_check_write+0x18/0x20 [ 82.390269][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0 [ 82.390300][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x10/0x10 [ 82.390330][ C0] ? avc_has_perm+0x155/0x240 [ 82.390350][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 82.390371][ C0] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 82.390393][ C0] ? __kasan_check_write+0x18/0x20 [ 82.390409][ C0] ? _raw_spin_lock+0x92/0x120 [ 82.390431][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 82.390453][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process14set_as_manager+0xb14/0x1030 [ 82.390483][ C0] ? __asan_memcpy+0x5a/0x80 [ 82.390500][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process14set_as_manager+0xd14/0x1030 [ 82.390532][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process14set_as_manager+0x10/0x10 [ 82.390561][ C0] ? __cfi_mt_free_rcu+0x10/0x10 [ 82.390584][ C0] ? __kasan_check_write+0x18/0x20 [ 82.390600][ C0] ? _raw_spin_lock+0x92/0x120 [ 82.390622][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 82.390644][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x11db/0x5d80 [ 82.390670][ C0] ? __asan_memcpy+0x5a/0x80 [ 82.390686][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 82.390712][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 82.390736][ C0] ? mas_wr_store_entry+0x25b9/0x3180 [ 82.390755][ C0] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 82.390782][ C0] ? mas_wr_store_type+0x1ac0/0x1ac0 [ 82.390800][ C0] ? kernel_text_address+0xa9/0xe0 [ 82.390825][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 82.390850][ C0] ? kernel_text_address+0xa9/0xe0 [ 82.390872][ C0] ? mas_destroy+0x27b4/0x3080 [ 82.390889][ C0] ? __kernel_text_address+0x11/0x40 [ 82.390911][ C0] ? unwind_get_return_address+0x51/0x90 [ 82.390933][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 82.390953][ C0] ? arch_stack_walk+0x10a/0x170 [ 82.390975][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 82.390999][ C0] ? kernel_text_address+0xa9/0xe0 [ 82.391021][ C0] ? __kernel_text_address+0x11/0x40 [ 82.391043][ C0] ? unwind_get_return_address+0x51/0x90 [ 82.391064][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 82.391084][ C0] ? arch_stack_walk+0x10a/0x170 [ 82.391104][ C0] ? cgroup_rstat_updated+0x141/0x810 [ 82.391124][ C0] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 82.391143][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 82.391175][ C0] ? __cgroup_account_cputime+0xa5/0xd0 [ 82.391197][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 82.391220][ C0] ? update_curr+0x50c/0x9e0 [ 82.391239][ C0] ? update_load_avg+0x506/0x1990 [ 82.391261][ C0] ? __calc_delta+0x280/0x280 [ 82.391277][ C0] ? stack_trace_save+0xaa/0x100 [ 82.391298][ C0] ? dequeue_entity+0x33f/0x1380 [ 82.391320][ C0] ? security_inode_alloc+0x51/0x230 [ 82.391339][ C0] ? inode_init_always_gfp+0x756/0x9e0 [ 82.391360][ C0] ? proc_pident_instantiate+0x6d/0x2c0 [ 82.391382][ C0] ? tg_unthrottle_up+0x9a0/0x9a0 [ 82.391404][ C0] ? __cfi_cmp_ex_search+0x10/0x10 [ 82.391426][ C0] ? cmp_ex_search+0x22/0x80 [ 82.391454][ C0] ? bsearch+0xaf/0xd0 [ 82.391471][ C0] ? __cfi_cmp_ex_search+0x10/0x10 [ 82.391494][ C0] ? update_curr+0xf8/0x9e0 [ 82.391511][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 82.391535][ C0] ? update_curr+0xf8/0x9e0 [ 82.391553][ C0] ? xfd_validate_state+0x68/0x140 [ 82.391577][ C0] ? save_fpregs_to_fpstate+0x196/0x220 [ 82.391597][ C0] ? __kasan_check_write+0x18/0x20 [ 82.391614][ C0] ? __switch_to+0xc4f/0x1300 [ 82.391630][ C0] ? __cfi___switch_to+0x10/0x10 [ 82.391646][ C0] ? psi_task_switch+0x59e/0xa10 [ 82.391668][ C0] ? _raw_spin_unlock+0x45/0x60 [ 82.391689][ C0] ? finish_task_switch+0x139/0x760 [ 82.391710][ C0] ? __switch_to_asm+0x3d/0x70 [ 82.391727][ C0] ? __schedule+0x14d6/0x2100 [ 82.391743][ C0] ? avc_has_extended_perms+0x80b/0xe70 [ 82.391763][ C0] ? __asan_memcpy+0x5a/0x80 [ 82.391780][ C0] ? avc_has_extended_perms+0x969/0xe70 [ 82.391800][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 82.391823][ C0] ? do_vfs_ioctl+0x182d/0x2010 [ 82.391844][ C0] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 82.391866][ C0] ? schedule+0xc5/0x240 [ 82.391882][ C0] ? futex_unqueue+0x136/0x160 [ 82.391907][ C0] ? ioctl_has_perm+0x39a/0x500 [ 82.391923][ C0] ? __kasan_check_read+0x15/0x20 [ 82.391941][ C0] ? has_cap_mac_admin+0xd0/0xd0 [ 82.391958][ C0] ? futex_wait+0x2ac/0x7b0 [ 82.391975][ C0] ? __cfi_futex_wait+0x10/0x10 [ 82.391992][ C0] ? selinux_file_ioctl+0x732/0x1480 [ 82.392009][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 82.392026][ C0] ? do_futex+0x32a/0x510 [ 82.392048][ C0] ? __cfi_do_futex+0x10/0x10 [ 82.392071][ C0] ? __fget_files+0x2c5/0x340 [ 82.392092][ C0] ? bpf_lsm_file_ioctl+0xd/0x20 [ 82.392114][ C0] ? security_file_ioctl+0x3e/0x110 [ 82.392137][ C0] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 82.392169][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 82.392189][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 82.392210][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 82.392227][ C0] ? do_syscall_64+0x57/0xf0 [ 82.392249][ C0] ? clear_bhb_loop+0x50/0xa0 [ 82.392266][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.392293][ C0] [ 82.392299][ C0] Modules linked in: [ 82.392312][ C0] ---[ end trace 0000000000000000 ]--- [ 82.392320][ C0] RIP: 0010:update_stack_state+0x115/0x4b0 [ 82.392344][ C0] Code: 4b 10 4c 89 7d b0 4c 01 f8 48 89 85 78 ff ff ff 48 8d 53 18 48 8d 43 28 48 8d 73 20 48 89 b5 60 ff ff ff 4c 89 f6 48 c1 ee 03 <48> 89 b5 40 ff ff ff 48 89 8d 70 ff ff ff 48 c1 e9 03 48 89 8d 48 [ 82.392359][ C0] RSP: 0018:ffffc9000e9bffe0 EFLAGS: 00010a02 [ 82.392374][ C0] RAX: ffffc9000e9c0150 RBX: ffffc9000e9c0128 RCX: ffffc9000e9c0138 [ 82.392388][ C0] RDX: ffffc9000e9c0140 RSI: 1ffff92001d38026 RDI: ffffc9000e9c0180 [ 82.392401][ C0] RBP: ffffc9000e9c00a0 R08: ffffc9000e9c0101 R09: 0000000000000000 [ 82.392414][ C0] R10: ffffc9000e9c0128 R11: fffff52001d38031 R12: 0000000000000000 [ 82.392427][ C0] R13: dffffc0000000000 R14: ffffc9000e9c0130 R15: ffffc9000e9c0118 [ 82.392440][ C0] FS: 00007f02ae43e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 82.392456][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.392469][ C0] CR2: ffffc9000e9bffd8 CR3: 000000011a99c000 CR4: 00000000003526b0 [ 82.392489][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 82.400859][ C0] Kernel Offset: disabled