last executing test programs: 9.024352949s ago: executing program 1 (id=530): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x80a0000, 0xdddd1000, 0xa, 0x0, 0x8, 0x8, 0x1, 0x2, 0x0, 0x4, 0x9, 0x10}, {0x58000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x5, 0x3}, {0x80a0000, 0xdddd0000, 0xf, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000080ff0000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b00000000000000fe8000000000000000000000000000bb0000000000"], 0x23c}}, 0x4080) 9.024258359s ago: executing program 1 (id=531): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) syz_usb_connect(0x1, 0x36, &(0x7f0000000100)=ANY=[], 0x0) 6.027147856s ago: executing program 1 (id=545): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.706932679s ago: executing program 1 (id=551): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0xff}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffbfffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74bc}, 0x0, 0x1a0b0}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00000000000000000000000000000000000000000000040000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x40) 4.652413341s ago: executing program 1 (id=553): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) fsopen(0x0, 0x1) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000140)="4b5e0b9f") r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0xa, 0x4, 0x87) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001440), 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendfile(r5, r6, 0x0, 0xf0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) write$vga_arbiter(r7, &(0x7f0000000000)=@other={'decodes', ' ', 'none'}, 0xd) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@local, 0x18, r8}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r7, 0xf517, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r10 = socket$inet(0x2, 0x2, 0x1) bind$inet(r10, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r11, &(0x7f00000001c0)={0xa, 0x4e22, 0x4, @private0, 0x4}, 0x1c) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x6, r8, 0xfff}, 0xc) 4.555281953s ago: executing program 0 (id=556): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4147, 0x1033}], 0x1, 0x8b3, 0x0) (fail_nth: 6) 4.511245834s ago: executing program 0 (id=557): socket(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000040)="240000001a005f0214f9f407000904000a000000200100000000000e291bfe18211d491799", 0x25) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000010)=0x400, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r2 = syz_clone3(&(0x7f0000001880)={0x20000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000020)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc000000000000000000000000000001e000000200000000000000000000000100000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000200000000000000000000000000000000000000000002004000000000000000fdfdffffffffffff50000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 4.492027945s ago: executing program 0 (id=558): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="402004000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000080)={0x20, 0x22, 0x82, {0x82, 0x23, "2859ad41fcb6d948723a85211b4f9082277a1d7c4c03f140f220833dea06cb3fe1449d8d30633d5f08bcfb44549d74cbee2367c38c1db6a0f2c56dccb42c9a84c4e4f3ae245a03dab8d75c765b3da47039a9bc4cdeebb4d4751a81da77ea6838498340b52b4439e98f160eb0c0d60c1951c13c9731fc5a5d0794e3d36ca0c69b"}}, &(0x7f0000000140)={0x0, 0x3, 0xed, @string={0xed, 0x3, "028471d07b681ac2ff7e0857c83760e6d838faf0b2d44e17fb935481e4abc6ad844b3b60fc4a7ad526a723f1cefb7645860f4015dd2a014ea52eef294c7949ca85f21d985b2b48bad0d4fe88d3d3d2a481e3f2a246e02668c4f46435835be83349c6acbfb57601c686dba05b9a56ca625b546764dc2498a04fbe7cf2f368e03d7d51242b6689ce8f789622a3282ab891b0b2785adc8b94a73038ad3b2e5a431f40b09fe9182327e506c9f4000dddbb048c5e0e8ba266dc1e1e9682cf7c13a54e23bfd9eb0cc1703458a85800ccfaee012d24ca75281cb406c0044762b9b501f288f960821dfcfae9482be8"}}, &(0x7f0000000380)={0x0, 0xf, 0x47, {0x5, 0xf, 0x47, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0xc3, 0x37, 0x8, 0x3c}, @generic={0x2d, 0x10, 0x4, "ffaf46d968e1a414ee0527ee254dcfed9dc3fe31bc6990e3cd32638f95d9877853dca80370a36dc266ab"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x6}, @ptm_cap={0x3}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x1, 0x28, 0xa1, "41282892", "5f3af9b1"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0xe2, 0x9, 0x7, 0x7, 0xff10, 0x4}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000b40)={0x20, 0x7, 0x87, "26388d8184b217ec3411eacb3220e736060a0587402e07714a0177fe8811a2cab23f3058a1ec0a95ab99139d5bd23570566844658174dcc51016d180786f38d78dc4bce6871261561e818c5d4f442ff0edd5648b4277cdc17907d0d884c436e5c62728fea7be70a61e2a00e67fb06682d960f0af3305080d8b0ee1ed548519368932102e6ff534"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x90}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1e0, 0x10}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0xa65c}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0xac}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "80d1"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000007c0)={0x40, 0x13, 0x6}, &(0x7f0000000800)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, &(0x7f0000000840)={0x40, 0x19, 0x2, "641a"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x1}}) 2.608541633s ago: executing program 2 (id=561): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYRESHEX], 0x2f8}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) 2.592326574s ago: executing program 2 (id=562): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000104000000000000060000000000000009000000002b000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff030000000000000101000300000000840105"], 0x23c}}, 0x4080) 2.545516065s ago: executing program 1 (id=563): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000001240)=ANY=[@ANYBLOB="1201100100000020ffffffff00000000000009028e000301ffc010080b0003010130070904002000010130000a2401102a0007000000132403d96e90deaef0fca9000000000700b7000d2d07020500000000030000000904010000010230000904010010010000000000000998026ed4040a252500000000010000090402000001023000090402010101023000afb762ea1aade8c366631114010f11251f8a82090002030a020a2525000400000507006fdbad88c33e730c02798360a1bca9afbecaea488f8aa2ee227ad11efa897e2c535b7f23723ccf8c44bbf2a45d2057c5f366adba1b756482d896e99d2c20f2f6b55b1b251f57ca1ea77c5dc4121cccabdb1e068f9a0221ab26ad2601d428cf357d84f3"], 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000001140)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) capget(&(0x7f00000011c0)={0x20071026, r1}, &(0x7f0000001200)={0xffff, 0x5, 0x9, 0x8, 0x40, 0x9}) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) fcntl$setstatus(r3, 0x4, 0x42000) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r4, 0x4, 0x8e000) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r5, 0x4, 0x42000) close(0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet6(r0, &(0x7f0000001380)="20ce6318531c3e8be1b46ce4366fd5800d1fd5dd50be6e6d929b4e68247ca12795f00ab45456d9b3f686425f95f718aed7bd00f79420bd4a9949ebb1f8104d3c11e1479573a62a5e32b3173e1bb9fcf32acf0855218b84c07fb35a90e025a0b316dca2cd57ed57b53f470970a86c6144f2aee8d8037b88622fff61cf8c48c2df93a9fe03ce67f0a46be8b6e16384eae095b914523acb62960d5ba3eeb8", 0x9d, 0x4046, &(0x7f0000001440)={0xa, 0x4e22, 0x710, @mcast1, 0x314}, 0x1c) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_buf(r6, 0x107, 0x2, &(0x7f0000000080)="5ec78db485c534bdf7a2172f3f1f30da", 0x10) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4147, 0x1033}], 0x1, 0x8b3, 0x0) 2.545156405s ago: executing program 2 (id=564): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) (async) unshare(0x22020600) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000af4000004000000140001"], 0x44}}, 0x40800) dup2(r0, r0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) (async) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') pread64$ublk_ch(r5, 0x0, 0x0, 0x5) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_cmd={0x47, 0x2, 0x20000004, 0x3ff, 0x3f, 0x7, 0x1, 0x3, 0x6, 0x3, 0x101, 0x142f, 0x8, 0x3, 0x0, 0xa, [0x4000000, 0xff]}}) (async) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_cmd={0x47, 0x2, 0x20000004, 0x3ff, 0x3f, 0x7, 0x1, 0x3, 0x6, 0x3, 0x101, 0x142f, 0x8, 0x3, 0x0, 0xa, [0x4000000, 0xff]}}) r9 = dup(r7) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x3a}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0x1, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x1, 0x3, 0x0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9621, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0xe7e4, 0x400, 0x3, 0x4e}, &(0x7f0000000300)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb347, 0x40, 0x1, 0x148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x600f, 0x4, 0x1, 0x64}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xebd9, 0x4000, 0x0, 0x205}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x58eb, 0x1, 0x3, 0xf}}], 0x4, &(0x7f0000001580)={0x2e, 0x28, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x5}, 0x0, 0x0, '\x00', {0x4, 0xb43, 0x0, &(0x7f0000000580)=@buf_4k="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"}}, &(0x7f0000001600)) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r10, &(0x7f0000000640)={0x2020}, 0x2020) syz_io_uring_setup(0x40fb, &(0x7f00000016c0)={0x0, 0xf920, 0x800, 0x2, 0x77}, &(0x7f0000001740), &(0x7f0000001780), &(0x7f00000017c0)) syz_ublk_setup_io_uring(0x7c4a, &(0x7f0000001800)={0x0, 0x7f3a, 0x1, 0x0, 0x1d1}, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r11) (async) r12 = dup(r11) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40018140) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40018140) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_SIOCSIFBR(r13, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) (async) ioctl$sock_SIOCSIFBR(r13, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r14 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r14, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @multicast1}, {0x1, @remote}, 0x3e, {0x2, 0x4e22, @empty}, 'veth1_to_team\x00'}) (async) ioctl$sock_inet_SIOCSARP(r14, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @multicast1}, {0x1, @remote}, 0x3e, {0x2, 0x4e22, @empty}, 'veth1_to_team\x00'}) 2.512657046s ago: executing program 2 (id=566): socket(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000040)="240000001a005f0214f9f407000904000a000000200100000000000e291bfe18211d491799", 0x25) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000010)=0x400, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r2 = syz_clone3(&(0x7f0000001880)={0x20000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000020)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc000000000000000000000000000001e000000200000000000000000000000100000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000200000000000000000000000000000000000000000002004000000000000000fdfdffffffffffff50000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 2.512585396s ago: executing program 3 (id=567): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd7000fddbdf25fc020000000000000000000000000000ac1e00010000000000000000000000000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000200100000000000000000000000000190000000000000000000000000000000000000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000007000000000000000000000000000000000000002abd7000000000000a002ab3000000000000000048000200"], 0x138}}, 0x0) 2.512223456s ago: executing program 2 (id=568): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) sigaltstack(&(0x7f0000000000)={0x0}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000013301010000000000000000010004000500010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r2, &(0x7f00000000c0)='.\x00', 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) fsopen(&(0x7f0000000100)='binder\x00', 0x0) close(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) sigaltstack(&(0x7f0000000000)={0x0}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000013301010000000000000000010004000500010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (async) fspick(r2, &(0x7f00000000c0)='.