last executing test programs: 7.363902755s ago: executing program 1 (id=396): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb180000000000000029000000360000002b35d9"], 0x40}, 0x0) syz_usb_connect(0x5, 0x72, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xe8, 0x52, 0x1e, 0x40, 0xbda, 0xc811, 0xb013, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x4, 0x6, 0x20, 0x9, "", [{{0x9, 0x4, 0x1d, 0x0, 0x2, 0xff, 0xff, 0xff, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0xa}}], [{{0x9, 0x5, 0x4, 0x18, 0x7f7, 0xff, 0x9, 0x6, [@generic={0x2f, 0x21, "0f3e23bd2272aed738827cf94d567f78f17a7bb37151668116804dda7acf6bf44d3ddac445a35e96feae01d009"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x2, 0x5, 0x2b, [@generic={0x3, 0x9, "17"}]}}]}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x201, 0x6, 0x2, 0xf, 0xff, 0x10}, 0xbd, &(0x7f0000000840)={0x5, 0xf, 0xbd, 0x6, [@generic={0x8d, 0x10, 0x4, "75f9cc8025f1f412ada55b2b3d24483f244bbd223392a610dc301a76f133a9b9b582c3b1ee9c3d4b7b02f4b6a4163578c61732ba6e4696d72da705ac45dd663699184e721b0bc6b40a0428e02f3da119f2188a332d6a1f84917e9e8c98352501226a1631b5c57fe5d264cb609df14539955d0ca87c12e29728d5e44520fa24eb22ab00c2b5b2b698e0a2"}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x8, 0x1e, 0x401, [0xffc050, 0xff003f]}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x7, 0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xff, 0x2, 0x37}, @ptm_cap={0x3}]}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000a0000000400000014000100ff01000000000000000000000000000115000680"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0) 6.099664517s ago: executing program 1 (id=404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) 6.016732509s ago: executing program 1 (id=405): r0 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='1-6:5/'], 0x31) (async, rerun: 32) r1 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) (rerun: 32) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_usb_control_io$printer(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 32) socketpair$tipc(0x1e, 0xc0, 0x0, 0x0) (async, rerun: 64) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1) (rerun: 64) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f0000000600)="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", 0xfd) (async) syz_io_uring_setup(0x62ef, &(0x7f00000000c0)={0x0, 0x6f67, 0x10, 0x3, 0xe8, 0x0, r2}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40090}}], 0x1, 0x4004080) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="201304"], 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000000000000001) close(r6) 5.032405844s ago: executing program 1 (id=412): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100f9000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac2(0x0, 0xe8, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd6, 0x3, 0x1, 0x7, 0x0, 0x5, {0x8, 0xb, 0x1, 0x1, 0x1, 0x0, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xf, 0xb, 0x36, 0x21}, [@multiply_unit={0x7, 0x24, 0xc, 0x10, 0xf8, 0x4, 0x5}, @multiply_unit={0x7, 0x24, 0xc, 0x9, 0x9, 0x5, 0x7}, @sample_rate={0xf, 0x24, 0xd, 0x3, 0x0, 0x5, [0x2, 0x0, 0x0, 0x2]}, @input_terminal={0x10, 0x24, 0x2, 0x3, 0x402, 0x1, 0xb8, 0x4, 0x3a6659ba, 0x5, 0x1, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0xe, 0x5, 0x4, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xff}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x9}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x2, 0x6, 0x8, "d4"}, @as_header={0x10, 0x24, 0x1, 0x3, 0x7d, 0x1, 0x4, 0x1, 0x8, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0xa6, 0x4, {0x8, 0x25, 0x1, 0x83, 0x33, 0x2, 0xfffa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x1, 0x27, 0x0, "8eba"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x1, 0x4, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x79, 0x52, {0x8, 0x25, 0x1, 0x82, 0xc, 0x2b, 0x8000}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x7, 0x4, 0x6, 0x40, 0xc4}, 0xd7, &(0x7f0000000340)={0x5, 0xf, 0xd7, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x80, 0x5}, @wireless={0xb, 0x10, 0x1, 0x4, 0x12, 0xd5, 0x43, 0x1, 0xf}, @ptm_cap={0x3}, @generic={0xaf, 0x10, 0xa, "ea311dcc652f1353520c4fc7f5f79b5db69f429b1c925aa54cc2bd2ba06891a74f3046175e9fc8121be7eb8c11cf507f0209c7fff321aa180fe2f774c2774d487afb2ac239dd1e0f7f4e70498dbedada813580fc024bdd78d408c363fefbf77bf485997b0ef1b0f76e8f55ad8a68fedc8131da95438290ddb806e09512b05e36d633ee59388815f2ea39b5bcea18068d5a75b00224f6c97b92eb8992e511111d320dfa226b2bc16b41dca4de"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x41, 0x6, 0x6, 0x6, 0x7}]}, 0x7, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0xa2, &(0x7f00000006c0)=@string={0xa2, 0x3, "74e42e849c7f448803d8a2821e4b2af92cda90dfb12e076ce54a161f6f4254a3f43a58c5c94304a68bb6e84ce92f0ec09a75990d64ba50836138a455399c88897d3d6362df72df30e310e5b769ed2bfbb9e7878e35b6182ac8d54a69e1e99f4b6a0d776853d3b9c45e22dafb207709ce133e739c9371d4a11c621632b941aa1919510d986e5e079404bd10e67e254f7f4eedad65510db4fabc66a3dda1ff89d3"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x424}}, {0x5d, &(0x7f0000000580)=@string={0x5d, 0x3, "a21c942d6e2bccb362c196206a819078b75c8b0eaed791dc3bb9e6dfb79c5d6f27c340afba5646ef03e26cedaeab4ecc7ba0a4032134b70ca91d8ba3ee9f9434e5dd00054f865f9248faf060e46aaccb96981cb29d53e496499fcd"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x820}}]}) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) read$FUSE(r1, &(0x7f0000002440)={0x2020}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0xac, 0x0, 0x0, 0x7ffc1ffb}, {0x6, 0xc0, 0x4, 0x1}]}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x255e, &(0x7f0000000000)={0x0, 0x45, 0x1, 0x41, 0x38b}, 0x0, &(0x7f0000000100), 0x0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x651b6823, 0x4, 0x100010, r2, 0x20000000) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000000000)={0x100002, 0x1000f7, 0x40000}, 0x21) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313927b7c07060000002a90009b01f6216683"], 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100f9000009040000090300000009210000000122220009058103"], 0x0) (async) syz_usb_connect$uac2(0x0, 0xe8, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd6, 0x3, 0x1, 0x7, 0x0, 0x5, {0x8, 0xb, 0x1, 0x1, 0x1, 0x0, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xf, 0xb, 0x36, 0x21}, [@multiply_unit={0x7, 0x24, 0xc, 0x10, 0xf8, 0x4, 0x5}, @multiply_unit={0x7, 0x24, 0xc, 0x9, 0x9, 0x5, 0x7}, @sample_rate={0xf, 0x24, 0xd, 0x3, 0x0, 0x5, [0x2, 0x0, 0x0, 0x2]}, @input_terminal={0x10, 0x24, 0x2, 0x3, 0x402, 0x1, 0xb8, 0x4, 0x3a6659ba, 0x5, 0x1, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0xe, 0x5, 0x4, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xff}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x9}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x2, 0x6, 0x8, "d4"}, @as_header={0x10, 0x24, 0x1, 0x3, 0x7d, 0x1, 0x4, 0x1, 0x8, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0xa6, 0x4, {0x8, 0x25, 0x1, 0x83, 0x33, 0x2, 0xfffa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x1, 0x27, 0x0, "8eba"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x1, 0x4, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x79, 0x52, {0x8, 0x25, 0x1, 0x82, 0xc, 0x2b, 0x8000}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x7, 0x4, 0x6, 0x40, 0xc4}, 0xd7, &(0x7f0000000340)={0x5, 0xf, 0xd7, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x80, 0x5}, @wireless={0xb, 0x10, 0x1, 0x4, 0x12, 0xd5, 0x43, 0x1, 0xf}, @ptm_cap={0x3}, @generic={0xaf, 0x10, 0xa, "ea311dcc652f1353520c4fc7f5f79b5db69f429b1c925aa54cc2bd2ba06891a74f3046175e9fc8121be7eb8c11cf507f0209c7fff321aa180fe2f774c2774d487afb2ac239dd1e0f7f4e70498dbedada813580fc024bdd78d408c363fefbf77bf485997b0ef1b0f76e8f55ad8a68fedc8131da95438290ddb806e09512b05e36d633ee59388815f2ea39b5bcea18068d5a75b00224f6c97b92eb8992e511111d320dfa226b2bc16b41dca4de"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x41, 0x6, 0x6, 0x6, 0x7}]}, 0x7, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0xa2, &(0x7f00000006c0)=@string={0xa2, 0x3, "74e42e849c7f448803d8a2821e4b2af92cda90dfb12e076ce54a161f6f4254a3f43a58c5c94304a68bb6e84ce92f0ec09a75990d64ba50836138a455399c88897d3d6362df72df30e310e5b769ed2bfbb9e7878e35b6182ac8d54a69e1e99f4b6a0d776853d3b9c45e22dafb207709ce133e739c9371d4a11c621632b941aa1919510d986e5e079404bd10e67e254f7f4eedad65510db4fabc66a3dda1ff89d3"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x424}}, {0x5d, &(0x7f0000000580)=@string={0x5d, 0x3, "a21c942d6e2bccb362c196206a819078b75c8b0eaed791dc3bb9e6dfb79c5d6f27c340afba5646ef03e26cedaeab4ecc7ba0a4032134b70ca91d8ba3ee9f9434e5dd00054f865f9248faf060e46aaccb96981cb29d53e496499fcd"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x820}}]}) (async) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, &(0x7f0000000040)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) (async) read$FUSE(r1, &(0x7f0000002440)={0x2020}, 0x20) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0xac, 0x0, 0x0, 0x7ffc1ffb}, {0x6, 0xc0, 0x4, 0x1}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_io_uring_setup(0x255e, &(0x7f0000000000)={0x0, 0x45, 0x1, 0x41, 0x38b}, 0x0, &(0x7f0000000100), 0x0) (async) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x651b6823, 0x4, 0x100010, r2, 0x20000000) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000000000)={0x100002, 0x1000f7, 0x40000}, 0x21) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313927b7c07060000002a90009b01f6216683"], 0x0}, 0x0) (async) 4.037842839s ago: executing program 1 (id=422): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], 0x0) 3.520288052s ago: executing program 1 (id=426): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x117, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x105, 0x3, 0x1, 0x0, 0x40, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x48}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x1ff, 0x3, 0x7, 0x4, 0x9, 0x2}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0xc, 0x0, "1cfb0d0d99"}, @extension_unit={0xb, 0x24, 0x8, 0x1, 0x1, 0x5, "c38cefbd"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x404, 0x2, 0x0, 0x7, 0x0, 0x2}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x2, 0x4, [0x5, 0x3, 0x5, 0x6], 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xb2, 0xf539, 0x8, 0xec}, @as_header={0x7, 0x24, 0x1, 0xe, 0xd, 0x4}, @as_header={0x7, 0x24, 0x1, 0xd5, 0xf, 0x5}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x100, 0x1, 0xe0, "4217"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x1, 0x2, 0x4, "f05158e2cd6ada6284"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x2, 0x1, 0x1, "123177a69fe44e5b6e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x0, 0x4, {0x7, 0x25, 0x1, 0x0, 0x5c, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x5, 0x3, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x15, 0xfe, 0x81, 0x6}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x4, 0x6, 0x5, "17844bf0e6f898"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x7, 0x1, {0x7, 0x25, 0x1, 0x8, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x80, 0x5, 0x40, 0x40, 0x5}, 0xfe, &(0x7f0000000340)={0x5, 0xf, 0xfe, 0x2, [@ptm_cap={0x3}, @generic={0xf6, 0x10, 0xb, "40e72abd3dbf33916e43fb306376ea6b43939f7ce64e46ed2da06095ddfce274b23812a5b2ec113f4b0e9cbeaac4aad5e688f0a7dbde4a074e0f91e8029d4153023037a940016b791ca7f486207f8f67b187c389796584ad7b3c22c3f573d1defc518c5d61a2191ccda75754d8589e5ea9a8db7227fe2ceab7957fe80f4d5534e24126910ef6290da264c137469a2d14710d26ea7fa7766a7a938c481d4eb83a486aead62f4929a734426970a75507ed9b2ec5d61bc54f173605271e6ee74dd7bf43bcdd61600cbc51a8c6c973d4c36186d17ccc46a88fec98acacb3490bc59fd75e02d0ae08b61aa0ce1a67a55c8c978d964f"}]}, 0x6, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x812}}, {0xba, &(0x7f00000004c0)=@string={0xba, 0x3, "f74e5f7c0f94001145c0192c0937b3a5056b87b10bcb296ac3c38f3638e514a6182dc08e2331dd1a96553872be86b99bdbc49612d28dc0bfcc2cc7476b1d76e5c2e959fbb822e0ab4a53552a143e752f954383cd841fa03e07909453004490861125029fc7db4177f5d0accf4da96e2acb7c7ca12c29a4cb2d73449bbec5b5806da156dc947d4d5bdc9ff2e98bee39c3869cc8f2f0bf2f4fa110848945b8f761a98b28dba62aa3f736d36134d4a78e18efd7f6df20f42eb1"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x240a}}, {0x36, &(0x7f00000005c0)=@string={0x36, 0x3, "32be12b741b015a1071335b7f96169b34d2ee29beef27ec637068bebb9b7fbf8c424ed37df949767be7db6dce58e7bd9a91177d1"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x441}}]}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.41623267s ago: executing program 2 (id=441): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x8f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.227497085s ago: executing program 2 (id=442): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) (async) r1 = socket(0xa, 0x3, 0x87) (async) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x7706, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3a}, 0x78, r3}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000b40)={0x3, 0x100, 0x300, 0x0}) (async) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) 2.212637335s ago: executing program 2 (id=443): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000017c0)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40046}, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000100)=0xc000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x6, 0x7, 0x3, '\x00', 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008841) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="44e6be734ed456999edd570a5673d24d22be1d090d00000000000000bfbc4c1b41c57b1196fe7c00a75dc2580e547aa984ee1c4f2f98d81f0781000000291ede", 0x40}, {&(0x7f00000001c0)="84e0ad39ccf303000000026ba061c1a8a64030f7", 0x14}], 0x2}}], 0x1, 0x2008000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f00000000c0)={'geneve0\x00'}) sendto$inet6(r0, &(0x7f0000001380)="550f", 0x2, 0x4800, 0x0, 0x0) 2.0167469s ago: executing program 2 (id=444): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffe}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r0, 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) dup3(r1, r2, 0x80000) close(r1) 2.01648177s ago: executing program 2 (id=445): arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000000)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000040)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000080)) (async) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000080)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f00000000c0)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000100)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000140)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000180)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f00000001c0)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000200)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000240)) (async) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000240)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000280)) (async) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000280)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f00000002c0)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000300)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000340)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000380)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f00000003c0)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000400)) (async) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000400)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000440)) (async) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000440)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000480)) (async) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000480)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f00000004c0)) (async) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f00000004c0)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000500)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000540)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000580)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f00000005c0)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000600)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000640)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000680)) (async) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000680)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f00000006c0)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000700)) (async) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000700)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000740)) (async) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000740)) 2.01629534s ago: executing program 2 (id=446): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x201, &(0x7f0000000880)={&(0x7f0000000380)=""/16, 0x10}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x7) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r7, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7f, 0x42}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x41}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x81) readv(r3, &(0x7f0000001840)=[{&(0x7f00000001c0)=""/255, 0xff}], 0x1) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) r9 = gettid() tkill(r9, 