last executing test programs: 5.122212829s ago: executing program 0 (id=639): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) (async, rerun: 32) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000040)=""/208, &(0x7f0000000140)=""/42, &(0x7f0000000180)=""/247, 0xf6c5a000}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000003c0)={r0, &(0x7f00000002c0)='/dev/vhost-vsock\x00', 0x20001, &(0x7f0000000300)={@_ha_fsid={[0x281]}, {0x6, 0x717, 0x3, 0x3ff}}, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0xbd}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002440)={0x10, 0xfffffffffffffff5, r3}, 0x10) (async) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000002480)={@mcast1, 0x0}, &(0x7f00000024c0)=0x14) connect$packet(r2, &(0x7f0000002500)={0x11, 0x1, r4, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x14) (async) clock_gettime(0x0, &(0x7f0000002580)={0x0, 0x0}) ppoll(&(0x7f0000002540)=[{r2, 0x4}, {r1, 0x14}, {r0, 0xd54a}], 0x3, &(0x7f00000025c0)={r5, r6+60000000}, &(0x7f0000002600)={[0xde]}, 0x8) (async, rerun: 32) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x4) (async, rerun: 32) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000026c0)={0xffffffffffffffff, 0x48, '\x00', 0x0, &(0x7f0000002640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r7, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x14, r8, 0x200, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4004084) (async, rerun: 64) r9 = syz_open_dev$usbfs(&(0x7f0000002840), 0x6, 0x10000) (async, rerun: 64) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000002880), 0x100, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000028c0)={0xfffffffffffffffb, 0x100000000, 0x6, 0x0, 0x0, [{{r10}, 0x2}, {{r9}, 0x9}, {{r2}, 0x6}, {{r1}, 0x6}, {{r1}, 0x1c000000}, {{r2}, 0xff}]}) r11 = open_tree(0xffffffffffffff9c, &(0x7f00000029c0)='./file0\x00', 0x8800) bind$tipc(r11, &(0x7f0000002a00)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x4, 0x1}}, 0x10) (async) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002a40), 0x464561, 0x0) vmsplice(r12, &(0x7f0000002c40)=[{&(0x7f0000002a80)="27088c33d7b3d74cce0080bc93469929f8f7b79f650495a416d30e6d17acc9de795d80b9cc1f1cbbb92aa6743af21d4c6fbb602de05a85c7434d127c4035c606c4860761db1ebb390712ef54c699e14d97632ba2c954dccb91e8b98bd0e593c4a438b11217de9157fd7f5dafe52eab5048b88fcd5b61560d1cb73750e231647e895bce19b80e66bf325c550f", 0x8c}, {&(0x7f0000002b40)="129ed9c4ba7560d673782879e295890f62ab2c1ed9413006191cc83603c7e47cb659d2d8f64bb93933cefc7129b3b96d76377eafa78c6b77953c7137c86f02c27db94d1f2d56ddba4d4a6c2d90851384e8ad5587dc5108418c46ae2717185265dec66f2443a9c3aefd9dd8af97de4d769569d8", 0x73}, {&(0x7f0000002bc0)="5997e547ac58c7ffadf44c5b410be85bb8eb746dd92b3c73084d66b2dfb88b62693132d32c4d69d886d134c58149b5bf1dffc54f1408bc7d1fe8e1db3f331744c7f90a87d393945aa8095106fc0ac3c46f3b717e0cb4f6ef0b189bc3ca74cef280b0a4135a96fef38f02f1d67cd7b2341986b3e2ad9f8bf82becd0eaa2", 0x7d}], 0x3, 0x2) (async) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f0000002c80), &(0x7f0000002cc0)=0x4) (async) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002d00), 0x400, 0x0) ioctl$TCSETS2(r13, 0x402c542b, &(0x7f0000002d40)={0x0, 0x4, 0x7f, 0x0, 0x0, "d5eefee3334466d0ef4b758018243e64423d4d", 0x6, 0x8}) socket$pptp(0x18, 0x1, 0x2) bind$can_raw(r11, &(0x7f0000002d80)={0x1d, r4}, 0x10) (async) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000002dc0), 0xc0, 0x0) recvmmsg(r14, &(0x7f0000003100)=[{{&(0x7f0000002e00)=@caif, 0x80, &(0x7f0000003040)=[{&(0x7f0000002e80)=""/151, 0x97}, {&(0x7f0000002f40)=""/230, 0xe6}], 0x2, &(0x7f0000003080)=""/95, 0x5f}, 0xd}], 0x1, 0x40002162, &(0x7f0000003140)={0x77359400}) 5.120420289s ago: executing program 0 (id=640): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0xe4ff, 0x9, 0x0, 0x2, 0x0, 0x2}) 5.09084081s ago: executing program 0 (id=641): syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES64], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0x27, 0x800, 0x3, &(0x7f0000000000)) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x107400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x1000000000000000}) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) syz_clone(0x9001000, &(0x7f00000000c0)="165057058044017cac74c50a7b67e50784266886dc", 0x15, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a00"], 0x1c}], 0x1}, 0x4000080) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x275a, 0x0) cachestat(r4, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') write$cgroup_pid(r5, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001100)={0x8, &(0x7f00000010c0)=[{0x0, 0x4, 0x3, 0x5}, {0x61dc, 0x7, 0x2, 0x5}, {0x6, 0xf8, 0x2, 0x3ff}, {0x1, 0xb1, 0x0, 0x5}, {0x78, 0x9, 0x2, 0x7}, {0x4a7, 0x1, 0x1, 0x7}, {0x0, 0x6, 0x9, 0x7}, {0x40, 0x9a, 0x3, 0xffffffff}]}) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000140)=0x1, 0x4) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) 4.707273222s ago: executing program 1 (id=646): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x43, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff00052406000005240200"], 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2, r2}, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2}], 0xf6, 0x0, &(0x7f0000000180)="7f9295a3c978ef4c210bbaf4253b237ddccdc03320e3e284ce0706cc10f3fb2492ed5314fdab30464a5eef6564f77c9fc9bfc9c0ab3d267b1eee7c6d490aeb205074fc311b102bab22fe57912b2344ffd4b944e256194988f53941e776747a059a2ea168e06721f3212d490b173dfcbb26f168407237e9f5325df2bebba13f839eba16a4bfa6a1de081ab9dc1939aee264dc2f7a1dfd4832f1d2b953c76ccfac1a14f77c86b6da27d7b6db3f72d0be4ba178226f55b4b853932668f07c1e01d1e5503d178e1e528e240ac633de0f79286b3fa5f971131e963110504667a54f61c95e29252b8f792888db5a8086e98f131cc82a59f2f1"}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, &(0x7f0000001fc0)=[{0xfffffffffffffffc}], 0x1, 0x9, 0x0, 0x2, 0x0, 0x2}) 3.971406075s ago: executing program 1 (id=649): landlock_create_ruleset(&(0x7f00000002c0)={0x2401, 0x3}, 0x7, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000006c0)="1200000012000300007b000000000000a100", 0x12, 0x20000000, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/109, 0x6d}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000001fc0)=""/4107, 0x100b}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}], 0x5}, 0xffffe37d}], 0x1, 0x2040040, 0x0) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="28000000260003fe"], 0x28}], 0x1}, 0x40) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000000c0), 0x4) syz_usb_connect$uac1(0x1, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="120100030000f9076b1d01014200010203010902600003010040010904000100010100000a24017f000a000201020904010000010200", @ANYRES8=r0, @ANYBLOB="3c2325b1d184bde7b7aa3c074d84cf40d3c3fcf35de98043f6aa6e31ab42f6e4545fc429645ccd2bf284b45bb95afec51e4cf1294f19e20f46d9e8199e35b3d854eb7cfa4b33651f6a640e0e99bf1071a5126b303071eca838fb71e876766f080a34e48c54a2437639ef66339f596f959f7f822197fc02e8f55b72f6c63ad1f2caf8bc933404e737e95f1a53ce65b5dd95572365078e76793613c5c029c0ad1f97aa84a03262d4e30b5d16269079730559d670c147b5918e30666cb101036c28cb07843bd0b694b093e1c4d7aca672d6", @ANYRES32=r0], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0xfffffffffffffeed, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x407}}]}) landlock_create_ruleset(&(0x7f00000002c0)={0x2401, 0x3}, 0x7, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) (async) socket(0x10, 0x803, 0x0) (async) sendto(r1, &(0x7f00000006c0)="1200000012000300007b000000000000a100", 0x12, 0x20000000, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/109, 0x6d}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000001fc0)=""/4107, 0x100b}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}], 0x5}, 0xffffe37d}], 0x1, 0x2040040, 0x0) (async) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="28000000260003fe"], 0x28}], 0x1}, 0x40) (async) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000000c0), 0x4) (async) syz_usb_connect$uac1(0x1, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="120100030000f9076b1d01014200010203010902600003010040010904000100010100000a24017f000a000201020904010000010200", @ANYRES8=r0, @ANYBLOB="3c2325b1d184bde7b7aa3c074d84cf40d3c3fcf35de98043f6aa6e31ab42f6e4545fc429645ccd2bf284b45bb95afec51e4cf1294f19e20f46d9e8199e35b3d854eb7cfa4b33651f6a640e0e99bf1071a5126b303071eca838fb71e876766f080a34e48c54a2437639ef66339f596f959f7f822197fc02e8f55b72f6c63ad1f2caf8bc933404e737e95f1a53ce65b5dd95572365078e76793613c5c029c0ad1f97aa84a03262d4e30b5d16269079730559d670c147b5918e30666cb101036c28cb07843bd0b694b093e1c4d7aca672d6", @ANYRES32=r0], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0xfffffffffffffeed, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x407}}]}) (async) 2.073060125s ago: executing program 0 (id=660): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x9, 0xe4, 0x2, 0x0, 0x2}) 1.978149597s ago: executing program 0 (id=662): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/227, 0xb5}], 0x1, 0x1bf, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x54b440, 0x3e) fcntl$setlease(r1, 0x400, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$getflags(r2, 0x401) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x15) (async) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{r5, r6+10000000}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) timerfd_gettime(r4, &(0x7f0000000000)) (async, rerun: 32) syz_usb_connect$uac2(0x0, 0x87, &(0x7f0000000e80)=ANY=[@ANYBLOB="12010002000000208205b200400001020301090275000301098007080b0101010620ca0904000000010120000924010900001500fe0c2403050603070490f64aff0904010000010220000904010101010220000905010940000108f008250185272d0180090402f2ffffff2000090402010101022000090582"], 0x0) 1.227401671s ago: executing program 3 (id=667): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x2e3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0xfffffe16) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x2}) 1.142248834s ago: executing program 2 (id=668): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x20005, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000040)=0x5, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x720, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)="09a3d23d040ee0caac5ab19ccd4ce83b1c29e24ffbe7b8fd6bb86664606536610cd936e5687338e8ee11fa03c9472439212326b7ec4fd7eb5cccf017b32f4e4f9bddfc7bcb", 0x45}], 0x1) r2 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) socket$unix(0x1, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) read$FUSE(r2, &(0x7f0000004340)={0x2020}, 0x2020) 1.141671994s ago: executing program 3 (id=669): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2, 0x7}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000440)="ee", 0x1}], 0x1) 1.005251288s ago: executing program 3 (id=670): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x9, 0xe4ff, 0x2, 0x0, 0x2}) 974.746679ms ago: executing program 3 (id=671): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086c256e0000000000000109022400010000000009041edefe0300000009210000000122060009058103"], 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x10, &(0x7f00000001c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x50]}}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9b}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x26}}, {0x8, 0x2, @remote}}}]}]}, 0x88}}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12014101175129205705092006c7010203010902240001020010000904"], 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x3501) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)={0x20, 0x0, 0x8, {0x8, 0x9, "7fe200cc4e9f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 892.157711ms ago: executing program 1 (id=672): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001"], 0x28}}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) (rerun: 32) 892.046811ms ago: executing program 1 (id=673): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (fail_nth: 7) 886.767482ms ago: executing program 1 (id=674): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x2000000) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000004, 0x20010, r2, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 852.144713ms ago: executing program 1 (id=675): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x43, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff00052406000005240200"], 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2, r2}, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2}], 0xf6, 0x0, &(0x7f0000000180)="7f9295a3c978ef4c210bbaf4253b237ddccdc03320e3e284ce0706cc10f3fb2492ed5314fdab30464a5eef6564f77c9fc9bfc9c0ab3d267b1eee7c6d490aeb205074fc311b102bab22fe57912b2344ffd4b944e256194988f53941e776747a059a2ea168e06721f3212d490b173dfcbb26f168407237e9f5325df2bebba13f839eba16a4bfa6a1de081ab9dc1939aee264dc2f7a1dfd4832f1d2b953c76ccfac1a14f77c86b6da27d7b6db3f72d0be4ba178226f55b4b853932668f07c1e01d1e5503d178e1e528e240ac633de0f79286b3fa5f971131e963110504667a54f61c95e29252b8f792888db5a8086e98f131cc82a59f2f1"}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, &(0x7f0000001fc0)=[{0xfffffffffffffffc}], 0x1, 0x9, 0x0, 0x2, 0x0, 0x2}) 398.131037ms ago: executing program 0 (id=676): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000140)=0x7fffffff, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040880) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8) eventfd2(0x42000006, 0x801) syz_usb_connect$uac2(0x5, 0xab, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000081e042030400001020301090299000301083004080b01010103200309040000000101200009240104000a39000211240806030000030002000300010001000c24030205040006480200000b24040205d5404fa3376d08240a0903090401090401"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x50, 0xffffffffffffffff, 0xa399a000) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x84402, 0x0) write$tun(r3, &(0x7f00000002c0)={@void, @void, @mpls={[{0xffffc}, {0xb}, {0x2, 0x0, 0x1}, {0x81}, {0x5, 0x0, 0x1}], @generic="2f18cd8ece78d4187ef20f02431dbe76d6188474cfd59ed2b67d2a832b11549fde37daa774d96b722503c860e80ec6475dc90cc213cef57b274b057337243a6bdc5d8fc0de7f027bf19d3c69e36e66267fd7a7cfd7d27688d65ad4600963eb1eedddf2441c86926a77172af0518e16bfe225842555974a3aafee24c27675c0e895f79cd53f0dfb352e485102a37ad7596a8a0eebb42d09bd9e48ba2a8f"}}, 0xb1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0xf7fffffe, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff, 0x714, 0x4e23, 0x2, 0x2, 0x0, 0x0, 0x3a}, {@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4004d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xff}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x1, 0xfffffffc}, 0x70bd2a, 0x3507, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x1400c0d1}, 0x10) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9, 0x7, 0xf4a, 0x0, 0x40, 0x44150044}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r5, &(0x7f0000000840)={@val={0xa, 0xb3f0}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x18, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x15, '\x00', @mcast2}}}}}}}, 0x52) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x1) 338.331539ms ago: executing program 2 (id=677): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x20005, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10) listen(r1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x5}, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r4 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000140)={'HL\x00'}, &(0x7f0000000200)=0x1e) writev(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)="09a3d23d040ee0caac5ab19ccd4ce83b1c29e24ffbe7b8fd6bb86664606536610cd936e5687338e8ee11fa03c9472439212326b7ec4fd7eb5cccf017b32f4e4f9bddfc7bcbf6c4e56f522abc556d368dcc6799a59bef4419eeb10f934321daeb4d97f45fd0b0a2ddcfefc6fc4d85338bd4bd2c90d7625fb062f0e25554ac0a518f04", 0x82}], 0x1) r5 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) read$FUSE(r5, &(0x7f0000004340)={0x2020}, 