\x00', 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) bind$802154_dgram(r3, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) (async) fsopen(&(0x7f0000000100)='binder\x00', 0x0) (async) close(r0) (async) 2.461274847s ago: executing program 3 (id=569): prctl$PR_MCE_KILL(0x29, 0x0, 0x2) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0xed81, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xe0, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x1, 0x3, 0xff, {0x9, 0x21, 0xff7d, 0x57, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x7, 0x64}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) unshare(0x400) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRESDEC=0x0]) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7801000010000100ffffffff00000000fc000000000000000000000000000001fe8000000000000000000000000000bb000400004e2300000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e000100001a0000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000040000200000000000000000000000000000200000000000000000000000a000000cd00000000000000680002"], 0x178}}, 0x800) 2.461105357s ago: executing program 2 (id=570): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x50, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x5f, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x1, 0x1, 0xb0, 0x7, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0xa, {{0x8, 0x24, 0x6, 0x0, 0x0, "3a1db1"}, {0x5, 0x24, 0x0, 0xa400}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xc816, 0x8, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xfd, 0xf9, 0x4}}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x406}}, {0x54, &(0x7f0000000200)=@string={0x54, 0x3, "0a6c7565037821d63238eb4e64e34788dc017f4f06270b04536c78d012dd11bdea8311695c86ff1d001a3464737f3c44b4c6f9c5631b70050c515dc9a33d6d3ba6b610278b0c2c6707613b4688e6ddd837d4"}}, {0xd5, &(0x7f0000000280)=@string={0xd5, 0x3, "7154a782d8308ea225976d40a38dc6b44a968fcf5d3231f449418cd192a12428a36b0f2499e5720089c0c761affd3ba5aca3c2b38fb76b53dd6fd44dcb5c1215e89344569eeeccd953ffc23d3f9cf120aa042df4c385d7fa3c11cd1983b462e372a7e7659fb0103103af5f413ede9e1b179304bb78b21153369d1ff3f75e9d60436e86c3d0f829bb8e470f11fb32fd2c25a3ca285bc0e82d9278c832e225582c0ca6b570bdb35332a291fab6a6b4ddcb31ae2853f2cc0c35890fcecb95f3e870da9b9f51926e8b00f42043b003d83b080c5c5c"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2001c4000000f362b498cb084dd876537131504563f3914d54ea089b220acc73a6b0cf80208b816f0b123870a5cb7a8faad9c2265b585a222075e54a00c4a0f7a1740a48d5844d1fbcc935d14801b3dc03cef33a4555"], 0x0}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.480032662s ago: executing program 0 (id=571): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000100)=[0x4, 0xf, 0x3, 0xe, 0xfffffff7, 0xde27, 0xefc, 0x79]) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000140)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a000000000000008443f504b089dc5abadaf91d5cc1c896f1dee1cf6873ef17a3fb3b2ed8cd9e5fb295b8eab3be06f82503468ec9179153b6a06446b10d36a5faca735bc33104282e6897e85b331f92a1f563308f2c8d9caab8dd673aebacfafca339a3b19b6ca9d2709d4d463e38093ffb779ba8460b9e6b27d5cec1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac141440000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x4100) 1.458771952s ago: executing program 0 (id=572): syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000084e150e5040000102030109026900030180e009080b0101010a2000090400000001012000092401020007090002090401000001022000090401010101022000090501090002050409082501810009020009040200000102200009040201010102200009058209ff0305041008250183000a0200a7b35ac3b1b23cb1dfbffd273aeb45617b65409ae804376bd03822eb67e7df1e03bbd8ae2f2065aff38c1bf48b9ae7ba400a560685727cf52740ab45d02c693548f25d6aafab01feb749e8b3a6f18b8f494256"], 0x0) 1.245319988s ago: executing program 3 (id=573): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="800100001000010000000000000000007f0000010000000000000000000000007f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000200000000000000000000190000001234320000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020002000000000000000000480002006469676573745f6e756c6c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480002006369706865725f6e756c6c0000"], 0x180}}, 0x0) 1.245143308s ago: executing program 3 (id=574): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240102000a000201020904010000010200000904010101010200000905010910000206000725010c0040000904020000010201010200000905820900020303100725010c08ff030000000000005d0a17d0cf765f6b8f6a010c57924e234b27e9a7bfb147f06f15d90efcb5c15864aded1010658d2faa4089a030a11da1c0bc7acf4578505d0a639d283ae28a8a49a9c6c8ed51c66d28da4deadd4708749c884088c7ec204ffe00468455c85af3a2d8672ad962b24ad69ec151656910ed829a5c81f6f5b64767c02d0a87ca2d3e703a244cfd4cbc5921206ccba9b5cb4f3cb98453791dfc3b8c1ad084e56de4f5172e490898d66589eda41e346731c394ebb0ce201b7c5ccaf132949c15b857933c20ff7e33723b3a41f651bc6385cdd6606b94ef7071582f43869fde414698d5e9288d"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 168.683476ms ago: executing program 0 (id=575): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x59, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x5f, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x6f, 0xb0, 0x1, "", [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0xa, {{0x8, 0x24, 0x6, 0x0, 0x0, '\x00\x00\x00'}, {0x5, 0x24, 0x0, 0xa400}, {0xd, 0x24, 0xf, 0x1, 0x2c, 0xc816, 0x4, 0x7}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x3d, 0x52}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x1, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xfd, 0xe8, 0x4}}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x3d, &(0x7f0000000040)={0x5, 0xf, 0x3d, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0xf2, 0x2, 0x0, 0x0, 0xfffc, [0x0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "01ccd4eb6106cac62ba35cdda1c97bbb"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x7fffff2, 0xf, 0x2, [0xffc000]}]}}) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r5, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r4, 0x407, 0x7000001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) execve(0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000400)={@val={0xa, 0x8914}, @void, @eth={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x5, 0x6, "eac1a7", 0x14, 0x6, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x2c15, 0x0, 0x5}}}}}}}}, 0x4e) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 30.032329ms ago: executing program 3 (id=576): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/oops_count', 0x0, 0x63) read$FUSE(r0, 0x0, 0x3) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async, rerun: 64) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) (rerun: 64) ioctl$KVM_SMI(r0, 0xaeb7) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(r2, 0x409, 0x7) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x8, 0x40, 0x8, 0x800, 0x11, "bf81c66cefbeff76"}) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume_offset', 0x2, 0x81) sendfile(r4, r4, 0x0, 0x1200000000000) 0s ago: executing program 3 (id=577): socket(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000040)="240000001a005f0214f9f407000904000a000000200100000000000e291bfe18211d491799", 0x25) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000010)=0x400, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r3 = syz_clone3(&(0x7f0000001880)={0x20000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x0) connect$inet(r0, &(0x7f0000000020)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc000000000000000000000000000001e000000200000000000000000000000100000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000200000000000000000000000000000000000000000002004000000000000000fdfdffffffffffff50000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) kernel console output (not intermixed with test programs): ype=1400 audit(1786093362.480:234): avc: denied { name_bind } for pid=1149 comm="syz.0.306" src=8422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 75.826586][ T1150] ======================================================= [ 75.826586][ T1150] WARNING: The mand mount option has been deprecated and [ 75.826586][ T1150] and is ignored by this kernel. Remove the mand [ 75.826586][ T1150] option from the mount to silence this warning. [ 75.826586][ T1150] ======================================================= [ 76.224803][ T31] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 76.375816][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.386823][ T31] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 76.395933][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.404659][ T31] usb 1-1: config 0 descriptor?? [ 76.542377][ T360] usb 3-1: USB disconnect, device number 31 [ 76.594785][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.594884][ T327] Bluetooth: hci0: command 0x1003 tx timeout [ 76.614877][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 76.621257][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 76.631000][ T1168] syzkaller0: entered promiscuous mode [ 76.632888][ T31] usb 1-1: USB disconnect, device number 33 [ 76.636709][ T1168] syzkaller0: entered allmulticast mode [ 76.680071][ T1170] tipc: Enabling of bearer rejected, failed to enable media [ 76.690244][ T1170] tipc: Enabling of bearer rejected, already enabled [ 76.711562][ T1172] netlink: 68 bytes leftover after parsing attributes in process `syz.1.315'. [ 76.733624][ T1174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 76.884790][ T360] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 77.014802][ T360] usb 3-1: device descriptor read/64, error -71 [ 77.084787][ T321] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 77.104829][ T31] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 77.189338][ T10] usb 4-1: USB disconnect, device number 32 [ 77.189405][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 77.235103][ T321] usb 2-1: Using ep0 maxpacket: 32 [ 77.241449][ T321] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 77.249695][ T321] usb 2-1: config 0 has no interface number 0 [ 77.254789][ T360] usb 3-1: device descriptor read/64, error -71 [ 77.255862][ T321] usb 2-1: config 0 interface 184 has no altsetting 0 [ 77.269707][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.280630][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 77.289777][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.298220][ T321] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 77.307398][ T321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.315697][ T31] usb 1-1: config 0 descriptor?? [ 77.320855][ T321] usb 2-1: Product: syz [ 77.325672][ T321] usb 2-1: Manufacturer: syz [ 77.330309][ T321] usb 2-1: SerialNumber: syz [ 77.335665][ T321] usb 2-1: config 0 descriptor?? [ 77.341429][ T321] smsc75xx v1.0.0 [ 77.494792][ T10] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 77.502376][ T360] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 77.634904][ T360] usb 3-1: device descriptor read/64, error -71 [ 77.655903][ T10] usb 4-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 77.666967][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 77.675626][ T10] usb 4-1: string descriptor 0 read error: -22 [ 77.681831][ T10] usb 4-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 77.691270][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.700244][ T1184] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 77.874892][ T360] usb 3-1: device descriptor read/64, error -71 [ 77.910632][ T1184] netlink: 32 bytes leftover after parsing attributes in process `syz.3.321'. [ 77.926292][ T1164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.934893][ T1164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.943070][ T321] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 77.953995][ T321] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 77.963689][ T321] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 77.973962][ T321] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 77.994873][ T360] usb usb3-port1: attempt power cycle [ 78.135207][ T31] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 78.142845][ T31] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input28 [ 78.355078][ T360] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 78.385780][ T360] usb 3-1: device descriptor read/8, error -71 [ 78.431140][ T10] usbhid 4-1:1.0: can't add hid device: -71 [ 78.440313][ T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 78.458529][ T10] usb 4-1: USB disconnect, device number 33 [ 78.516352][ T360] usb 3-1: device descriptor read/8, error -71 [ 78.754808][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 78.762453][ T360] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 78.785839][ T360] usb 3-1: device descriptor read/8, error -71 [ 78.894810][ T10] usb 4-1: device descriptor read/64, error -71 [ 78.915944][ T360] usb 3-1: device descriptor read/8, error -71 [ 79.024925][ T360] usb usb3-port1: unable to enumerate USB device [ 79.134795][ T10] usb 4-1: device descriptor read/64, error -71 [ 79.374791][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 79.504795][ T10] usb 4-1: device descriptor read/64, error -71 [ 79.569270][ T1192] netlink: 68 bytes leftover after parsing attributes in process `syz.2.324'. [ 79.591814][ T679] Bluetooth: hci0: Frame reassembly failed (-84) [ 79.591920][ T1194] FAULT_INJECTION: forcing a failure. [ 79.591920][ T1194] name failslab, interval 1, probability 0, space 0, times 1 [ 79.598542][ T679] Bluetooth: hci0: Frame reassembly failed (-84) [ 79.611879][ T1194] CPU: 0 UID: 0 PID: 1194 Comm: syz.2.325 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 79.611909][ T1194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.611920][ T1194] Call Trace: [ 79.611926][ T1194] [ 79.611933][ T1194] __dump_stack+0x21/0x30 [ 79.611961][ T1194] dump_stack_lvl+0x140/0x1c0 [ 79.611984][ T1194] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.612007][ T1194] ? do_vfs_ioctl+0x182d/0x2010 [ 79.612031][ T1194] dump_stack+0x19/0x20 [ 79.612053][ T1194] should_fail_ex+0x3c2/0x510 [ 79.612073][ T1194] should_failslab+0xac/0x100 [ 79.612095][ T1194] kmem_cache_alloc_node_noprof+0x45/0x420 [ 79.612114][ T1194] ? __alloc_skb+0x10c/0x360 [ 79.612138][ T1194] __alloc_skb+0x10c/0x360 [ 79.612160][ T1194] create_monitor_ctrl_open+0x161/0x830 [ 79.612184][ T1194] ? selinux_capable+0x38/0x50 [ 79.612207][ T1194] ? security_capable+0x44/0x130 [ 79.612226][ T1194] ? hci_sock_gen_cookie+0x120/0x120 [ 79.612249][ T1194] ? ns_capable+0x90/0xf0 [ 79.612274][ T1194] hci_sock_ioctl+0x3b8/0x9e0 [ 79.612296][ T1194] sock_do_ioctl+0x115/0x330 [ 79.612317][ T1194] ? sock_show_fdinfo+0xd0/0xd0 [ 79.612339][ T1194] ? __cfi_vfs_write+0x10/0x10 [ 79.612357][ T1194] ? __kasan_check_write+0x18/0x20 [ 79.612374][ T1194] ? mutex_unlock+0x90/0x240 [ 79.612398][ T1194] sock_ioctl+0x568/0x7e0 [ 79.612417][ T1194] ? __cfi_sock_ioctl+0x10/0x10 [ 79.612438][ T1194] ? bpf_lsm_file_ioctl+0xd/0x20 [ 79.612460][ T1194] ? security_file_ioctl+0x3e/0x110 [ 79.612485][ T1194] ? __cfi_sock_ioctl+0x10/0x10 [ 79.612504][ T1194] __se_sys_ioctl+0x135/0x1b0 [ 79.612525][ T1194] __x64_sys_ioctl+0x7f/0xa0 [ 79.612545][ T1194] x64_sys_call+0x1878/0x2ee0 [ 79.612561][ T1194] do_syscall_64+0x57/0xf0 [ 79.612581][ T1194] ? clear_bhb_loop+0x50/0xa0 [ 79.612605][ T1194] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.612627][ T1194] RIP: 0033:0x7f25a7d9e0d9 [ 79.612650][ T1194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.612664][ T1194] RSP: 002b:00007f25a8cfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.612685][ T1194] RAX: ffffffffffffffda RBX: 00007f25a8025fa0 RCX: 00007f25a7d9e0d9 [ 79.612699][ T1194] RDX: 0000200000000140 RSI: 00000000400448df RDI: 0000000000000004 [ 79.612711][ T1194] RBP: 00007f25a8cfd090 R08: 0000000000000000 R09: 0000000000000000 [ 79.612723][ T1194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.612734][ T1194] R13: 00007f25a8026038 R14: 00007f25a8025fa0 R15: 00007ffc68a0b838 [ 79.612749][ T1194] [ 79.711804][ T314] usb 1-1: USB disconnect, device number 34 [ 79.713435][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 79.888863][ T10] usb 4-1: device descriptor read/64, error -71 [ 79.894538][ T321] usb 2-1: USB disconnect, device number 28 [ 79.939146][ T36] audit: type=1400 audit(1786093366.590:235): avc: denied { nlmsg_write } for pid=1201 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 79.975971][ T1206] capability: warning: `syz.1.331' uses 32-bit capabilities (legacy support in use) [ 79.988027][ T1206] logitech-hidpp-device 0005:046D:B012.0010: received hid++ report of bad size (12) [ 79.997551][ T1206] logitech-hidpp-device 0005:046D:B012.0010: Event data for report 18 was too short (63 vs 11) [ 80.014896][ T10] usb usb4-port1: attempt power cycle [ 80.304813][ T314] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 80.334784][ T321] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 80.354794][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 80.375824][ T10] usb 4-1: device descriptor read/8, error -71 [ 80.455874][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.466869][ T314] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 80.474803][ T321] usb 2-1: device descriptor read/64, error -71 [ 80.476108][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.490766][ T314] usb 1-1: config 0 descriptor?? [ 80.505827][ T10] usb 4-1: device descriptor read/8, error -71 [ 80.699285][ T314] usbhid 1-1:0.0: can't add hid device: -71 [ 80.705308][ T314] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 80.714474][ T314] usb 1-1: USB disconnect, device number 35 [ 80.715355][ T321] usb 2-1: device descriptor read/64, error -71 [ 80.744798][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 80.765822][ T10] usb 4-1: device descriptor read/8, error -71 [ 80.895843][ T10] usb 4-1: device descriptor read/8, error -71 [ 80.974845][ T321] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 81.004946][ T10] usb usb4-port1: unable to enumerate USB device [ 81.104857][ T321] usb 2-1: device descriptor read/64, error -71 [ 81.134811][ T31] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 81.285925][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.296907][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 81.305980][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.314626][ T31] usb 1-1: config 0 descriptor?? [ 81.344804][ T321] usb 2-1: device descriptor read/64, error -71 [ 81.454898][ T321] usb usb2-port1: attempt power cycle [ 81.634797][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 81.635156][ T327] Bluetooth: hci0: command 0x1003 tx timeout [ 81.660812][ T1210] netlink: 68 bytes leftover after parsing attributes in process `syz.2.333'. [ 81.805036][ T321] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 81.825903][ T321] usb 2-1: device descriptor read/8, error -71 [ 81.854859][ T314] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 81.934810][ T603] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 81.955827][ T321] usb 2-1: device descriptor read/8, error -71 [ 81.984791][ T314] usb 4-1: device descriptor read/64, error -71 [ 82.085924][ T603] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.096870][ T603] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 82.105938][ T603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.114523][ T603] usb 3-1: config 0 descriptor?? [ 82.125133][ T31] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 82.132546][ T31] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input29 [ 82.195002][ T321] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 82.217057][ T321] usb 2-1: device descriptor read/8, error -71 [ 82.224907][ T314] usb 4-1: device descriptor read/64, error -71 [ 82.322983][ T603] usbhid 3-1:0.0: can't add hid device: -71 [ 82.329044][ T603] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 82.337924][ T603] usb 3-1: USB disconnect, device number 36 [ 82.346884][ T321] usb 2-1: device descriptor read/8, error -71 [ 82.454875][ T321] usb usb2-port1: unable to enumerate USB device [ 82.474787][ T314] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 82.604784][ T314] usb 4-1: device descriptor read/64, error -71 [ 82.754791][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 82.844791][ T314] usb 4-1: device descriptor read/64, error -71 [ 82.905866][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.916893][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 82.925994][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.934714][ T10] usb 3-1: config 0 descriptor?? [ 82.954901][ T314] usb usb4-port1: attempt power cycle [ 82.984657][ T360] logitech-hidpp-device 0005:046D:B012.0010: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 83.003888][ T1216] fido_id[1216]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.294784][ T314] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 83.315812][ T314] usb 4-1: device descriptor read/8, error -71 [ 83.394818][ T603] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 83.445859][ T314] usb 4-1: device descriptor read/8, error -71 [ 83.541286][ T1214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.549879][ T1214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.557737][ T603] usb 2-1: Using ep0 maxpacket: 32 [ 83.564023][ T603] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 83.572283][ T603] usb 2-1: config 0 has no interface number 0 [ 83.578424][ T603] usb 2-1: config 0 interface 184 has no altsetting 0 [ 83.587245][ T603] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 83.596353][ T603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.604343][ T603] usb 2-1: Product: syz [ 83.608540][ T603] usb 2-1: Manufacturer: syz [ 83.613159][ T603] usb 2-1: SerialNumber: syz [ 83.618462][ T603] usb 2-1: config 0 descriptor?? [ 83.624330][ T603] smsc75xx v1.0.0 [ 83.694796][ T314] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 83.716231][ T314] usb 4-1: device descriptor read/8, error -71 [ 83.745180][ T10] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 83.753378][ T10] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input30 [ 83.770875][ T321] usb 1-1: USB disconnect, device number 36 [ 83.776878][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 83.845831][ T314] usb 4-1: device descriptor read/8, error -71 [ 83.955012][ T314] usb usb4-port1: unable to enumerate USB device [ 84.226137][ T603] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 84.237034][ T603] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 84.246711][ T603] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 84.256975][ T603] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 84.332942][ T1231] netlink: 68 bytes leftover after parsing attributes in process `syz.0.342'. [ 84.354770][ T36] audit: type=1400 audit(1786093371.000:236): avc: denied { getopt } for pid=1232 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.500620][ T36] audit: type=1400 audit(1786093371.150:237): avc: denied { bpf } for pid=1245 comm="syz.3.349" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.531455][ T1248] tipc: Enabling of bearer rejected, failed to enable media [ 84.541599][ T1248] tipc: Enabling of bearer rejected, already enabled [ 84.561094][ T1250] netlink: 68 bytes leftover after parsing attributes in process `syz.3.351'. [ 84.582177][ T1252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 84.602763][ T36] audit: type=1400 audit(1786093371.250:238): avc: denied { ioctl } for pid=1253 comm="syz.3.353" path="socket:[7305]" dev="sockfs" ino=7305 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.644775][ T603] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 84.795783][ T603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.806761][ T603] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 84.815823][ T603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.824464][ T603] usb 1-1: config 0 descriptor?? [ 84.894784][ T321] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 85.033277][ T603] usbhid 1-1:0.0: can't add hid device: -71 [ 85.039289][ T603] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 85.048107][ T603] usb 1-1: USB disconnect, device number 37 [ 85.055373][ T321] usb 4-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 85.066935][ T321] usb 4-1: config 1 interface 0 has no altsetting 0 [ 85.075742][ T321] usb 4-1: string descriptor 0 read error: -22 [ 85.081952][ T321] usb 4-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 85.091009][ T321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.099953][ T1258] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 85.304785][ T310] usb 3-1: USB disconnect, device number 37 [ 85.304847][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 85.320735][ T1258] netlink: 32 bytes leftover after parsing attributes in process `syz.3.355'. [ 85.464784][ T603] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 85.614857][ T310] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 85.623407][ T603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.634490][ T603] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 85.643644][ T603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.652716][ T603] usb 1-1: config 0 descriptor?? [ 85.766162][ T310] usb 3-1: unable to get BOS descriptor or descriptor too short [ 85.774577][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.786086][ T310] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 85.795219][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.803332][ T310] usb 3-1: Product: syz [ 85.807535][ T310] usb 3-1: Manufacturer: syz [ 85.812169][ T310] usb 3-1: SerialNumber: syz [ 85.835473][ T321] usbhid 4-1:1.0: can't add hid device: -71 [ 85.842298][ T321] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 85.854023][ T321] usb 4-1: USB disconnect, device number 42 [ 85.898062][ T1272] netlink: 68 bytes leftover after parsing attributes in process `syz.3.360'. [ 85.920495][ T678] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.022485][ T310] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 86.030147][ T10] usb 2-1: USB disconnect, device number 33 [ 86.038194][ T310] usb 3-1: USB disconnect, device number 38 [ 86.060732][ T1241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.065808][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.070571][ T1241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.824787][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 86.975868][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.986814][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 86.995913][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.004666][ T10] usb 3-1: config 0 descriptor?? [ 87.212398][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 87.218445][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 87.227087][ T10] usb 3-1: USB disconnect, device number 39 [ 87.644801][ T310] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 87.795867][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.806873][ T310] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 87.815930][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.824784][ T310] usb 3-1: config 0 descriptor?? [ 87.955115][ T1277] Bluetooth: hci0: command 0x1003 tx timeout [ 87.955126][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.999587][ T36] audit: type=1400 audit(1786093374.650:239): avc: denied { mounton } for pid=1288 comm="syz.3.367" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 88.031009][ T1291] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.040257][ T36] audit: type=1400 audit(1786093374.680:240): avc: denied { remount } for pid=1290 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 88.044269][ T1291] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.060561][ T603] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 88.068011][ T1291] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.076341][ T603] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input31 [ 88.094579][ T1291] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.100231][ T1297] netlink: 68 bytes leftover after parsing attributes in process `syz.0.370'. [ 88.105563][ T603] usb 1-1: USB disconnect, device number 38 [ 88.117257][ T327] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 88.178893][ T36] audit: type=1326 audit(1786093374.830:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1305 comm="syz.0.374" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f551079e0d9 code=0x0 [ 88.203640][ T36] audit: type=1326 audit(1786093374.830:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1305 comm="syz.0.374" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f551079e0d9 code=0x0 [ 88.404805][ T314] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 88.440291][ T1283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.449016][ T1283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.556109][ T314] usb 4-1: unable to get BOS descriptor or descriptor too short [ 88.564532][ T314] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.576415][ T314] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 88.585526][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.593512][ T314] usb 4-1: Product: syz [ 88.603382][ T314] usb 4-1: Manufacturer: syz [ 88.608037][ T314] usb 4-1: SerialNumber: syz [ 88.645402][ T310] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 88.652974][ T310] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input32 [ 88.682795][ T36] audit: type=1400 audit(1786093375.330:243): avc: denied { append } for pid=1319 comm="syz.1.379" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.693201][ T1322] tipc: Enabling of bearer rejected, failed to enable media [ 88.721611][ T1322] tipc: Enabling of bearer rejected, already enabled [ 88.741855][ T1324] netlink: 68 bytes leftover after parsing attributes in process `syz.1.381'. [ 88.763326][ T1326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 88.774801][ T603] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 88.819134][ T314] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 88.830733][ T314] usb 4-1: USB disconnect, device number 43 [ 88.842796][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.913915][ T1336] FAULT_INJECTION: forcing a failure. [ 88.913915][ T1336] name failslab, interval 1, probability 0, space 0, times 0 [ 88.926625][ T1336] CPU: 1 UID: 0 PID: 1336 Comm: syz.1.386 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 88.926658][ T1336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.926669][ T1336] Call Trace: [ 88.926676][ T1336] [ 88.926682][ T1336] __dump_stack+0x21/0x30 [ 88.926712][ T1336] dump_stack_lvl+0x140/0x1c0 [ 88.926735][ T1336] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.926760][ T1336] dump_stack+0x19/0x20 [ 88.926784][ T1336] should_fail_ex+0x3c2/0x510 [ 88.926806][ T1336] should_failslab+0xac/0x100 [ 88.926830][ T1336] __kmalloc_node_noprof+0x69/0x500 [ 88.926851][ T1336] ? __kvmalloc_node_noprof+0x128/0x300 [ 88.926880][ T1336] __kvmalloc_node_noprof+0x128/0x300 [ 88.926907][ T1336] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 88.926937][ T1336] traverse+0xfe/0x700 [ 88.926960][ T1336] ? mutex_lock+0x97/0x1d0 [ 88.926985][ T1336] ? __cfi_mutex_lock+0x10/0x10 [ 88.927009][ T1336] ? unwind_get_return_address+0x51/0x90 [ 88.927031][ T1336] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 88.927056][ T1336] seq_read_iter+0xdbd/0xf30 [ 88.927080][ T1336] ? __asan_memset+0x39/0x50 [ 88.927097][ T1336] ? iov_iter_init+0xc0/0x180 [ 88.927122][ T1336] seq_read+0x368/0x490 [ 88.927145][ T1336] ? __cfi_seq_read+0x10/0x10 [ 88.927167][ T1336] ? __cfi_selinux_file_permission+0x10/0x10 [ 88.927186][ T1336] ? __import_iovec+0x5b9/0x7d0 [ 88.927213][ T1336] ? __cfi_seq_read+0x10/0x10 [ 88.927236][ T1336] proc_reg_read+0x182/0x2f0 [ 88.927256][ T1336] vfs_readv+0x5e7/0xa00 [ 88.927280][ T1336] ? __cfi_proc_reg_read+0x10/0x10 [ 88.927300][ T1336] ? do_readv+0x2e0/0x2e0 [ 88.927325][ T1336] ? __cfi_mutex_unlock+0x10/0x10 [ 88.927354][ T1336] __x64_sys_preadv+0x19f/0x2c0 [ 88.927375][ T1336] ? __cfi___x64_sys_preadv+0x10/0x10 [ 88.927397][ T1336] ? __kasan_check_read+0x15/0x20 [ 88.927416][ T1336] x64_sys_call+0x1ee9/0x2ee0 [ 88.927433][ T1336] do_syscall_64+0x57/0xf0 [ 88.927454][ T1336] ? clear_bhb_loop+0x50/0xa0 [ 88.927479][ T1336] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.927504][ T1336] RIP: 0033:0x7fa1fa39e0d9 [ 88.927529][ T1336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.927546][ T1336] RSP: 002b:00007fa1fb1a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 88.927568][ T1336] RAX: ffffffffffffffda RBX: 00007fa1fa625fa0 RCX: 00007fa1fa39e0d9 [ 88.927583][ T1336] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 88.927596][ T1336] RBP: 00007fa1fb1a6090 R08: 0000000000000000 R09: 0000000000000000 [ 88.927609][ T1336] R10: 00000000000008b3 R11: 0000000000000246 R12: 0000000000000001 [ 88.927622][ T1336] R13: 00007fa1fa626038 R14: 00007fa1fa625fa0 R15: 00007fff57e00dc8 [ 88.927639][ T1336] [ 88.933389][ T603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.219203][ T603] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 89.228280][ T603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.237479][ T603] usb 1-1: config 0 descriptor?? [ 89.345215][ T36] audit: type=1400 audit(1786093376.000:244): avc: denied { append } for pid=1340 comm="syz.3.388" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.446985][ T603] usbhid 1-1:0.0: can't add hid device: -71 [ 89.458128][ T603] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 89.467495][ T603] usb 1-1: USB disconnect, device number 39 [ 89.483965][ T1347] netlink: 68 bytes leftover after parsing attributes in process `syz.1.391'. [ 89.694832][ T314] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 89.744795][ T310] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 89.845783][ T314] usb 4-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 89.856769][ T314] usb 4-1: config 1 interface 0 has no altsetting 0 [ 89.865360][ T314] usb 4-1: string descriptor 0 read error: -22 [ 89.871609][ T314] usb 4-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 89.881313][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.889364][ T360] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 89.899161][ T1345] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.904776][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 89.912716][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.923881][ T310] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 89.932956][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.941689][ T310] usb 2-1: config 0 descriptor?? [ 90.045871][ T360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.056864][ T360] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 90.065936][ T360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.074812][ T360] usb 1-1: config 0 descriptor?? [ 90.108116][ T1345] netlink: 32 bytes leftover after parsing attributes in process `syz.3.390'. [ 90.214818][ T10] usb 3-1: USB disconnect, device number 40 [ 90.220825][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 90.275862][ T36] audit: type=1400 audit(1786093376.930:245): avc: denied { map } for pid=1357 comm="syz.2.396" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 90.349041][ T310] monterey 0003:0566:3004.0011: unknown main item tag 0x0 [ 90.356591][ T310] monterey 0003:0566:3004.0011: unknown main item tag 0x0 [ 90.363742][ T310] monterey 0003:0566:3004.0011: unknown main item tag 0x0 [ 90.370903][ T310] monterey 0003:0566:3004.0011: unknown main item tag 0x0 [ 90.378077][ T310] monterey 0003:0566:3004.0011: unknown main item tag 0x0 [ 90.385237][ T310] monterey 0003:0566:3004.0011: unknown main item tag 0x0 [ 90.392390][ T310] monterey 0003:0566:3004.0011: unknown main item tag 0x0 [ 90.399568][ T310] monterey 0003:0566:3004.0011: unknown main item tag 0x0 [ 90.406719][ T310] monterey 0003:0566:3004.0011: unknown main item tag 0x0 [ 90.414546][ T310] monterey 0003:0566:3004.0011: hidraw0: USB HID v0.02 Device [HID 0566:3004] on usb-dummy_hcd.1-1/input0 [ 90.500406][ T1318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.508980][ T1318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.553301][ T1349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.392'. [ 90.562702][ T310] usb 2-1: USB disconnect, device number 34 [ 90.637886][ T314] usbhid 4-1:1.0: can't add hid device: -71 [ 90.644669][ T314] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 90.652695][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 90.661302][ T314] usb 4-1: USB disconnect, device number 44 [ 90.816151][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 90.824531][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.837830][ T10] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 90.846916][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.854947][ T10] usb 3-1: Product: syz [ 90.859133][ T10] usb 3-1: Manufacturer: syz [ 90.863714][ T10] usb 3-1: SerialNumber: syz [ 91.074853][ T10] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 91.091214][ T10] usb 3-1: USB disconnect, device number 41 [ 91.091561][ T36] audit: type=1400 audit(1786093377.740:246): avc: denied { connect } for pid=1365 comm="syz.1.399" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.118622][ T36] audit: type=1400 audit(1786093377.740:247): avc: denied { write } for pid=1365 comm="syz.1.399" laddr=fe80::4cae:f5ff:fe67:7f7a lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.142874][ T36] audit: type=1400 audit(1786093377.740:248): avc: denied { write } for pid=1365 comm="syz.1.399" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.166723][ T36] audit: type=1400 audit(1786093377.740:249): avc: denied { open } for pid=1365 comm="syz.1.399" path="/96/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.191425][ T36] audit: type=1400 audit(1786093377.740:250): avc: denied { ioctl } for pid=1365 comm="syz.1.399" path="/96/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.603158][ T1368] netlink: 68 bytes leftover after parsing attributes in process `syz.2.400'. [ 92.374811][ T603] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 92.437650][ T360] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 92.445485][ T360] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input33 [ 92.457384][ T360] usb 1-1: USB disconnect, device number 40 [ 92.463339][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 92.535774][ T603] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.546727][ T603] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 92.555783][ T603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.564332][ T603] usb 3-1: config 0 descriptor?? [ 92.674790][ T327] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.675027][ T1277] Bluetooth: hci0: command 0x1003 tx timeout [ 92.712558][ T1381] FAULT_INJECTION: forcing a failure. [ 92.712558][ T1381] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.713299][ T677] Bluetooth: hci0: Frame reassembly failed (-84) [ 92.725794][ T1381] CPU: 0 UID: 0 PID: 1381 Comm: syz.3.406 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 92.725820][ T1381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.725832][ T1381] Call Trace: [ 92.725838][ T1381] [ 92.725845][ T1381] __dump_stack+0x21/0x30 [ 92.725873][ T1381] dump_stack_lvl+0x140/0x1c0 [ 92.725896][ T1381] ? __cfi_dump_stack_lvl+0x10/0x10 [ 92.725919][ T1381] ? avc_has_perm_noaudit+0x289/0x360 [ 92.725962][ T1381] dump_stack+0x19/0x20 [ 92.725984][ T1381] should_fail_ex+0x3c2/0x510 [ 92.726005][ T1381] should_fail+0xf/0x20 [ 92.726023][ T1381] should_fail_usercopy+0x1e/0x30 [ 92.726043][ T1381] _copy_from_user+0x20/0xa0 [ 92.726066][ T1381] hci_dev_cmd+0xae/0x770 [ 92.726083][ T1381] ? __cfi_hci_dev_cmd+0x10/0x10 [ 92.726100][ T1381] ? bpf_lsm_capable+0xd/0x20 [ 92.726123][ T1381] ? request_key_and_link+0xe0/0x1230 [ 92.726147][ T1381] hci_sock_ioctl+0x69a/0x9e0 [ 92.726170][ T1381] sock_do_ioctl+0x115/0x330 [ 92.726191][ T1381] ? sock_show_fdinfo+0xd0/0xd0 [ 92.726212][ T1381] ? __cfi_vfs_write+0x10/0x10 [ 92.726230][ T1381] ? __kasan_check_write+0x18/0x20 [ 92.726248][ T1381] ? mutex_unlock+0x90/0x240 [ 92.726272][ T1381] sock_ioctl+0x568/0x7e0 [ 92.726292][ T1381] ? __cfi_sock_ioctl+0x10/0x10 [ 92.726313][ T1381] ? bpf_lsm_file_ioctl+0xd/0x20 [ 92.726334][ T1381] ? security_file_ioctl+0x3e/0x110 [ 92.726359][ T1381] ? __cfi_sock_ioctl+0x10/0x10 [ 92.726379][ T1381] __se_sys_ioctl+0x135/0x1b0 [ 92.726400][ T1381] __x64_sys_ioctl+0x7f/0xa0 [ 92.726421][ T1381] x64_sys_call+0x1878/0x2ee0 [ 92.726444][ T1381] do_syscall_64+0x57/0xf0 [ 92.726464][ T1381] ? clear_bhb_loop+0x50/0xa0 [ 92.726486][ T1381] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 92.726509][ T1381] RIP: 0033:0x7ff75719e0d9 [ 92.726524][ T1381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.726539][ T1381] RSP: 002b:00007ff758014028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.726560][ T1381] RAX: ffffffffffffffda RBX: 00007ff757425fa0 RCX: 00007ff75719e0d9 [ 92.726574][ T1381] RDX: 0000200000000140 RSI: 00000000400448df RDI: 0000000000000004 [ 92.726586][ T1381] RBP: 00007ff758014090 R08: 0000000000000000 R09: 0000000000000000 [ 92.726598][ T1381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.726610][ T1381] R13: 00007ff757426038 R14: 00007ff757425fa0 R15: 00007fff1fc41248 [ 92.726625][ T1381] [ 92.814808][ T360] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 92.817030][ T603] usbhid 3-1:0.0: can't add hid device: -71 [ 92.976641][ T1377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.978969][ T603] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 92.988684][ T1377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.993658][ T603] usb 3-1: USB disconnect, device number 42 [ 93.021971][ T36] audit: type=1400 audit(1786093379.660:251): avc: denied { setopt } for pid=1376 comm="syz.0.404" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.063357][ T1382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.083783][ T1382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.154801][ T1277] Bluetooth: hci1: command 0x1003 tx timeout [ 93.154801][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 93.176883][ T36] audit: type=1400 audit(1786093379.830:252): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 93.222038][ T360] usb 1-1: unable to get BOS descriptor or descriptor too short [ 93.232739][ T360] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 93.232902][ T1388] netlink: 68 bytes leftover after parsing attributes in process `syz.1.409'. [ 93.240392][ T360] usb 1-1: can't read configurations, error -71 [ 93.344794][ T603] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 93.495911][ T603] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.504789][ T1033] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 93.506836][ T603] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 93.523400][ T603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.531988][ T603] usb 3-1: config 0 descriptor?? [ 93.666232][ T1033] usb 2-1: unable to get BOS descriptor or descriptor too short [ 93.674608][ T1033] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.686255][ T1033] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 93.695321][ T1033] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.703315][ T1033] usb 2-1: Product: syz [ 93.707495][ T1033] usb 2-1: Manufacturer: syz [ 93.712100][ T1033] usb 2-1: SerialNumber: syz [ 93.923047][ T1033] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 93.933090][ T1033] usb 2-1: USB disconnect, device number 35 [ 94.151751][ T1372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.160330][ T1372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.365242][ T603] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 94.373364][ T603] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input34 [ 94.465599][ T36] audit: type=1400 audit(1786093381.120:253): avc: denied { read write } for pid=1400 comm="syz.1.415" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 94.489230][ T36] audit: type=1400 audit(1786093381.120:254): avc: denied { open } for pid=1400 comm="syz.1.415" path="/103/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 94.494812][ T45] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 94.560008][ T1405] tipc: Enabling of bearer rejected, failed to enable media [ 94.570114][ T1405] tipc: Enabling of bearer rejected, already enabled [ 94.665931][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.677020][ T45] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 94.686147][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.695401][ T45] usb 1-1: config 0 descriptor?? [ 94.754807][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 94.754809][ T327] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 94.781682][ T1410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 94.834783][ T603] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 94.903059][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 94.909171][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 94.921173][ T45] usb 1-1: USB disconnect, device number 43 [ 94.995887][ T603] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.006138][ T603] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 95.017447][ T603] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.031824][ T603] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 95.040925][ T603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.048968][ T603] usb 2-1: Product: syz [ 95.053140][ T603] usb 2-1: Manufacturer: syz [ 95.057852][ T603] usb 2-1: SerialNumber: syz [ 95.064118][ T603] usb 2-1: Found UVC 1.00 device syz (046d:0821) [ 95.070551][ T603] usb 2-1: No streaming interface found for terminal 2. [ 95.354778][ T1033] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 95.505848][ T1033] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.516998][ T1033] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 95.526199][ T1033] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.534932][ T1033] usb 1-1: config 0 descriptor?? [ 95.584795][ T360] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 95.736153][ T360] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.744759][ T360] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.756325][ T360] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 95.765445][ T360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.773455][ T360] usb 4-1: Product: syz [ 95.777640][ T360] usb 4-1: Manufacturer: syz [ 95.782251][ T360] usb 4-1: SerialNumber: syz [ 95.930067][ T10] usb 3-1: USB disconnect, device number 43 [ 95.930127][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 95.944642][ T1394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.954543][ T1394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.986969][ T1428] FAULT_INJECTION: forcing a failure. [ 95.986969][ T1428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.000068][ T1428] CPU: 1 UID: 0 PID: 1428 Comm: syz.2.425 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 96.000095][ T1428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.000106][ T1428] Call Trace: [ 96.000113][ T1428] [ 96.000120][ T1428] __dump_stack+0x21/0x30 [ 96.000150][ T1428] dump_stack_lvl+0x140/0x1c0 [ 96.000175][ T1428] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.000199][ T1428] ? seq_printf+0x1e3/0x290 [ 96.000225][ T1428] dump_stack+0x19/0x20 [ 96.000249][ T1428] should_fail_ex+0x3c2/0x510 [ 96.000271][ T1428] should_fail+0xf/0x20 [ 96.000289][ T1428] should_fail_usercopy+0x1e/0x30 [ 96.000310][ T1428] _copy_to_iter+0x3b6/0x1520 [ 96.000334][ T1428] ? slab_show+0x167/0x270 [ 96.000358][ T1428] ? __cfi__copy_to_iter+0x10/0x10 [ 96.000380][ T1428] ? __check_object_size+0x54c/0x870 [ 96.000410][ T1428] ? __cfi___check_object_size+0x10/0x10 [ 96.000429][ T1428] seq_read_iter+0x2ee/0xf30 [ 96.000454][ T1428] ? iov_iter_init+0xc0/0x180 [ 96.000476][ T1428] seq_read+0x368/0x490 [ 96.000499][ T1428] ? __cfi_seq_read+0x10/0x10 [ 96.000522][ T1428] ? __cfi_selinux_file_permission+0x10/0x10 [ 96.000540][ T1428] ? __import_iovec+0x5b9/0x7d0 [ 96.000567][ T1428] ? __cfi_seq_read+0x10/0x10 [ 96.000590][ T1428] proc_reg_read+0x182/0x2f0 [ 96.000611][ T1428] vfs_readv+0x5e7/0xa00 [ 96.000635][ T1428] ? __cfi_proc_reg_read+0x10/0x10 [ 96.000655][ T1428] ? do_readv+0x2e0/0x2e0 [ 96.000680][ T1428] ? __cfi_mutex_unlock+0x10/0x10 [ 96.000709][ T1428] __x64_sys_preadv+0x19f/0x2c0 [ 96.000730][ T1428] ? __cfi___x64_sys_preadv+0x10/0x10 [ 96.000752][ T1428] ? __kasan_check_read+0x15/0x20 [ 96.000772][ T1428] x64_sys_call+0x1ee9/0x2ee0 [ 96.000790][ T1428] do_syscall_64+0x57/0xf0 [ 96.000811][ T1428] ? clear_bhb_loop+0x50/0xa0 [ 96.000837][ T1428] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.000860][ T1428] RIP: 0033:0x7f25a7d9e0d9 [ 96.000877][ T1428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.000893][ T1428] RSP: 002b:00007f25a8cfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 96.000914][ T1428] RAX: ffffffffffffffda RBX: 00007f25a8025fa0 RCX: 00007f25a7d9e0d9 [ 96.000930][ T1428] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 96.000943][ T1428] RBP: 00007f25a8cfd090 R08: 0000000000000000 R09: 0000000000000000 [ 96.000956][ T1428] R10: 00000000000008b3 R11: 0000000000000246 R12: 0000000000000001 [ 96.000969][ T1428] R13: 00007f25a8026038 R14: 00007f25a8025fa0 R15: 00007ffc68a0b838 [ 96.000985][ T1428] [ 96.005951][ T360] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 96.274100][ T360] usb 4-1: USB disconnect, device number 45 [ 96.284370][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 96.336161][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 96.336181][ T36] audit: type=1400 audit(1786093382.980:257): avc: denied { map } for pid=1431 comm="syz.2.427" path="socket:[7775]" dev="sockfs" ino=7775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.366723][ T36] audit: type=1400 audit(1786093382.980:258): avc: denied { read accept } for pid=1431 comm="syz.2.427" path="socket:[7775]" dev="sockfs" ino=7775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.774793][ T45] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 96.925830][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.937077][ T45] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 96.946239][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.955000][ T45] usb 4-1: config 0 descriptor?? [ 97.162585][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 97.168621][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 97.177264][ T45] usb 4-1: USB disconnect, device number 46 [ 97.184882][ T314] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 97.345843][ T314] usb 3-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 97.356878][ T314] usb 3-1: config 1 interface 0 has no altsetting 0 [ 97.365703][ T314] usb 3-1: string descriptor 0 read error: -22 [ 97.371962][ T314] usb 3-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 97.381263][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.390319][ T1448] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 97.584937][ T360] usb 2-1: USB disconnect, device number 36 [ 97.598946][ T1448] netlink: 32 bytes leftover after parsing attributes in process `syz.2.434'. [ 97.607950][ T45] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 97.765938][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.776953][ T45] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 97.786033][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.794793][ T45] usb 4-1: config 0 descriptor?? [ 97.885014][ T1033] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 97.901815][ T1033] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input35 [ 97.905210][ T36] audit: type=1400 audit(1786093384.550:259): avc: denied { read write } for pid=1451 comm="syz.0.436" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.918431][ T1033] usb 1-1: USB disconnect, device number 44 [ 97.934403][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 97.936257][ T36] audit: type=1400 audit(1786093384.550:260): avc: denied { open } for pid=1451 comm="syz.0.436" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.972091][ T36] audit: type=1400 audit(1786093384.590:261): avc: denied { ioctl } for pid=1451 comm="syz.0.436" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.997476][ T36] audit: type=1400 audit(1786093384.590:262): avc: denied { getopt } for pid=1451 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.095652][ T36] audit: type=1400 audit(1786093384.750:263): avc: denied { mounton } for pid=1461 comm="syz.1.439" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 98.125419][ T314] usbhid 3-1:1.0: can't add hid device: -71 [ 98.131402][ T314] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 98.141664][ T314] usb 3-1: USB disconnect, device number 44 [ 98.344823][ T603] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 98.418203][ T1443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.426772][ T1443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.444838][ T314] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 98.496323][ T603] usb 2-1: unable to get BOS descriptor or descriptor too short [ 98.504758][ T603] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.516173][ T603] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 98.525316][ T603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.533311][ T603] usb 2-1: Product: syz [ 98.537525][ T603] usb 2-1: Manufacturer: syz [ 98.542139][ T603] usb 2-1: SerialNumber: syz [ 98.574785][ T314] usb 3-1: device descriptor read/64, error -71 [ 98.625187][ T45] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 98.632797][ T45] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input36 [ 