0x13) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="240000001a00010000000000ffdbdf250200fc003a2a5e247b00000008004a80579d06ab821be6ffdbf32c5366d1e30fbdf4979f70e209020724c90325a8f94f1c8d11dd08335526a4f561b8df1fc39ae9311177a9ba01fbcf916493691b8d325fe6f58df14d663c15c1f7d39b145a4dffc7b06a7436e1860dd3e79f9219f29924203db97abdd9640c62b800"/156], 0x24}], 0x1}, 0x0) 1.558243641s ago: executing program 0 (id=447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)={0x28, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xd}, @typed={0x8, 0x110, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x28}], 0x1}, 0x14008010) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001800)=[{&(0x7f0000000080)="dbbb8a36a8eb0c91b0a5e5b99fad883662d6b2f6c07cedd9d0ac7ef46d7e699e37c616d2198267cde26d591343597070fbe45d69ee74bb6722bcd01be81ce10fe5798923b9488ce5ac3402c5fb49c2b80aff4289501821c12a2ae54d8ad94930bcf5e7c4cae188bdff048d0f10015e763c7c974bd45cf8d36710cfefcaf98981f9f0175f5454e0d6cd01fbc95e49d47ece8b029e568911cd3d847a1a68ee25872a3535a501b6664d302d9a99d8bf55813ff3a3d5dcc1dd6c7a6ff5f8c38854a84ebdad5b82f6a5568d3e0aa39afc0caadedc01fa6fc63b3eac655f0a950a1996a12cc0b12b4c", 0xe6}, {&(0x7f0000000200)="1d480e3f587b2a2fc0ed7abcf3e7b4a9176d69875201460950809892a4d171681073c0f950d0b2eee4a47d5f3153b4b6b3f37dd6c724303c7b6e209f8f15098abd2d2fa33b6f7ab4e57939fb6e98e3c5658fe4ea536125339578c5dcb0c62b4b9889eef34a7eca6e2709c1636f822b48f627f07117010c89e3420e9a4183a3d75b659a68f613097f3b746c8fa038cfc5a0f0e986ed0ccc7b22267bdb92", 0x9d}, {&(0x7f00000002c0)="755ac76b65d1c1d2eb4edc9c098394b3bfae70a33dbfa5e50105413d6fb9cccb00a921cef2e922bf0ce418af3a8c7b6ca9cec50c76605fd65e94bb4cbdf80b8ed9d4b1f9ba34ae9bebf94f44a27bc84a04026a81ad1f805d91187dcc5d97d8028a", 0x61}, {&(0x7f0000000640)="ccd23769c1", 0x5}, {&(0x7f0000000380)="4ffe906c35696d0923100b03ef2e91c0cc8c3b9a5bff2c279a005cd24880aaa1f31abc781a1dbc1479acbe9944eb0b238a47f8d30d419eaa03d27e1849d0fc0b8340055f9a198e1bdad91a420fd5eb1e1d167d4a984e788a924088cdc51af9f90ecbfdfc4aae01629d36633990305a86f85eb1ad6f0132d12eb0c69efa4e63e33bd9028a881a53505650d218d2944bd0950e8deef76d1b3d1fb43443f65e07b0d98c15ef96f91bd4319142e34c75b63a5b0e082529ee2fc8b684a9b965f5caa4", 0xc0}, {&(0x7f0000000440)="595e31e3f7b04e33fa1822a517a7d1aefa38f78b80f9b8dec66aed9ddc6daa68184491601b5dc89eaa823c2e9eb34a4da3247848c946ce60b3562bed0c5f2f6f06dd2ad45d7ca54ae6264879e0f5f50046d383999aa4", 0x56}, {&(0x7f00000004c0)="58706e8563a269fd78c87a9c1c93c4e427f1cf674e4f9cb21d70abfa1f1c46baa6eec9e72585f2d5b6bf0f4bee03090e678931e0714ca720e677e7ccfcab64e91972bd3a04ac0b97d270314df890f7fcc7dbcf0b244979a65da2cebb1612d65e2fb409421f3e2a76bee20123b7e6c5ac878ec22b8adf515b7992a092a4117e85f30d8700493049cf09fb87dac245b35d20858c6217e4de441d7178a7553726efa6f6c1ba727eade6362597dc02083f5d4ab62a0d21a2e18b14604f00"/202, 0xca}, {&(0x7f0000000680)="743dcf490886c40ea53ad34eef436869c95f2bb847cc1a1fee27f583575370ce8d7e19d58cba609d933e2ee6bbb0fd8a9ef4d9264b5a00a2511456e84e78e5011029d8dca0c1275ca2a1bb111edabc6fed08a04ffad13946322d6f5e74939154cf105b79ac1763361e77bf8bd090be94f7739f1566a986224acb239fcdbbb943c4d05fbf360e1f56bb13ab2eae7fea98c702e3736a6646c619a14a0064c5", 0x9e}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="b218118a9911d35db5e064e2c8033124b5c5e85720985050aa681dbea5cac716e07cab24654d125581420a5a7058f9c62c4bcd5b5d97b00fa9ba51a581ff718cde2e3721a3714b66af2374c7f92035c4e206fbb34cacc9b3d6cbdb3a1b18466979be222adb320e4df0d804f84589e6955813ee20d6d328433af67f54dca7da6d2b2891b5ca33054a41eb0b5b809ff4b15084317b04c2a7025e31d6e7119289", 0x9f}], 0xa) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f00000001c0)=0x4, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x5, 0x0, &(0x7f0000000180)) 1.537321322s ago: executing program 0 (id=448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000000)="3001", 0x2, r1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x4, 0x9}) setgid(0xee00) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (async) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000000)="3001", 0x2, r1) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x4, 0x9}) (async) setgid(0xee00) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}], 0x1) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 1.447926444s ago: executing program 3 (id=450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = eventfd(0x55) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x2, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x2a, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect$uac2(0x5, 0xb8, &(0x7f0000000180)=ANY=[@ANYBLOB="1201500200000020990457104000010203010902a6000301070008080b00010101200f0904"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 1.404660665s ago: executing program 0 (id=451): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x8f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.320629118s ago: executing program 0 (id=452): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xe6, 0xbe, 0xe8, 0x10, 0x14b2, 0x3c10, 0xf4d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x5, 0x90, 0x2, "", [{{0x9, 0x4, 0xd, 0x1, 0x0, 0x1b, 0xc1, 0x48, 0x5}}]}}]}}, 0x0) 184.771476ms ago: executing program 3 (id=453): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x35, 0x0, 0x1, 0x80000}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000002a40), 0x1, 0x0) write(r0, &(0x7f0000002ac0)="f0a5e5", 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000080)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x7000)=nil, 0x7000, &(0x7f0000000000)='\x00\x00\xad\xddP\x04Do\x90\x986\xc7\"K3\xaf\xf3\xe7\xf7Dm\xebD\x04\xf9A\x86_\x8d\x93\xe2\x13\xbf\xc5\xc7c\xe3\xf9(\xfe\x8a\x1c\xa8\x15\xf6\x81\xf6\xfcAM\x86\xc1\xb1\xdaJoI\xef\xf0\xe6U\xc2\r!\x16\xda\x16Y\xc0\x13\xba\xacX\a9@\x00\xac\xd0\xf1\xb3\xa8\xa7\x86h3|\x03\x95@\xebM\xa6i\xb3S\x84\xa0yum\xcbZ$8\xd2e\x19\xdb\xeb\xf3\x1eK\x1a\xad\xc4w\xe5\xcd&f\x9e\xc4') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 182.573726ms ago: executing program 3 (id=454): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x5, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x0, 0x1}, 0xe) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) listen(r7, 0x0) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000040)={r8, r9/1000+60000}, 0x10) accept4(r7, 0x0, 0x0, 0x80800) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x1035, {0x0, 0xffffffff, 0x0, 0x0, 0x5, 0x3}}) 160.834907ms ago: executing program 0 (id=455): sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xbd206eea5978833}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x925}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x20000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb9f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe6cf}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20008014}, 0x20004000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x0, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x51}, 0x10) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x101}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000600), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x5020440}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x1c}}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x4000040) (async) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000840)=0xe8) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x84010) (async) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x4041) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r8, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x20, 0x5, @l2={'eth', 0x3a, 'vlan1\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x40084}, 0x240440c1) (async) fsetxattr$security_capability(r4, &(0x7f0000000bc0), &(0x7f0000000c00)=@v3={0x3000000, [{0xf7, 0x3}, {0xfffffffe, 0x1ddd}], r6}, 0x18, 0x3) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r9, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0xa0, 0x1, 0x2, 0x0, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x4040040) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e00), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x17c, r10, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x85b7}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf0}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000003080)={0x0, 0x1, 0x2, 0xcf6a, r11}) (async) ioctl$UI_SET_RELBIT(r9, 0x40045566, 0x1) (async) r12 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000030c0), 0x800) getsockopt$bt_BT_RCVMTU(r12, 0x112, 0xd, &(0x7f0000003100)=0x5, &(0x7f0000003140)=0x2) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000031c0), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000032c0)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003280)={&(0x7f0000003200)={0x50, r13, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x48081) r14 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r14, &(0x7f0000003480)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000003440)={&(0x7f0000003340)={0xcc, 0x13, 0x1, 0x70bd27, 0x25dfdbff, {0x1a, 0x8, 0x81, 0xd4, {0x4e23, 0x4e20, [0x8, 0x800, 0xff, 0x5], [0x7, 0x73, 0x9], r5, [0x5, 0x2]}, 0x5, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "60e37278e9afd2978e8677ae6942dc63c0d8901f02091195f59476d06b8d0206807578a4a626da7a300f29ae97fe6d545e32553cdc7fc3e811029f0de09cf23af446794b4ee8b42dc5b621345177e0549ea0d5f506993ae1404b2243d6ea12eba1514dc6dc4c5b4a739a2567c9613ff64910a4e08f4639572987"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 117.903678ms ago: executing program 0 (id=456): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000440)={{}, 0x5, 0xe9c, 0x5}) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006011a0000000c241b4800f3ff0005008005090581030002000000090401"], 0x0) 669.551µs ago: executing program 3 (id=457): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, 0x19, 0x1, 0x0, 0x25dfdbfb, {0xa, 0xd601, 0x9}, [@nested={0x8, 0x12, 0x0, 0x1, [@nested={0x4, 0xf8}]}, @typed={0x8, 0x17, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) (async, rerun: 64) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64) listen(r2, 0x10000) (rerun: 64) shutdown(r1, 0x0) (async) connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r3 = accept(r2, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000000)='\x00', 0x1, 0x800c815, 0x0, 0x0) (async) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)=0x1000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = syz_io_uring_setup(0x5b17, &(0x7f0000000000)={0x0, 0xc995, 0x4000, 0x0, 0x2de, 0x0, r6}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f00000001c0)) syz_ublk_setup_queues(r6, r4, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff, 0x0, r7}}], 0x1, 0x0, 0x0) (async) r8 = openat$cgroup_ro(r6, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000080)=[{{0x2, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x10) 376.76µs ago: executing program 3 (id=458): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6(0xa, 0xa, 0x8) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0xffffffff], [], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}}, 0x20004010) 0s ago: executing program 3 (id=459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) fchdir(0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x190ec) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00400001332564aa11f6bbf44d00000000008984", 0x39}], 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0'}, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) (async) fchdir(0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) (async) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x190ec) (async) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00400001332564aa11f6bbf44d00000000008984", 0x39}], 0x1) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0'}, 0xb) (async) kernel console output (not intermixed with test programs): : type=1400 audit(2000000020.840:317): avc: denied { read } for pid=970 comm="syz.3.155" path="socket:[7137]" dev="sockfs" ino=7137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.390044][ T349] usb 2-1: USB disconnect, device number 16 [ 49.680538][ T349] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 49.730546][ T368] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 49.830531][ T349] usb 2-1: Using ep0 maxpacket: 32 [ 49.836779][ T349] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 49.845009][ T349] usb 2-1: config 0 has no interface number 0 [ 49.851134][ T349] usb 2-1: config 0 interface 184 has no altsetting 0 [ 49.860903][ T349] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 49.869979][ T349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.878039][ T349] usb 2-1: Product: syz [ 49.882284][ T349] usb 2-1: Manufacturer: syz [ 49.886884][ T349] usb 2-1: SerialNumber: syz [ 49.891587][ T368] usb 4-1: Using ep0 maxpacket: 32 [ 49.897131][ T349] usb 2-1: config 0 descriptor?? [ 49.898230][ T368] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 49.910391][ T368] usb 4-1: config 0 has no interface number 0 [ 49.916582][ T368] usb 4-1: config 0 interface 184 has no altsetting 0 [ 49.916624][ T349] smsc75xx v1.0.0 [ 49.925275][ T368] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 49.937693][ T368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.945935][ T368] usb 4-1: Product: syz [ 49.950358][ T368] usb 4-1: Manufacturer: syz [ 49.955211][ T368] usb 4-1: SerialNumber: syz [ 49.965317][ T36] audit: type=1400 audit(2000000021.470:318): avc: denied { ioctl } for pid=988 comm="syz.2.161" path="socket:[8314]" dev="sockfs" ino=8314 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.967041][ T368] usb 4-1: config 0 descriptor?? [ 49.997627][ T368] smsc75xx v1.0.0 [ 50.020543][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 50.170584][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 50.177476][ T36] audit: type=1400 audit(2000000021.680:319): avc: denied { map } for pid=986 comm="syz.0.160" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.214906][ T987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.223470][ T987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.310549][ T751] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 50.318711][ T349] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 50.331160][ T349] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 50.362304][ T349] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 50.377567][ T349] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 50.387633][ T349] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 50.397983][ T36] audit: type=1400 audit(2000000021.900:320): avc: denied { getopt } for pid=996 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.417760][ T349] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 50.427333][ T349] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 50.437917][ T36] audit: type=1400 audit(2000000021.900:321): avc: denied { ioctl } for pid=996 comm="syz.1.163" path="socket:[9412]" dev="sockfs" ino=9412 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.464384][ T349] usb 2-1: USB disconnect, device number 17 [ 50.483835][ T751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.494929][ T751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.505004][ T751] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.517989][ T36] audit: type=1400 audit(2000000022.020:322): avc: denied { setopt } for pid=1004 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.537239][ T751] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.546308][ T751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.555457][ T36] audit: type=1400 audit(2000000022.020:323): avc: denied { write } for pid=1004 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.575357][ T751] usb 3-1: config 0 descriptor?? [ 50.627629][ T368] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 50.629037][ T36] audit: type=1400 audit(2000000022.130:324): avc: denied { read } for pid=984 comm="syz.3.