0x2020) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000380)={"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"}) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000000)=""/103, &(0x7f00000001c0)=0x50) 275.826501ms ago: executing program 2 (id=678): timer_create(0x0, &(0x7f0000000080)={0x0, 0x80021}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x2007f, 0x44233, 0x9, 0x93, 0x941, 0x8001, 0x1005, 0x7, 0x4, 0x0, 0xfffffdfffffffffd], 0x6000, 0x84340}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, &(0x7f0000003480)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x2}) 206.232723ms ago: executing program 2 (id=679): r0 = socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000140000/0x2000)=nil, 0x2000, 0x300000b, 0x204031, r0, 0x567dc000) ioctl$int_in(r3, 0x5452, &(0x7f0000001080)=0x3) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x8, 0xc653, 0x9de, 0x6}}) write(r3, &(0x7f0000000080)='g', 0x1) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x400004, 0x6, 0xfff, 0x7fff, 0xe, "ee6b0ea0f560f25a63b2ff19c3439425ea59d8"}) timer_create(0x0, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd000000200106"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 206.045463ms ago: executing program 3 (id=680): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x9, 0xffe4, 0x2, 0x0, 0x2}) 104.735296ms ago: executing program 3 (id=681): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x35, {0x35, 0x8, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f545cb92e449c42123ec25cde38bf7914077366b487a480400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, "09ffffff"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821d"}, @local=@item_4={0x3, 0x2, 0xa, "8b923659"}, @local=@item_4={0x3, 0x2, 0x2, "000400"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) 88.691717ms ago: executing program 2 (id=682): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00D \r', @ANYRESDEC=r1], 0x38}}], 0x1, 0x46000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac010000300001"], 0x1ac}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x143101, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae03, 0x99) getsockopt(r1, 0x3b, 0x5, &(0x7f0000000140)=""/132, &(0x7f0000000200)=0x84) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) recvfrom(r1, 0x0, 0x0, 0x40012101, 0x0, 0x0) 0s ago: executing program 2 (id=683): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (fail_nth: 8) kernel console output (not intermixed with test programs): audit(1780184775.570:307): avc: denied { write } for pid=1172 comm="syz.3.256" name="bus" dev="tmpfs" ino=609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 65.385847][ T1173] vlan0: entered promiscuous mode [ 65.472063][ T36] audit: type=1400 audit(1780184775.570:308): avc: denied { add_name } for pid=1172 comm="syz.3.256" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 65.561005][ T1173] vlan0: entered allmulticast mode [ 65.645938][ T36] audit: type=1400 audit(1780184775.570:309): avc: denied { setattr } for pid=1172 comm="syz.3.256" name="work" dev="tmpfs" ino=610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 65.677721][ T400] usb 2-1: USB disconnect, device number 30 [ 65.721624][ T1173] veth0_vlan: entered allmulticast mode [ 65.771325][ T1177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.779051][ T36] audit: type=1400 audit(1780184775.570:310): avc: denied { write open } for pid=1172 comm="syz.3.256" path=2F202864656C6574656429 dev="tmpfs" ino=611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 65.780583][ T1177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.820329][ T36] audit: type=1400 audit(1780184775.570:311): avc: denied { create } for pid=1172 comm="syz.3.256" name="#7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 65.886145][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 65.989335][ T36] audit: type=1400 audit(1780184775.570:312): avc: denied { remove_name } for pid=1172 comm="syz.3.256" name="#7" dev="tmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 66.002370][ T10] usb 1-1: device descriptor read/8, error -71 [ 66.097085][ T1181] FAULT_INJECTION: forcing a failure. [ 66.097085][ T1181] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.113047][ T1181] CPU: 1 UID: 0 PID: 1181 Comm: syz.1.259 Not tainted syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 66.113076][ T1181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 66.113092][ T1181] Call Trace: [ 66.113098][ T1181] [ 66.113106][ T1181] __dump_stack+0x21/0x30 [ 66.113149][ T1181] dump_stack_lvl+0x140/0x1c0 [ 66.113176][ T1181] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.113204][ T1181] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 66.113225][ T1181] ? inode_init_always_gfp+0x756/0x9e0 [ 66.113250][ T1181] ? alloc_inode+0xc5/0x270 [ 66.113273][ T1181] ? new_inode+0x25/0x1e0 [ 66.113297][ T1181] ? proc_pident_instantiate+0x6d/0x2c0 [ 66.113321][ T1181] ? check_stack_object+0x81/0x150 [ 66.113341][ T1181] dump_stack+0x19/0x20 [ 66.113369][ T1181] should_fail_ex+0x3d7/0x530 [ 66.113389][ T1181] should_fail+0xf/0x20 [ 66.113406][ T1181] should_fail_usercopy+0x1e/0x30 [ 66.113426][ T1181] _copy_to_user+0x24/0xa0 [ 66.113449][ T1181] csum_and_copy_to_iter+0x28c/0x1a10 [ 66.113478][ T1181] ? __asan_memcpy+0x5a/0x80 [ 66.113501][ T1181] ? __cfi_csum_and_copy_to_iter+0x10/0x10 [ 66.113530][ T1181] ? __kasan_check_write+0x18/0x20 [ 66.113550][ T1181] ? udp_rmem_release+0x346/0x490 [ 66.113579][ T1181] ? __skb_recv_udp+0x866/0x960 [ 66.113608][ T1181] __skb_datagram_iter+0x86a/0x930 [ 66.113637][ T1181] ? __cfi_csum_and_copy_to_iter+0x10/0x10 [ 66.113667][ T1181] ? __cfi_sk_busy_loop_end+0x10/0x10 [ 66.113691][ T1181] skb_copy_and_csum_datagram_msg+0x1e9/0x480 [ 66.113720][ T1181] ? avc_has_perm_noaudit+0x28a/0x360 [ 66.113743][ T1181] ? __cfi_skb_copy_and_csum_datagram_msg+0x10/0x10 [ 66.113785][ T1181] ? avc_has_perm+0x155/0x240 [ 66.113806][ T1181] udp_recvmsg+0x3f4/0x1450 [ 66.113825][ T1181] ? __cfi_udp_recvmsg+0x10/0x10 [ 66.113854][ T1181] ? selinux_socket_recvmsg+0x281/0x380 [ 66.113879][ T1181] ? arch_stack_walk+0x10a/0x170 [ 66.113899][ T1181] ? __cfi_selinux_socket_recvmsg+0x10/0x10 [ 66.113925][ T1181] ? __cfi_udp_recvmsg+0x10/0x10 [ 66.113953][ T1181] inet_recvmsg+0x200/0x4f0 [ 66.113976][ T1181] ? avc_has_perm+0x155/0x240 [ 66.113997][ T1181] ? __cfi_inet_recvmsg+0x10/0x10 [ 66.114019][ T1181] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 66.114041][ T1181] ? security_socket_recvmsg+0x44/0x130 [ 66.114067][ T1181] ? __cfi_inet_recvmsg+0x10/0x10 [ 66.114089][ T1181] sock_recvmsg+0x161/0x1e0 [ 66.114114][ T1181] sock_read_iter+0x252/0x320 [ 66.114135][ T1181] ? __cfi_sock_read_iter+0x10/0x10 [ 66.114157][ T1181] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 66.114186][ T1181] vfs_read+0x657/0xcb0 [ 66.114206][ T1181] ? __cfi_vfs_read+0x10/0x10 [ 66.114228][ T1181] ksys_read+0x145/0x260 [ 66.114249][ T1181] ? __cfi_ksys_read+0x10/0x10 [ 66.114269][ T1181] ? __kasan_check_read+0x15/0x20 [ 66.114289][ T1181] __x64_sys_read+0x7f/0x90 [ 66.114309][ T1181] x64_sys_call+0x2638/0x2ee0 [ 66.114328][ T1181] do_syscall_64+0x57/0xf0 [ 66.114348][ T1181] ? clear_bhb_loop+0x50/0xa0 [ 66.114372][ T1181] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.114395][ T1181] RIP: 0033:0x7f1ac9b9ce59 [ 66.114416][ T1181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.114432][ T1181] RSP: 002b:00007f1acaa64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.114460][ T1181] RAX: ffffffffffffffda RBX: 00007f1ac9e15fa0 RCX: 00007f1ac9b9ce59 [ 66.114476][ T1181] RDX: 0000000000002020 RSI: 0000200000004340 RDI: 0000000000000004 [ 66.114489][ T1181] RBP: 00007f1acaa64090 R08: 0000000000000000 R09: 0000000000000000 [ 66.114502][ T1181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.114514][ T1181] R13: 00007f1ac9e16038 R14: 00007f1ac9e15fa0 R15: 00007ffc0c6f6f98 [ 66.114530][ T1181] [ 66.279287][ T10] usb 1-1: device descriptor read/8, error -71 [ 66.656014][ T1207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.665251][ T1207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.709748][ T1210] FAULT_INJECTION: forcing a failure. [ 66.709748][ T1210] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 66.723089][ T1210] CPU: 0 UID: 0 PID: 1210 Comm: syz.0.268 Not tainted syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 66.723129][ T1210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 66.723140][ T1210] Call Trace: [ 66.723145][ T1210] [ 66.723151][ T1210] __dump_stack+0x21/0x30 [ 66.723191][ T1210] dump_stack_lvl+0x140/0x1c0 [ 66.723214][ T1210] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.723237][ T1210] ? __dev_queue_xmit+0x267/0x3680 [ 66.723258][ T1210] ? __local_bh_enable_ip+0x74/0x80 [ 66.723275][ T1210] dump_stack+0x19/0x20 [ 66.723296][ T1210] should_fail_ex+0x3d7/0x530 [ 66.723312][ T1210] should_fail_alloc_page+0xec/0x110 [ 66.723332][ T1210] __alloc_pages_noprof+0x1c0/0x7e0 [ 66.723355][ T1210] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 66.723380][ T1210] ? __kasan_check_read+0x15/0x20 [ 66.723395][ T1210] ? selinux_ip_postroute+0x291/0xfe0 [ 66.723411][ T1210] __folio_alloc_noprof+0x14/0x80 [ 66.723433][ T1210] folio_prealloc+0x46/0x220 [ 66.723453][ T1210] do_pte_missing+0x169c/0x4410 [ 66.723475][ T1210] ? pte_marker_clear+0x1b0/0x1b0 [ 66.723494][ T1210] ? is_bpf_text_address+0x17b/0x1a0 [ 66.723518][ T1210] ? kernel_text_address+0xa9/0xe0 [ 66.723539][ T1210] ? __kernel_text_address+0x11/0x40 [ 66.723560][ T1210] ? unwind_get_return_address+0x51/0x90 [ 66.723581][ T1210] ? __pte_offset_map+0x1b0/0x230 [ 66.723605][ T1210] ? pte_offset_map_rw_nolock+0xba/0x110 [ 66.723620][ T1210] handle_mm_fault+0x11b8/0x1bf0 [ 66.723640][ T1210] ? __cfi_handle_mm_fault+0x10/0x10 [ 66.723672][ T1210] ? lock_mm_and_find_vma+0xb8/0x390 [ 66.723692][ T1210] do_user_addr_fault+0x4c9/0x11e0 [ 66.723709][ T1210] exc_page_fault+0x58/0xc0 [ 66.723730][ T1210] asm_exc_page_fault+0x2b/0x30 [ 66.723749][ T1210] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 66.723772][ T1210] Code: 75 f1 e9 d9 6a 03 00 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 66.723785][ T1210] RSP: 0018:ffffc900111bf5a0 EFLAGS: 00050206 [ 66.723799][ T1210] RAX: ffffffff82b05201 RBX: 0000000000000082 RCX: 0000000000000082 [ 66.723811][ T1210] RDX: 0000000000000000 RSI: ffff88811e5ce32c RDI: 0000200000004340 [ 66.723822][ T1210] RBP: ffffc900111bf5d0 R08: ffff88811e5ce3ad R09: 1ffff11023cb9c75 [ 66.723834][ T1210] R10: dffffc0000000000 R11: ffffed1023cb9c76 R12: 00002000000043c2 [ 66.723844][ T1210] R13: 00007ffffffff000 R14: 0000200000004340 R15: ffff88811e5ce32c [ 66.723857][ T1210] ? _copy_to_user+0x41/0xa0 [ 66.723878][ T1210] ? _copy_to_user+0x7d/0xa0 [ 66.723895][ T1210] csum_and_copy_to_iter+0x28c/0x1a10 [ 66.723919][ T1210] ? __asan_memcpy+0x5a/0x80 [ 66.723936][ T1210] ? __cfi_csum_and_copy_to_iter+0x10/0x10 [ 66.723959][ T1210] ? __kasan_check_write+0x18/0x20 [ 66.723974][ T1210] ? udp_rmem_release+0x346/0x490 [ 66.723998][ T1210] ? __skb_recv_udp+0x866/0x960 [ 66.724021][ T1210] __skb_datagram_iter+0x86a/0x930 [ 66.724043][ T1210] ? __cfi_csum_and_copy_to_iter+0x10/0x10 [ 66.724066][ T1210] ? __cfi_sk_busy_loop_end+0x10/0x10 [ 66.724089][ T1210] skb_copy_and_csum_datagram_msg+0x1e9/0x480 [ 66.724113][ T1210] ? avc_has_perm_noaudit+0x28a/0x360 [ 66.724130][ T1210] ? __cfi_skb_copy_and_csum_datagram_msg+0x10/0x10 [ 66.724155][ T1210] ? avc_has_perm+0x155/0x240 [ 66.724173][ T1210] udp_recvmsg+0x3f4/0x1450 [ 66.724188][ T1210] ? __cfi_udp_recvmsg+0x10/0x10 [ 66.724211][ T1210] ? selinux_socket_recvmsg+0x281/0x380 [ 66.724230][ T1210] ? arch_stack_walk+0x10a/0x170 [ 66.724246][ T1210] ? __cfi_selinux_socket_recvmsg+0x10/0x10 [ 66.724266][ T1210] ? __cfi_udp_recvmsg+0x10/0x10 [ 66.724288][ T1210] inet_recvmsg+0x200/0x4f0 [ 66.724306][ T1210] ? avc_has_perm+0x155/0x240 [ 66.724323][ T1210] ? __cfi_inet_recvmsg+0x10/0x10 [ 66.724340][ T1210] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 66.724358][ T1210] ? security_socket_recvmsg+0x44/0x130 [ 66.724378][ T1210] ? __cfi_inet_recvmsg+0x10/0x10 [ 66.724395][ T1210] sock_recvmsg+0x161/0x1e0 [ 66.724414][ T1210] sock_read_iter+0x252/0x320 [ 66.724431][ T1210] ? __cfi_sock_read_iter+0x10/0x10 [ 66.724448][ T1210] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 66.724471][ T1210] vfs_read+0x657/0xcb0 [ 66.724487][ T1210] ? __cfi_vfs_read+0x10/0x10 [ 66.724505][ T1210] ksys_read+0x145/0x260 [ 66.724520][ T1210] ? __cfi_ksys_read+0x10/0x10 [ 66.724536][ T1210] ? __kasan_check_read+0x15/0x20 [ 66.724552][ T1210] __x64_sys_read+0x7f/0x90 [ 66.724567][ T1210] x64_sys_call+0x2638/0x2ee0 [ 66.724582][ T1210] do_syscall_64+0x57/0xf0 [ 66.724597][ T1210] ? clear_bhb_loop+0x50/0xa0 [ 66.724616][ T1210] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.724633][ T1210] RIP: 0033:0x7f7d67f9ce59 [ 66.724645][ T1210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.724662][ T1210] RSP: 002b:00007f7d68f35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.724678][ T1210] RAX: ffffffffffffffda RBX: 00007f7d68215fa0 RCX: 00007f7d67f9ce59 [ 66.724690][ T1210] RDX: 0000000000002020 RSI: 0000200000004340 RDI: 0000000000000004 [ 66.724700][ T1210] RBP: 00007f7d68f35090 R08: 0000000000000000 R09: 0000000000000000 [ 66.724711][ T1210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.724720][ T1210] R13: 00007f7d68216038 R14: 00007f7d68215fa0 R15: 00007ffe84fa13f8 [ 66.724733][ T1210] [ 67.311440][ T400] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 67.461463][ T400] usb 2-1: Using ep0 maxpacket: 16 [ 67.467709][ T400] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 67.475825][ T400] usb 2-1: config 0 has no interface number 0 [ 67.481957][ T400] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 67.491974][ T400] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 67.503323][ T400] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 67.512402][ T400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.520400][ T400] usb 2-1: Product: syz [ 67.524578][ T400] usb 2-1: Manufacturer: syz [ 67.529234][ T400] usb 2-1: SerialNumber: syz [ 67.534680][ T400] usb 2-1: config 0 descriptor?? [ 67.539898][ T1191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 67.547212][ T1191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 67.671382][ T506] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 67.755493][ T1191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 67.762795][ T1191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 67.801382][ T506] usb 3-1: device descriptor read/64, error -71 [ 67.970633][ T400] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 67.995657][ T1231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1231 comm=syz.3.278 [ 68.041378][ T506] usb 3-1: device descriptor read/64, error -71 [ 68.163567][ T1238] incfs: Options parsing error. -22 [ 68.168915][ T1238] incfs: mount failed -22 [ 68.174138][ T1238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.182751][ T1238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.199485][ T1238] netlink: 'syz.3.280': attribute type 4 has an invalid length. [ 68.207229][ T1238] netlink: 17 bytes leftover after parsing attributes in process `syz.3.280'. [ 68.217957][ T1238] syz.3.280 uses obsolete (PF_INET,SOCK_PACKET) [ 68.281391][ T506] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 68.411386][ T506] usb 3-1: device descriptor read/64, error -71 [ 68.651390][ T506] usb 3-1: device descriptor read/64, error -71 [ 68.761488][ T506] usb usb3-port1: attempt power cycle [ 68.913905][ T1258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.922679][ T1258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.101393][ T506] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 69.122671][ T506] usb 3-1: device descriptor read/8, error -71 [ 69.252437][ T506] usb 3-1: device descriptor read/8, error -71 [ 69.376123][ T400] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 69.386429][ T400] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 69.397955][ T400] asix 2-1:0.34: probe with driver asix failed