98.752870][ T603] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 98.763000][ T603] usb 2-1: USB disconnect, device number 37 [ 98.776096][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 98.834774][ T314] usb 3-1: device descriptor read/64, error -71 [ 99.074796][ T314] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 99.204789][ T314] usb 3-1: device descriptor read/64, error -71 [ 99.264240][ T1469] netlink: 68 bytes leftover after parsing attributes in process `syz.1.442'. [ 99.444779][ T314] usb 3-1: device descriptor read/64, error -71 [ 99.544789][ T603] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 99.554957][ T314] usb usb3-port1: attempt power cycle [ 99.695862][ T603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.706831][ T603] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 99.716121][ T603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.724865][ T603] usb 2-1: config 0 descriptor?? [ 99.894773][ T314] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 99.915788][ T314] usb 3-1: device descriptor read/8, error -71 [ 99.932633][ T603] usbhid 2-1:0.0: can't add hid device: -71 [ 99.938652][ T603] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 99.947320][ T603] usb 2-1: USB disconnect, device number 38 [ 100.034840][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 100.034917][ T327] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 100.045912][ T314] usb 3-1: device descriptor read/8, error -71 [ 100.064117][ T1476] netlink: 68 bytes leftover after parsing attributes in process `syz.0.445'. [ 100.191992][ T310] usb 4-1: USB disconnect, device number 47 [ 100.192057][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 100.241862][ T36] audit: type=1400 audit(1786093386.890:264): avc: denied { create } for pid=1481 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 100.242388][ T1482] netlink: 'syz.3.447': attribute type 4 has an invalid length. [ 100.284805][ T314] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 100.305782][ T314] usb 3-1: device descriptor read/8, error -71 [ 100.364798][ T603] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 100.436104][ T314] usb 3-1: device descriptor read/8, error -71 [ 100.474784][ T1033] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 100.525803][ T603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.536734][ T603] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 100.544984][ T314] usb usb3-port1: unable to enumerate USB device [ 100.545788][ T603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.560899][ T603] usb 2-1: config 0 descriptor?? [ 100.624773][ T1033] usb 1-1: Using ep0 maxpacket: 32 [ 100.631035][ T1033] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 100.641053][ T1033] usb 1-1: config 0 interface 0 has no altsetting 0 [ 100.647710][ T1033] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 100.656784][ T1033] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.665994][ T1033] usb 1-1: config 0 descriptor?? [ 100.874331][ T1033] usbhid 1-1:0.0: can't add hid device: -71 [ 100.880367][ T1033] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 100.889286][ T1033] usb 1-1: USB disconnect, device number 45 [ 100.967182][ T1474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.975786][ T1474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.044815][ T45] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 101.171522][ T1495] tipc: Bearer : already 2 bearers with priority 10 [ 101.179096][ T1495] tipc: Bearer : trying with adjusted priority [ 101.186562][ T1495] tipc: Enabling of bearer rejected, failed to enable media [ 101.196437][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 101.197189][ T1495] tipc: Enabling of bearer rejected, already enabled [ 101.205046][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.225952][ T1497] netlink: 17 bytes leftover after parsing attributes in process `syz.2.454'. [ 101.228262][ T45] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 101.243991][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.252035][ T45] usb 4-1: Product: syz [ 101.255788][ T36] audit: type=1400 audit(1786093387.910:265): avc: denied { read } for pid=1496 comm="syz.2.454" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.256429][ T45] usb 4-1: Manufacturer: syz [ 101.279358][ T36] audit: type=1400 audit(1786093387.910:266): avc: denied { open } for pid=1496 comm="syz.2.454" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.283815][ T45] usb 4-1: SerialNumber: syz [ 101.306490][ T1497] netlink: 'syz.2.454': attribute type 4 has an invalid length. [ 101.335302][ T1033] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 101.346250][ T1499] FAULT_INJECTION: forcing a failure. [ 101.346250][ T1499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.351674][ T678] Bluetooth: hci0: Frame reassembly failed (-84) [ 101.359794][ T1499] CPU: 1 UID: 0 PID: 1499 Comm: syz.2.455 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 101.359823][ T1499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.359835][ T1499] Call Trace: [ 101.359842][ T1499] [ 101.359848][ T1499] __dump_stack+0x21/0x30 [ 101.359878][ T1499] dump_stack_lvl+0x140/0x1c0 [ 101.359904][ T1499] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.359928][ T1499] ? check_stack_object+0x138/0x150 [ 101.359948][ T1499] dump_stack+0x19/0x20 [ 101.359971][ T1499] should_fail_ex+0x3c2/0x510 [ 101.359991][ T1499] should_fail+0xf/0x20 [ 101.360009][ T1499] should_fail_usercopy+0x1e/0x30 [ 101.360029][ T1499] _copy_to_user+0x24/0xa0 [ 101.360051][ T1499] simple_read_from_buffer+0xed/0x160 [ 101.360076][ T1499] proc_fail_nth_read+0x1aa/0x220 [ 101.360102][ T1499] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 101.360126][ T1499] ? bpf_lsm_file_permission+0xd/0x20 [ 101.360148][ T1499] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 101.360173][ T1499] vfs_read+0x288/0xc70 [ 101.360191][ T1499] ? __cfi_vfs_read+0x10/0x10 [ 101.360209][ T1499] ? __kasan_check_write+0x18/0x20 [ 101.360226][ T1499] ? mutex_lock+0x97/0x1d0 [ 101.360250][ T1499] ? __cfi_mutex_lock+0x10/0x10 [ 101.360274][ T1499] ksys_read+0x145/0x260 [ 101.360292][ T1499] ? __cfi_ksys_read+0x10/0x10 [ 101.360310][ T1499] ? __kasan_check_read+0x15/0x20 [ 101.360327][ T1499] __x64_sys_read+0x7f/0x90 [ 101.360353][ T1499] x64_sys_call+0x2638/0x2ee0 [ 101.360370][ T1499] do_syscall_64+0x57/0xf0 [ 101.360389][ T1499] ? clear_bhb_loop+0x50/0xa0 [ 101.360412][ T1499] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.360435][ T1499] RIP: 0033:0x7f25a7d5e90e [ 101.360451][ T1499] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 101.360466][ T1499] RSP: 002b:00007f25a8cfcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.360486][ T1499] RAX: ffffffffffffffda RBX: 00007f25a8cfd6c0 RCX: 00007f25a7d5e90e [ 101.360500][ T1499] RDX: 000000000000000f RSI: 00007f25a8cfd0a0 RDI: 0000000000000005 [ 101.360512][ T1499] RBP: 00007f25a8cfd090 R08: 0000000000000000 R09: 0000000000000000 [ 101.360524][ T1499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.360536][ T1499] R13: 00007f25a8026038 R14: 00007f25a8025fa0 R15: 00007ffc68a0b838 [ 101.360551][ T1499] [ 101.529496][ T45] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 101.611309][ T45] usb 4-1: USB disconnect, device number 48 [ 101.622146][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 101.639524][ T1033] usb 1-1: Using ep0 maxpacket: 32 [ 101.647380][ T1033] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 101.657308][ T1033] usb 1-1: config 0 interface 0 has no altsetting 0 [ 101.663968][ T1033] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 101.673706][ T1033] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.682507][ T1033] usb 1-1: config 0 descriptor?? [ 102.093167][ T36] audit: type=1400 audit(1786093388.740:267): avc: denied { append } for pid=1485 comm="syz.0.449" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 102.177810][ T1503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.186437][ T1503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.196697][ T1033] hid-generic 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 102.204187][ T1033] hid-generic 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 102.211923][ T1033] hid-generic 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 102.219527][ T1033] hid-generic 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 102.227189][ T1033] hid-generic 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 102.236352][ T1033] hid-generic 0003:1B1C:0C10.0012: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 102.304786][ T314] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 102.455853][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.466914][ T314] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 102.476131][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.485403][ T314] usb 4-1: config 0 descriptor?? [ 102.693440][ T314] usbhid 4-1:0.0: can't add hid device: -71 [ 102.700018][ T314] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 102.708856][ T314] usb 4-1: USB disconnect, device number 49 [ 102.923191][ T603] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 102.930698][ T1506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 102.941295][ T603] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input40 [ 102.955266][ T603] usb 2-1: USB disconnect, device number 39 [ 102.955307][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 102.971075][ T1508] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 102.979179][ T1508] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 103.134772][ T45] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 103.248038][ T314] usb 1-1: USB disconnect, device number 46 [ 103.258708][ T1516] FAULT_INJECTION: forcing a failure. [ 103.258708][ T1516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.271807][ T1516] CPU: 1 UID: 0 PID: 1516 Comm: syz.0.461 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 103.271844][ T1516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.271857][ T1516] Call Trace: [ 103.271863][ T1516] [ 103.271869][ T1516] __dump_stack+0x21/0x30 [ 103.271899][ T1516] dump_stack_lvl+0x140/0x1c0 [ 103.271914][ T1516] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.271928][ T1516] ? seq_printf+0x1e3/0x290 [ 103.271943][ T1516] dump_stack+0x19/0x20 [ 103.271957][ T1516] should_fail_ex+0x3c2/0x510 [ 103.271970][ T1516] should_fail+0xf/0x20 [ 103.271980][ T1516] should_fail_usercopy+0x1e/0x30 [ 103.271993][ T1516] _copy_to_iter+0x3b6/0x1520 [ 103.272007][ T1516] ? slab_show+0x167/0x270 [ 103.272020][ T1516] ? __cfi__copy_to_iter+0x10/0x10 [ 103.272034][ T1516] ? __check_object_size+0x54c/0x870 [ 103.272046][ T1516] ? __cfi___check_object_size+0x10/0x10 [ 103.272058][ T1516] seq_read_iter+0x2ee/0xf30 [ 103.272072][ T1516] ? iov_iter_init+0xc0/0x180 [ 103.272085][ T1516] seq_read+0x368/0x490 [ 103.272098][ T1516] ? __cfi_seq_read+0x10/0x10 [ 103.272111][ T1516] ? __cfi_selinux_file_permission+0x10/0x10 [ 103.272122][ T1516] ? __import_iovec+0x5b9/0x7d0 [ 103.272137][ T1516] ? __cfi_seq_read+0x10/0x10 [ 103.272150][ T1516] proc_reg_read+0x182/0x2f0 [ 103.272162][ T1516] vfs_readv+0x5e7/0xa00 [ 103.272175][ T1516] ? __cfi_proc_reg_read+0x10/0x10 [ 103.272187][ T1516] ? do_readv+0x2e0/0x2e0 [ 103.272200][ T1516] ? __cfi_mutex_unlock+0x10/0x10 [ 103.272216][ T1516] __x64_sys_preadv+0x19f/0x2c0 [ 103.272228][ T1516] ? __cfi___x64_sys_preadv+0x10/0x10 [ 103.272240][ T1516] ? __kasan_check_read+0x15/0x20 [ 103.272252][ T1516] x64_sys_call+0x1ee9/0x2ee0 [ 103.272262][ T1516] do_syscall_64+0x57/0xf0 [ 103.272274][ T1516] ? clear_bhb_loop+0x50/0xa0 [ 103.272289][ T1516] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.272303][ T1516] RIP: 0033:0x7f551079e0d9 [ 103.272314][ T1516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.272324][ T1516] RSP: 002b:00007f550f1f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 103.272338][ T1516] RAX: ffffffffffffffda RBX: 00007f5510a25fa0 RCX: 00007f551079e0d9 [ 103.272347][ T1516] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 103.272356][ T1516] RBP: 00007f550f1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 103.272363][ T1516] R10: 00000000000008b3 R11: 0000000000000246 R12: 0000000000000001 [ 103.272371][ T1516] R13: 00007f5510a26038 R14: 00007f5510a25fa0 R15: 00007fff3d4fd678 [ 103.272380][ T1516] [ 103.434788][ T327] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 103.437128][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 103.466696][ T36] audit: type=1400 audit(1786093390.110:268): avc: denied { create } for pid=1520 comm="syz.0.