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.638660][ T368] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 50.767504][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 50.779486][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 50.790062][ T9] usb 1-1: can't read configurations, error -71 [ 50.806296][ T1012] kvm: pic: non byte write [ 50.890912][ T368] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 50.901792][ T368] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 50.911441][ T368] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 50.920945][ T368] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 50.930574][ T311] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 50.998244][ T751] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 51.007015][ T751] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 51.080078][ T751] usb 4-1: USB disconnect, device number 21 [ 51.090580][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 51.096781][ T311] usb 2-1: config 0 interface 0 altsetting 118 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 51.108109][ T311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 51.114724][ T311] usb 2-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 51.123771][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.132282][ T311] usb 2-1: config 0 descriptor?? [ 51.540066][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.547589][ T36] audit: type=1400 audit(2000000023.040:325): avc: denied { ioctl } for pid=1009 comm="syz.1.166" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 51.551807][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.579411][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.593036][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.605573][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.613160][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.620745][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.629295][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.637017][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.644588][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.652143][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.659634][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.667198][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.676173][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.683778][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.691334][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.698811][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.706424][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.713925][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.721425][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.728906][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.736395][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.744172][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.751726][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.759231][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.766930][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.774735][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.782321][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.789806][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.800538][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.808178][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.816020][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.823976][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.831925][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.839419][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.847244][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.853851][ T1034] FAULT_INJECTION: forcing a failure. [ 51.853851][ T1034] name failslab, interval 1, probability 0, space 0, times 1 [ 51.855098][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 51.867510][ T1034] CPU: 0 UID: 0 PID: 1034 Comm: syz.3.170 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 51.867583][ T1034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 51.867616][ T1034] Call Trace: [ 51.867635][ T1034] [ 51.867659][ T1034] __dump_stack+0x21/0x30 [ 51.867745][ T1034] dump_stack_lvl+0x140/0x1c0 [ 51.867812][ T1034] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.867881][ T1034] dump_stack+0x19/0x20 [ 51.867937][ T1034] should_fail_ex+0x3c2/0x510 [ 51.867996][ T1034] should_failslab+0xac/0x100 [ 51.868056][ T1034] kmem_cache_alloc_noprof+0x42/0x410 [ 51.868107][ T1034] ? getname_flags+0xcc/0x6b0 [ 51.868158][ T1034] ? __cfi_ksys_write+0x10/0x10 [ 51.868210][ T1034] getname_flags+0xcc/0x6b0 [ 51.868261][ T1034] __x64_sys_symlink+0x61/0x90 [ 51.868328][ T1034] x64_sys_call+0x28d8/0x2ee0 [ 51.868372][ T1034] do_syscall_64+0x57/0xf0 [ 51.868423][ T1034] ? clear_bhb_loop+0x50/0xa0 [ 51.868484][ T1034] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.868554][ T1034] RIP: 0033:0x7fdb0099de99 [ 51.868592][ T1034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.868644][ T1034] RSP: 002b:00007fdb01904028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 51.868697][ T1034] RAX: ffffffffffffffda RBX: 00007fdb00c26090 RCX: 00007fdb0099de99 [ 51.868732][ T1034] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 00002000000000c0 [ 51.868766][ T1034] RBP: 00007fdb01904090 R08: 0000000000000000 R09: 0000000000000000 [ 51.868800][ T1034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.868828][ T1034] R13: 00007fdb00c26128 R14: 00007fdb00c26090 R15: 00007fffe2d1db38 [ 51.868882][ T1034] [ 51.906366][ T1035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.171'. [ 51.907804][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 52.066299][ T311] smartjoyplus 0003:0925:0005.0005: unknown main item tag 0x0 [ 52.074621][ T311] smartjoyplus 0003:0925:0005.0005: hidraw1: USB HID vb.42 Device [HID 0925:0005] on usb-dummy_hcd.1-1/input0 [ 52.086355][ T311] smartjoyplus 0003:0925:0005.0005: no output reports found [ 52.095708][ T311] usb 2-1: USB disconnect, device number 18 [ 52.110070][ T1038] fido_id[1038]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 52.163774][ T1040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 52.233469][ T1043] tmpfs: Unknown parameter '0xffffffffffffffff' [ 52.239780][ T1043] tmpfs: Unknown parameter '0xffffffffffffffff' [ 52.300594][ C0] plantronics 0003:047F:FFFF.0004: usb_submit_urb(ctrl) failed: -1 [ 52.500547][ T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 52.610543][ T31] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 52.651542][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 52.663614][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 52.676598][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 52.685717][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.694707][ T9] usb 1-1: config 0 descriptor?? [ 52.699911][ T1047] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 52.710840][ T311] usb 3-1: reset high-speed USB device number 21 using dummy_hcd [ 52.717146][ T1068] fuse: Unknown parameter 'D6^sDlVu/j.ɧ|5..8N5.l`N 72h"oL1o_ -'6an' [ 52.719049][ T311] usb 3-1: device reset changed ep0 maxpacket size! [ 52.738187][ T751] usb 3-1: USB disconnect, device number 21 [ 52.761873][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 52.769931][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 52.778445][ T31] usb 2-1: config 7 has an invalid interface number: 48 but max is 0 [ 52.786612][ T31] usb 2-1: config 7 has no interface number 0 [ 52.792785][ T31] usb 2-1: config 7 interface 48 has no altsetting 0 [ 52.800926][ T31] usb 2-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=28.e6 [ 52.810110][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.818250][ T31] usb 2-1: Product: syz [ 52.822538][ T31] usb 2-1: Manufacturer: syz [ 52.827143][ T31] usb 2-1: SerialNumber: syz [ 52.890530][ T751] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 52.909413][ T9] konepure 0003:1E7D:2DB4.0006: unknown main item tag 0x2 [ 52.916723][ T9] konepure 0003:1E7D:2DB4.0006: unknown main item tag 0xd [ 52.923909][ T9] konepure 0003:1E7D:2DB4.0006: unknown main item tag 0x1 [ 52.931110][ T9] konepure 0003:1E7D:2DB4.0006: unknown main item tag 0x3 [ 52.938248][ T9] konepure 0003:1E7D:2DB4.0006: unknown main item tag 0x1 [ 52.946146][ T9] konepure 0003:1E7D:2DB4.0006: hidraw0: USB HID v80.09 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0 [ 53.040643][ T751] usb 3-1: Using ep0 maxpacket: 8 [ 53.049476][ T31] usb 2-1: bad CDC descriptors [ 53.055998][ T31] usb 2-1: unsupported MDLM descriptors [ 53.062773][ T751] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 53.068490][ T31] usb 2-1: USB disconnect, device number 19 [ 53.078700][ T751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.087007][ T751] usb 3-1: Product: syz [ 53.091304][ T751] usb 3-1: Manufacturer: syz [ 53.095941][ T751] usb 3-1: SerialNumber: syz [ 53.102515][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 53.110986][ T311] usb 1-1: USB disconnect, device number 19 [ 53.240525][ T10] usb 4-1: device descriptor read/64, error -71 [ 53.480542][ T10] usb 4-1: device descriptor read/64, error -71 [ 53.626791][ T1075] netlink: 'syz.1.181': attribute type 19 has an invalid length. [ 53.669390][ T1081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=1081 comm=syz.0.184 [ 53.721796][ T751] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 53.740549][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 53.748166][ T751] usb 3-1: clock source 0 is not valid, cannot use [ 53.880529][ T10] usb 4-1: device descriptor read/64, error -71 [ 53.940542][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 53.959603][ T751] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 53.980917][ T751] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 53.989520][ T751] usb 3-1: clock source 0 is not valid, cannot use [ 54.000824][ T751] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 54.007415][ T751] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 54.022671][ T751] usb 3-1: USB disconnect, device number 22 [ 54.041661][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.100521][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 54.107936][ T31] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 54.117120][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.125148][ T31] usb 1-1: Product: syz [ 54.129309][ T31] usb 1-1: Manufacturer: syz [ 54.133949][ T31] usb 1-1: SerialNumber: syz [ 54.139094][ T31] usb 1-1: config 0 descriptor?? [ 54.144058][ T10] usb 4-1: device descriptor read/64, error -71 [ 54.260595][ T10] usb usb4-port1: attempt power cycle [ 54.348149][ T31] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 54.357754][ T31] usb 1-1: USB disconnect, device number 20 [ 54.533768][ T1097] FAULT_INJECTION: forcing a failure. [ 54.533768][ T1097] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.547263][ T1097] CPU: 1 UID: 0 PID: 1097 Comm: syz.0.186 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 54.547293][ T1097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 54.547306][ T1097] Call Trace: [ 54.547313][ T1097] [ 54.547321][ T1097] __dump_stack+0x21/0x30 [ 54.547356][ T1097] dump_stack_lvl+0x140/0x1c0 [ 54.547384][ T1097] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.547415][ T1097] dump_stack+0x19/0x20 [ 54.547443][ T1097] should_fail_ex+0x3c2/0x510 [ 54.547468][ T1097] should_fail+0xf/0x20 [ 54.547487][ T1097] should_fail_usercopy+0x1e/0x30 [ 54.547508][ T1097] strncpy_from_user+0x29/0x280 [ 54.547529][ T1097] getname_flags+0x106/0x6b0 [ 54.547551][ T1097] __x64_sys_symlink+0x61/0x90 [ 54.547579][ T1097] x64_sys_call+0x28d8/0x2ee0 [ 54.547596][ T1097] do_syscall_64+0x57/0xf0 [ 54.547618][ T1097] ? clear_bhb_loop+0x50/0xa0 [ 54.547642][ T1097] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.547665][ T1097] RIP: 0033:0x7f5cf0f9de99 [ 54.547681][ T1097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.547697][ T1097] RSP: 002b:00007f5cf1e96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 54.547718][ T1097] RAX: ffffffffffffffda RBX: 00007f5cf1226090 RCX: 00007f5cf0f9de99 [ 54.547733][ T1097] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 00002000000000c0 [ 54.547746][ T1097] RBP: 00007f5cf1e96090 R08: 0000000000000000 R09: 0000000000000000 [ 54.547758][ T1097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.547769][ T1097] R13: 00007f5cf1226128 R14: 00007f5cf1226090 R15: 00007ffe56590cf8 [ 54.547795][ T1097] [ 54.600615][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 54.741877][ T10] usb 4-1: device descriptor read/8, error -71 [ 54.750564][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 54.750577][ T36] audit: type=1400 audit(2000000026.250:332): avc: denied { map } for pid=1107 comm="syz.1.191" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.850531][ T751] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 54.871483][ T10] usb 4-1: device descriptor read/8, error -71 [ 54.980731][ T751] usb 3-1: device descriptor read/64, error -71 [ 55.062352][ T1119] netlink: 'syz.1.195': attribute type 1 has an invalid length. [ 55.110571][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 55.131533][ T10] usb 4-1: device descriptor read/8, error -71 [ 55.220539][ T751] usb 3-1: device descriptor read/64, error -71 [ 55.261523][ T10] usb 4-1: device descriptor read/8, error -71 [ 55.320524][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 55.370684][ T10] usb usb4-port1: unable to enumerate USB device [ 55.460565][ T751] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 55.471481][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.481607][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 255, changing to 11 [ 55.492650][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 59391, setting to 1024 [ 55.505127][ T31] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 55.514213][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.522257][ T31] usb 2-1: Product: syz [ 55.526417][ T31] usb 2-1: Manufacturer: syz [ 55.531039][ T31] usb 2-1: SerialNumber: syz [ 55.536518][ T1121] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 55.590527][ T751] usb 3-1: device descriptor read/64, error -71 [ 55.610535][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 55.745703][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 55.755732][ T31] usb 2-1: USB disconnect, device number 20 [ 55.762804][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.773213][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 55.782239][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 55.794542][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 55.803655][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.811689][ T9] usb 1-1: Product: syz [ 55.815860][ T9] usb 1-1: Manufacturer: syz [ 55.820450][ T9] usb 1-1: SerialNumber: syz [ 55.830550][ T751] usb 3-1: device descriptor read/64, error -71 [ 55.933627][ T1133] kvm: kvm [1132]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 55.942573][ T1133] kvm: kvm [1132]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 55.951297][ T751] usb usb3-port1: attempt power cycle [ 56.027252][ T1126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.035827][ T1126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.201661][ T9] usb 1-1: 1:1 : invalid UAC_AS_GENERAL desc [ 56.207890][ T9] usb 1-1: 0:2 : does not exist [ 56.216226][ T9] usb 1-1: USB disconnect, device number 21 [ 56.226068][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.265333][ T1138] bridge0: entered allmulticast mode [ 56.271067][ T1138] netlink: 12608 bytes leftover after parsing attributes in process `syz.1.201'. [ 56.280573][ T349] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 56.300521][ T751] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 56.322277][ T751] usb 3-1: device descriptor read/8, error -71 [ 56.415675][ T36] audit: type=1400 audit(2000000027.920:333): avc: denied { getopt } for pid=1152 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.430610][ T349] usb 4-1: Using ep0 maxpacket: 32 [ 56.435254][ T36] audit: type=1400 audit(2000000027.930:334): avc: denied { write } for pid=1152 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.442357][ T349] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 56.467911][ T349] usb 4-1: config 0 has no interface number 0 [ 56.474071][ T349] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 56.485117][ T349] usb 4-1: config 0 interface 2 has no altsetting 0 [ 56.492014][ T751] usb 3-1: device descriptor read/8, error -71 [ 56.499165][ T349] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 56.508234][ T349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.516286][ T349] usb 4-1: Product: syz [ 56.520440][ T349] usb 4-1: Manufacturer: syz [ 56.525052][ T349] usb 4-1: SerialNumber: syz [ 56.530344][ T349] usb 4-1: config 0 descriptor?? [ 56.735922][ T36] audit: type=1400 audit(2000000028.240:335): avc: denied { setcurrent } for pid=1156 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 56.740610][ T751] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 56.755535][ T36] audit: type=1401 audit(2000000028.240:336): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 56.781212][ T349] usb 4-1: USB disconnect, device number 26 [ 56.791996][ T36] audit: type=1400 audit(2000000028.290:337): avc: denied { setopt } for pid=1156 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.812539][ T348] udevd[348]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.841904][ T751] usb 3-1: device descriptor read/8, error -71 [ 56.971532][ T751] usb 3-1: device descriptor read/8, error -71 [ 56.985842][ T1170] FAULT_INJECTION: forcing a failure. [ 56.985842][ T1170] name failslab, interval 1, probability 0, space 0, times 0 [ 56.998543][ T1170] CPU: 0 UID: 0 PID: 1170 Comm: syz.0.205 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 56.998570][ T1170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 56.998588][ T1170] Call Trace: [ 56.998594][ T1170] [ 56.998602][ T1170] __dump_stack+0x21/0x30 [ 56.998642][ T1170] dump_stack_lvl+0x140/0x1c0 [ 56.998667][ T1170] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.998693][ T1170] ? check_stack_object+0x81/0x150 [ 56.998712][ T1170] ? __virt_addr_valid+0x2a1/0x370 [ 56.998734][ T1170] dump_stack+0x19/0x20 [ 56.998757][ T1170] should_fail_ex+0x3c2/0x510 [ 56.998777][ T1170] should_failslab+0xac/0x100 [ 56.998800][ T1170] kmem_cache_alloc_noprof+0x42/0x410 [ 56.998818][ T1170] ? getname_flags+0xcc/0x6b0 [ 56.998837][ T1170] ? strncpy_from_user+0x14f/0x280 [ 56.998857][ T1170] getname_flags+0xcc/0x6b0 [ 56.998877][ T1170] __x64_sys_symlink+0x6e/0x90 [ 56.998908][ T1170] x64_sys_call+0x28d8/0x2ee0 [ 56.998921][ T1170] do_syscall_64+0x57/0xf0 [ 56.998936][ T1170] ? clear_bhb_loop+0x50/0xa0 [ 56.998955][ T1170] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.998973][ T1170] RIP: 0033:0x7f5cf0f9de99 [ 56.998988][ T1170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.998999][ T1170] RSP: 002b:00007f5cf1e96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 56.999016][ T1170] RAX: ffffffffffffffda RBX: 00007f5cf1226090 RCX: 00007f5cf0f9de99 [ 56.999027][ T1170] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 00002000000000c0 [ 56.999037][ T1170] RBP: 00007f5cf1e96090 R08: 0000000000000000 R09: 0000000000000000 [ 56.999046][ T1170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.999054][ T1170] R13: 00007f5cf1226128 R14: 00007f5cf1226090 R15: 00007ffe56590cf8 [ 56.999066][ T1170] [ 57.185793][ T751] usb usb3-port1: unable to enumerate USB device [ 57.253020][ T1174] kvm: kvm [1173]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x80000006 [ 57.262902][ T1174] kvm: kvm [1173]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x80000006 [ 57.272490][ T1174] kvm: kvm [1173]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x80000006 [ 57.282091][ T1174] kvm: kvm [1173]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x80000006 [ 57.291672][ T1174] kvm: kvm [1173]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x80000006 [ 57.301244][ T1174] kvm: kvm [1173]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x80000006 [ 57.310744][ T1174] kvm: kvm [1173]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x80000006 [ 57.320220][ T1174] kvm: kvm [1173]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x80000006 [ 57.463137][ T36] audit: type=1400 audit(2000000028.970:338): avc: denied { bind } for pid=1176 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.500571][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 57.572096][ T1182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 57.650663][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 57.656886][ T31] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 57.665296][ T31] usb 2-1: config 0 has no interface number 0 [ 57.671510][ T31] usb 2-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 57.683690][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 57.692852][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.701003][ T31] usb 2-1: Product: syz [ 57.705219][ T31] usb 2-1: Manufacturer: syz [ 57.709843][ T31] usb 2-1: SerialNumber: syz [ 57.717212][ T31] usb 2-1: config 0 descriptor?? [ 57.722210][ T368] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 57.730857][ T31] smsc95xx v2.0.0 [ 57.734754][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 57.744918][ T31] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 57.858976][ T1193] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.871096][ T368] usb 4-1: Using ep0 maxpacket: 8 [ 57.882025][ T368] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 57.901401][ T368] usb 4-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 57.910843][ T368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.920674][ T368] usb 4-1: Product: syz [ 57.924953][ T368] usb 4-1: Manufacturer: syz [ 57.929564][ T368] usb 4-1: SerialNumber: syz [ 57.938286][ T1175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.948433][ T1180] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 57.959055][ T1175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.969290][ T1175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.978712][ T1175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.002259][ T1175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.011768][ T1175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.019839][ T1175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.037488][ T1175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.047357][ T1175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.056711][ T1175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.070932][ T31] usb 2-1: USB disconnect, device number 21 [ 58.107880][ T1184] netlink: 393 bytes leftover after parsing attributes in process `syz.2.211'. [ 58.160317][ T36] audit: type=1400 audit(2000000029.660:339): avc: denied { create } for pid=1179 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 58.192578][ T368] usb 4-1: MIDIStreaming interface descriptor not found [ 58.201774][ T368] usb 4-1: USB disconnect, device number 27 [ 58.221429][ T36] audit: type=1400 audit(2000000029.730:340): avc: denied { mount } for pid=1200 comm="syz.2.217" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.245021][ T366] udevd[366]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.250981][ T36] audit: type=1400 audit(2000000029.750:341): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.308143][ T1209] input: syz0 as /devices/virtual/input/input7 [ 58.366034][ T1216] FAULT_INJECTION: forcing a failure. [ 58.366034][ T1216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.379141][ T1216] CPU: 1 UID: 0 PID: 1216 Comm: syz.2.220 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 58.379171][ T1216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 58.379184][ T1216] Call Trace: [ 58.379191][ T1216] [ 58.379198][ T1216] __dump_stack+0x21/0x30 [ 58.379232][ T1216] dump_stack_lvl+0x140/0x1c0 [ 58.379259][ T1216] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.379289][ T1216] dump_stack+0x19/0x20 [ 58.379316][ T1216] should_fail_ex+0x3c2/0x510 [ 58.379340][ T1216] should_fail+0xf/0x20 [ 58.379361][ T1216] should_fail_usercopy+0x1e/0x30 [ 58.379384][ T1216] strncpy_from_user+0x29/0x280 [ 58.379406][ T1216] getname_flags+0x106/0x6b0 [ 58.379429][ T1216] __x64_sys_symlink+0x6e/0x90 [ 58.379459][ T1216] x64_sys_call+0x28d8/0x2ee0 [ 58.379477][ T1216] do_syscall_64+0x57/0xf0 [ 58.379500][ T1216] ? clear_bhb_loop+0x50/0xa0 [ 58.379527][ T1216] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.379552][ T1216] RIP: 0033:0x7f025859de99 [ 58.379569][ T1216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.379587][ T1216] RSP: 002b:00007f0256fd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 58.379609][ T1216] RAX: ffffffffffffffda RBX: 00007f0258826090 RCX: 00007f025859de99 [ 58.379624][ T1216] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 00002000000000c0 [ 58.379638][ T1216] RBP: 00007f0256fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 58.379651][ T1216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.379663][ T1216] R13: 00007f0258826128 R14: 00007f0258826090 R15: 00007ffe527ec6e8 [ 58.379681][ T1216] [ 58.800534][ T368] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 58.950569][ T368] usb 1-1: Using ep0 maxpacket: 16 [ 58.956935][ T368] usb 1-1: config index 0 descriptor too short (expected 37359, got 202) [ 58.965423][ T368] usb 1-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 58.974125][ T368] usb 1-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 58.984369][ T368] usb 1-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 58.994924][ T368] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 59.004016][ T368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.012056][ T368] usb 1-1: Product: syz [ 59.016213][ T368] usb 1-1: Manufacturer: syz [ 59.020822][ T368] usb 1-1: SerialNumber: syz [ 59.050513][ T45] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 59.200527][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 59.206780][ T45] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 59.216610][ T45] usb 2-1: config 2 has no interface number 0 [ 59.222763][ T45] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 59.233679][ T45] usb 2-1: config 2 interface 88 has no altsetting 0 [ 59.242737][ T368] usb 1-1: 0:2 : does not exist [ 59.251410][ T45] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 59.260608][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 59.268697][ T45] usb 2-1: Product: syz [ 59.273116][ T368] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 59.280693][ T45] usb 2-1: Manufacturer: syz [ 59.285374][ T45] usb 2-1: SerialNumber: syz [ 59.293396][ T1232] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 59.301787][ T368] usb 1-1: USB disconnect, device number 22 [ 59.313959][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.508862][ T1232] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 59.595384][ T1254] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=1254 comm=syz.3.234 [ 59.660555][ T751] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 59.782162][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 59.782179][ T36] audit: type=1400 audit(2000000031.290:345): avc: denied { write } for pid=1260 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.810565][ T751] usb 3-1: Using ep0 maxpacket: 32 [ 59.816723][ T751] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 59.824971][ T751] usb 3-1: config 0 has no interface number 0 [ 59.845040][ T751] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 59.866607][ T751] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 59.876629][ T751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.890508][ T751] usb 3-1: Product: syz [ 59.895207][ T751] usb 3-1: Manufacturer: syz [ 59.899956][ T751] usb 3-1: SerialNumber: syz [ 59.913690][ T751] usb 3-1: config 0 descriptor?? [ 59.930336][ T1252] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 59.963323][ T36] audit: type=1400 audit(2000000031.470:346): avc: denied { create } for pid=1255 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 60.000608][ T36] audit: type=1400 audit(2000000031.510:347): avc: denied { setopt } for pid=1255 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 60.139747][ T1252] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 60.672369][ T1284] netlink: 104 bytes leftover after parsing attributes in process `syz.1.239'. [ 60.725641][ T36] audit: type=1400 audit(2000000032.230:348): avc: denied { mounton } for pid=1285 comm="syz.1.240" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.782450][ T36] audit: type=1400 audit(2000000032.230:349): avc: denied { append } for pid=1281 comm="syz.3.238" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.024668][ T36] audit: type=1400 audit(2000000032.530:350): avc: denied { setopt } for pid=1285 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.050625][ T31] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 61.131093][ T45] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 61.142413][ T45] asix 2-1:2.88: probe with driver asix failed with error -71 [ 61.151459][ T45] usb 2-1: USB disconnect, device number 22 [ 61.180528][ T368] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 61.211523][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.222496][ T31] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 61.237222][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.253573][ T31] usb 4-1: config 0 descriptor?? [ 61.331586][ T368] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.341828][ T368] usb 1-1: config 0 interface 0 altsetting 91 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 61.353163][ T368] usb 1-1: config 0 interface 0 altsetting 91 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.358441][ T751] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 61.363760][ T368] usb 1-1: config 0 interface 0 altsetting 91 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 61.373920][ T751] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 61.391763][ T368] usb 1-1: config 0 interface 0 has no altsetting 0 [ 61.404256][ T368] usb 1-1: New USB device found, idVendor=0404, idProduct=c294, bcdDevice= 0.00 [ 61.413511][ T368] usb 1-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 61.421879][ T368] usb 1-1: Manufacturer: syz [ 61.430129][ T368] usb 1-1: config 0 descriptor?? [ 61.430679][ T751] asix 3-1:0.188: probe with driver asix failed with error -71 [ 61.451691][ T751] usb 3-1: USB disconnect, device number 27 [ 61.466714][ T1290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.476595][ T1290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.486742][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 61.492836][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 61.504837][ T31] usb 4-1: USB disconnect, device number 28 [ 61.637127][ T751] usb 1-1: USB disconnect, device number 23 [ 61.940538][ T31] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 61.963218][ T36] audit: type=1400 audit(2000000033.470:351): avc: denied { execute } for pid=1303 comm="syz.2.245" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.031475][ T1308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'. [ 62.101539][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.120535][ T31] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 62.139706][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.156740][ T31] usb 4-1: config 0 descriptor?? [ 62.450518][ T1154] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 62.604066][ T1154] usb 1-1: Using ep0 maxpacket: 32 [ 62.610793][ T1154] usb 1-1: unable to get BOS descriptor or descriptor too short [ 62.619343][ T1154] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.629639][ T1154] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.640104][ T1154] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 62.649295][ T1154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.657421][ T1154] usb 1-1: Product: syz [ 62.661744][ T1154] usb 1-1: Manufacturer: syz [ 62.666476][ T1154] usb 1-1: SerialNumber: syz [ 62.879507][ T1320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.889821][ T1320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.904429][ T1320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.912863][ T1322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.921476][ T1320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.943402][ T1322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.946796][ T1324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'. [ 62.959913][ T1154] usb 1-1: unit 255 not found! [ 62.967131][ T1154] usb 1-1: USB disconnect, device number 24 [ 62.998199][ T31] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 63.005769][ T31] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 63.318137][ T1154] usb 4-1: USB disconnect, device number 29 [ 63.324079][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 63.378272][ T31] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 63.493049][ T1343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'. [ 63.557368][ T31] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 63.565966][ T31] usb 3-1: can't read configurations, error -61 [ 63.708227][ T31] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 63.864245][ T31] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 63.871930][ T31] usb 3-1: can't read configurations, error -61 [ 63.878504][ T31] usb usb3-port1: attempt power cycle [ 63.911333][ T36] audit: type=1400 audit(2000000035.366:352): avc: denied { read } for pid=1352 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.094954][ T1358] usb usb8: usbfs: process 1358 (syz.1.262) did not claim interface 0 before use [ 64.116102][ T36] audit: type=1400 audit(2000000035.570:353): avc: denied { connect } for pid=1361 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.179124][ T1368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9834 sclass=netlink_route_socket pid=1368 comm=syz.1.266 [ 64.213042][ T368] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 64.233616][ T31] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 64.281361][ T31] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 64.297396][ T31] usb 3-1: can't read configurations, error -61 [ 64.371482][ T368] usb 4-1: config 255 has an invalid interface number: 232 but max is 2 [ 64.380213][ T368] usb 4-1: config 255 has an invalid descriptor of length 1, skipping remainder of the config [ 64.391095][ T368] usb 4-1: config 255 has 1 interface, different from the descriptor's value: 3 [ 64.400426][ T368] usb 4-1: config 255 has no interface number 0 [ 64.406743][ T368] usb 4-1: config 255 interface 232 altsetting 2 endpoint 0x3 is Bulk; changing to Interrupt [ 64.417175][ T368] usb 4-1: config 255 interface 232 altsetting 2 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 64.428251][ T368] usb 4-1: config 255 interface 232 altsetting 2 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 64.439340][ T31] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 64.447088][ T368] usb 4-1: config 255 interface 232 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 64.458395][ T368] usb 4-1: config 255 interface 232 altsetting 2 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 64.474427][ T368] usb 4-1: config 255 interface 232 altsetting 2 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 64.486570][ T368] usb 4-1: config 255 interface 232 altsetting 2 endpoint 0x8D is Bulk; changing to Interrupt [ 64.497196][ T368] usb 4-1: config 255 interface 232 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 64.508520][ T368] usb 4-1: config 255 interface 232 altsetting 2 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 64.523814][ T31] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 64.531394][ T31] usb 3-1: can't read configurations, error -61 [ 64.537729][ T368] usb 4-1: config 255 interface 232 has no altsetting 0 [ 64.547139][ T31] usb usb3-port1: unable to enumerate USB device [ 64.601130][ T36] audit: type=1400 audit(2000000036.036:354): avc: denied { read write } for pid=1390 comm="syz.1.272" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 64.892328][ T751] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 65.046542][ T751] usb 2-1: Using ep0 maxpacket: 32 [ 65.053072][ T751] usb 2-1: unable to get BOS descriptor or descriptor too short [ 65.062893][ T751] usb 2-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 65.071976][ T751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.080206][ T751] usb 2-1: Product: syz [ 65.084370][ T751] usb 2-1: Manufacturer: syz [ 65.089084][ T751] usb 2-1: SerialNumber: syz [ 65.211081][ T1154] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 65.366409][ T1154] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.376591][ T1154] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 65.385560][ T1154] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 65.397774][ T1154] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 65.406847][ T1154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.414849][ T1154] usb 1-1: Product: syz [ 65.426985][ T1154] usb 1-1: Manufacturer: syz [ 65.431598][ T1154] usb 1-1: SerialNumber: syz [ 65.661033][ T1154] usb 1-1: 1:1 : invalid UAC_AS_GENERAL desc [ 65.667324][ T1154] usb 1-1: 0:2 : does not exist [ 65.674973][ T1154] usb 1-1: USB disconnect, device number 25 [ 65.687799][ T348] udevd[348]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.852199][ T751] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 65.863097][ T751] usb 2-1: USB disconnect, device number 23 [ 65.876614][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.373668][ T1433] fuse: Unknown parameter '0x0000000000000003' [ 66.402479][ T751] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 66.566674][ T751] usb 2-1: Using ep0 maxpacket: 8 [ 66.572825][ T751] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 66.581177][ T751] usb 2-1: config 179 has no interface number 0 [ 66.587516][ T751] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 66.598802][ T751] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 66.610050][ T751] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 66.620068][ T751] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 66.633304][ T751] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 66.642363][ T751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.651317][ T1415] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 66.658939][ T1154] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 66.666585][ T310] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 66.802443][ T1154] usb 3-1: device descriptor read/64, error -71 [ 66.823986][ T310] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.835598][ T310] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 66.844677][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.852750][ T310] usb 1-1: Product: syz [ 66.856960][ T310] usb 1-1: Manufacturer: syz [ 66.861595][ T310] usb 1-1: SerialNumber: syz [ 66.867055][ T310] usb 1-1: config 0 descriptor?? [ 66.867576][ T1415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.880314][ T310] asix 1-1:0.0: probe with driver asix failed with error -22 [ 66.881592][ T1415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.896168][ T31] usb 2-1: USB disconnect, device number 24 [ 67.005531][ T368] usb 4-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=f8.87 [ 67.015965][ T368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.027573][ T368] usb 4-1: can't set config #255, error -71 [ 67.036073][ T368] usb 4-1: USB disconnect, device number 30 [ 67.048357][ T1154] usb 3-1: device descriptor read/64, error -71 [ 67.084778][ T31] usb 1-1: USB disconnect, device number 26 [ 67.193303][ T1446] netlink: 96 bytes leftover after parsing attributes in process `syz.3.288'. [ 67.212202][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 67.212215][ T36] audit: type=1326 audit(2000000038.578:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1447 comm="syz.3.289" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb0099de99 code=0x0 [ 67.263877][ T36] audit: type=1326 audit(2000000038.637:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1447 comm="syz.3.289" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb0099de99 code=0x0 [ 67.304529][ T1154] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 67.338318][ T36] audit: type=1400 audit(2000000038.705:358): avc: denied { create } for pid=1454 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 67.437762][ T1154] usb 3-1: device descriptor read/64, error -71 [ 67.487544][ T1467] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 67.488210][ T1467] @0: renamed from bond_slave_1 (while UP) [ 67.642681][ T31] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 67.683617][ T1154] usb 3-1: device descriptor read/64, error -71 [ 67.796173][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 67.796523][ T1154] usb usb3-port1: attempt power cycle [ 67.802602][ T31] usb 4-1: config 1 has an invalid interface number: 230 but max is 2 [ 67.814841][ T31] usb 4-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 67.825018][ T31] usb 4-1: config 1 has no interface number 2 [ 67.831178][ T31] usb 4-1: too many endpoints for config 1 interface 230 altsetting 173: 105, using maximum allowed: 30 [ 67.842334][ T31] usb 4-1: config 1 interface 230 altsetting 173 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 67.855739][ T31] usb 4-1: config 1 interface 230 has no altsetting 0 [ 67.863826][ T31] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 67.872863][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.880873][ T31] usb 4-1: Product: syz [ 67.885033][ T31] usb 4-1: Manufacturer: syz [ 67.889650][ T31] usb 4-1: SerialNumber: syz [ 68.154278][ T1154] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 68.175737][ T1154] usb 3-1: device descriptor read/8, error -71 [ 68.308792][ T1154] usb 3-1: device descriptor read/8, error -71 [ 68.374664][ T1475] FAULT_INJECTION: forcing a failure. [ 68.374664][ T1475] name failslab, interval 1, probability 0, space 0, times 0 [ 68.387335][ T1475] CPU: 1 UID: 0 PID: 1475 Comm: syz.1.297 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 68.387366][ T1475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.387375][ T1475] Call Trace: [ 68.387380][ T1475] [ 68.387386][ T1475] __dump_stack+0x21/0x30 [ 68.387409][ T1475] dump_stack_lvl+0x140/0x1c0 [ 68.387428][ T1475] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.387450][ T1475] ? is_bpf_text_address+0x17b/0x1a0 [ 68.387471][ T1475] ? kernel_text_address+0xa9/0xe0 [ 68.387490][ T1475] dump_stack+0x19/0x20 [ 68.387508][ T1475] should_fail_ex+0x3c2/0x510 [ 68.387525][ T1475] should_failslab+0xac/0x100 [ 68.387542][ T1475] kmem_cache_alloc_noprof+0x42/0x410 [ 68.387557][ T1475] ? fuse_request_alloc+0x43/0x1f0 [ 68.387574][ T1475] fuse_request_alloc+0x43/0x1f0 [ 68.387589][ T1475] ? fuse_get_req+0x485/0xb00 [ 68.387604][ T1475] fuse_get_req+0x49e/0xb00 [ 68.387619][ T1475] ? kasan_save_track+0x3e/0x80 [ 68.387634][ T1475] ? kasan_save_alloc_info+0x3a/0x50 [ 68.387654][ T1475] ? __kmalloc_cache_noprof+0x23c/0x470 [ 68.387669][ T1475] ? fuse_alloc_forget+0x5b/0xf0 [ 68.387687][ T1475] ? x64_sys_call+0x28d8/0x2ee0 [ 68.387699][ T1475] ? fuse_request_alloc+0x1f0/0x1f0 [ 68.387717][ T1475] __fuse_simple_request+0x293/0x1a90 [ 68.387735][ T1475] ? __cfi___fuse_simple_request+0x10/0x10 [ 68.387751][ T1475] ? proc_pident_lookup+0x1c7/0x270 [ 68.387768][ T1475] ? proc_tid_base_lookup+0x2f/0x40 [ 68.387789][ T1475] ? path_openat+0x1127/0x35a0 [ 68.387807][ T1475] ? kasan_save_alloc_info+0x3a/0x50 [ 68.387827][ T1475] ? __kasan_kmalloc+0x96/0xb0 [ 68.387844][ T1475] ? __kmalloc_cache_noprof+0x23c/0x470 [ 68.387858][ T1475] ? fuse_alloc_forget+0x5b/0xf0 [ 68.387875][ T1475] fuse_lookup_name+0x2fe/0x9c0 [ 68.387895][ T1475] ? __cfi_fuse_lookup_name+0x10/0x10 [ 68.387916][ T1475] ? mutex_lock+0x97/0x1d0 [ 68.387934][ T1475] ? __cfi_mutex_lock+0x10/0x10 [ 68.387953][ T1475] ? __kernel_text_address+0x11/0x40 [ 68.387972][ T1475] fuse_lookup+0x3e6/0x1b80 [ 68.387992][ T1475] ? stack_trace_save+0xaa/0x100 [ 68.388008][ T1475] ? __cfi_fuse_lookup+0x10/0x10 [ 68.388028][ T1475] ? stack_depot_save_flags+0x38/0x800 [ 68.388045][ T1475] ? __kasan_kmalloc+0x96/0xb0 [ 68.388061][ T1475] ? __kmalloc_cache_noprof+0x23c/0x470 [ 68.388075][ T1475] ? fuse_dentry_init+0x5f/0x130 [ 68.388093][ T1475] ? __d_alloc+0x498/0x8c0 [ 68.388110][ T1475] ? kasan_save_alloc_info+0x3a/0x50 [ 68.388131][ T1475] ? __kasan_kmalloc+0x96/0xb0 [ 68.388147][ T1475] ? __kmalloc_cache_noprof+0x23c/0x470 [ 68.388161][ T1475] ? __kasan_slab_alloc+0x73/0x90 [ 68.388182][ T1475] ? fuse_dentry_init+0x5f/0x130 [ 68.388200][ T1475] ? __kasan_check_write+0x18/0x20 [ 68.388213][ T1475] ? _raw_spin_lock+0x92/0x120 [ 68.388228][ T1475] ? __cfi__raw_spin_lock+0x10/0x10 [ 68.388244][ T1475] ? d_alloc+0x174/0x1c0 [ 68.388256][ T1475] lookup_one_qstr_excl+0x129/0x280 [ 68.388273][ T1475] filename_create+0x241/0x450 [ 68.388291][ T1475] ? kern_path_create+0x70/0x70 [ 68.388310][ T1475] do_symlinkat+0xc5/0x400 [ 68.388330][ T1475] ? strncpy_from_user+0x14f/0x280 [ 68.388359][ T1475] ? __cfi_do_symlinkat+0x10/0x10 [ 68.388388][ T1475] ? getname_flags+0x203/0x6b0 [ 68.388411][ T1475] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 68.388430][ T1475] __x64_sys_symlink+0x7e/0x90 [ 68.388450][ T1475] x64_sys_call+0x28d8/0x2ee0 [ 68.388462][ T1475] do_syscall_64+0x57/0xf0 [ 68.388477][ T1475] ? clear_bhb_loop+0x50/0xa0 [ 68.388496][ T1475] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.388513][ T1475] RIP: 0033:0x7fe8bf99de99 [ 68.388525][ T1475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.388537][ T1475] RSP: 002b:00007fe8c080c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 68.388552][ T1475] RAX: ffffffffffffffda RBX: 00007fe8bfc26090 RCX: 00007fe8bf99de99 [ 68.388563][ T1475] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 00002000000000c0 [ 68.388572][ T1475] RBP: 00007fe8c080c090 R08: 0000000000000000 R09: 0000000000000000 [ 68.388581][ T1475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.388589][ T1475] R13: 00007fe8bfc26128 R14: 00007fe8bfc26090 R15: 00007ffc690fced8 [ 68.388601][ T1475] [ 68.707622][ T1154] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 68.831031][ T1154] usb 3-1: device descriptor read/8, error -71 [ 68.866687][ T1481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.875790][ T1481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.963239][ T1154] usb 3-1: device descriptor read/8, error -71 [ 69.074627][ T1154] usb usb3-port1: unable to enumerate USB device [ 69.105235][ T310] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 69.258484][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 69.265041][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 69.274014][ T310] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 69.282739][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.292879][ T310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.303219][ T310] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.312287][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.320392][ T310] usb 1-1: Product: syz [ 69.324563][ T310] usb 1-1: Manufacturer: syz [ 69.329173][ T310] usb 1-1: SerialNumber: syz [ 69.389506][ T36] audit: type=1400 audit(2000000040.709:359): avc: denied { read } for pid=1497 comm="syz.2.302" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.413112][ T36] audit: type=1400 audit(2000000040.709:360): avc: denied { open } for pid=1497 comm="syz.2.302" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.436197][ T36] audit: type=1400 audit(2000000040.738:361): avc: denied { ioctl } for pid=1497 comm="syz.2.302" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.473037][ T1154] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 69.543925][ T310] usb 1-1: 0:2 : does not exist [ 69.551317][ T310] usb 1-1: USB disconnect, device number 27 [ 69.562781][ T348] udevd[348]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.626271][ T1154] usb 2-1: Using ep0 maxpacket: 16 [ 69.632564][ T1154] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.644150][ T1154] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 69.653222][ T1154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.661334][ T1154] usb 2-1: Product: syz [ 69.665497][ T1154] usb 2-1: Manufacturer: syz [ 69.670111][ T1154] usb 2-1: SerialNumber: syz [ 69.675315][ T1154] usb 2-1: config 0 descriptor?? [ 69.681204][ T1154] sr9700 2-1:0.0: probe with driver sr9700 failed with error -22 [ 69.748786][ T751] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 69.885766][ T1488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.894280][ T1488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.902174][ T751] usb 3-1: Using ep0 maxpacket: 16 [ 69.907941][ T45] usb 2-1: USB disconnect, device number 25 [ 69.913364][ T751] usb 3-1: unable to get BOS descriptor or descriptor too short [ 69.926104][ T751] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 69.934442][ T751] usb 3-1: can't read configurations, error -71 [ 70.098583][ T1512] netlink: 200 bytes leftover after parsing attributes in process `syz.0.305'. [ 70.107577][ T1512] tc_dump_action: action bad kind [ 70.444065][ T31] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 70.453019][ T31] usb 4-1: clock source 0 is not valid, cannot use [ 70.461096][ T31] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 70.473395][ T31] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 70.493038][ T1531] FAULT_INJECTION: forcing a failure. [ 70.493038][ T1531] name failslab, interval 1, probability 0, space 0, times 0 [ 70.507578][ T1530] 9pnet_fd: p9_fd_create_tcp (1530): problem connecting socket to 127.0.0.1 [ 70.517872][ T31] usb 4-1: USB disconnect, device number 31 [ 70.529279][ T1531] CPU: 1 UID: 0 PID: 1531 Comm: syz.1.307 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 70.529307][ T1531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 70.529320][ T1531] Call Trace: [ 70.529326][ T1531] [ 70.529334][ T1531] __dump_stack+0x21/0x30 [ 70.529366][ T1531] dump_stack_lvl+0x140/0x1c0 [ 70.529393][ T1531] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.529419][ T1531] ? is_bpf_text_address+0x17b/0x1a0 [ 70.529450][ T1531] ? kernel_text_address+0xa9/0xe0 [ 70.529477][ T1531] dump_stack+0x19/0x20 [ 70.529502][ T1531] should_fail_ex+0x3c2/0x510 [ 70.529524][ T1531] should_failslab+0xac/0x100 [ 70.529549][ T1531] kmem_cache_alloc_noprof+0x42/0x410 [ 70.529570][ T1531] ? fuse_request_alloc+0x43/0x1f0 [ 70.529595][ T1531] fuse_request_alloc+0x43/0x1f0 [ 70.529616][ T1531] ? fuse_get_req+0x485/0xb00 [ 70.529638][ T1531] fuse_get_req+0x49e/0xb00 [ 70.529659][ T1531] ? kasan_save_track+0x3e/0x80 [ 70.529681][ T1531] ? kasan_save_alloc_info+0x3a/0x50 [ 70.529710][ T1531] ? __kmalloc_cache_noprof+0x23c/0x470 [ 70.529731][ T1531] ? fuse_alloc_forget+0x5b/0xf0 [ 70.529755][ T1531] ? x64_sys_call+0x28d8/0x2ee0 [ 70.529774][ T1531] ? fuse_request_alloc+0x1f0/0x1f0 [ 70.529799][ T1531] __fuse_simple_request+0x293/0x1a90 [ 70.529824][ T1531] ? __cfi___fuse_simple_request+0x10/0x10 [ 70.529855][ T1531] ? kasan_save_alloc_info+0x3a/0x50 [ 70.529885][ T1531] ? __kasan_kmalloc+0x96/0xb0 [ 70.529908][ T1531] ? __kmalloc_cache_noprof+0x23c/0x470 [ 70.529928][ T1531] ? fuse_alloc_forget+0x5b/0xf0 [ 70.529953][ T1531] fuse_lookup_name+0x2fe/0x9c0 [ 70.529980][ T1531] ? __kasan_check_write+0x18/0x20 [ 70.530010][ T1531] ? __cfi_fuse_lookup_name+0x10/0x10 [ 70.530039][ T1531] ? mutex_lock+0x97/0x1d0 [ 70.530066][ T1531] ? __cfi_mutex_lock+0x10/0x10 [ 70.530092][ T1531] ? __kernel_text_address+0x11/0x40 [ 70.530120][ T1531] fuse_lookup+0x3e6/0x1b80 [ 70.530150][ T1531] ? stack_trace_save+0xaa/0x100 [ 70.530173][ T1531] ? __cfi_fuse_lookup+0x10/0x10 [ 70.530200][ T1531] ? stack_depot_save_flags+0x38/0x800 [ 70.530225][ T1531] ? __kasan_kmalloc+0x96/0xb0 [ 70.530248][ T1531] ? __kmalloc_cache_noprof+0x23c/0x470 [ 70.530268][ T1531] ? fuse_dentry_init+0x5f/0x130 [ 70.530293][ T1531] ? __d_alloc+0x498/0x8c0 [ 70.530318][ T1531] ? kasan_save_alloc_info+0x3a/0x50 [ 70.530347][ T1531] ? __kasan_kmalloc+0x96/0xb0 [ 70.530371][ T1531] ? __kmalloc_cache_noprof+0x23c/0x470 [ 70.530391][ T1531] ? __kasan_slab_alloc+0x73/0x90 [ 70.530415][ T1531] ? fuse_dentry_init+0x5f/0x130 [ 70.530441][ T1531] ? __kasan_check_write+0x18/0x20 [ 70.530460][ T1531] ? _raw_spin_lock+0x92/0x120 [ 70.530480][ T1531] ? __cfi__raw_spin_lock+0x10/0x10 [ 70.530502][ T1531] ? d_alloc+0x174/0x1c0 [ 70.530521][ T1531] lookup_one_qstr_excl+0x129/0x280 [ 70.530545][ T1531] filename_create+0x241/0x450 [ 70.530572][ T1531] ? kern_path_create+0x70/0x70 [ 70.530599][ T1531] do_symlinkat+0xc5/0x400 [ 70.530627][ T1531] ? strncpy_from_user+0x14f/0x280 [ 70.530649][ T1531] ? __cfi_do_symlinkat+0x10/0x10 [ 70.530678][ T1531] ? getname_flags+0x203/0x6b0 [ 70.530700][ T1531] __x64_sys_symlink+0x7e/0x90 [ 70.530729][ T1531] x64_sys_call+0x28d8/0x2ee0 [ 70.530747][ T1531] do_syscall_64+0x57/0xf0 [ 70.530768][ T1531] ? clear_bhb_loop+0x50/0xa0 [ 70.530795][ T1531] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.530820][ T1531] RIP: 0033:0x7fe8bf99de99 [ 70.530836][ T1531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.530853][ T1531] RSP: 002b:00007fe8c080c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 70.530874][ T1531] RAX: ffffffffffffffda RBX: 00007fe8bfc26090 RCX: 00007fe8bf99de99 [ 70.530890][ T1531] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 