with error -71 [ 69.406603][ T400] usb 2-1: USB disconnect, device number 31 [ 69.491387][ T506] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 69.512440][ T506] usb 3-1: device descriptor read/8, error -71 [ 69.606252][ T1265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.614786][ T1265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.642577][ T506] usb 3-1: device descriptor read/8, error -71 [ 69.751501][ T506] usb usb3-port1: unable to enumerate USB device [ 69.998399][ T1273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=1273 comm=syz.0.295 [ 70.038117][ T1279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.297'. [ 70.281395][ T400] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 70.431399][ T400] usb 1-1: Using ep0 maxpacket: 8 [ 70.438046][ T400] usb 1-1: unable to get BOS descriptor or descriptor too short [ 70.447263][ T400] usb 1-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config [ 70.458998][ T400] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 70.470400][ T400] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 70.484867][ T400] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.494066][ T400] usb 1-1: New USB device strings: Mfr=1, Product=232, SerialNumber=3 [ 70.502314][ T400] usb 1-1: Product: syz [ 70.506540][ T400] usb 1-1: Manufacturer: syz [ 70.511164][ T400] usb 1-1: SerialNumber: syz [ 70.775330][ T400] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 70.782954][ T400] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 70.789748][ T400] cdc_ncm 1-1:1.0: bind() failure [ 70.795875][ T400] usb 1-1: USB disconnect, device number 21 [ 70.936106][ T1301] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=118 sclass=netlink_tcpdiag_socket pid=1301 comm=syz.1.305 [ 70.996836][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 70.996851][ T36] audit: type=1400 audit(1780184781.480:322): avc: denied { create } for pid=1308 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 71.029049][ T1311] random: crng reseeded on system resumption [ 71.087158][ T1317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.313'. [ 71.441390][ T506] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 71.592473][ T506] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 71.603348][ T506] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 71.613100][ T506] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41845, setting to 64 [ 71.624001][ T506] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 71.637797][ T506] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.646885][ T62] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 71.654539][ T506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 71.663031][ T506] usb 2-1: SerialNumber: syz [ 71.668432][ T1321] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 71.676538][ T506] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 71.812401][ T62] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 71.820464][ T62] usb 3-1: config 0 has no interface number 0 [ 71.826582][ T62] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.837490][ T62] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.847255][ T62] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 71.856322][ T62] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.865001][ T62] usb 3-1: config 0 descriptor?? [ 71.881489][ T400] usb 2-1: USB disconnect, device number 32 [ 72.072288][ T62] usbhid 3-1:0.8: can't add hid device: -32 [ 72.078291][ T62] usbhid 3-1:0.8: probe with driver usbhid failed with error -32 [ 72.228307][ T1342] netlink: 'syz.0.323': attribute type 1 has an invalid length. [ 72.250791][ T1344] netlink: 'syz.0.324': attribute type 1 has an invalid length. [ 72.583197][ T36] audit: type=1400 audit(1780184783.070:323): avc: denied { write } for pid=1363 comm="syz.3.332" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.594326][ T1364] syzkaller1: entered promiscuous mode [ 72.606508][ T36] audit: type=1400 audit(1780184783.070:324): avc: denied { read } for pid=1363 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.611736][ T1364] syzkaller1: entered allmulticast mode [ 72.688105][ T1367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.696958][ T1367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.171385][ T36] audit: type=1400 audit(1780184783.650:325): avc: denied { ioctl } for pid=1373 comm="syz.0.336" path="socket:[11596]" dev="sockfs" ino=11596 ioctlcmd=0x583a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.208404][ T949] Bluetooth: hci0: Frame reassembly failed (-84) [ 73.284211][ T36] audit: type=1400 audit(1780184783.760:326): avc: denied { read } for pid=1386 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.309165][ T1387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.318352][ T1387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.385799][ T1387] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 73.387021][ T1394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.402923][ T1394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.018116][ T1403] bridge: RTM_NEWNEIGH with invalid ether address [ 74.273019][ T1409] netlink: 104 bytes leftover after parsing attributes in process `syz.1.347'. [ 74.414240][ T68] usb 3-1: USB disconnect, device number 26 [ 74.561477][ T400] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 74.711389][ T400] usb 2-1: Using ep0 maxpacket: 8 [ 74.719577][ T400] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 74.730988][ T400] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 74.743962][ T400] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.750596][ T400] usb 2-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 74.759702][ T68] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 74.767575][ T400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.779943][ T400] usb 2-1: config 0 descriptor?? [ 74.810454][ T1424] netlink: 37 bytes leftover after parsing attributes in process `syz.3.354'. [ 74.931404][ T68] usb 3-1: Using ep0 maxpacket: 8 [ 74.937842][ T68] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 74.949134][ T68] usb 3-1: config 0 interface 0 has no altsetting 0 [ 74.955804][ T68] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 74.965038][ T68] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.973990][ T68] usb 3-1: config 0 descriptor?? [ 75.251404][ T759] Bluetooth: hci0: command 0x1003 tx timeout [ 75.251404][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 75.381654][ T68] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x3 [ 75.392633][ T400] logitech-djreceiver 0003:046D:C531.000A: unknown main item tag 0x2 [ 75.406543][ T1429] mmap: syz.0.355 (1429) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.418476][ T68] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 75.425389][ T400] logitech-djreceiver 0003:046D:C531.000A: unknown main item tag 0x0 [ 75.433896][ T68] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 75.440800][ T400] logitech-djreceiver 0003:046D:C531.000A: unknown main item tag 0x0 [ 75.449181][ T68] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 75.456849][ T400] logitech-djreceiver 0003:046D:C531.000A: unknown main item tag 0x0 [ 75.465112][ T68] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 75.473069][ T68] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 75.480241][ T400] logitech-djreceiver 0003:046D:C531.000A: unknown main item tag 0x0 [ 75.488617][ T68] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 75.495645][ T400] logitech-djreceiver 0003:046D:C531.000A: unknown main item tag 0x0 [ 75.504622][ T68] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 75.511630][ T400] logitech-djreceiver 0003:046D:C531.000A: unknown main item tag 0x0 [ 75.520794][ T68] arvo 0003:1E7D:30D4.0009: hidraw0: USB HID v0.04 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 75.532015][ T400] logitech-djreceiver 0003:046D:C531.000A: unknown main item tag 0x0 [ 75.540120][ T400] logitech-djreceiver 0003:046D:C531.000A: unknown main item tag 0x0 [ 75.594498][ T1414] netlink: 'syz.1.349': attribute type 4 has an invalid length. [ 75.666964][ T506] usb 2-1: USB disconnect, device number 33 [ 75.776600][ T1440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.785294][ T1440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.821425][ T400] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 75.972521][ T400] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.983586][ T400] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.993349][ T400] usb 1-1: config 0 interface 0 has no altsetting 0 [ 75.999985][ T400] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 76.009051][ T400] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.017597][ T400] usb 1-1: config 0 descriptor?? [ 76.337738][ T1455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.346348][ T1455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.425230][ T400] hid (null): global environment stack underflow [ 76.432589][ T400] hid-steam 0003:28DE:1102.000B: global environment stack underflow [ 76.440639][ T400] hid-steam 0003:28DE:1102.000B: item 0 4 1 11 parsing failed [ 76.448307][ T400] hid-steam 0003:28DE:1102.000B: steam_probe:parse of hid interface failed [ 76.456984][ T400] hid-steam 0003:28DE:1102.000B: probe with driver hid-steam failed with error -22 [ 76.626456][ T400] usb 1-1: USB disconnect, device number 22 [ 76.929137][ T1458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.938525][ T1458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.120743][ T1462] netlink: 68 bytes leftover after parsing attributes in process `syz.1.367'. [ 77.391374][ T506] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 77.437767][ T62] usb 3-1: USB disconnect, device number 27 [ 77.541386][ T506] usb 1-1: Using ep0 maxpacket: 8 [ 77.541388][ T68] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 77.555747][ T506] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 7 [ 77.568265][ T506] usb 1-1: New USB device found, idVendor=0e41, idProduct=4153, bcdDevice= 0.40 [ 77.577491][ T506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.585538][ T506] usb 1-1: Product: 錨僗밎酄붗⸅릚唸㻄욧瓠좥鸉쯩ᅏ麺ɷ鄄醮ꤶ킇ꁨ瓆﻾㔃෾ﭜ⨭ﰐ槕灲⏻走늰晤贖氅﫥૳錧ካ闠藪섚꽺矁裊㾪 [ 77.603590][ T506] usb 1-1: Manufacturer: Ѝ [ 77.608146][ T506] usb 1-1: SerialNumber:  [ 77.645733][ T949] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.691386][ T68] usb 2-1: Using ep0 maxpacket: 16 [ 77.697715][ T68] usb 2-1: config 8 has an invalid interface number: 25 but max is 0 [ 77.705955][ T68] usb 2-1: config 8 has no interface number 0 [ 77.712271][ T68] usb 2-1: config 8 interface 25 has no altsetting 0 [ 77.720475][ T68] usb 2-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=29.32 [ 77.729747][ T68] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.737801][ T68] usb 2-1: Product: syz [ 77.742143][ T68] usb 2-1: Manufacturer: syz [ 77.746768][ T68] usb 2-1: SerialNumber: syz [ 78.021493][ T506] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 78.028469][ T506] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 78.040139][ T506] usb 1-1: USB disconnect, device number 23 [ 78.050615][ T654] udevd[654]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.551396][ T400] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 78.558407][ T1490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1490 comm=syz.0.378 [ 78.681387][ T400] usb 3-1: device descriptor read/64, error -71 [ 78.871386][ T506] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 78.921398][ T400] usb 3-1: device descriptor read/64, error -71 [ 79.021375][ T506] usb 1-1: Using ep0 maxpacket: 8 [ 79.028302][ T506] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.038441][ T506] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 79.047346][ T506] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.061744][ T506] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.070806][ T506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.078837][ T506] usb 1-1: Manufacturer: ᥢ꺠瘿䓻蠏泍ㆍ䅹쒆鼙犅ꀏ뻟鴚䙧ⅼ촣偈㙁呓읗ଌ䍇䀴苾綷䤍朁鱧뗉쮘鿈￫Ⓩ蟸맏᯻쌲钧욢 [ 79.094969][ T506] usb 1-1: SerialNumber: syz [ 79.161372][ T400] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 79.291381][ T400] usb 3-1: device descriptor read/64, error -71 [ 79.301365][ T1493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.309885][ T1493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.318998][ T506] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 79.325890][ T506] cdc_ncm 1-1:1.0: bind() failure [ 79.331970][ T506] usb 1-1: USB disconnect, device number 24 [ 79.531392][ T400] usb 3-1: device descriptor read/64, error -71 [ 79.641468][ T400] usb usb3-port1: attempt power cycle [ 79.651383][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.651949][ T759] Bluetooth: hci0: command 0x1003 tx timeout [ 79.677704][ T1496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.681476][ T36] audit: type=1400 audit(1780184790.160:327): avc: denied { map } for pid=1494 comm="syz.3.380" path="pipe:[2699]" dev="pipefs" ino=2699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 79.686769][ T1496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.716745][ T1495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.725291][ T1495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.834412][ T1498] syzkaller1: entered promiscuous mode [ 79.840049][ T1498] syzkaller1: entered allmulticast mode [ 79.846896][ T36] audit: type=1400 audit(1780184790.330:328): avc: denied { mount } for pid=1497 comm="syz.0.381" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 79.869062][ T36] audit: type=1400 audit(1780184790.330:329): avc: denied { mounton } for pid=1497 comm="syz.0.381" path="/93/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 79.981389][ T400] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 80.002551][ T400] usb 3-1: device descriptor read/8, error -71 [ 80.011550][ T36] audit: type=1400 audit(1780184790.490:330): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 80.061163][ T36] audit: type=1400 audit(1780184790.540:331): avc: denied { create } for pid=1504 comm="syz.0.