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 103.494145][ T1526] syz.2.464: attempt to access beyond end of device [ 103.494145][ T1526] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 103.576221][ T1526] exFAT-fs (loop2): unable to read boot sector [ 103.576231][ T603] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 103.582397][ T1526] exFAT-fs (loop2): failed to read boot sector [ 103.582409][ T1526] exFAT-fs (loop2): failed to recognize exfat type [ 103.606367][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.617375][ T45] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 103.626692][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.631414][ T1526] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 103.635825][ T45] usb 4-1: config 0 descriptor?? [ 103.734802][ T603] usb 2-1: device descriptor read/64, error -71 [ 103.864781][ T314] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 103.944807][ T321] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 103.974799][ T603] usb 2-1: device descriptor read/64, error -71 [ 104.016208][ T314] usb 1-1: unable to get BOS descriptor or descriptor too short [ 104.024663][ T314] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.036267][ T314] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 104.045352][ T314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.053343][ T314] usb 1-1: Product: syz [ 104.057515][ T314] usb 1-1: Manufacturer: syz [ 104.062119][ T314] usb 1-1: SerialNumber: syz [ 104.095894][ T321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.106894][ T321] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 104.116134][ T321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.124973][ T321] usb 3-1: config 0 descriptor?? [ 104.214797][ T603] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 104.249079][ T1502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.257652][ T1502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.272746][ T314] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 104.283308][ T314] usb 1-1: USB disconnect, device number 47 [ 104.298061][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 104.333237][ T321] usbhid 3-1:0.0: can't add hid device: -71 [ 104.339278][ T321] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 104.347051][ T603] usb 2-1: device descriptor read/64, error -71 [ 104.354175][ T321] usb 3-1: USB disconnect, device number 49 [ 104.455234][ T45] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 104.462985][ T45] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input41 [ 104.584782][ T603] usb 2-1: device descriptor read/64, error -71 [ 104.694863][ T603] usb usb2-port1: attempt power cycle [ 104.764791][ T314] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 104.845338][ T36] audit: type=1400 audit(1786093391.500:269): avc: denied { block_suspend } for pid=1537 comm="syz.0.468" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.916050][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.927026][ T314] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 104.936100][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.944788][ T314] usb 3-1: config 0 descriptor?? [ 105.044811][ T603] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 105.065728][ T603] usb 2-1: device descriptor read/8, error -71 [ 105.195786][ T603] usb 2-1: device descriptor read/8, error -71 [ 105.351182][ T1534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.359776][ T1534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.444785][ T603] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 105.465746][ T603] usb 2-1: device descriptor read/8, error -71 [ 105.595794][ T603] usb 2-1: device descriptor read/8, error -71 [ 105.670838][ T1550] capability: warning: `syz.0.472' uses deprecated v2 capabilities in a way that may be insecure [ 105.682099][ T36] audit: type=1400 audit(1786093392.330:270): avc: denied { setopt } for pid=1548 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.704923][ T603] usb usb2-port1: unable to enumerate USB device [ 105.954978][ T603] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 106.020127][ T321] usb 4-1: USB disconnect, device number 50 [ 106.026146][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 106.116075][ T603] usb 1-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 106.127068][ T603] usb 1-1: config 1 interface 0 has no altsetting 0 [ 106.135857][ T603] usb 1-1: string descriptor 0 read error: -22 [ 106.142096][ T603] usb 1-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 106.151174][ T603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.160527][ T1554] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 106.370328][ T1554] netlink: 32 bytes leftover after parsing attributes in process `syz.0.474'. [ 106.379364][ T321] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 106.454783][ T45] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 106.514795][ T321] usb 4-1: device descriptor read/64, error -71 [ 106.606304][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 106.614781][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.626467][ T45] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 106.635592][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.643602][ T45] usb 2-1: Product: syz [ 106.647792][ T45] usb 2-1: Manufacturer: syz [ 106.652410][ T45] usb 2-1: SerialNumber: syz [ 106.754808][ T321] usb 4-1: device descriptor read/64, error -71 [ 106.864186][ T45] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 106.875116][ T45] usb 2-1: USB disconnect, device number 44 [ 106.890953][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 106.893974][ T603] usbhid 1-1:1.0: can't add hid device: -71 [ 106.913472][ T603] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 106.922867][ T603] usb 1-1: USB disconnect, device number 48 [ 106.926818][ T1562] netlink: 68 bytes leftover after parsing attributes in process `syz.0.477'. [ 106.995070][ T321] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 107.124781][ T321] usb 4-1: device descriptor read/64, error -71 [ 107.290027][ T314] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 107.298115][ T314] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input42 [ 107.317065][ T314] usb 3-1: USB disconnect, device number 50 [ 107.323065][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 107.364793][ T321] usb 4-1: device descriptor read/64, error -71 [ 107.410484][ T1575] netlink: 68 bytes leftover after parsing attributes in process `syz.1.482'. [ 107.484878][ T321] usb usb4-port1: attempt power cycle [ 107.635187][ T314] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 107.674800][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 107.784785][ T314] usb 3-1: Using ep0 maxpacket: 32 [ 107.791432][ T314] usb 3-1: unable to get BOS descriptor or descriptor too short [ 107.801732][ T314] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 107.810880][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.818954][ T314] usb 3-1: Product: syz [ 107.823135][ T314] usb 3-1: Manufacturer: syz [ 107.827752][ T314] usb 3-1: SerialNumber: syz [ 107.834843][ T321] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 107.835830][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.853354][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 107.862411][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.865851][ T321] usb 4-1: device descriptor read/8, error -71 [ 107.871287][ T10] usb 2-1: config 0 descriptor?? [ 108.005895][ T321] usb 4-1: device descriptor read/8, error -71 [ 108.034875][ T314] usb 3-1: Fast Track Pro switching to config #2 [ 108.042295][ T314] usb 3-1: USB disconnect, device number 51 [ 108.084982][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 108.090937][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 108.100324][ T10] usb 2-1: USB disconnect, device number 45 [ 108.254819][ T321] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 108.275950][ T321] usb 4-1: device descriptor read/8, error -71 [ 108.405880][ T321] usb 4-1: device descriptor read/8, error -71 [ 108.514893][ T321] usb usb4-port1: unable to enumerate USB device [ 108.524912][ T45] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 108.676116][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.687059][ T45] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 108.696120][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.704762][ T45] usb 2-1: config 0 descriptor?? [ 108.784820][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 108.915008][ T10] usb 3-1: device descriptor read/64, error -71 [ 108.994802][ T327] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 108.994811][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 109.028617][ T1588] tipc: Enabling of bearer rejected, failed to enable media [ 109.039210][ T1588] tipc: Enabling of bearer rejected, already enabled [ 109.154856][ T10] usb 3-1: device descriptor read/64, error -71 [ 109.294796][ T1033] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 109.311370][ T1582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.320001][ T1582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.394816][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 109.434811][ T314] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 109.446392][ T1033] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.454894][ T1033] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.466544][ T1033] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 109.475633][ T1033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.483654][ T1033] usb 1-1: Product: syz [ 109.487837][ T1033] usb 1-1: Manufacturer: syz [ 109.492458][ T1033] usb 1-1: SerialNumber: syz [ 109.515132][ T45] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 109.524773][ T10] usb 3-1: device descriptor read/64, error -71 [ 109.525051][ T45] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input43 [ 109.585785][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.596759][ T314] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 109.605860][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.614647][ T314] usb 4-1: config 0 descriptor?? [ 109.704104][ T1033] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 109.714609][ T1033] usb 1-1: USB disconnect, device number 49 [ 109.726468][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.764785][ T10] usb 3-1: device descriptor read/64, error -71 [ 109.822129][ T314] usbhid 4-1:0.0: can't add hid device: -71 [ 109.828214][ T314] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 109.836868][ T314] usb 4-1: USB disconnect, device number 55 [ 109.874951][ T10] usb usb3-port1: attempt power cycle [ 110.214790][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 110.245877][ T10] usb 3-1: device descriptor read/8, error -71 [ 110.247604][ T1600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 110.260981][ T45] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 110.344606][ T1606] FAULT_INJECTION: forcing a failure. [ 110.344606][ T1606] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 110.357915][ T1606] CPU: 0 UID: 0 PID: 1606 Comm: syz.0.495 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 110.357945][ T1606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.357957][ T1606] Call Trace: [ 110.357964][ T1606] [ 110.357971][ T1606] __dump_stack+0x21/0x30 [ 110.358002][ T1606] dump_stack_lvl+0x140/0x1c0 [ 110.358027][ T1606] ? __cfi_dump_stack_lvl+0x10/0x10 [ 110.358055][ T1606] dump_stack+0x19/0x20 [ 110.358069][ T1606] should_fail_ex+0x3c2/0x510 [ 110.358082][ T1606] should_fail_alloc_page+0xec/0x110 [ 110.358096][ T1606] __alloc_pages_noprof+0x1c0/0x7e0 [ 110.358112][ T1606] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 110.358137][ T1606] ? unwind_get_return_address+0x51/0x90 [ 110.358161][ T1606] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 110.358184][ T1606] ? arch_stack_walk+0x10a/0x170 [ 110.358205][ T1606] __folio_alloc_noprof+0x14/0x80 [ 110.358219][ T1606] folio_prealloc+0x46/0x220 [ 110.358233][ T1606] do_pte_missing+0x16af/0x4440 [ 110.358248][ T1606] ? pte_marker_clear+0x1b0/0x1b0 [ 110.358262][ T1606] ? is_bpf_text_address+0x17b/0x1a0 [ 110.358287][ T1606] ? kernel_text_address+0xa9/0xe0 [ 110.358313][ T1606] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 110.358342][ T1606] handle_mm_fault+0x1189/0x1ba0 [ 110.358365][ T1606] ? __cfi_handle_mm_fault+0x10/0x10 [ 110.358378][ T1606] ? find_vma+0xd3/0x120 [ 110.358390][ T1606] ? lock_mm_and_find_vma+0xb8/0x390 [ 110.358402][ T1606] do_user_addr_fault+0x4ee/0x1230 [ 110.358419][ T1606] exc_page_fault+0x58/0xc0 [ 110.358444][ T1606] asm_exc_page_fault+0x2b/0x30 [ 110.358468][ T1606] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 110.358498][ T1606] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 e9 bf 6a 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 110.358513][ T1606] RSP: 0018:ffffc9000f81f878 EFLAGS: 00050202 [ 110.358526][ T1606] RAX: ffffffff82acab01 RBX: ffff88811ca06000 RCX: 0000000000000105 [ 110.358536][ T1606] RDX: 0000000000000000 RSI: ffff88811ca06eee RDI: 0000200000001000 [ 110.358544][ T1606] RBP: ffffc9000f81f9c8 R08: ffff88811ca06ff2 R09: 1ffff11023940dfe [ 110.358553][ T1606] R10: dffffc0000000000 R11: ffffed1023940dff R12: 0000200000000112 [ 110.358561][ T1606] R13: 0000000000000012 R14: 0000000000000ff3 R15: ffffc9000f81fb58 [ 110.358570][ T1606] ? _copy_to_iter+0x411/0x1520 [ 110.358595][ T1606] ? _copy_to_iter+0x43f/0x1520 [ 110.358619][ T1606] ? __cfi__copy_to_iter+0x10/0x10 [ 110.358642][ T1606] ? __check_object_size+0x54c/0x870 [ 110.358662][ T1606] ? __cfi___check_object_size+0x10/0x10 [ 110.358674][ T1606] seq_read_iter+0xcb2/0xf30 [ 110.358689][ T1606] seq_read+0x368/0x490 [ 110.358702][ T1606] ? __cfi_seq_read+0x10/0x10 [ 110.358715][ T1606] ? __cfi_selinux_file_permission+0x10/0x10 [ 110.358731][ T1606] ? __import_iovec+0x5b9/0x7d0 [ 110.358757][ T1606] ? __cfi_seq_read+0x10/0x10 [ 110.358788][ T1606] proc_reg_read+0x182/0x2f0 [ 110.358809][ T1606] vfs_readv+0x5e7/0xa00 [ 110.358832][ T1606] ? __cfi_proc_reg_read+0x10/0x10 [ 110.358846][ T1606] ? do_readv+0x2e0/0x2e0 [ 110.358860][ T1606] ? __cfi_mutex_unlock+0x10/0x10 [ 110.358878][ T1606] __x64_sys_preadv+0x19f/0x2c0 [ 110.358898][ T1606] ? __cfi___x64_sys_preadv+0x10/0x10 [ 110.358919][ T1606] ? __kasan_check_read+0x15/0x20 [ 110.358938][ T1606] x64_sys_call+0x1ee9/0x2ee0 [ 110.358956][ T1606] do_syscall_64+0x57/0xf0 [ 110.358972][ T1606] ? clear_bhb_loop+0x50/0xa0 [ 110.358986][ T1606] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.359000][ T1606] RIP: 0033:0x7f551079e0d9 [ 110.359010][ T1606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.359020][ T1606] RSP: 002b:00007f550f1f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 110.359037][ T1606] RAX: ffffffffffffffda RBX: 00007f5510a25fa0 RCX: 00007f551079e0d9 [ 110.359051][ T1606] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 110.359064][ T1606] RBP: 00007f550f1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.359077][ T1606] R10: 00000000000008b3 R11: 0000000000000246 R12: 0000000000000001 [ 110.359089][ T1606] R13: 00007f5510a26038 R14: 00007f5510a25fa0 R15: 00007fff3d4fd678 [ 110.359105][ T1606] [ 110.445976][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.448434][ T36] audit: type=1400 audit(1786093397.020:271): avc: denied { setopt } for pid=1607 comm="syz.0.