00002000000000c0 [ 70.530904][ T1531] RBP: 00007fe8c080c090 R08: 0000000000000000 R09: 0000000000000000 [ 70.530916][ T1531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.530929][ T1531] R13: 00007fe8bfc26128 R14: 00007fe8bfc26090 R15: 00007ffc690fced8 [ 70.530946][ T1531] [ 70.548400][ T348] udevd[348]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.860760][ T31] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 71.105268][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 71.111719][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.122633][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 71.132483][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 71.142142][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 71.155824][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.164955][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 71.172995][ T31] usb 4-1: SerialNumber: syz [ 71.178671][ T1530] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 71.185937][ T1530] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 71.193757][ T31] hub 4-1:1.0: bad descriptor, ignoring hub [ 71.199716][ T31] hub 4-1:1.0: probe with driver hub failed with error -5 [ 71.309337][ T368] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 71.319535][ T751] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 71.398604][ T1530] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 71.405917][ T1530] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 71.423376][ T1551] mmap: syz.1.317 (1551): VmData 29192192 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 71.463750][ T368] usb 1-1: Using ep0 maxpacket: 8 [ 71.468849][ T36] audit: type=1400 audit(2000000042.748:362): avc: denied { map } for pid=1552 comm="syz.1.318" path="socket:[12985]" dev="sockfs" ino=12985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 71.492409][ T36] audit: type=1400 audit(2000000042.748:363): avc: denied { accept } for pid=1552 comm="syz.1.318" path="socket:[12985]" dev="sockfs" ino=12985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 71.518648][ T368] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 71.523314][ T751] usb 3-1: Using ep0 maxpacket: 16 [ 71.527752][ T368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.540856][ T368] usb 1-1: Product: syz [ 71.545272][ T368] usb 1-1: Manufacturer: syz [ 71.550035][ T368] usb 1-1: SerialNumber: syz [ 71.555036][ T751] usb 3-1: unable to get BOS descriptor or descriptor too short [ 71.563356][ T751] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.574583][ T751] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.586134][ T751] usb 3-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 71.597749][ T751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.605857][ T751] usb 3-1: Product: syz [ 71.610301][ T751] usb 3-1: Manufacturer: syz [ 71.615011][ T751] usb 3-1: SerialNumber: syz [ 71.803504][ T368] usb 1-1: unit 0 not found! [ 71.813623][ T368] usb 1-1: USB disconnect, device number 28 [ 71.824508][ T31] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 71.881890][ T1538] raw_sendmsg: syz.2.311 forgot to set AF_INET. Fix it! [ 71.928350][ T751] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 71.943393][ T751] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 71.954659][ T751] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 71.966112][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.982440][ T751] usb 3-1: USB disconnect, device number 38 [ 72.073500][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 68! [ 72.081753][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 03! [ 72.089464][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification ff! [ 72.097009][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 32! [ 72.104551][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 70! [ 72.111924][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification ff! [ 72.335890][ T1154] usb 4-1: USB disconnect, device number 32 [ 72.343543][ T1154] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 72.510968][ T1621] FAULT_INJECTION: forcing a failure. [ 72.510968][ T1621] name failslab, interval 1, probability 0, space 0, times 0 [ 72.525583][ T1621] CPU: 1 UID: 0 PID: 1621 Comm: syz.2.323 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 72.525612][ T1621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 72.525625][ T1621] Call Trace: [ 72.525632][ T1621] [ 72.525639][ T1621] __dump_stack+0x21/0x30 [ 72.525672][ T1621] dump_stack_lvl+0x140/0x1c0 [ 72.525700][ T1621] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.525728][ T1621] ? __kernel_text_address+0x40/0x40 [ 72.525756][ T1621] dump_stack+0x19/0x20 [ 72.525782][ T1621] should_fail_ex+0x3c2/0x510 [ 72.525805][ T1621] should_failslab+0xac/0x100 [ 72.525829][ T1621] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 72.525850][ T1621] ? sidtab_sid2str_get+0x135/0x360 [ 72.525880][ T1621] kmemdup_noprof+0x31/0x80 [ 72.525909][ T1621] sidtab_sid2str_get+0x135/0x360 [ 72.525939][ T1621] security_sid_to_context_core+0x30d/0x5d0 [ 72.525966][ T1621] security_sid_to_context+0x2e/0x50 [ 72.525993][ T1621] selinux_dentry_init_security+0x488/0x5f0 [ 72.526021][ T1621] ? __cfi_selinux_dentry_init_security+0x10/0x10 [ 72.526050][ T1621] security_dentry_init_security+0x88/0x170 [ 72.526077][ T1621] get_create_ext+0x1c6/0xde0 [ 72.526107][ T1621] ? kasan_save_alloc_info+0x3a/0x50 [ 72.526136][ T1621] ? __kasan_kmalloc+0x96/0xb0 [ 72.526159][ T1621] ? create_new_entry+0xa10/0xa10 [ 72.526188][ T1621] ? __kmalloc_cache_noprof+0x23c/0x470 [ 72.526212][ T1621] create_new_entry+0x24f/0xa10 [ 72.526243][ T1621] ? fuse_tmpfile+0x270/0x270 [ 72.526274][ T1621] fuse_symlink+0x391/0x19b0 [ 72.526304][ T1621] ? __cfi_fuse_symlink+0x10/0x10 [ 72.526335][ T1621] ? avc_has_perm_noaudit+0x289/0x360 [ 72.526372][ T1621] ? may_create+0x602/0x820 [ 72.526391][ T1621] ? show_sid+0x1e0/0x1e0 [ 72.526409][ T1621] ? make_vfsgid+0x4d/0xa0 [ 72.526427][ T1621] ? __cfi_fuse_permission+0x10/0x10 [ 72.526457][ T1621] ? selinux_inode_symlink+0x26/0x30 [ 72.526484][ T1621] ? bpf_lsm_inode_symlink+0xd/0x20 [ 72.526508][ T1621] ? security_inode_symlink+0x7e/0x170 [ 72.526535][ T1621] vfs_symlink+0x3f7/0x620 [ 72.526566][ T1621] do_symlinkat+0x1ba/0x400 [ 72.526595][ T1621] ? __cfi_do_symlinkat+0x10/0x10 [ 72.526623][ T1621] ? getname_flags+0x203/0x6b0 [ 72.526646][ T1621] __x64_sys_symlink+0x7e/0x90 [ 72.526674][ T1621] x64_sys_call+0x28d8/0x2ee0 [ 72.526692][ T1621] do_syscall_64+0x57/0xf0 [ 72.526714][ T1621] ? clear_bhb_loop+0x50/0xa0 [ 72.526741][ T1621] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.526766][ T1621] RIP: 0033:0x7f025859de99 [ 72.526783][ T1621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.526801][ T1621] RSP: 002b:00007f0256fd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 72.526823][ T1621] RAX: ffffffffffffffda RBX: 00007f0258826090 RCX: 00007f025859de99 [ 72.526839][ T1621] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 00002000000000c0 [ 72.526853][ T1621] RBP: 00007f0256fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 72.526866][ T1621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.526879][ T1621] R13: 00007f0258826128 R14: 00007f0258826090 R15: 00007ffe527ec6e8 [ 72.526897][ T1621] [ 72.683724][ T751] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 72.907819][ T36] audit: type=1400 audit(2000000044.163:364): avc: denied { unlink } for pid=1635 comm="syz.3.326" name="#1" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 72.931089][ T36] audit: type=1400 audit(2000000044.163:365): avc: denied { mount } for pid=1635 comm="syz.3.326" name="/" dev="overlay" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.953164][ T36] audit: type=1400 audit(2000000044.183:366): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.999879][ T751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.010844][ T751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.020616][ T751] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 73.029764][ T751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.038371][ T751] usb 1-1: config 0 descriptor?? [ 73.097123][ T1652] netlink: 32 bytes leftover after parsing attributes in process `syz.3.330'. [ 73.120022][ T36] audit: type=1400 audit(2000000044.369:367): avc: denied { watch } for pid=1655 comm="syz.3.331" path="/77/file1" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.120990][ T1154] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 73.283486][ T1154] usb 2-1: device descriptor read/64, error -71 [ 73.435980][ T310] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 73.527490][ T1154] usb 2-1: device descriptor read/64, error -71 [ 73.533849][ T36] audit: type=1400 audit(2000000044.773:368): avc: denied { ioctl } for pid=1598 comm="syz.0.322" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 73.598651][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 73.604806][ T310] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 73.629146][ T310] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 73.639671][ T310] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 73.648775][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.657029][ T310] usb 4-1: Product: syz [ 73.661450][ T310] usb 4-1: Manufacturer: syz [ 73.667191][ T310] usb 4-1: SerialNumber: syz [ 73.672028][ T751] usbhid 1-1:0.0: can't add hid device: -71 [ 73.677947][ T751] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 73.686251][ T310] usb 4-1: config 0 descriptor?? [ 73.692954][ T751] usb 1-1: USB disconnect, device number 29 [ 73.781632][ T1154] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 73.896500][ T751] usb 4-1: USB disconnect, device number 33 [ 73.925736][ T1154] usb 2-1: device descriptor read/64, error -71 [ 74.167562][ T1154] usb 2-1: device descriptor read/64, error -71 [ 74.279448][ T1154] usb usb2-port1: attempt power cycle [ 74.624591][ T1154] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 74.646473][ T1154] usb 2-1: device descriptor read/8, error -71 [ 74.777915][ T1154] usb 2-1: device descriptor read/8, error -71 [ 74.939261][ T31] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 75.020434][ T1154] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 75.041947][ T1154] usb 2-1: device descriptor read/8, error -71 [ 75.093079][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 75.101459][ T31] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 75.110799][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.118854][ T31] usb 4-1: Product: syz [ 75.123081][ T31] usb 4-1: Manufacturer: syz [ 75.128610][ T31] usb 4-1: SerialNumber: syz [ 75.173683][ T1154] usb 2-1: device descriptor read/8, error -71 [ 75.284317][ T1154] usb usb2-port1: unable to enumerate USB device [ 75.341181][ T31] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 75.354929][ T31] usb 4-1: USB disconnect, device number 34 [ 75.370425][ T348] udevd[348]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.801703][ T31] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 75.953930][ T36] audit: type=1400 audit(2000000047.156:369): avc: denied { view } for pid=1699 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 75.964937][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 75.991121][ T31] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 76.000212][ T36] audit: type=1400 audit(2000000047.196:370): avc: denied { append } for pid=1701 comm="syz.3.343" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 76.011351][ T31] usb 3-1: can't read configurations, error -22 [ 76.070134][ T36] audit: type=1400 audit(2000000047.275:371): avc: denied { setattr } for pid=1710 comm="syz.0.348" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.156886][ T31] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 76.321949][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 76.350257][ T31] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 76.358583][ T31] usb 3-1: can't read configurations, error -22 [ 76.365042][ T31] usb usb3-port1: attempt power cycle [ 76.384583][ T1730] can0: slcan on ttyS3. [ 76.442881][ T1730] can0 (unregistered): slcan off ttyS3. [ 76.480850][ T751] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 76.617927][ T36] audit: type=1400 audit(2000000047.817:372): avc: denied { mount } for pid=1768 comm="syz.0.355" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 76.650526][ T751] usb 4-1: config 0 has no interfaces? [ 76.656042][ T751] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 76.665222][ T751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.673942][ T751] usb 4-1: config 0 descriptor?? [ 76.714022][ T31] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 76.735272][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 76.743969][ T31] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 76.751899][ T31] usb 3-1: can't read configurations, error -22 [ 76.886267][ T31] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 76.917973][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 76.926784][ T31] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 76.934733][ T31] usb 3-1: can't read configurations, error -22 [ 76.941139][ T31] usb usb3-port1: unable to enumerate USB device [ 76.959965][ T31] usb 4-1: USB disconnect, device number 35 [ 77.149634][ T751] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 77.301554][ T751] usb 2-1: Using ep0 maxpacket: 16 [ 77.307786][ T751] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 77.316986][ T751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.325594][ T751] usb 2-1: config 0 descriptor?? [ 77.332095][ T751] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 77.534672][ T751] usb 2-1: Detected FT232B [ 77.550272][ T1783] netlink: 4416 bytes leftover after parsing attributes in process `syz.0.360'. [ 77.737012][ T31] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 77.900025][ T31] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 77.910866][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 77.921753][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 77.934747][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 77.943798][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.953036][ T31] usb 4-1: config 0 descriptor?? [ 77.960461][ T1781] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 78.011967][ T751] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 78.027023][ T751] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 78.035914][ T751] usb 2-1: USB disconnect, device number 30 [ 78.043375][ T751] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 78.053132][ T751] ftdi_sio 2-1:0.0: device disconnected [ 78.374552][ T31] logitech 0003:046D:C29C.0007: invalid report_size -1175485680 [ 78.382279][ T31] logitech 0003:046D:C29C.0007: item 0 4 1 7 parsing failed [ 78.389769][ T31] logitech 0003:046D:C29C.0007: parse failed [ 78.395881][ T31] logitech 0003:046D:C29C.0007: probe with driver logitech failed with error -22 [ 78.643020][ T1809] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 78.652030][ T1809] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.693130][ T1814] netlink: 'syz.1.368': attribute type 28 has an invalid length. [ 78.703958][ T1814] block device autoloading is deprecated and will be removed. [ 78.731329][ T36] audit: type=1400 audit(2000000049.901:373): avc: denied { ioctl } for pid=1817 comm="syz.1.369" path="socket:[15158]" dev="sockfs" ino=15158 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.799693][ T751] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 78.972474][ T751] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.992385][ T751] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 79.001498][ T751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.009550][ T751] usb 1-1: Product: syz [ 79.013837][ T751] usb 1-1: Manufacturer: syz [ 79.018504][ T751] usb 1-1: SerialNumber: syz [ 79.023998][ T751] usb 1-1: config 0 descriptor?? [ 79.029710][ T751] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22 [ 79.032367][ T31] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 79.204210][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 79.210406][ T31] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 79.218623][ T31] usb 3-1: config 0 has no interface number 0 [ 79.224769][ T31] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 79.234770][ T31] usb 3-1: config 0 interface 196 has no altsetting 0 [ 79.241828][ T751] usb 1-1: USB disconnect, device number 30 [ 79.243430][ T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 79.257795][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.265870][ T31] usb 3-1: Product: syz [ 79.270036][ T31] usb 3-1: Manufacturer: syz [ 79.274634][ T31] usb 3-1: SerialNumber: syz [ 79.279931][ T31] usb 3-1: config 0 descriptor?? [ 79.285160][ T1807] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 79.495667][ T1806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.496616][ T1807] netlink: 'syz.2.366': attribute type 10 has an invalid length. [ 79.505872][ T1806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.527098][ T31] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 79.541076][ T31] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 79.558225][ T31] usb 3-1: USB disconnect, device number 43 [ 79.575749][ T1826] syzkaller1: entered promiscuous mode [ 79.581345][ T1826] syzkaller1: entered allmulticast mode [ 79.603598][ T36] audit: type=1400 audit(2000000050.771:374): avc: denied { listen } for pid=1827 comm="syz.1.