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 80.085084][ T1505] GUP no longer grows the stack in syz.0.384 (1505): 200000005000-200000008000 (200000004000) [ 80.095398][ T1505] CPU: 1 UID: 0 PID: 1505 Comm: syz.0.384 Not tainted syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 80.095424][ T1505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 80.095435][ T1505] Call Trace: [ 80.095441][ T1505] [ 80.095448][ T1505] __dump_stack+0x21/0x30 [ 80.095506][ T1505] dump_stack_lvl+0x140/0x1c0 [ 80.095533][ T1505] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.095558][ T1505] ? futex_lock_pi_atomic+0xe3/0xcd0 [ 80.095589][ T1505] dump_stack+0x19/0x20 [ 80.095607][ T1505] fixup_user_fault+0x62a/0x6b0 [ 80.095625][ T1505] fault_in_user_writeable+0x75/0xe0 [ 80.095658][ T1505] futex_lock_pi+0x2e0/0xa80 [ 80.095685][ T1505] ? __cfi_futex_lock_pi+0x10/0x10 [ 80.095712][ T1505] ? __cfi_futex_wake_mark+0x10/0x10 [ 80.095732][ T1505] ? futex_setup_timer+0xb4/0xd0 [ 80.095749][ T1505] ? __cfi_futex_wake_mark+0x10/0x10 [ 80.095762][ T1505] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 80.095777][ T1505] ? mas_find+0x358/0x5f0 [ 80.095814][ T1505] do_futex+0x270/0x510 [ 80.095838][ T1505] ? do_vmi_munmap+0x245/0x2e0 [ 80.095859][ T1505] ? __cfi_do_futex+0x10/0x10 [ 80.095884][ T1505] __se_sys_futex+0x13c/0x320 [ 80.095903][ T1505] ? __x64_sys_futex+0x110/0x110 [ 80.095922][ T1505] ? __kasan_check_write+0x18/0x20 [ 80.095952][ T1505] __x64_sys_futex+0xe9/0x110 [ 80.095976][ T1505] x64_sys_call+0x227f/0x2ee0 [ 80.095994][ T1505] do_syscall_64+0x57/0xf0 [ 80.096016][ T1505] ? clear_bhb_loop+0x50/0xa0 [ 80.096033][ T1505] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.096048][ T1505] RIP: 0033:0x7f7d67f9ce59 [ 80.096060][ T1505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.096081][ T1505] RSP: 002b:00007f7d68f35028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 80.096102][ T1505] RAX: ffffffffffffffda RBX: 00007f7d68215fa0 RCX: 00007f7d67f9ce59 [ 80.096116][ T1505] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 80.096127][ T1505] RBP: 00007f7d68032d6f R08: 0000000000000000 R09: 0000000000000001 [ 80.096138][ T1505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.096151][ T1505] R13: 00007f7d68216038 R14: 00007f7d68215fa0 R15: 00007ffe84fa13f8 [ 80.096168][ T1505] [ 80.132870][ T400] usb 3-1: device descriptor read/8, error -71 [ 80.357573][ T68] asix 2-1:8.25: probe with driver asix failed with error -22 [ 80.373619][ T68] usb 2-1: USB disconnect, device number 34 [ 80.401674][ T1515] syzkaller1: entered promiscuous mode [ 80.407167][ T1515] syzkaller1: entered allmulticast mode [ 80.571392][ T400] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 80.592467][ T400] usb 3-1: device descriptor read/8, error -71 [ 80.711384][ T68] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 80.722445][ T400] usb 3-1: device descriptor read/8, error -71 [ 80.831465][ T400] usb usb3-port1: unable to enumerate USB device [ 80.861378][ T68] usb 2-1: Using ep0 maxpacket: 8 [ 80.867626][ T68] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 80.875946][ T68] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 80.884439][ T68] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 80.893387][ T68] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 80.904314][ T68] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 80.915502][ T68] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 80.924591][ T68] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.932648][ T68] usb 2-1: Product: syz [ 80.936816][ T68] usb 2-1: Manufacturer: syz [ 80.941442][ T68] usb 2-1: SerialNumber: syz [ 80.946600][ T68] usb 2-1: config 0 descriptor?? [ 80.952257][ T68] hub 2-1:0.0: bad descriptor, ignoring hub [ 80.958182][ T68] hub 2-1:0.0: probe with driver hub failed with error -5 [ 80.966010][ T68] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15 [ 81.153985][ T68] usb 2-1: USB disconnect, device number 35 [ 81.317739][ T1526] EXT4-fs: dax option not supported [ 81.347278][ T1531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.365078][ T1531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.385324][ T1531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.391430][ T36] audit: type=1400 audit(1780184791.870:332): avc: granted { setsecparam } for pid=1536 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 81.394866][ T1531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.422413][ T36] audit: type=1400 audit(1780184791.870:333): avc: granted { setsecparam } for pid=1536 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 81.480420][ T36] audit: type=1400 audit(1780184791.950:334): avc: denied { ioctl } for pid=1542 comm="syz.0.398" path="socket:[13360]" dev="sockfs" ino=13360 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.911475][ T348] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 81.941390][ T506] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 81.971388][ T400] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 82.071414][ T348] usb 2-1: Using ep0 maxpacket: 16 [ 82.078208][ T348] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 82.087305][ T348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=8 [ 82.092911][ T506] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 82.095339][ T348] usb 2-1: SerialNumber: syz [ 82.103921][ T506] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 82.109964][ T348] usb 2-1: config 0 descriptor?? [ 82.121289][ T506] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 82.123821][ T348] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 82.130692][ T506] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 82.140197][ T400] usb 1-1: Using ep0 maxpacket: 8 [ 82.149809][ T506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 82.156222][ T348] usb 2-1: Detected FT232A [ 82.164487][ T506] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 82.174810][ T400] usb 1-1: unable to get BOS descriptor or descriptor too short [ 82.184254][ T506] usb 3-1: string descriptor 0 read error: -22 [ 82.189836][ T348] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 82.195278][ T506] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 82.204204][ T400] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 82.212410][ T506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.225911][ T400] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.240303][ T400] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 82.241165][ T506] usb 3-1: config 0 descriptor?? [ 82.251793][ T400] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 82.266369][ T1550] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 82.275248][ T506] hub 3-1:0.0: bad descriptor, ignoring hub [ 82.281173][ T506] hub 3-1:0.0: probe with driver hub failed with error -5 [ 82.287035][ T400] usb 1-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 82.300230][ T506] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 82.300246][ T400] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.320187][ T400] usb 1-1: Product: syz [ 82.324599][ T400] usb 1-1: Manufacturer: syz [ 82.329305][ T400] usb 1-1: SerialNumber: syz [ 82.331175][ T1548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.342487][ T1548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.351376][ T348] usb 2-1: USB disconnect, device number 36 [ 82.358308][ T348] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 82.369414][ T348] ftdi_sio 2-1:0.0: device disconnected [ 82.487210][ T9] usb 3-1: USB disconnect, device number 32 [ 82.542037][ T400] usb 1-1: unable to issue vendor read request (ret = -71) [ 82.549618][ T400] usb 1-1: unable to issue vendor read request (ret = -71) [ 82.557462][ T400] usb 1-1: unable to issue vendor read request (ret = -71) [ 82.564999][ T400] usb 1-1: unable to issue vendor read request (ret = -71) [ 82.575644][ T400] usb 1-1: USB disconnect, device number 25 [ 82.622200][ T654] udevd[654]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.669321][ T1566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.677959][ T1566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.058161][ T1591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.066710][ T1591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.240064][ T1597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.248907][ T1597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.291386][ T506] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 83.441371][ T506] usb 1-1: Using ep0 maxpacket: 32 [ 83.448802][ T506] usb 1-1: unable to get BOS descriptor or descriptor too short [ 83.457151][ T506] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 83.465528][ T506] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 83.475808][ T506] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 83.484851][ T506] usb 1-1: config 128 has no interface number 0 [ 83.491115][ T506] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 83.502370][ T506] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.512476][ T506] usb 1-1: config 128 interface 127 has no altsetting 0 [ 83.520811][ T506] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 83.529905][ T506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.537940][ T506] usb 1-1: Product: syz [ 83.542148][ T506] usb 1-1: Manufacturer: syz [ 83.546754][ T506] usb 1-1: SerialNumber: syz [ 83.758840][ T506] usb 1-1: USB disconnect, device number 26 [ 83.775590][ T654] udevd[654]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.779169][ T1599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.800561][ T1599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.812378][ T1600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.824157][ T1600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.832554][ T1599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.839110][ T1602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47646 sclass=netlink_route_socket pid=1602 comm=syz.1.421 [ 83.842752][ T1600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.861848][ T1599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.869749][ T1600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.074420][ T1631] x_tables: duplicate entry at hook 2 [ 84.171384][ T311] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 84.332151][ T1638] 9pnet_virtio: no channels available for device ./cgroup/file0 [ 84.340634][ T311] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 84.351829][ T311] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.361716][ T311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.368343][ T311] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 84.377861][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.391788][ T1640] FAULT_INJECTION: forcing a failure. [ 84.391788][ T1640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.405736][ T1640] CPU: 1 UID: 0 PID: 1640 Comm: syz.2.428 Not tainted syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 84.405764][ T1640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 84.405781][ T1640] Call Trace: [ 84.405787][ T1640] [ 84.405794][ T1640] __dump_stack+0x21/0x30 [ 84.405827][ T1640] dump_stack_lvl+0x140/0x1c0 [ 84.405856][ T1640] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.405886][ T1640] dump_stack+0x19/0x20 [ 84.405914][ T1640] should_fail_ex+0x3d7/0x530 [ 84.405933][ T1640] should_fail+0xf/0x20 [ 84.405950][ T1640] should_fail_usercopy+0x1e/0x30 [ 84.405972][ T1640] copy_fpstate_to_sigframe+0x99f/0xc10 [ 84.405999][ T1640] ? __kernel_text_address+0x11/0x40 [ 84.406027][ T1640] ? read_tsc+0xd/0x20 [ 84.406055][ T1640] ? copy_fpstate_to_sigframe+0x188/0xc10 [ 84.406101][ T1640] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 84.406130][ T1640] ? clockevents_program_event+0x24d/0x350 [ 84.406153][ T1640] ? tick_program_event+0x9b/0x120 [ 84.406179][ T1640] ? hrtimer_reprogram+0x341/0x3e0 [ 84.406209][ T1640] ? fpu__alloc_mathframe+0xb7/0x150 [ 84.406235][ T1640] get_sigframe+0x5f8/0x820 [ 84.406255][ T1640] ? __cfi_get_sigframe+0x10/0x10 [ 84.406273][ T1640] ? __kasan_check_write+0x18/0x20 [ 84.406293][ T1640] ? irqentry_exit+0x4a/0x60 [ 84.406322][ T1640] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 84.406347][ T1640] x64_setup_rt_frame+0x162/0xc30 [ 84.406367][ T1640] ? get_signal+0x124b/0x14e0 [ 84.406394][ T1640] ? __cfi_x64_setup_rt_frame+0x10/0x10 [ 84.406413][ T1640] ? mutex_unlock+0x90/0x240 [ 84.406438][ T1640] arch_do_signal_or_restart+0x342/0x760 [ 84.406459][ T1640] ? fput+0x1a4/0x240 [ 84.406485][ T1640] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 84.406506][ T1640] ? ksys_write+0x1f3/0x260 [ 84.406527][ T1640] ? __kasan_check_read+0x15/0x20 [ 84.406548][ T1640] syscall_exit_to_user_mode+0x57/0xb0 [ 84.406577][ T1640] do_syscall_64+0x63/0xf0 [ 84.406596][ T1640] ? clear_bhb_loop+0x50/0xa0 [ 84.406619][ T1640] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.406643][ T1640] RIP: 0033:0x7fcffd55d68e [ 84.406659][ T1640] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.406676][ T1640] RSP: 002b:00007fcffe43cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.406697][ T1640] RAX: 0000000000000001 RBX: 00007fcffe43d6c0 RCX: 00007fcffd55d68e [ 84.406711][ T1640] RDX: 0000000000000001 RSI: 00007fcffe43d090 RDI: 0000000000000004 [ 84.406723][ T1640] RBP: 00007fcffe43d090 R08: 0000000000000000 R09: 0000000000000000 [ 84.406735][ T1640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.406746][ T1640] R13: 00007fcffd816038 R14: 00007fcffd815fa0 R15: 00007ffe13b94478 [ 84.406763][ T1640] [ 84.406960][ T311] usb 2-1: config 0 descriptor?? [ 84.741374][ T506] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 84.902422][ T506] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 84.921408][ T506] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.939644][ T506] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 84.948823][ T506] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.958692][ T506] hub 1-1:4.0: USB hub found [ 85.091392][ T311] hid-steam 0003:28DE:1102.000C: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 85.171653][ T311] hid-steam 0003:28DE:1102.000C: Steam Controller 'XXXXXXXXXX' connected [ 85.180931][ T506] hub 1-1:4.0: 2 ports detected [ 85.191758][ T506] usb 1-1: selecting invalid altsetting 1 [ 85.197505][ T506] hub 1-1:4.0: Using single TT (err -22) [ 85.203412][ T311] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.000C/input/input17 [ 85.239087][ T311] hid-steam 0003:28DE:1102.000D: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 85.308833][ T311] usb 2-1: USB disconnect, device number 37 [ 85.323308][ T311] hid-steam 0003:28DE:1102.000C: Steam Controller 'XXXXXXXXXX' disconnected [ 85.362716][ T506] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 85.369094][ T506] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 85.411696][ T506] usb 1-1: USB disconnect, device number 27 [ 85.471846][ T36] audit: type=1400 audit(1780184795.960:335): avc: denied { ioctl } for pid=1654 comm="syz.3.434" path="/165/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.505473][ T36] audit: type=1400 audit(1780184795.990:336): avc: denied { mounton } for pid=1654 comm="syz.3.434" path="/165/file0" dev="incremental-fs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.918158][ T36] audit: type=1400 audit(1780184796.400:337): avc: denied { ioctl } for pid=1676 comm="syz.3.443" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 85.951385][ T506] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 86.101419][ T506] usb 3-1: Using ep0 maxpacket: 16 [ 86.107583][ T506] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30 [ 86.118453][ T506] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126 [ 86.131508][ T311] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 86.139265][ T506] usb 3-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 86.148456][ T506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.157821][ T506] usb 3-1: config 0 descriptor?? [ 86.281384][ T311] usb 2-1: device descriptor read/64, error -71 [ 86.366317][ T506] usbhid 3-1:0.0: can't add hid device: -71 [ 86.372339][ T506] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 86.380818][ T506] usb 3-1: USB disconnect, device number 33 [ 86.528361][ T311] usb 2-1: device descriptor read/64, error -71 [ 86.643888][ T1690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.652734][ T1690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.661975][ T36] audit: type=1400 audit(1780184797.150:338): avc: denied { write } for pid=1689 comm="syz.3.449" path="socket:[13956]" dev="sockfs" ino=13956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.781387][ T311] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 86.911385][ T311] usb 2-1: device descriptor read/64, error -71 [ 87.151376][ T311] usb 2-1: device descriptor read/64, error -71 [ 87.236911][ T1704] overlayfs: failed to resolve './file1': -2 [ 87.261627][ T311] usb usb2-port1: attempt power cycle [ 87.641360][ T311] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 87.672329][ T311] usb 2-1: device descriptor read/8, error -71 [ 87.763159][ T1712] netlink: 100 bytes leftover after parsing attributes in process `syz.2.457'. [ 87.812591][ T311] usb 2-1: device descriptor read/8, error -71 [ 88.051378][ T311] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 88.092307][ T311] usb 2-1: device descriptor read/8, error -71 [ 88.232572][ T311] usb 2-1: device descriptor read/8, error -71 [ 88.243210][ T1717] FAULT_INJECTION: forcing a failure. [ 88.243210][ T1717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.256340][ T1717] CPU: 1 UID: 0 PID: 1717 Comm: syz.3.459 Not tainted syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 88.256368][ T1717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 88.256382][ T1717] Call Trace: [ 88.256388][ T1717] [ 88.256396][ T1717] __dump_stack+0x21/0x30 [ 88.256430][ T1717] dump_stack_lvl+0x140/0x1c0 [ 88.256461][ T1717] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.256489][ T1717] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 88.256512][ T1717] ? inode_init_always_gfp+0x756/0x9e0 [ 88.256536][ T1717] ? alloc_inode+0xc5/0x270 [ 88.256559][ T1717] ? new_inode+0x25/0x1e0 [ 88.256582][ T1717] ? proc_pident_instantiate+0x6d/0x2c0 [ 88.256606][ T1717] ? check_stack_object+0x81/0x150 [ 88.256627][ T1717] dump_stack+0x19/0x20 [ 88.256655][ T1717] should_fail_ex+0x3d7/0x530 [ 88.256675][ T1717] should_fail+0xf/0x20 [ 88.256692][ T1717] should_fail_usercopy+0x1e/0x30 [ 88.256721][ T1717] _copy_to_user+0x24/0xa0 [ 88.256746][ T1717] csum_and_copy_to_iter+0x28c/0x1a10 [ 88.256777][ T1717] ? __asan_memcpy+0x5a/0x80 [ 88.256801][ T1717] ? __cfi_csum_and_copy_to_iter+0x10/0x10 [ 88.256832][ T1717] ? __kasan_check_write+0x18/0x20 [ 88.256851][ T1717] ? udp_rmem_release+0x346/0x490 [ 88.256883][ T1717] ? __skb_recv_udp+0x866/0x960 [ 88.256915][ T1717] __skb_datagram_iter+0x86a/0x930 [ 88.256945][ T1717] ? __cfi_csum_and_copy_to_iter+0x10/0x10 [ 88.256977][ T1717] ? __cfi_sk_busy_loop_end+0x10/0x10 [ 88.257004][ T1717] skb_copy_and_csum_datagram_msg+0x1e9/0x480 [ 88.257036][ T1717] ? avc_has_perm_noaudit+0x28a/0x360 [ 88.257059][ T1717] ? __cfi_skb_copy_and_csum_datagram_msg+0x10/0x10 [ 88.257091][ T1717] ? avc_has_perm+0x155/0x240 [ 88.257114][ T1717] udp_recvmsg+0x3f4/0x1450 [ 88.257134][ T1717] ? __cfi_udp_recvmsg+0x10/0x10 [ 88.257165][ T1717] ? selinux_socket_recvmsg+0x281/0x380 [ 88.257190][ T1717] ? arch_stack_walk+0x10a/0x170 [ 88.257211][ T1717] ? __cfi_selinux_socket_recvmsg+0x10/0x10 [ 88.257238][ T1717] ? __cfi_udp_recvmsg+0x10/0x10 [ 88.257269][ T1717] inet_recvmsg+0x200/0x4f0 [ 88.257293][ T1717] ? avc_has_perm+0x155/0x240 [ 88.257316][ T1717] ? __cfi_inet_recvmsg+0x10/0x10 [ 88.257339][ T1717] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 88.257373][ T1717] ? security_socket_recvmsg+0x44/0x130 [ 88.257399][ T1717] ? __cfi_inet_recvmsg+0x10/0x10 [ 88.257420][ T1717] sock_recvmsg+0x161/0x1e0 [ 88.257444][ T1717] sock_read_iter+0x252/0x320 [ 88.257466][ T1717] ? __cfi_sock_read_iter+0x10/0x10 [ 88.257489][ T1717] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 88.257519][ T1717] vfs_read+0x657/0xcb0 [ 88.257539][ T1717] ? __cfi_vfs_read+0x10/0x10 [ 88.257562][ T1717] ksys_read+0x145/0x260 [ 88.257581][ T1717] ? __cfi_ksys_read+0x10/0x10 [ 88.257602][ T1717] ? __kasan_check_read+0x15/0x20 [ 88.257621][ T1717] __x64_sys_read+0x7f/0x90 [ 88.257642][ T1717] x64_sys_call+0x2638/0x2ee0 [ 88.257661][ T1717] do_syscall_64+0x57/0xf0 [ 88.257681][ T1717] ? clear_bhb_loop+0x50/0xa0 [ 88.257710][ T1717] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.257733][ T1717] RIP: 0033:0x7f00b719ce59 [ 88.257750][ T1717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.257766][ T1717] RSP: 002b:00007f00b7f76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.257788][ T1717] RAX: ffffffffffffffda RBX: 00007f00b7415fa0 RCX: 00007f00b719ce59 [ 88.257803][ T1717] RDX: 0000000000002020 RSI: 0000200000004340 RDI: 0000000000000004 [ 88.257815][ T1717] RBP: 00007f00b7f76090 R08: 0000000000000000 R09: 0000000000000000 [ 88.257828][ T1717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.257839][ T1717] R13: 00007f00b7416038 R14: 00007f00b7415fa0 R15: 00007fff3b0e7188 [ 88.257856][ T1717] [ 88.630487][ T311] usb usb2-port1: unable to enumerate USB device [ 88.685676][ T1723] overlayfs: missing 'lowerdir' [ 88.690986][ T1724] overlayfs: missing 'lowerdir' [ 89.001403][ T311] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 89.021381][ T9] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 89.152378][ T311] usb 1-1: config 1 has an invalid descriptor of length 106, skipping remainder of the config [ 89.162764][ T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.171419][ T9] usb 3-1: device descriptor read/64, error -71 [ 89.173001][ T311] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.192285][ T311] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.201364][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.209353][ T311] usb 1-1: Product: syz [ 89.213544][ T311] usb 1-1: Manufacturer: syz [ 89.218144][ T311] usb 1-1: SerialNumber: syz [ 89.224213][ T311] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 89.231004][ T311] cdc_ncm 1-1:1.0: bind() failure [ 89.411930][ T9] usb 3-1: device descriptor read/64, error -71 [ 89.425536][ T348] usb 1-1: USB disconnect, device number 28 [ 89.551531][ T36] audit: type=1400 audit(1780184800.040:339): avc: denied { write } for pid=1746 comm="syz.3.472" name="raw6" dev="proc" ino=4026532418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 89.554558][ T1747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.582463][ T1747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.651393][ T9] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 89.781380][ T9] usb 3-1: device descriptor read/64, error -71 [ 89.886579][ T36] audit: type=1326 audit(1780184800.370:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1749 comm="syz.1.473" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ac9b9ce59 code=0x0 [ 90.041618][ T9] usb 3-1: device descriptor read/64, error -71 [ 90.110969][ T1757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.121033][ T1757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.151456][ T9] usb usb3-port1: attempt power cycle [ 90.181463][ T400] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 90.331721][ T400] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 90.340181][ T400] usb 2-1: config 0 has no interfaces? [ 90.346301][ T400] usb 2-1: config 0 has no interfaces? [ 90.352531][ T400] usb 2-1: config 0 has no interfaces? [ 90.358611][ T400] usb 2-1: config 0 has no interfaces? [ 90.364771][ T400] usb 2-1: config 0 has no interfaces? [ 90.370935][ T400] usb 2-1: config 0 has no interfaces? [ 90.377121][ T400] usb 2-1: config 0 has no interfaces? [ 90.383280][ T400] usb 2-1: config 0 has no interfaces? [ 90.390144][ T400] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 90.399210][ T400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 90.407382][ T400] usb 2-1: Product: syz [ 90.411582][ T400] usb 2-1: Manufacturer: syz [ 90.416181][ T400] usb 2-1: SerialNumber: syz [ 90.421590][ T400] usb 2-1: config 0 descriptor?? [ 90.481509][ T311] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 90.491549][ T9] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 90.512347][ T9] usb 3-1: device descriptor read/8, error -71 [ 90.628072][ T1751] syz_tun: entered allmulticast mode [ 90.636341][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.645082][ T9] usb 3-1: device descriptor read/8, error -71 [ 90.656137][ T400] usb 2-1: USB disconnect, device number 42 [ 90.662501][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.674353][ T311] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 90.684854][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.701028][ T311] usb 1-1: config 0 descriptor?? [ 90.763225][ T1767] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 90.771937][ T1767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.780490][ T1767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.788553][ T36] audit: type=1400 audit(1780184801.270:341): avc: denied { mounton } for pid=1766 comm="syz.3.480" path="mnt:[4026532313]" dev="nsfs" ino=4026532313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 90.837998][ T36] audit: type=1400 audit(1780184801.320:342): avc: denied { sqpoll } for pid=1773 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 90.891732][ T9] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 90.900480][ T1779] netlink: 'syz.3.484': attribute type 16 has an invalid length. [ 90.906073][ T950] Bluetooth: hci0: Frame reassembly failed (-84) [ 90.922405][ T9] usb 3-1: device descriptor read/8, error -71 [ 91.052372][ T9] usb 3-1: device descriptor read/8, error -71 [ 91.116888][ T311] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 91.161470][ T9] usb usb3-port1: unable to enumerate USB device [ 91.472508][ T311] cp2112 0003:10C4:EA90.000E: error requesting version [ 91.480179][ T311] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -71 [ 91.490094][ T311] usb 1-1: USB disconnect, device number 29 [ 91.683544][ T36] audit: type=1400 audit(1780184802.170:343): avc: denied { create } for pid=1786 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 92.021374][ T356] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 92.171362][ T356] usb 2-1: Using ep0 maxpacket: 16 [ 92.171369][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 92.186377][ T356] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 92.195436][ T356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.203484][ T356] usb 2-1: Product: syz [ 92.207644][ T356] usb 2-1: Manufacturer: syz [ 92.212252][ T356] usb 2-1: SerialNumber: syz [ 92.321378][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 92.328052][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 92.336471][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.346580][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 92.355560][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 67, changing to 7 [ 92.367900][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.377160][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.385198][ T9] usb 3-1: Product: syz [ 92.389371][ T9] usb 3-1: Manufacturer: syz [ 92.393986][ T9] usb 3-1: SerialNumber: syz [ 92.604290][ T9] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 92.612392][ T9] usb 3-1: found format II with max.bitrate = 128, frame size=3249 [ 92.620353][ T9] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 92.626763][ T9] usb 3-1: 0:2 : does not exist [ 92.631720][ T9] usb 3-1: unit 6 not found! [ 92.642675][ T9] usb 3-1: USB disconnect, device number 38 [ 92.662220][ T561] udevd[561]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 92.931364][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.931371][ T759] Bluetooth: hci0: command 0x1003 tx timeout [ 92.985668][ T1814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.994377][ T1814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.021606][ T62] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 93.172446][ T62] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.184209][ T62] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.190839][ T62] usb 1-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 93.199915][ T62] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.209053][ T62] usb 1-1: config 0 descriptor?? [ 93.818226][ T62] usbhid 1-1:0.0: can't add hid device: -71 [ 93.825356][ T62] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 93.837160][ T62] usb 1-1: USB disconnect, device number 30 [ 94.083546][ T356] usb 2-1: MIDIStreaming interface descriptor not found [ 94.098902][ T356] usb 2-1: USB disconnect, device number 43 [ 94.127051][ T582] udevd[582]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.135449][ T36] audit: type=1400 audit(1780184804.610:344): avc: denied { setopt } for pid=1833 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.473642][ T36] audit: type=1400 audit(1780184804.960:345): avc: denied { getopt } for pid=1837 comm="syz.3.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.493647][ T1838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.503208][ T1838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.047695][ T36] audit: type=1400 audit(1780184805.530:346): avc: denied { mount } for pid=1856 comm="syz.2.513" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.048296][ T1857] tmpfs: Cannot disable swap on remount [ 95.075823][ T36] audit: type=1400 audit(1780184805.530:347): avc: denied { remount } for pid=1856 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.101186][ T1857] x_tables: duplicate entry at hook 2 [ 95.132657][ T36] audit: type=1400 audit(1780184805.620:348): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.172627][ T1864] tipc: Enabling of bearer rejected, failed to enable media [ 95.252941][ T1871] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 95.341096][ T36] audit: type=1400 audit(1780184805.820:349): avc: denied { getopt } for pid=1888 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.363517][ T36] audit: type=1400 audit(1780184805.830:350): avc: denied { read } for pid=1888 comm="syz.3.526" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 95.631381][ T356] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 95.782790][ T356] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.791264][ T356] usb 1-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 95.801588][ T356] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 95.810546][ T356] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 95.821430][ T62] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 95.829011][ T356] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 95.842225][ T356] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 101, changing to 7 [ 95.853334][ T356] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 25440, setting to 1024 [ 95.864384][ T356] usb 1-1: config 1 interface 1 has no altsetting 0 [ 95.873054][ T356] usb 1-1: string descriptor 0 read error: -22 [ 95.879243][ T356] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 95.888293][ T356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.900187][ T356] usb 1-1: incorrect wMaxPacketSize 0x1400 for BADD profile [ 95.912094][ T356] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 95.927321][ T654] udevd[654]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 96.001369][ T62] usb 2-1: Using ep0 maxpacket: 32 [ 96.007634][ T62] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.019107][ T62] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 96.028178][ T62] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.036231][ T62] usb 2-1: Product: syz [ 96.040398][ T62] usb 2-1: Manufacturer: syz [ 96.045016][ T62] usb 2-1: SerialNumber: syz [ 96.050155][ T62] usb 2-1: config 0 descriptor?? [ 96.055874][ T62] usb 2-1: bad CDC descriptors [ 96.060804][ T62] usb 2-1: unsupported MDLM descriptors [ 96.161374][ T348] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 96.256880][ T400] usb 2-1: USB disconnect, device number 44 [ 96.312677][ T348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 96.321374][ T348] usb 3-1: not running at top speed; connect to a high speed hub [ 96.329846][ T348] usb 3-1: config 1 has an invalid descriptor of length 149, skipping remainder of the config [ 96.342423][ T348] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.353683][ T348] usb 3-1: string descriptor 0 read error: -22 [ 96.358234][ T1918] binder: Unknown parameter 'hash' [ 96.359947][ T348] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 96.366457][ T1918] SELinux: Context system_u:object_r:shadow_t:s0 is not valid (left unmapped). [ 96.374352][ T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.391197][ T36] audit: type=1400 audit(1780184806.880:351): avc: denied { relabelto } for pid=1917 comm="syz.3.537" name="file0" dev="tmpfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:shadow_t:s0" [ 96.417640][ T36] audit: type=1400 audit(1780184806.880:352): avc: denied { associate } for pid=1917 comm="syz.3.537" name="file0" dev="tmpfs" ino=1106 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:shadow_t:s0" [ 96.451176][ T1895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=1895 comm=syz.0.527 [ 96.457731][ T1921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=1921 comm=syz.0.527 [ 96.478864][ T1895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.527'. [ 96.500187][ T1924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.504406][ T9] usb 1-1: USB disconnect, device number 31 [ 96.509109][ T1924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.535906][ T1924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.539222][ T1928] overlay: Unknown parameter '/' [ 96.546559][ T1924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.550391][ T1929] overlayfs: overlapping lowerdir path [ 96.562755][ T1928] overlay: Unknown parameter '/' [ 96.567946][ T1928] overlay: Unknown parameter '/' [ 96.573164][ T1928] overlay: Unknown parameter '/' [ 96.578533][ T1928] overlay: Unknown parameter '/' [ 96.583775][ T1928] overlay: Unknown parameter '/' [ 96.588899][ T1928] overlay: Unknown parameter '/' [ 96.594125][ T1928] overlay: Unknown parameter '/' [ 96.599308][ T1928] overlay: Unknown parameter '/' [ 96.604502][ T1928] overlay: Unknown parameter '/' [ 96.609705][ T1928] overlay: Unknown parameter '/' [ 96.614928][ T1928] overlay: Unknown parameter '/' [ 96.620183][ T1928] overlay: Unknown parameter '/' [ 96.625334][ T1928] overlay: Unknown parameter '/' [ 96.630792][ T1928] overlay: Unknown parameter '/' [ 96.636000][ T1928] overlay: Unknown parameter '/' [ 96.641201][ T1928] overlay: Unknown parameter '/' [ 96.646453][ T1928] overlay: Unknown parameter '/' [ 96.646480][ T348] usb 3-1: 0:1 : does not exist [ 96.656374][ T348] usb 3-1: 0:2 : does not exist [ 96.656614][ T1928] overlay: Unknown parameter '/' [ 96.667074][ T1928] overlay: Unknown parameter '/' [ 96.672444][ T1928] overlay: Unknown parameter '/' [ 96.677797][ T1928] overlay: Unknown parameter '/' [ 96.683007][ T1928] overlay: Unknown parameter '/' [ 96.688187][ T1928] overlay: Unknown parameter '/' [ 96.694623][ T1928] overlay: Unknown parameter '/' [ 96.699830][ T1928] overlay: Unknown parameter '/' [ 96.705030][ T1928] overlay: Unknown parameter '/' [ 96.710207][ T1928] overlay: Unknown parameter '/' [ 96.716883][ T1928] overlay: Unknown parameter '/' [ 96.722093][ T1928] overlay: Unknown parameter '/' [ 96.727163][ T1928] overlay: Unknown parameter '/' [ 96.732348][ T1928] overlay: Unknown parameter '/' [ 96.737496][ T1928] overlay: Unknown parameter '/' [ 96.849042][ T1916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.857717][ T1916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.932820][ T348] usb 3-1: USB disconnect, device number 39 [ 97.001371][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 97.111777][ T1943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.121107][ T1943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.161368][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 97.168200][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.178848][ T9] usb 1-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 97.188088][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.196301][ T9] usb 1-1: Product: syz [ 97.200589][ T9] usb 1-1: Manufacturer: syz [ 97.205421][ T9] usb 1-1: SerialNumber: syz [ 97.414628][ T9] usb 1-1: Fast Track Pro switching to config #2 [ 97.431187][ T9] usb 1-1: USB disconnect, device number 32 [ 97.671056][ T36] audit: type=1400 audit(1780184808.150:353): avc: denied { create } for pid=1954 comm="syz.3.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 97.707544][ T1955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.741363][ T62] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 97.749100][ T1955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.883481][ T1957] netlink: 964 bytes leftover after parsing attributes in process `syz.1.550'. [ 97.891468][ T62] usb 3-1: device descriptor read/64, error -71 [ 97.967485][ T1961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 98.131387][ T62] usb 3-1: device descriptor read/64, error -71 [ 98.241969][ T36] audit: type=1400 audit(1780184808.730:354): avc: denied { write } for pid=1972 comm="syz.0.557" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.371420][ T62] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 98.376089][ T1988] loop8: detected capacity change from 0 to 7 [ 98.473602][ T1993] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 98.511389][ T62] usb 3-1: device descriptor read/64, error -71 [ 98.751376][ T62] usb 3-1: device descriptor read/64, error -71 [ 98.861437][ T62] usb usb3-port1: attempt power cycle [ 98.976131][ T36] audit: type=1326 audit(1780184809.460:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2001 comm="syz.1.568" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ac9b9ce59 code=0x0 [ 99.212048][ T62] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 99.232478][ T62] usb 3-1: device descriptor read/8, error -71 [ 99.362458][ T62] usb 3-1: device descriptor read/8, error -71 [ 99.423815][ T36] audit: type=1400 audit(1780184809.910:356): avc: denied { setcheckreqprot } for pid=2013 comm="syz.0.572" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 99.525876][ T36] audit: type=1400 audit(1780184810.010:357): avc: denied { bind } for pid=2015 comm="syz.0.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.601377][ T62] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 99.622380][ T62] usb 3-1: device descriptor read/8, error -71 [ 99.752354][ T62] usb 3-1: device descriptor read/8, error -71 [ 99.801374][ T31] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 99.861488][ T62] usb usb3-port1: unable to enumerate USB device [ 99.931400][ T31] usb 1-1: device descriptor read/64, error -71 [ 100.104673][ T2027] fuse: Unknown parameter '0000000000000000000400000000000000000005' [ 100.171414][ T31] usb 1-1: device descriptor read/64, error -71 [ 100.216544][ T2033] overlayfs: statfs failed on './file0' [ 100.236573][ T2037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.245169][ T2037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.411380][ T31] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 100.531340][ T36] audit: type=1400 audit(1780184811.010:358): avc: denied { ioctl } for pid=2038 comm="syz.2.582" path="socket:[16507]" dev="sockfs" ino=16507 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.556024][ T31] usb 1-1: device descriptor read/64, error -71 [ 100.582852][ T36] audit: type=1400 audit(1780184811.070:359): avc: denied { set_context_mgr } for pid=2040 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 100.792401][ T36] audit: type=1400 audit(1780184811.280:360): avc: denied { setopt } for pid=2061 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.801526][ T31] usb 1-1: device descriptor read/64, error -71 [ 100.828265][ T2065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.836824][ T2065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.901396][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 100.921453][ T31] usb usb1-port1: attempt power cycle [ 100.941373][ T348] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 101.052659][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 101.061084][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.071206][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 101.080207][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 101.092627][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 101.101703][ T348] usb 2-1: Using ep0 maxpacket: 16 [ 101.106841][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.114863][ T9] usb 3-1: Product: syz [ 101.119127][ T9] usb 3-1: Manufacturer: syz [ 101.123784][ T9] usb 3-1: SerialNumber: syz [ 101.128773][ T348] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 101.137263][ T348] usb 2-1: config 1 has no interface number 0 [ 101.143667][ T348] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 101.153637][ T348] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 101.163908][ T348] usb 2-1: config 1 interface 105 has no altsetting 0 [ 101.172131][ T348] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 101.181185][ T348] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 101.189315][ T348] usb 2-1: Product: syz [ 101.193502][ T348] usb 2-1: Manufacturer: syz [ 101.198094][ T348] usb 2-1: SerialNumber: syz [ 101.203625][ T2056] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 101.210840][ T2056] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 101.261398][ T31] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 101.282430][ T31] usb 1-1: device descriptor read/8, error -71 [ 101.365440][ T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 101.374893][ T9] usb 3-1: USB disconnect, device number 44 [ 101.396221][ T836] udevd[836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 101.413771][ T31] usb 1-1: device descriptor read/8, error -71 [ 101.421850][ T2056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.431459][ T2056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.440900][ T2056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.449812][ T2056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.517256][ T2073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.525899][ T2073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.661388][ T31] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 101.661581][ T2056] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 101.676247][ T2056] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 101.692412][ T31] usb 1-1: device descriptor read/8, error -71 [ 101.822962][ T31] usb 1-1: device descriptor read/8, error -71 [ 101.886250][ T2056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.899257][ T2056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.912590][ T348] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 101.924827][ T348] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 101.934423][ T348] usb 2-1: USB disconnect, device number 45 [ 101.941501][ T31] usb usb1-port1: unable to enumerate USB device [ 102.056698][ T2083] netlink: 108 bytes leftover after parsing attributes in process `syz.3.598'. [ 102.106184][ T36] audit: type=1400 audit(1780184812.590:361): avc: denied { read } for pid=2082 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.187707][ T36] audit: type=1400 audit(1780184812.670:362): avc: denied { load_policy } for pid=2084 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 102.216628][ T2085] SELinux: failed to load policy [ 102.221635][ T31] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 102.226009][ T2085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.237805][ T2085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.246224][ T36] audit: type=1400 audit(1780184812.740:363): avc: denied { write } for pid=2084 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 102.249707][ T2085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.273542][ T2085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.361392][ T31] usb 3-1: device descriptor read/64, error -71 [ 102.601377][ T31] usb 3-1: device descriptor read/64, error -71 [ 102.661468][ T348] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 102.791397][ T348] usb 2-1: device descriptor read/64, error -71 [ 102.803333][ T2094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.811906][ T2094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.820641][ T2094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.829189][ T2094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.841382][ T31] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 102.971403][ T31] usb 3-1: device descriptor read/64, error -71 [ 102.971403][ T400] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 103.031456][ T348] usb 2-1: device descriptor read/64, error -71 [ 103.121402][ T400] usb 1-1: Using ep0 maxpacket: 32 [ 103.127970][ T400] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.136515][ T400] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.146726][ T400] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.161147][ T400] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 103.170223][ T400] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.178250][ T400] usb 1-1: Product: syz [ 103.182504][ T400] usb 1-1: Manufacturer: syz [ 103.187104][ T400] usb 1-1: SerialNumber: syz [ 103.221380][ T31] usb 3-1: device descriptor read/64, error -71 [ 103.281376][ T348] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 103.331462][ T31] usb usb3-port1: attempt power cycle [ 103.411419][ T348] usb 2-1: device descriptor read/64, error -71 [ 103.470629][ T2114] FAULT_INJECTION: forcing a failure. [ 103.470629][ T2114] name failslab, interval 1, probability 0, space 0, times 1 [ 103.483380][ T2114] CPU: 1 UID: 0 PID: 2114 Comm: syz.3.609 Not tainted syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 103.483416][ T2114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.483429][ T2114] Call Trace: [ 103.483435][ T2114] [ 103.483443][ T2114] __dump_stack+0x21/0x30 [ 103.483497][ T2114] dump_stack_lvl+0x140/0x1c0 [ 103.483534][ T2114] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.483568][ T2114] ? __kasan_check_write+0x18/0x20 [ 103.483591][ T2114] dump_stack+0x19/0x20 [ 103.483620][ T2114] should_fail_ex+0x3d7/0x530 [ 103.483641][ T2114] should_failslab+0xac/0x100 [ 103.483667][ T2114] kmem_cache_alloc_noprof+0x42/0x410 [ 103.483689][ T2114] ? getname_flags+0xc5/0x700 [ 103.483713][ T2114] ? __cfi_ksys_write+0x10/0x10 [ 103.483735][ T2114] getname_flags+0xc5/0x700 [ 103.483759][ T2114] __x64_sys_mkdirat+0x7e/0xa0 [ 103.483789][ T2114] x64_sys_call+0x2ba8/0x2ee0 [ 103.483810][ T2114] do_syscall_64+0x57/0xf0 [ 103.483842][ T2114] ? clear_bhb_loop+0x50/0xa0 [ 103.483868][ T2114] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.483893][ T2114] RIP: 0033:0x7f00b719ce59 [ 103.483910][ T2114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.483929][ T2114] RSP: 002b:00007f00b7f76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 103.483951][ T2114] RAX: ffffffffffffffda RBX: 00007f00b7415fa0 RCX: 00007f00b719ce59 [ 103.483968][ T2114] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 103.483982][ T2114] RBP: 00007f00b7f76090 R08: 0000000000000000 R09: 0000000000000000 [ 103.483995][ T2114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.484007][ T2114] R13: 00007f00b7416038 R14: 00007f00b7415fa0 R15: 00007fff3b0e7188 [ 103.484025][ T2114] [ 103.691357][ T348] usb 2-1: device descriptor read/64, error -71 [ 103.707021][ T2121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.715643][ T2121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.731385][ T31] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 103.751471][ T36] audit: type=1400 audit(1780184814.240:364): avc: denied { shutdown } for pid=2091 comm="syz.0.