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.629186][ T36] audit: type=1400 audit(2000000050.791:375): avc: denied { bind } for pid=1825 comm="syz.2.371" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.655723][ T36] audit: type=1400 audit(2000000050.791:376): avc: denied { name_bind } for pid=1825 comm="syz.2.371" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 79.677536][ T36] audit: type=1400 audit(2000000050.791:377): avc: denied { node_bind } for pid=1825 comm="syz.2.371" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 79.707143][ T36] audit: type=1400 audit(2000000050.870:378): avc: denied { lock } for pid=1825 comm="syz.2.371" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.083836][ T311] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 80.144476][ T31] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 80.164682][ T751] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 80.236516][ T311] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 80.244794][ T311] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 80.255075][ T311] usb 1-1: config 220 has no interface number 2 [ 80.261360][ T311] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 80.274517][ T311] usb 1-1: config 220 interface 0 has no altsetting 0 [ 80.281365][ T311] usb 1-1: config 220 interface 76 has no altsetting 0 [ 80.288303][ T311] usb 1-1: config 220 interface 1 has no altsetting 0 [ 80.296490][ T311] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 80.305525][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.313567][ T311] usb 1-1: Product: syz [ 80.317788][ T311] usb 1-1: Manufacturer: syz [ 80.322472][ T311] usb 1-1: SerialNumber: syz [ 80.327881][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 80.327915][ T751] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 80.349679][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.352085][ T751] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 80.359365][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 80.369376][ T751] usb 2-1: config 220 has no interface number 2 [ 80.377116][ T31] usb 3-1: SerialNumber: syz [ 80.383966][ T751] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 80.401402][ T751] usb 2-1: config 220 interface 0 has no altsetting 0 [ 80.410196][ T751] usb 2-1: config 220 interface 76 has no altsetting 0 [ 80.417123][ T751] usb 2-1: config 220 interface 1 has no altsetting 0 [ 80.425310][ T751] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 80.434492][ T751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.442504][ T751] usb 2-1: Product: syz [ 80.446765][ T751] usb 2-1: Manufacturer: syz [ 80.451395][ T751] usb 2-1: SerialNumber: syz [ 80.545350][ T310] usb 4-1: USB disconnect, device number 36 [ 80.573481][ T311] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 80.590886][ T311] usb 1-1: No valid video chain found. [ 80.596443][ T311] usb 1-1: selecting invalid altsetting 0 [ 80.607042][ T311] usb 1-1: USB disconnect, device number 31 [ 80.660596][ T1846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.670643][ T1846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.687259][ T751] usb 2-1: selecting invalid altsetting 0 [ 80.693142][ T751] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 80.699499][ T751] usb 2-1: No valid video chain found. [ 80.708382][ T751] usb 2-1: USB disconnect, device number 31 [ 80.843763][ T1856] fuse: Bad value for 'user_id' [ 80.848675][ T1856] fuse: Bad value for 'user_id' [ 80.855732][ T36] audit: type=1400 audit(2000000052.008:379): avc: denied { read } for pid=1855 comm="syz.3.381" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 80.878260][ T36] audit: type=1400 audit(2000000052.008:380): avc: denied { open } for pid=1855 comm="syz.3.381" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 80.904297][ T36] audit: type=1400 audit(2000000052.058:381): avc: denied { relabelfrom } for pid=1855 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 80.923970][ T36] audit: type=1400 audit(2000000052.058:382): avc: denied { relabelto } for pid=1855 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 81.030691][ T31] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 81.043500][ T1861] overlayfs: conflicting lowerdir path [ 81.376997][ T31] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 81.407327][ T751] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 81.499285][ T9] usb 3-1: USB disconnect, device number 44 [ 81.505500][ T9] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 81.528518][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 81.534090][ T31] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 81.548673][ T1154] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 81.578937][ T751] usb 1-1: Using ep0 maxpacket: 8 [ 81.585177][ T751] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 81.595774][ T751] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 81.604973][ T751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.615089][ T751] usb 1-1: Product: syz [ 81.619348][ T751] usb 1-1: Manufacturer: syz [ 81.623963][ T751] usb 1-1: SerialNumber: syz [ 81.629309][ T751] usb 1-1: config 0 descriptor?? [ 81.721389][ T1154] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 81.731918][ T1154] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 81.745823][ T1154] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.754937][ T1154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 81.763012][ T1154] usb 2-1: SerialNumber: syz [ 81.771199][ T1885] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 81.981155][ T1884] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 82.191734][ T1884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.200289][ T1884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.211260][ T1922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.385'. [ 82.295695][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 82.412429][ T1154] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 82.451398][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.462201][ T9] usb 3-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 82.471294][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.480057][ T9] usb 3-1: config 0 descriptor?? [ 82.485922][ T9] usb 3-1: unsupported MDLM descriptors [ 82.691380][ T45] usb 3-1: USB disconnect, device number 45 [ 82.819171][ T368] usb 2-1: USB disconnect, device number 32 [ 82.874415][ T368] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 82.925136][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 83.237502][ T1968] fuse: Bad value for 'user_id' [ 83.242399][ T1968] fuse: Bad value for 'user_id' [ 83.520367][ T1972] 9pnet_fd: Insufficient options for proto=fd [ 83.546798][ T368] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 83.570261][ T9] kernel write not supported for file /ppp (pid: 9 comm: kworker/0:0) [ 83.699157][ T368] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.710137][ T368] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.724409][ T368] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.733713][ T368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.741778][ T368] usb 3-1: Product: syz [ 83.746221][ T368] usb 3-1: Manufacturer: syz [ 83.750894][ T368] usb 3-1: SerialNumber: syz [ 83.962428][ T368] cdc_ncm 3-1:1.0: bind() failure [ 83.968491][ T368] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 83.975321][ T368] cdc_ncm 3-1:1.1: bind() failure [ 83.981349][ T368] usb 3-1: USB disconnect, device number 46 [ 84.010687][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 84.105243][ T31] usb 4-1: string descriptor 0 read error: -71 [ 84.111552][ T31] usb 4-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 84.120648][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.132280][ T31] r8152-cfgselector 4-1: Unknown version 0x0000 [ 84.138541][ T31] r8152-cfgselector 4-1: rejected 8 configurations due to insufficient available bus power [ 84.148783][ T31] r8152-cfgselector 4-1: no configuration chosen from 8 choices [ 84.157009][ T31] r8152-cfgselector 4-1: USB disconnect, device number 37 [ 84.174522][ T9] usb 2-1: config 4 has an invalid interface number: 29 but max is 0 [ 84.182790][ T9] usb 2-1: config 4 has no interface number 0 [ 84.188999][ T9] usb 2-1: config 4 interface 29 altsetting 0 endpoint 0x4 has invalid maxpacket 2039, setting to 64 [ 84.204180][ T9] usb 2-1: config 4 interface 29 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 84.216596][ T9] usb 2-1: config 4 interface 29 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 84.227859][ T9] usb 2-1: Dual-Role OTG device on HNP port [ 84.234021][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=c811, bcdDevice=b0.13 [ 84.243755][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.251730][ T9] usb 2-1: Product: syz [ 84.256070][ T9] usb 2-1: Manufacturer: syz [ 84.260684][ T9] usb 2-1: SerialNumber: syz [ 84.266928][ T368] usb 1-1: USB disconnect, device number 32 [ 84.474109][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 84.474128][ T36] audit: type=1400 audit(2000000055.586:387): avc: denied { map } for pid=1991 comm="syz.0.400" path="/proc/386/task/387/cmdline" dev="proc" ino=15826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 84.510804][ T9] usb 2-1: USB disconnect, device number 33 [ 84.517245][ T36] audit: type=1400 audit(2000000055.606:388): avc: denied { ioctl } for pid=1991 comm="syz.0.400" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 84.565173][ T31] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 84.717420][ T31] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 84.730354][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 84.737100][ T31] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 84.746159][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.754754][ T31] usb 4-1: config 0 descriptor?? [ 84.766791][ T751] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 84.867586][ T1154] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 84.919294][ T751] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.930231][ T751] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 84.942131][ T751] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.951205][ T751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.959263][ T751] usb 3-1: Product: syz [ 84.963436][ T751] usb 3-1: Manufacturer: syz [ 84.968045][ T751] usb 3-1: SerialNumber: syz [ 84.975278][ T751] cdc_mbim 3-1:1.0: skipping garbage [ 85.019813][ T1154] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.032687][ T1154] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.042513][ T1154] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 85.051692][ T1154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 85.059723][ T1154] usb 1-1: SerialNumber: syz [ 85.169952][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 85.175943][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 85.180740][ T1994] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 85.186738][ T31] usb 4-1: USB disconnect, device number 38 [ 85.273083][ T1154] usb 1-1: 0:2 : does not exist [ 85.277986][ T1154] usb 1-1: unit 5: unexpected type 0x0c [ 85.289499][ T1154] usb 1-1: USB disconnect, device number 33 [ 85.298876][ T348] udevd[348]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.311097][ T368] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 85.473365][ T368] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 85.481570][ T368] usb 2-1: config 0 has no interface number 0 [ 85.489053][ T368] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 85.498140][ T368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.506160][ T368] usb 2-1: Product: syz [ 85.510327][ T368] usb 2-1: Manufacturer: syz [ 85.514967][ T368] usb 2-1: SerialNumber: syz [ 85.520325][ T368] usb 2-1: config 0 descriptor?? [ 85.727723][ T2006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.736714][ T2006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.748679][ T2006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.759984][ T2006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.768274][ T2006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.777000][ T2006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.785170][ T2006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.793688][ T2006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.801814][ T2006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.804447][ T1994] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 85.811990][ T2006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.827759][ T751] cdc_mbim 3-1:1.0: setting rx_max = 16384 [ 85.838830][ T2011] kvm: MONITOR instruction emulated as NOP! [ 85.883638][ T36] audit: type=1326 audit(2000000056.985:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2015 comm="syz.0.408" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cf0f9de99 code=0x0 [ 86.024939][ T2026] SELinux: failed to load policy [ 86.028697][ T368] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 86.043354][ T751] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 86.055532][ T751] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 86.056145][ T368] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -32 [ 86.074225][ T751] wwan wwan0: port wwan0mbim0 attached [ 86.075214][ T368] asix 2-1:0.251: probe with driver asix failed with error -32 [ 86.088681][ T368] usb 2-1: USB disconnect, device number 34 [ 86.100771][ T751] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, c6:08:f6:15:c0:a9 [ 86.122567][ T751] usb 3-1: USB disconnect, device number 47 [ 86.138886][ T2034] syzkaller1: entered promiscuous mode [ 86.146475][ T2034] syzkaller1: entered allmulticast mode [ 86.152573][ T751] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 86.211249][ T751] wwan wwan0: port wwan0mbim0 disconnected [ 86.368553][ T36] audit: type=1400 audit(2000000057.461:390): avc: denied { bind } for pid=2069 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.389207][ T2070] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.398187][ T2070] netlink: 'syz.3.416': attribute type 1 has an invalid length. [ 86.406936][ T2070] netlink: 9 bytes leftover after parsing attributes in process `syz.3.416'. [ 86.421670][ T36] audit: type=1400 audit(2000000057.461:391): avc: denied { name_bind } for pid=2069 comm="syz.3.416" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 86.448786][ T36] audit: type=1400 audit(2000000057.461:392): avc: denied { node_bind } for pid=2069 comm="syz.3.416" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 86.470334][ T368] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 86.620521][ T368] usb 2-1: Using ep0 maxpacket: 16 [ 86.626939][ T368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.638021][ T368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.648034][ T368] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.661021][ T368] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 86.670041][ T368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.678740][ T368] usb 2-1: config 0 descriptor?? [ 86.774950][ T36] audit: type=1400 audit(2000000057.878:393): avc: denied { create } for pid=2080 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 86.775803][ T2081] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 86.804587][ T36] audit: type=1400 audit(2000000057.908:394): avc: denied { relabelto } for pid=2080 comm="syz.0.420" name="file0" dev="tmpfs" ino=586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 86.811132][ T2081] netlink: 'syz.0.420': attribute type 28 has an invalid length. [ 86.832238][ T45] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 86.848132][ T36] audit: type=1400 audit(2000000057.908:395): avc: denied { associate } for pid=2080 comm="syz.0.420" name="file0" dev="tmpfs" ino=586 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 86.876241][ T36] audit: type=1400 audit(2000000057.949:396): avc: denied { unlink } for pid=293 comm="syz-executor" name="file0" dev="tmpfs" ino=586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 86.903981][ T2032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.913281][ T2032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.023608][ T2085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.032106][ T2085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.050747][ T368] usb 2-1: string descriptor 0 read error: -71 [ 87.058246][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 87.065309][ T45] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.078168][ T368] usbhid 2-1:0.0: can't add hid device: -71 [ 87.084149][ T368] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 87.092267][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 87.098974][ T45] usb 3-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 87.108574][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.116962][ T368] usb 2-1: USB disconnect, device number 35 [ 87.122085][ T310] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 87.127330][ T45] usb 3-1: config 0 descriptor?? [ 87.282731][ T310] usb 1-1: not running at top speed; connect to a high speed hub [ 87.292560][ T310] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.301639][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.309671][ T310] usb 1-1: Product: ࠚ [ 87.313862][ T310] usb 1-1: Manufacturer: Љ [ 87.318378][ T310] usb 1-1: SerialNumber: ࡃ [ 87.548939][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 87.555261][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 87.567838][ T310] cdc_ncm 1-1:1.0: bind() failure [ 87.577766][ T310] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 87.578993][ T45] usb 3-1: USB disconnect, device number 48 [ 87.589351][ T310] cdc_ncm 1-1:1.1: bind() failure [ 87.600579][ T310] usb 1-1: USB disconnect, device number 34 [ 87.664038][ T2107] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2107 comm=syz.3.428 [ 87.664642][ T2108] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2108 comm=syz.3.428 [ 87.829955][ T2119] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2119 comm=syz.3.433 [ 87.852104][ T1154] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 87.902022][ T310] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 88.003119][ T1154] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 88.013899][ T1154] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 88.022960][ T1154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.031641][ T1154] usb 2-1: config 0 descriptor?? [ 88.037675][ T1154] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 88.052093][ T310] usb 1-1: Using ep0 maxpacket: 8 [ 88.059028][ T310] usb 1-1: config 5 has an invalid interface number: 121 but max is 2 [ 88.067351][ T310] usb 1-1: config 5 has an invalid interface number: 50 but max is 2 [ 88.075562][ T310] usb 1-1: config 5 has an invalid interface number: 167 but max is 2 [ 88.083885][ T310] usb 1-1: config 5 has an invalid interface number: 56 but max is 2 [ 88.092102][ T310] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 88.092132][ T2129] netlink: 'syz.2.437': attribute type 3 has an invalid length. [ 88.100857][ T310] usb 1-1: config 5 has an invalid interface number: 162 but max is 2 [ 88.100882][ T310] usb 1-1: config 5 has an invalid interface number: 27 but max is 2 [ 88.109089][ T2129] netlink: 944 bytes leftover after parsing attributes in process `syz.2.437'. [ 88.117652][ T310] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 88.142777][ T310] usb 1-1: config 5 has 6 interfaces, different from the descriptor's value: 3 [ 88.146979][ T2129] syzkaller1: entered promiscuous mode [ 88.151865][ T310] usb 1-1: config 5 has no interface number 0 [ 88.157384][ T2129] syzkaller1: entered allmulticast mode [ 88.163802][ T310] usb 1-1: config 5 has no interface number 1 [ 88.174987][ T751] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 88.182624][ T310] usb 1-1: config 5 has no interface number 2 [ 88.188757][ T310] usb 1-1: config 5 has no interface number 3 [ 88.195039][ T310] usb 1-1: config 5 has no interface number 4 [ 88.201142][ T310] usb 1-1: config 5 has no interface number 5 [ 88.207319][ T310] usb 1-1: config 5 interface 121 altsetting 252 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 88.219153][ T310] usb 1-1: config 5 interface 121 altsetting 252 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 88.230336][ T310] usb 1-1: config 5 interface 121 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 88.241490][ T310] usb 1-1: config 5 interface 121 altsetting 252 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 88.248516][ T45] usb 2-1: USB disconnect, device number 36 [ 88.254811][ T310] usb 1-1: too many endpoints for config 5 interface 50 altsetting 253: 48, using maximum allowed: 30 [ 88.271727][ T310] usb 1-1: config 5 interface 50 altsetting 253 endpoint 0xA has invalid maxpacket 528, setting to 64 [ 88.283530][ T310] usb 1-1: config 5 interface 50 altsetting 253 has a duplicate endpoint with address 0x1, skipping [ 88.295835][ T310] usb 1-1: config 5 interface 50 altsetting 253 has 3 endpoint descriptors, different from the interface descriptor's value: 48 [ 88.309108][ T310] usb 1-1: too many endpoints for config 5 interface 167 altsetting 63: 168, using maximum allowed: 30 [ 88.320179][ T310] usb 1-1: config 5 interface 167 altsetting 63 has an invalid descriptor for endpoint zero, skipping [ 88.331244][ T310] usb 1-1: config 5 interface 167 altsetting 63 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 88.343074][ T310] usb 1-1: config 5 interface 167 altsetting 63 endpoint 0x82 has invalid maxpacket 24115, setting to 1024 [ 88.354515][ T310] usb 1-1: config 5 interface 167 altsetting 63 bulk endpoint 0x82 has invalid maxpacket 1024 [ 88.364851][ T310] usb 1-1: config 5 interface 167 altsetting 63 has 2 endpoint descriptors, different from the interface descriptor's value: 168 [ 88.392044][ T310] usb 1-1: config 5 interface 56 altsetting 6 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 88.403006][ T310] usb 1-1: config 5 interface 56 altsetting 6 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 88.413847][ T751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.424751][ T751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.434521][ T310] usb 1-1: config 5 interface 56 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 88.445172][ T751] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 88.454271][ T751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.462285][ T310] usb 1-1: config 5 interface 56 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 88.473662][ T310] usb 1-1: config 5 interface 56 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 88.484858][ T751] usb 4-1: config 0 descriptor?? [ 88.491121][ T310] usb 1-1: config 5 interface 56 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 88.501774][ T310] usb 1-1: config 5 interface 56 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 88.512414][ T310] usb 1-1: config 5 interface 56 altsetting 6 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 88.523222][ T310] usb 1-1: config 5 interface 56 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 88.534017][ T310] usb 1-1: config 5 interface 56 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 88.544664][ T310] usb 1-1: config 5 interface 56 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 88.555325][ T310] usb 1-1: config 5 interface 56 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 88.566143][ T310] usb 1-1: config 5 interface 56 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 88.576792][ T310] usb 1-1: config 5 interface 56 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 88.587612][ T310] usb 1-1: config 5 interface 162 altsetting 10 has a duplicate endpoint with address 0xC, skipping [ 88.598427][ T310] usb 1-1: config 5 interface 162 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 88.611591][ T310] usb 1-1: too many endpoints for config 5 interface 27 altsetting 163: 120, using maximum allowed: 30 [ 88.622851][ T310] usb 1-1: config 5 interface 27 altsetting 163 bulk endpoint 0x2 has invalid maxpacket 1023 [ 88.633097][ T310] usb 1-1: config 5 interface 27 altsetting 163 has a duplicate endpoint with address 0xA, skipping [ 88.643972][ T310] usb 1-1: config 5 interface 27 altsetting 163 has an endpoint descriptor with address 0x11, changing to 0x1 [ 88.655671][ T310] usb 1-1: config 5 interface 27 altsetting 163 has a duplicate endpoint with address 0x1, skipping [ 88.666604][ T310] usb 1-1: config 5 interface 27 altsetting 163 has a duplicate endpoint with address 0xA, skipping [ 88.677428][ T310] usb 1-1: config 5 interface 27 altsetting 163 has an invalid descriptor for endpoint zero, skipping [ 88.688432][ T310] usb 1-1: config 5 interface 27 altsetting 163 has an invalid descriptor for endpoint zero, skipping [ 88.699464][ T310] usb 1-1: config 5 interface 27 altsetting 163 has a duplicate endpoint with address 0xC, skipping [ 88.710367][ T310] usb 1-1: config 5 interface 27 altsetting 163 has 9 endpoint descriptors, different from the interface descriptor's value: 120 [ 88.723915][ T310] usb 1-1: config 5 interface 121 has no altsetting 0 [ 88.730756][ T310] usb 1-1: config 5 interface 50 has no altsetting 0 [ 88.732089][ T45] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 88.738175][ T310] usb 1-1: config 5 interface 167 has no altsetting 0 [ 88.751860][ T310] usb 1-1: config 5 interface 56 has no altsetting 0 [ 88.758785][ T310] usb 1-1: config 5 interface 162 has no altsetting 0 [ 88.765604][ T310] usb 1-1: config 5 interface 27 has no altsetting 0 [ 88.783422][ T310] usb 1-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice=18.8f [ 88.792523][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.800531][ T310] usb 1-1: Product: ఊ [ 88.804725][ T310] usb 1-1: SerialNumber: Ꮐ戓﯍Ⴚ탸圣㣉ꕨ葵ċਲꍒ㠝꽔ᨩ부ታ긵뙤珄鹏㿼䙺閩慜룫곭甛嗨衋臭鷓뽺黂䗎㞕偮糴퐌꓍必惴⏤⃂큣ㄞ哖摐蠍嬽膯嶛㸷鸻旅὿篎镃왍鴳㽒㭱庝ﮝ锤嶬쨸젺鶶왓ꂩ᫹燷涯赪㟩䮏ᴑᚷ빷떃䡭残ꝇ䦮ଓẝ┕윒覡勡鬭陑夨蕅嶒졥ตꍴ盘㌦阈由⭎땉ல눢㲾옘 [ 88.841449][ T2100] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.923074][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 88.934184][ T45] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 88.943360][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.952034][ T45] usb 2-1: config 0 descriptor?? [ 88.959792][ T45] aiptek 2-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 88.969025][ T45] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 89.051533][ T2100] can: request_module (can-proto-0) failed. [ 89.073371][ T310] usb 1-1: USB disconnect, device number 35 [ 89.113570][ T751] usbhid 4-1:0.0: can't add hid device: -32 [ 89.119532][ T751] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 89.132495][ T751] usb 4-1: USB disconnect, device number 39 [ 89.577986][ T2165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.447'. [ 89.643463][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 89.643483][ T36] audit: type=1400 audit(2000000060.749:401): avc: denied { shutdown } for pid=2172 comm="syz.3.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.952029][ T310] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 90.052296][ T45] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 90.102009][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 90.108439][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 90.116844][ T310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.126978][ T310] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.137314][ T310] usb 4-1: New USB device found, idVendor=0499, idProduct=1057, bcdDevice= 0.40 [ 90.146369][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.154404][ T310] usb 4-1: Product: syz [ 90.158572][ T310] usb 4-1: Manufacturer: syz [ 90.163185][ T310] usb 4-1: SerialNumber: syz [ 90.203115][ T45] usb 1-1: config 9 has an invalid interface number: 13 but max is 0 [ 90.212689][ T45] usb 1-1: config 9 has no interface number 0 [ 90.218793][ T45] usb 1-1: config 9 interface 13 has no altsetting 0 [ 90.227088][ T45] usb 1-1: New USB device found, idVendor=14b2, idProduct=3c10, bcdDevice=f4.d7 [ 90.236160][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.244175][ T45] usb 1-1: Product: syz [ 90.248332][ T45] usb 1-1: Manufacturer: syz [ 90.252948][ T45] usb 1-1: SerialNumber: syz [ 90.375863][ T310] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 90.385604][ T310] usb 4-1: USB disconnect, device number 40 [ 90.396622][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 90.462745][ T45] usb 1-1: USB disconnect, device number 36 [ 90.978241][ T36] audit: type=1400 audit(2000000062.079:402): avc: denied { setattr } for pid=2196 comm="syz.0.455" name="RAW" dev="sockfs" ino=17406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.020938][ T36] audit: type=1400 audit(2000000062.109:403): avc: denied { accept } for pid=2186 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.157524][ T2212] SELinux: failed to load policy [ 91.163225][ T2212] netlink: 'syz.3.459': attribute type 64 has an invalid length. [ 91.170968][ T2212] netlink: 5 bytes leftover after parsing attributes in process `syz.3.459'. [ 91.181086][ T2213] ------------[ cut here ]------------ [ 91.186583][ T2213] WARNING: CPU: 0 PID: 2213 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 91.196078][ T2213] Modules linked in: [ 91.199997][ T2213] CPU: 0 UID: 0 PID: 2213 Comm: syz.3.459 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 91.211497][ T2213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 91.221598][ T2213] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 91.227619][ T2213] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 13 dd 0b 06 00 0f 85 c2 00 00 00 c6 05 06 dd 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 91.247269][ T2213] RSP: 0018:ffffc9001119f560 EFLAGS: 00010246 [ 91.249172][ T368] usb 2-1: USB disconnect, device number 37 [ 91.253380][ T2213] RAX: 0000000000000000 RBX: 000000000000000e RCX: 0000000000000000 [ 91.253396][ T2213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9001119f618 [ 91.253410][ T2213] RBP: ffffc9001119f6a0 R08: ffffc9001119f617 R09: 0000000000000000 [ 91.253425][ T2213] R10: ffffc9001119f600 R11: fffff52002233ec3 R12: ffffc9001119f5a0 [ 91.253440][ T2213] R13: dffffc0000000000 R14: 1ffff92002233eb0 R15: 0000000000000000 [ 91.253454][ T2213] FS: 00007fdb019046c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 91.294294][ T45] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 91.299312][ T2213] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.322409][ T2213] CR2: 00007fdb018c1ff8 CR3: 000000011b9de000 CR4: 00000000003526b0 [ 91.330400][ T2213] Call Trace: [ 91.333830][ T2213] [ 91.336775][ T2213] ? vfs_write+0x3c4/0xfd0 [ 91.341202][ T2213] ? ksys_write+0x145/0x260 [ 91.345786][ T2213] ? x64_sys_call+0x271c/0x2ee0 [ 91.350655][ T2213] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 91.356445][ T2213] ? hashtab_init+0xd6/0x1f0 [ 91.361062][ T2213] ___kmalloc_large_node+0x81/0x220 [ 91.366289][ T2213] ? hashtab_init+0xd6/0x1f0 [ 91.370902][ T2213] __kmalloc_large_node_noprof+0x1e/0xd0 [ 91.376568][ T2213] ? hashtab_init+0xd6/0x1f0 [ 91.381173][ T2213] __kmalloc_noprof+0x326/0x510 [ 91.386047][ T2213] ? kasan_save_alloc_info+0x3a/0x50 [ 91.391357][ T2213] hashtab_init+0xd6/0x1f0 [ 91.395803][ T2213] ? common_read+0x175/0x490 [ 91.400406][ T2213] symtab_init+0x44/0x70 [ 91.404678][ T2213] common_read+0x1e7/0x490 [ 91.409108][ T2213] ? hashtab_init+0xd6/0x1f0 [ 91.413733][ T2213] ? __cfi_common_read+0x10/0x10 [ 91.418682][ T2213] ? hashtab_init+0x100/0x1f0 [ 91.423398][ T2213] policydb_read+0xa83/0x2860 [ 91.428098][ T2213] ? __kasan_kmalloc+0x96/0xb0 [ 91.432895][ T2213] ? __cfi_policydb_read+0x10/0x10 [ 91.438014][ T2213] ? security_load_policy+0x130/0x12d0 [ 91.443520][ T2213] security_load_policy+0x16a/0x12d0 [ 91.448823][ T2213] ? avc_has_perm_noaudit+0x289/0x360 [ 91.454223][ T2213] ? _raw_spin_unlock+0x45/0x60 [ 91.459086][ T2213] ? __kasan_check_write+0x18/0x20 [ 91.464223][ T2213] ? mutex_lock+0x97/0x1d0 [ 91.468655][ T2213] ? __cfi_security_load_policy+0x10/0x10 [ 91.473536][ T45] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 91.474424][ T2213] ? __kasan_check_write+0x18/0x20 [ 91.483658][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.488181][ T2213] sel_write_load+0x258/0x600 [ 91.498791][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.502952][ T2213] ? __cfi_sel_write_load+0x10/0x10 [ 91.516160][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.518987][ T2213] ? bpf_lsm_file_permission+0xd/0x20 [ 91.528567][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.533403][ T2213] ? __cfi_sel_write_load+0x10/0x10 [ 91.541893][ T45] usb 1-1: Product: syz [ 91.546581][ T2213] vfs_write+0x3c4/0xfd0 [ 91.551072][ T45] usb 1-1: Manufacturer: syz [ 91.554974][ T2213] ? __cfi_vfs_write+0x10/0x10 [ 91.554998][ T2213] ? __kasan_check_write+0x18/0x20 [ 91.560139][ T45] usb 1-1: SerialNumber: syz [ 91.564349][ T2213] ? mutex_lock+0x97/0x1d0 [ 91.578467][ T2213] ? __cfi_mutex_lock+0x10/0x10 [ 91.581182][ T45] cdc_mbim 1-1:1.0: skipping garbage [ 91.583362][ T2213] ksys_write+0x145/0x260 [ 91.592062][ T45] cdc_mbim 1-1:1.0: skipping garbage [ 91.593030][ T2213] ? xfd_validate_state+0x68/0x140 [ 91.598885][ T45] usb 1-1: selecting invalid altsetting 1 [ 91.603362][ T2213] ? __cfi_ksys_write+0x10/0x10 [ 91.613950][ T2213] ? __kasan_check_write+0x18/0x20 [ 91.619074][ T2213] ? fpregs_restore_userregs+0x11c/0x260 [ 91.624732][ T2213] __x64_sys_write+0x7f/0x90 [ 91.629346][ T2213] x64_sys_call+0x271c/0x2ee0 [ 91.634068][ T2213] do_syscall_64+0x57/0xf0 [ 91.638497][ T2213] ? clear_bhb_loop+0x50/0xa0 [ 91.643205][ T2213] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.649113][ T2213] RIP: 0033:0x7fdb0099de99 [ 91.653593][ T2213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.673287][ T2213] RSP: 002b:00007fdb01904028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 91.681712][ T2213] RAX: ffffffffffffffda RBX: 00007fdb00c26090 RCX: 00007fdb0099de99 [ 91.689720][ T2213] RDX: 00000000000190ec RSI: 0000200000000000 RDI: 0000000000000005 [ 91.697728][ T2213] RBP: 00007fdb00a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 91.705728][ T2213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.713736][ T2213] R13: 00007fdb00c26128 R14: 00007fdb00c26090 R15: 00007fffe2d1db38 [ 91.721724][ T2213] [ 91.724765][ T2213] ---[ end trace 0000000000000000 ]--- [ 91.730381][ T2213] SELinux: failed to load policy [ 91.780528][ T45] cdc_mbim 1-1:1.0: bind() failure [ 91.787961][ T45] usb 1-1: USB disconnect, device number 37