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.771898][ T31] usb 3-1: device descriptor read/8, error -71 [ 103.801676][ T348] usb usb2-port1: attempt power cycle [ 103.825160][ T400] usb 1-1: MIDIStreaming interface descriptor not found [ 103.836233][ T400] usb 1-1: USB disconnect, device number 37 [ 103.902700][ T31] usb 3-1: device descriptor read/8, error -71 [ 104.141390][ T31] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 104.141390][ T348] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 104.162350][ T31] usb 3-1: device descriptor read/8, error -71 [ 104.172445][ T348] usb 2-1: device descriptor read/8, error -71 [ 104.269379][ T36] audit: type=1400 audit(1780184814.750:365): avc: denied { mount } for pid=2124 comm="syz.3.613" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 104.270651][ T2125] overlay: Unknown parameter 'default_permissions:nfs_export' [ 104.291286][ T400] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 104.299631][ T36] audit: type=1400 audit(1780184814.750:366): avc: denied { mounton } for pid=2124 comm="syz.3.613" path="/238/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 104.311194][ T2125] netlink: 60 bytes leftover after parsing attributes in process `syz.3.613'. [ 104.330258][ T31] usb 3-1: device descriptor read/8, error -71 [ 104.338819][ T348] usb 2-1: device descriptor read/8, error -71 [ 104.353354][ T36] audit: type=1400 audit(1780184814.840:367): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 104.389639][ T9] kernel read not supported for file /645/uid_map (pid: 9 comm: kworker/0:0) [ 104.411990][ T2131] SELinux: security policydb version 17 (MLS) not backwards compatible [ 104.420343][ T2131] SELinux: failed to load policy [ 104.427167][ T2131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.436019][ T2131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.451498][ T31] usb usb3-port1: unable to enumerate USB device [ 104.451740][ T400] usb 1-1: Using ep0 maxpacket: 16 [ 104.463908][ T400] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.474037][ T400] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.485378][ T400] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.494475][ T400] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.502507][ T400] usb 1-1: Product: syz [ 104.506651][ T400] usb 1-1: Manufacturer: syz [ 104.511235][ T400] usb 1-1: SerialNumber: syz [ 104.581367][ T348] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 104.602277][ T348] usb 2-1: device descriptor read/8, error -71 [ 104.720467][ T400] usb 1-1: 0:2 : does not exist [ 104.727143][ T400] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 104.735430][ T348] usb 2-1: device descriptor read/8, error -71 [ 104.744452][ T400] usb 1-1: USB disconnect, device number 38 [ 104.755438][ T836] udevd[836]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 104.851626][ T348] usb usb2-port1: unable to enumerate USB device [ 105.038203][ T36] audit: type=1400 audit(1780184815.520:368): avc: denied { append } for pid=2139 comm="syz.3.619" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 105.093955][ T36] audit: type=1400 audit(1780184815.580:369): avc: denied { ioctl } for pid=2139 comm="syz.3.619" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 105.166194][ T36] audit: type=1400 audit(1780184815.650:370): avc: denied { map } for pid=2144 comm="syz.3.621" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 105.174061][ T2145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.198841][ T2145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.259099][ T2150] rust_binder: Error in use_page_slow: ESRCH [ 105.259129][ T2150] rust_binder: use_range failure ESRCH [ 105.271623][ T2150] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 105.277185][ T2150] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 105.285267][ T2150] rust_binder: 2144:2150 transaction to 2144 failed: ESRCH [ 105.312023][ T2154] FAULT_INJECTION: forcing a failure. [ 105.312023][ T2154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.332480][ T2154] CPU: 0 UID: 0 PID: 2154 Comm: syz.0.623 Not tainted syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 105.332526][ T2154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.332540][ T2154] Call Trace: [ 105.332546][ T2154] [ 105.332560][ T2154] __dump_stack+0x21/0x30 [ 105.332587][ T2154] dump_stack_lvl+0x140/0x1c0 [ 105.332609][ T2154] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.332632][ T2154] dump_stack+0x19/0x20 [ 105.332653][ T2154] should_fail_ex+0x3d7/0x530 [ 105.332668][ T2154] should_fail+0xf/0x20 [ 105.332681][ T2154] should_fail_usercopy+0x1e/0x30 [ 105.332696][ T2154] strncpy_from_user+0x29/0x270 [ 105.332710][ T2154] ? __cfi_ksys_write+0x10/0x10 [ 105.332726][ T2154] getname_flags+0x101/0x700 [ 105.332743][ T2154] __x64_sys_mkdirat+0x7e/0xa0 [ 105.332764][ T2154] x64_sys_call+0x2ba8/0x2ee0 [ 105.332779][ T2154] do_syscall_64+0x57/0xf0 [ 105.332795][ T2154] ? clear_bhb_loop+0x50/0xa0 [ 105.332814][ T2154] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.332832][ T2154] RIP: 0033:0x7f7d67f9ce59 [ 105.332844][ T2154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.332856][ T2154] RSP: 002b:00007f7d68f35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 105.332872][ T2154] RAX: ffffffffffffffda RBX: 00007f7d68215fa0 RCX: 00007f7d67f9ce59 [ 105.332884][ T2154] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 105.332895][ T2154] RBP: 00007f7d68f35090 R08: 0000000000000000 R09: 0000000000000000 [ 105.332904][ T2154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.332913][ T2154] R13: 00007f7d68216038 R14: 00007f7d68215fa0 R15: 00007ffe84fa13f8 [ 105.332926][ T2154] [ 105.345352][ T2156] netlink: 124 bytes leftover after parsing attributes in process `syz.0.624'. [ 105.525863][ T31] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 105.681408][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 105.687648][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.697779][ T31] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 105.706873][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.717501][ T31] usb 3-1: config 0 descriptor?? [ 105.727948][ T31] usb 3-1: bad CDC descriptors [ 105.734647][ T31] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 105.742508][ T31] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 105.748958][ T31] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 105.845409][ T2172] netlink: 20 bytes leftover after parsing attributes in process `syz.3.630'. [ 105.951014][ T2183] FAULT_INJECTION: forcing a failure. [ 105.951014][ T2183] name failslab, interval 1, probability 0, space 0, times 0 [ 105.963850][ T2183] CPU: 1 UID: 0 PID: 2183 Comm: syz.3.634 Not tainted syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 105.963877][ T2183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.963888][ T2183] Call Trace: [ 105.963894][ T2183] [ 105.963901][ T2183] __dump_stack+0x21/0x30 [ 105.963931][ T2183] dump_stack_lvl+0x140/0x1c0 [ 105.963958][ T2183] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.963984][ T2183] ? __call_rcu_common+0x43b/0x720 [ 105.964007][ T2183] dump_stack+0x19/0x20 [ 105.964041][ T2183] should_fail_ex+0x3d7/0x530 [ 105.964061][ T2183] should_failslab+0xac/0x100 [ 105.964085][ T2183] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 105.964107][ T2183] ? __cfi__raw_spin_lock+0x10/0x10 [ 105.964127][ T2183] ? __d_alloc+0x42/0x8e0 [ 105.964146][ T2183] __d_alloc+0x42/0x8e0 [ 105.964165][ T2183] d_alloc+0x4c/0x1c0 [ 105.964181][ T2183] ? lookup_one_qstr_excl+0xba/0x280 [ 105.964206][ T2183] lookup_one_qstr_excl+0xcf/0x280 [ 105.964229][ T2183] filename_create+0x239/0x480 [ 105.964254][ T2183] ? __virt_addr_valid+0x2a6/0x380 [ 105.964280][ T2183] ? kern_path_create+0x70/0x70 [ 105.964305][ T2183] ? __cfi___check_object_size+0x10/0x10 [ 105.964327][ T2183] do_mkdirat+0xa9/0x530 [ 105.964353][ T2183] ? __cfi_do_mkdirat+0x10/0x10 [ 105.964380][ T2183] ? getname_flags+0x208/0x700 [ 105.964401][ T2183] __x64_sys_mkdirat+0x8b/0xa0 [ 105.964428][ T2183] x64_sys_call+0x2ba8/0x2ee0 [ 105.964447][ T2183] do_syscall_64+0x57/0xf0 [ 105.964466][ T2183] ? clear_bhb_loop+0x50/0xa0 [ 105.964491][ T2183] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.964513][ T2183] RIP: 0033:0x7f00b719ce59 [ 105.964529][ T2183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.964546][ T2183] RSP: 002b:00007f00b7f76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 105.964566][ T2183] RAX: ffffffffffffffda RBX: 00007f00b7415fa0 RCX: 00007f00b719ce59 [ 105.964586][ T2183] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 105.964599][ T2183] RBP: 00007f00b7f76090 R08: 0000000000000000 R09: 0000000000000000 [ 105.964612][ T2183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.964642][ T2183] R13: 00007f00b7416038 R14: 00007f00b7415fa0 R15: 00007fff3b0e7188 [ 105.964662][ T2183] [ 106.273347][ T348] usb 3-1: USB disconnect, device number 49 [ 106.447418][ T2189] syzkaller1: entered promiscuous mode [ 106.453082][ T2189] syzkaller1: entered allmulticast mode [ 106.589352][ T2207] FAULT_INJECTION: forcing a failure. [ 106.589352][ T2207] name failslab, interval 1, probability 0, space 0, times 0 [ 106.602129][ T2207] CPU: 0 UID: 0 PID: 2207 Comm: syz.1.643 Not tainted syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 106.602156][ T2207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.602168][ T2207] Call Trace: [ 106.602174][ T2207] [ 106.602180][ T2207] __dump_stack+0x21/0x30 [ 106.602211][ T2207] dump_stack_lvl+0x140/0x1c0 [ 106.602236][ T2207] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.602262][ T2207] ? avc_has_perm+0x155/0x240 [ 106.602283][ T2207] dump_stack+0x19/0x20 [ 106.602308][ T2207] should_fail_ex+0x3d7/0x530 [ 106.602325][ T2207] ? cgroup_mkdir+0x24c/0x1570 [ 106.602348][ T2207] should_failslab+0xac/0x100 [ 106.602370][ T2207] __kmalloc_noprof+0x69/0x500 [ 106.602389][ T2207] ? cgroup_mkdir+0x24c/0x1570 [ 106.602411][ T2207] ? cgroup_kn_lock_live+0x1a3/0x2f0 [ 106.602431][ T2207] cgroup_mkdir+0x24c/0x1570 [ 106.602454][ T2207] ? __kasan_check_write+0x18/0x20 [ 106.602473][ T2207] ? __cfi_cgroup_mkdir+0x10/0x10 [ 106.602494][ T2207] kernfs_iop_mkdir+0x1c5/0x2d0 [ 106.602518][ T2207] vfs_mkdir+0x585/0x820 [ 106.602544][ T2207] do_mkdirat+0x240/0x530 [ 106.602568][ T2207] ? __cfi_do_mkdirat+0x10/0x10 [ 106.602592][ T2207] ? getname_flags+0x208/0x700 [ 106.602612][ T2207] __x64_sys_mkdirat+0x8b/0xa0 [ 106.602637][ T2207] x64_sys_call+0x2ba8/0x2ee0 [ 106.602654][ T2207] do_syscall_64+0x57/0xf0 [ 106.602672][ T2207] ? clear_bhb_loop+0x50/0xa0 [ 106.602694][ T2207] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.602715][ T2207] RIP: 0033:0x7f1ac9b9ce59 [ 106.602730][ T2207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.602744][ T2207] RSP: 002b:00007f1acaa64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 106.602764][ T2207] RAX: ffffffffffffffda RBX: 00007f1ac9e15fa0 RCX: 00007f1ac9b9ce59 [ 106.602778][ T2207] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 106.602791][ T2207] RBP: 00007f1acaa64090 R08: 0000000000000000 R09: 0000000000000000 [ 106.602802][ T2207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.602813][ T2207] R13: 00007f1ac9e16038 R14: 00007f1ac9e15fa0 R15: 00007ffc0c6f6f98 [ 106.602829][ T2207] [ 106.873053][ T2211] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.645'. [ 106.951404][ T348] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 106.959277][ T9] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 107.092157][ T9] usb 1-1: device descriptor read/64, error -71 [ 107.111379][ T348] usb 3-1: Using ep0 maxpacket: 16 [ 107.118144][ T348] usb 3-1: config index 0 descriptor too short (expected 37359, got 202) [ 107.126621][ T348] usb 3-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 107.135393][ T348] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 107.141441][ T31] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 107.145574][ T348] usb 3-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 107.163639][ T348] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.172838][ T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.180842][ T348] usb 3-1: Product: syz [ 107.185028][ T348] usb 3-1: Manufacturer: syz [ 107.189624][ T348] usb 3-1: SerialNumber: syz [ 107.301359][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 107.307591][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.317759][ T31] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 107.326879][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.335710][ T9] usb 1-1: device descriptor read/64, error -71 [ 107.336312][ T31] usb 2-1: config 0 descriptor?? [ 107.348063][ T31] usb 2-1: bad CDC descriptors [ 107.353053][ T31] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 107.360923][ T31] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 107.367379][ T31] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 107.396387][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 107.396400][ T36] audit: type=1400 audit(1780184817.880:373): avc: denied { read } for pid=2191 comm="syz.2.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.439662][ T36] audit: type=1400 audit(1780184817.920:374): avc: denied { write } for pid=2214 comm="syz.3.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.504451][ T36] audit: type=1400 audit(1780184817.990:375): avc: denied { watch } for pid=2218 comm="syz.3.648" path="/256/file0" dev="tmpfs" ino=1383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 107.517904][ T2219] netlink: 68 bytes leftover after parsing attributes in process `syz.3.648'. [ 107.527223][ T36] audit: type=1400 audit(1780184817.990:376): avc: denied { watch_reads } for pid=2218 comm="syz.3.648" path="/256/file0" dev="tmpfs" ino=1383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 107.563181][ T400] usb 2-1: USB disconnect, device number 50 [ 107.611399][ T9] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 107.628779][ T2236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.649'. [ 107.694610][ T36] audit: type=1400 audit(1780184818.180:377): avc: denied { getopt } for pid=2218 comm="syz.3.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.741368][ T9] usb 1-1: device descriptor read/64, error -71 [ 107.951363][ T400] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 107.981359][ T9] usb 1-1: device descriptor read/64, error -71 [ 108.081357][ T400] usb 2-1: device descriptor read/64, error -71 [ 108.091543][ T9] usb usb1-port1: attempt power cycle [ 108.321382][ T400] usb 2-1: device descriptor read/64, error -71 [ 108.431370][ T9] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 108.452419][ T9] usb 1-1: device descriptor read/8, error -71 [ 108.478282][ T2248] FAULT_INJECTION: forcing a failure. [ 108.478282][ T2248] name failslab, interval 1, probability 0, space 0, times 0 [ 108.490948][ T2248] CPU: 0 UID: 0 PID: 2248 Comm: syz.3.653 Not tainted syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 108.490979][ T2248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 108.490990][ T2248] Call Trace: [ 108.490996][ T2248] [ 108.491002][ T2248] __dump_stack+0x21/0x30 [ 108.491032][ T2248] dump_stack_lvl+0x140/0x1c0 [ 108.491052][ T2248] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.491070][ T2248] ? mutex_unlock+0x90/0x240 [ 108.491087][ T2248] ? pcpu_alloc_noprof+0x13f0/0x13f0 [ 108.491103][ T2248] dump_stack+0x19/0x20 [ 108.491120][ T2248] should_fail_ex+0x3d7/0x530 [ 108.491134][ T2248] should_failslab+0xac/0x100 [ 108.491150][ T2248] __kmalloc_cache_noprof+0x41/0x470 [ 108.491164][ T2248] ? percpu_ref_init+0xde/0x4d0 [ 108.491177][ T2248] ? __cfi_css_release+0x10/0x10 [ 108.491191][ T2248] percpu_ref_init+0xde/0x4d0 [ 108.491203][ T2248] cgroup_mkdir+0x276/0x1570 [ 108.491221][ T2248] ? __cfi_cgroup_mkdir+0x10/0x10 [ 108.491236][ T2248] kernfs_iop_mkdir+0x1c5/0x2d0 [ 108.491254][ T2248] vfs_mkdir+0x585/0x820 [ 108.491272][ T2248] do_mkdirat+0x240/0x530 [ 108.491289][ T2248] ? __cfi_do_mkdirat+0x10/0x10 [ 108.491307][ T2248] ? getname_flags+0x208/0x700 [ 108.491340][ T2248] __x64_sys_mkdirat+0x8b/0xa0 [ 108.491373][ T2248] x64_sys_call+0x2ba8/0x2ee0 [ 108.491393][ T2248] do_syscall_64+0x57/0xf0 [ 108.491407][ T2248] ? clear_bhb_loop+0x50/0xa0 [ 108.491424][ T2248] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.491439][ T2248] RIP: 0033:0x7f00b719ce59 [ 108.491450][ T2248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.491461][ T2248] RSP: 002b:00007f00b7f76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 108.491475][ T2248] RAX: ffffffffffffffda RBX: 00007f00b7415fa0 RCX: 00007f00b719ce59 [ 108.491485][ T2248] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 108.491494][ T2248] RBP: 00007f00b7f76090 R08: 0000000000000000 R09: 0000000000000000 [ 108.491503][ T2248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.491511][ T2248] R13: 00007f00b7416038 R14: 00007f00b7415fa0 R15: 00007fff3b0e7188 [ 108.491523][ T2248] [ 108.722444][ T9] usb 1-1: device descriptor read/8, error -71 [ 108.741437][ T2252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.749953][ T2252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.759241][ T2252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.761454][ T400] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 108.768184][ T2252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.901376][ T400] usb 2-1: device descriptor read/64, error -71 [ 108.961367][ T9] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 108.992404][ T9] usb 1-1: device descriptor read/8, error -71 [ 109.122433][ T9] usb 1-1: device descriptor read/8, error -71 [ 109.151360][ T400] usb 2-1: device descriptor read/64, error -71 [ 109.231450][ T9] usb usb1-port1: unable to enumerate USB device [ 109.261444][ T400] usb usb2-port1: attempt power cycle [ 109.313939][ T2256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.322468][ T2256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.450508][ T348] usb 3-1: 0:2 : does not exist [ 109.455528][ T348] usb 3-1: unit 6 not found! [ 109.467747][ T348] usb 3-1: USB disconnect, device number 50 [ 109.478938][ T836] udevd[836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.601883][ T400] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 109.622594][ T400] usb 2-1: device descriptor read/8, error -71 [ 109.752440][ T400] usb 2-1: device descriptor read/8, error -71 [ 109.905881][ T2270] FAULT_INJECTION: forcing a failure. [ 109.905881][ T2270] name failslab, interval 1, probability 0, space 0, times 0 [ 109.918531][ T2270] CPU: 0 UID: 0 PID: 2270 Comm: syz.3.663 Not tainted syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 109.918558][ T2270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.918571][ T2270] Call Trace: [ 109.918579][ T2270] [ 109.918588][ T2270] __dump_stack+0x21/0x30 [ 109.918612][ T2270] dump_stack_lvl+0x140/0x1c0 [ 109.918631][ T2270] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.918651][ T2270] dump_stack+0x19/0x20 [ 109.918669][ T2270] should_fail_ex+0x3d7/0x530 [ 109.918683][ T2270] should_failslab+0xac/0x100 [ 109.918700][ T2270] __kmalloc_node_track_caller_noprof+0x68/0x4f0 [ 109.918716][ T2270] ? kstrdup_const+0x45/0x60 [ 109.918739][ T2270] kstrdup+0x4d/0x130 [ 109.918757][ T2270] ? kstrdup_const+0x3a/0x60 [ 109.918777][ T2270] kstrdup_const+0x45/0x60 [ 109.918795][ T2270] __kernfs_new_node+0xaa/0x740 [ 109.918812][ T2270] ? __kasan_check_write+0x18/0x20 [ 109.918826][ T2270] ? pcpu_alloc_noprof+0x13f0/0x13f0 [ 109.918841][ T2270] ? kernfs_new_node+0x280/0x280 [ 109.918858][ T2270] ? pcpu_alloc_noprof+0xd44/0x13f0 [ 109.918874][ T2270] kernfs_new_node+0x154/0x280 [ 109.918891][ T2270] kernfs_create_dir_ns+0x4b/0x130 [ 109.918909][ T2270] cgroup_mkdir+0x391/0x1570 [ 109.918927][ T2270] ? __cfi_cgroup_mkdir+0x10/0x10 [ 109.918943][ T2270] kernfs_iop_mkdir+0x1c5/0x2d0 [ 109.918961][ T2270] vfs_mkdir+0x585/0x820 [ 109.918980][ T2270] do_mkdirat+0x240/0x530 [ 109.918998][ T2270] ? __cfi_do_mkdirat+0x10/0x10 [ 109.919016][ T2270] ? getname_flags+0x208/0x700 [ 109.919030][ T2270] __x64_sys_mkdirat+0x8b/0xa0 [ 109.919048][ T2270] x64_sys_call+0x2ba8/0x2ee0 [ 109.919061][ T2270] do_syscall_64+0x57/0xf0 [ 109.919074][ T2270] ? clear_bhb_loop+0x50/0xa0 [ 109.919091][ T2270] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.919107][ T2270] RIP: 0033:0x7f00b719ce59 [ 109.919118][ T2270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.919130][ T2270] RSP: 002b:00007f00b7f76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 109.919144][ T2270] RAX: ffffffffffffffda RBX: 00007f00b7415fa0 RCX: 00007f00b719ce59 [ 109.919154][ T2270] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 109.919163][ T2270] RBP: 00007f00b7f76090 R08: 0000000000000000 R09: 0000000000000000 [ 109.919172][ T2270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.919180][ T2270] R13: 00007f00b7416038 R14: 00007f00b7415fa0 R15: 00007fff3b0e7188 [ 109.919191][ T2270] [ 109.921466][ T356] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 110.001425][ T400] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 110.161386][ T356] usb 1-1: Using ep0 maxpacket: 32 [ 110.182798][ T400] usb 2-1: device descriptor read/8, error -71 [ 110.185316][ T356] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.207765][ T356] usb 1-1: too many endpoints for config 1 interface 2 altsetting 242: 255, using maximum allowed: 30 [ 110.218777][ T356] usb 1-1: config 1 interface 2 altsetting 242 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 110.232122][ T356] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 110.241915][ T356] usb 1-1: config 1 interface 2 has no altsetting 0 [ 110.249935][ T356] usb 1-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 110.259374][ T356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.267552][ T356] usb 1-1: Product: syz [ 110.271995][ T356] usb 1-1: Manufacturer: syz [ 110.278893][ T356] usb 1-1: SerialNumber: syz [ 110.282813][ T2279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.292722][ T2279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.312286][ T400] usb 2-1: device descriptor read/8, error -71 [ 110.421433][ T400] usb usb2-port1: unable to enumerate USB device [ 110.500274][ T356] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 110.507260][ T356] usb 1-1: unit 4 not found! [ 110.511913][ T356] usb 1-1: unit 144 not found! [ 110.525125][ T356] usb 1-1: USB disconnect, device number 43 [ 110.624667][ T2290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.633298][ T2290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.643448][ T2290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.652316][ T2290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.668192][ T2292] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 110.689193][ T2296] FAULT_INJECTION: forcing a failure. [ 110.689193][ T2296] name failslab, interval 1, probability 0, space 0, times 0 [ 110.701936][ T2296] CPU: 0 UID: 0 PID: 2296 Comm: syz.1.673 Not tainted syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 110.701963][ T2296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 110.701974][ T2296] Call Trace: [ 110.701985][ T2296] [ 110.701992][ T2296] __dump_stack+0x21/0x30 [ 110.702041][ T2296] dump_stack_lvl+0x140/0x1c0 [ 110.702072][ T2296] ? __cfi_dump_stack_lvl+0x10/0x10 [ 110.702099][ T2296] ? __kasan_kmalloc+0x96/0xb0 [ 110.702124][ T2296] ? __kmalloc_cache_noprof+0x23c/0x470 [ 110.702145][ T2296] dump_stack+0x19/0x20 [ 110.702172][ T2296] should_fail_ex+0x3d7/0x530 [ 110.702194][ T2296] should_failslab+0xac/0x100 [ 110.702220][ T2296] kmem_cache_alloc_noprof+0x42/0x410 [ 110.702241][ T2296] ? __kernfs_new_node+0xf1/0x740 [ 110.702270][ T2296] __kernfs_new_node+0xf1/0x740 [ 110.702296][ T2296] ? __kasan_check_write+0x18/0x20 [ 110.702318][ T2296] ? kernfs_new_node+0x280/0x280 [ 110.702348][ T2296] ? pcpu_alloc_noprof+0xd44/0x13f0 [ 110.702397][ T2296] kernfs_new_node+0x154/0x280 [ 110.702424][ T2296] kernfs_create_dir_ns+0x4b/0x130 [ 110.702451][ T2296] cgroup_mkdir+0x391/0x1570 [ 110.702487][ T2296] ? __cfi_cgroup_mkdir+0x10/0x10 [ 110.702507][ T2296] kernfs_iop_mkdir+0x1c5/0x2d0 [ 110.702528][ T2296] vfs_mkdir+0x585/0x820 [ 110.702568][ T2296] do_mkdirat+0x240/0x530 [ 110.702597][ T2296] ? __cfi_do_mkdirat+0x10/0x10 [ 110.702636][ T2296] ? getname_flags+0x208/0x700 [ 110.702659][ T2296] __x64_sys_mkdirat+0x8b/0xa0 [ 110.702680][ T2296] x64_sys_call+0x2ba8/0x2ee0 [ 110.702695][ T2296] do_syscall_64+0x57/0xf0 [ 110.702711][ T2296] ? clear_bhb_loop+0x50/0xa0 [ 110.702730][ T2296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.702749][ T2296] RIP: 0033:0x7f1ac9b9ce59 [ 110.702762][ T2296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.702775][ T2296] RSP: 002b:00007f1acaa64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 110.702792][ T2296] RAX: ffffffffffffffda RBX: 00007f1ac9e15fa0 RCX: 00007f1ac9b9ce59 [ 110.702805][ T2296] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 110.702816][ T2296] RBP: 00007f1acaa64090 R08: 0000000000000000 R09: 0000000000000000 [ 110.702826][ T2296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.702835][ T2296] R13: 00007f1ac9e16038 R14: 00007f1ac9e15fa0 R15: 00007ffc0c6f6f98 [ 110.702849][ T2296] [ 111.231375][ T400] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 111.381404][ T400] usb 2-1: Using ep0 maxpacket: 8 [ 111.389137][ T400] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.401610][ T356] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 111.409495][ T400] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 111.418775][ T400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.431914][ T400] usb 2-1: config 0 descriptor?? [ 111.446869][ T400] usb 2-1: bad CDC descriptors [ 111.453503][ T400] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 111.469810][ T400] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 111.476412][ T400] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 111.510238][ T2316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.513933][ T2318] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=2318 comm=syz.2.682 [ 111.531705][ T2316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.542371][ T2316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.556218][ T2316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.564572][ T2320] FAULT_INJECTION: forcing a failure. [ 111.564572][ T2320] name failslab, interval 1, probability 0, space 0, times 0 [ 111.577243][ T356] usb 1-1: Using ep0 maxpacket: 8 [ 111.581510][ T2320] CPU: 0 UID: 0 PID: 2320 Comm: syz.2.683 Not tainted syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 111.581586][ T2320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 111.581609][ T2320] Call Trace: [ 111.581626][ T2320] [ 111.581644][ T2320] __dump_stack+0x21/0x30 [ 111.581717][ T2320] dump_stack_lvl+0x140/0x1c0 [ 111.581785][ T2320] ? __cfi_dump_stack_lvl+0x10/0x10 [ 111.581845][ T2320] ? __kasan_check_write+0x18/0x20 [ 111.581893][ T2320] ? down_write+0xee/0x2b0 [ 111.581955][ T2320] dump_stack+0x19/0x20 [ 111.582024][ T2320] should_fail_ex+0x3d7/0x530 [ 111.582069][ T2320] should_failslab+0xac/0x100 [ 111.582119][ T2320] __kmalloc_cache_noprof+0x41/0x470 [ 111.582171][ T2320] ? cgroup_mkdir+0xb5c/0x1570 [ 111.582231][ T2320] cgroup_mkdir+0xb5c/0x1570 [ 111.582279][ T2320] ? __cfi_cgroup_mkdir+0x10/0x10 [ 111.582303][ T2320] kernfs_iop_mkdir+0x1c5/0x2d0 [ 111.582357][ T2320] vfs_mkdir+0x585/0x820 [ 111.582456][ T2320] do_mkdirat+0x240/0x530 [ 111.582523][ T2320] ? __cfi_do_mkdirat+0x10/0x10 [ 111.582598][ T2320] ? getname_flags+0x208/0x700 [ 111.582645][ T2320] __x64_sys_mkdirat+0x8b/0xa0 [ 111.582705][ T2320] x64_sys_call+0x2ba8/0x2ee0 [ 111.582750][ T2320] do_syscall_64+0x57/0xf0 [ 111.582800][ T2320] ? clear_bhb_loop+0x50/0xa0 [ 111.582855][ T2320] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 111.582908][ T2320] RIP: 0033:0x7fcffd59ce59 [ 111.582954][ T2320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.582997][ T2320] RSP: 002b:00007fcffe43d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 111.583049][ T2320] RAX: ffffffffffffffda RBX: 00007fcffd815fa0 RCX: 00007fcffd59ce59 [ 111.583080][ T2320] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 111.583109][ T2320] RBP: 00007fcffe43d090 R08: 0000000000000000 R09: 0000000000000000 [ 111.583137][ T2320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.583171][ T2320] R13: 00007fcffd816038 R14: 00007fcffd815fa0 R15: 00007ffe13b94478 [ 111.583210][ T2320] [ 111.583438][ T2320] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] PREEMPT SMP KASAN PTI [ 111.603414][ T356] usb 1-1: unable to get BOS descriptor or descriptor too short [ 111.603799][ T2320] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 111.608242][ T356] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.610028][ T2320] CPU: 0 UID: 0 PID: 2320 Comm: syz.2.683 Not tainted syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 111.622735][ T356] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 111.624228][ T2320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 111.624243][ T2320] RIP: 0010:cgroup_mkdir+0x117f/0x1570 [ 111.631970][ T356] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 111.633762][ T2320] Code: eb 05 e8 34 4e 08 00 4c 89 ef e8 0c 9e 00 00 49 81 fd 01 f0 ff ff 0f 83 b3 fb ff ff 4d 8d b5 08 01 00 00 4c 89 f3 48 c1 eb 03 <42> 80 3c 3b 00 74 08 4c 89 f7 e8 12 f0 60 00 49 8b bd 08 01 00 00 [ 111.633784][ T2320] RSP: 0018:ffffc9000f607c88 EFLAGS: 00010206 [ 111.638520][ T356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.642596][ T2320] [ 111.642603][ T2320] RAX: 8cf651c1a2c93800 RBX: 0000000000000021 RCX: ffff8881f6e3acc0 [ 111.642618][ T2320] RDX: ffff88810a74f680 RSI: ffff88810ef0c000 RDI: ffff888100042000 [ 111.642632][ T2320] RBP: ffffc9000f607d30 R08: 000000001fe74424 R09: 000000009cb058ca [ 111.648400][ T356] usb 1-1: Product: syz [ 111.652589][ T2320] R10: 000000000000000c R11: ffffffff8175f3a0 R12: ffff88810d3e1680 [ 111.652608][ T2320] R13: 0000000000000000 R14: 0000000000000108 R15: dffffc0000000000 [ 111.652622][ T2320] FS: 00007fcffe43d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 111.658454][ T356] usb 1-1: Manufacturer: syz [ 111.662031][ T2320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.662053][ T2320] CR2: 00007f00b71ea540 CR3: 00000001145cc000 CR4: 00000000003526b0 [ 111.667535][ T356] usb 1-1: SerialNumber: syz [ 111.671925][ T2320] Call Trace: [ 111.671933][ T2320] [ 111.671943][ T2320] ? __cfi_cgroup_mkdir+0x10/0x10 [ 111.683677][ T36] audit: type=1400 audit(1780184822.070:378): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 111.685378][ T2320] kernfs_iop_mkdir+0x1c5/0x2d0 [ 111.690490][ T36] audit: type=1400 audit(1780184822.070:379): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.694920][ T2320] vfs_mkdir+0x585/0x820 [ 111.694951][ T2320] do_mkdirat+0x240/0x530 [ 111.700040][ T36] audit: type=1400 audit(1780184822.070:380): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.704024][ T2320] ? __cfi_do_mkdirat+0x10/0x10 [ 111.704060][ T2320] ? getname_flags+0x208/0x700 [ 111.709728][ T36] audit: type=1400 audit(1780184822.070:381): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.714606][ T2320] __x64_sys_mkdirat+0x8b/0xa0 [ 111.714636][ T2320] x64_sys_call+0x2ba8/0x2ee0 [ 111.719815][ T36] audit: type=1400 audit(1780184822.070:382): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 111.738642][ T2320] do_syscall_64+0x57/0xf0 [ 111.738666][ T2320] ? clear_bhb_loop+0x50/0xa0 [ 111.738691][ T2320] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 111.892310][ T2302] syzkaller1: entered promiscuous mode [ 111.893083][ T2320] RIP: 0033:0x7fcffd59ce59 [ 111.893103][ T2320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.899577][ T2302] syzkaller1: entered allmulticast mode [ 111.907134][ T2320] RSP: 002b:00007fcffe43d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 111.907158][ T2320] RAX: ffffffffffffffda RBX: 00007fcffd815fa0 RCX: 00007fcffd59ce59 [ 111.907173][ T2320] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 112.209216][ T2320] RBP: 00007fcffe43d090 R08: 0000000000000000 R09: 0000000000000000 [ 112.217200][ T2320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.225181][ T2320] R13: 00007fcffd816038 R14: 00007fcffd815fa0 R15: 00007ffe13b94478 [ 112.233185][ T2320] [ 112.236236][ T2320] Modules linked in: [ 112.240304][ T2320] ---[ end trace 0000000000000000 ]--- [ 112.245905][ T2320] RIP: 0010:cgroup_mkdir+0x117f/0x1570 [ 112.251437][ T2320] Code: eb 05 e8 34 4e 08 00 4c 89 ef e8 0c 9e 00 00 49 81 fd 01 f0 ff ff 0f 83 b3 fb ff ff 4d 8d b5 08 01 00 00 4c 89 f3 48 c1 eb 03 <42> 80 3c 3b 00 74 08 4c 89 f7 e8 12 f0 60 00 49 8b bd 08 01 00 00 [ 112.271122][ T2320] RSP: 0018:ffffc9000f607c88 EFLAGS: 00010206 [ 112.277271][ T2320] RAX: 8cf651c1a2c93800 RBX: 0000000000000021 RCX: ffff8881f6e3acc0 [ 112.285313][ T2320] RDX: ffff88810a74f680 RSI: ffff88810ef0c000 RDI: ffff888100042000 [ 112.294647][ T2320] RBP: ffffc9000f607d30 R08: 000000001fe74424 R09: 000000009cb058ca [ 112.302907][ T2320] R10: 000000000000000c R11: ffffffff8175f3a0 R12: ffff88810d3e1680 [ 112.311036][ T2320] R13: 0000000000000000 R14: 0000000000000108 R15: dffffc0000000000 [ 112.319644][ T2320] FS: 00007fcffe43d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 112.328844][ T2320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.339726][ T2320] CR2: 00007f00b71ea540 CR3: 00000001145cc000 CR4: 00000000003526b0 [ 112.344105][ T356] usb 1-1: 6:0: failed to get current value for ch 0 (-71) [ 112.355340][ T2320] Kernel panic - not syncing: Fatal exception [ 112.362035][ T2320] Kernel Offset: disabled [ 112.366366][ T2320] Rebooting in 86400 seconds..