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.455998][ T45] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 110.459211][ T10] usb 3-1: device descriptor read/8, error -71 [ 110.462819][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.714800][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 110.728555][ T45] usb 4-1: config 0 descriptor?? [ 110.735901][ T314] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 110.766188][ T10] usb 3-1: device descriptor read/8, error -71 [ 110.934765][ T314] usb 1-1: Using ep0 maxpacket: 16 [ 110.941101][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.952017][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.961790][ T314] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 110.970874][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.979579][ T314] usb 1-1: config 0 descriptor?? [ 110.995927][ T10] usb 3-1: device descriptor read/8, error -71 [ 111.078147][ T360] usb 2-1: USB disconnect, device number 46 [ 111.078253][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 111.105432][ T10] usb usb3-port1: unable to enumerate USB device [ 111.170456][ T1590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.179121][ T1590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.388858][ T314] apple 0003:05AC:024B.0013: unknown global tag 0xe [ 111.395587][ T314] apple 0003:05AC:024B.0013: item 0 1 1 14 parsing failed [ 111.402805][ T314] apple 0003:05AC:024B.0013: parse failed [ 111.408599][ T314] apple 0003:05AC:024B.0013: probe with driver apple failed with error -22 [ 111.434841][ T360] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 111.586184][ T360] usb 2-1: unable to get BOS descriptor or descriptor too short [ 111.594747][ T360] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.615703][ T360] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 111.633616][ T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.651822][ T360] usb 2-1: Product: syz [ 111.660393][ T360] usb 2-1: Manufacturer: syz [ 111.675276][ T360] usb 2-1: SerialNumber: syz [ 111.925001][ T360] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 111.941624][ T360] usb 2-1: USB disconnect, device number 47 [ 111.954831][ T603] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 112.116034][ T603] usb 3-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 112.127190][ T603] usb 3-1: config 1 interface 0 has no altsetting 0 [ 112.136246][ T603] usb 3-1: string descriptor 0 read error: -22 [ 112.142668][ T603] usb 3-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 112.152040][ T603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.165362][ T1634] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 112.255691][ T1638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.264965][ T1638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.379214][ T1634] netlink: 32 bytes leftover after parsing attributes in process `syz.2.506'. [ 112.400145][ T360] usb 1-1: USB disconnect, device number 50 [ 112.684809][ T310] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 112.774780][ T360] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 112.814773][ T310] usb 2-1: device descriptor read/64, error -71 [ 112.895238][ T603] usbhid 3-1:1.0: can't add hid device: -71 [ 112.901535][ T603] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 112.910959][ T603] usb 3-1: USB disconnect, device number 56 [ 112.914600][ T1642] netlink: 68 bytes leftover after parsing attributes in process `syz.2.509'. [ 112.958430][ T360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.962068][ T1649] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.974242][ T360] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 112.983875][ T36] audit: type=1400 audit(1786093399.640:272): avc: denied { getopt } for pid=1646 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.990175][ T360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.017755][ T36] audit: type=1400 audit(1786093399.640:273): avc: denied { create } for pid=1646 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 113.038246][ T36] audit: type=1400 audit(1786093399.640:274): avc: denied { getopt } for pid=1646 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 113.039927][ T360] usb 1-1: config 0 descriptor?? [ 113.069093][ T1653] netlink: 68 bytes leftover after parsing attributes in process `syz.2.513'. [ 113.078197][ T310] usb 2-1: device descriptor read/64, error -71 [ 113.079175][ T1653] fuse: Bad value for 'fd' [ 113.110651][ T45] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 113.126779][ T45] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input44 [ 113.139245][ T45] usb 4-1: USB disconnect, device number 56 [ 113.145247][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 113.162572][ T680] Bluetooth: hci0: Frame reassembly failed (-84) [ 113.314790][ T310] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 113.444808][ T310] usb 2-1: device descriptor read/64, error -71 [ 113.454893][ T45] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 113.464967][ T1638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.473495][ T1638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.606205][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 113.614239][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 113.622809][ T45] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 113.636131][ T45] usb 4-1: string descriptor 0 read error: -22 [ 113.642326][ T45] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 113.651392][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.662439][ T45] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 113.670886][ T45] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 113.679855][ T45] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 113.688998][ T310] usb 2-1: device descriptor read/64, error -71 [ 113.695277][ T45] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 113.814876][ T310] usb usb2-port1: attempt power cycle [ 113.869676][ T1656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.878731][ T1656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.886869][ T360] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 113.888388][ T36] audit: type=1400 audit(1786093400.540:275): avc: denied { connect } for pid=1655 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.894467][ T360] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input45 [ 113.920793][ T36] audit: type=1400 audit(1786093400.570:276): avc: denied { getopt } for pid=1655 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.926079][ T360] usb 1-1: USB disconnect, device number 51 [ 113.941650][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 113.958794][ T45] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 113.980065][ T45] usb 4-1: USB disconnect, device number 57 [ 114.154847][ T310] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 114.175853][ T310] usb 2-1: device descriptor read/8, error -71 [ 114.306129][ T310] usb 2-1: device descriptor read/8, error -71 [ 114.454817][ T321] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 114.508748][ T1672] tipc: Enabling of bearer rejected, failed to enable media [ 114.518765][ T1672] tipc: Enabling of bearer rejected, already enabled [ 114.536520][ T1674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.521'. [ 114.555585][ T310] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 114.575816][ T310] usb 2-1: device descriptor read/8, error -71 [ 114.616121][ T321] usb 1-1: unable to get BOS descriptor or descriptor too short [ 114.624468][ T321] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.636155][ T321] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 114.645265][ T321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.653265][ T321] usb 1-1: Product: syz [ 114.657467][ T321] usb 1-1: Manufacturer: syz [ 114.662090][ T321] usb 1-1: SerialNumber: syz [ 114.705791][ T310] usb 2-1: device descriptor read/8, error -71 [ 114.804773][ T360] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 114.814884][ T310] usb usb2-port1: unable to enumerate USB device [ 114.871297][ T321] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 114.880664][ T321] usb 1-1: USB disconnect, device number 52 [ 114.892536][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 114.955850][ T360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.966820][ T360] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 114.975919][ T360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.984511][ T360] usb 4-1: config 0 descriptor?? [ 115.193225][ T360] usbhid 4-1:0.0: can't add hid device: -71 [ 115.199251][ T360] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 115.207901][ T360] usb 4-1: USB disconnect, device number 58 [ 115.234802][ T327] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 115.234827][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 115.261549][ T36] audit: type=1400 audit(1786093401.910:277): avc: denied { ioctl } for pid=1677 comm="syz.2.523" path="socket:[9000]" dev="sockfs" ino=9000 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.261756][ T1678] netlink: 40 bytes leftover after parsing attributes in process `syz.2.523'. [ 115.397933][ T1684] FAULT_INJECTION: forcing a failure. [ 115.397933][ T1684] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 115.411190][ T1684] CPU: 0 UID: 0 PID: 1684 Comm: syz.0.526 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 115.411215][ T1684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.411222][ T1684] Call Trace: [ 115.411227][ T1684] [ 115.411232][ T1684] __dump_stack+0x21/0x30 [ 115.411252][ T1684] dump_stack_lvl+0x140/0x1c0 [ 115.411267][ T1684] ? __cfi_dump_stack_lvl+0x10/0x10 [ 115.411282][ T1684] ? __alloc_pages_noprof+0x35a/0x7e0 [ 115.411300][ T1684] dump_stack+0x19/0x20 [ 115.411313][ T1684] should_fail_ex+0x3c2/0x510 [ 115.411326][ T1684] should_fail_alloc_page+0xec/0x110 [ 115.411340][ T1684] __alloc_pages_noprof+0x1c0/0x7e0 [ 115.411354][ T1684] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 115.411369][ T1684] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 115.411382][ T1684] ? kasan_unpoison+0x4a/0x70 [ 115.411394][ T1684] ? __kasan_check_write+0x18/0x20 [ 115.411405][ T1684] ? prep_compound_page+0x44b/0x590 [ 115.411418][ T1684] __folio_alloc_noprof+0x14/0x80 [ 115.411433][ T1684] folio_prealloc+0x46/0x220 [ 115.411447][ T1684] do_pte_missing+0x16af/0x4440 [ 115.411461][ T1684] ? pte_marker_clear+0x1b0/0x1b0 [ 115.411474][ T1684] ? is_bpf_text_address+0x17b/0x1a0 [ 115.411491][ T1684] ? kernel_text_address+0xa9/0xe0 [ 115.411505][ T1684] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 115.411522][ T1684] handle_mm_fault+0x1189/0x1ba0 [ 115.411536][ T1684] ? __cfi_handle_mm_fault+0x10/0x10 [ 115.411548][ T1684] ? find_vma+0xd3/0x120 [ 115.411560][ T1684] ? lock_mm_and_find_vma+0xb8/0x390 [ 115.411573][ T1684] do_user_addr_fault+0x4ee/0x1230 [ 115.411590][ T1684] exc_page_fault+0x58/0xc0 [ 115.411605][ T1684] asm_exc_page_fault+0x2b/0x30 [ 115.411619][ T1684] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 115.411637][ T1684] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 e9 bf 6a 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 115.411654][ T1684] RSP: 0018:ffffc9000f01f878 EFLAGS: 00050202 [ 115.411667][ T1684] RAX: ffffffff82acab01 RBX: ffff8881115e2000 RCX: 0000000000000105 [ 115.411676][ T1684] RDX: 0000000000000000 RSI: ffff8881115e2eee RDI: 0000200000001000 [ 115.411685][ T1684] RBP: ffffc9000f01f9c8 R08: ffff8881115e2ff2 R09: 1ffff110222bc5fe [ 115.411693][ T1684] R10: dffffc0000000000 R11: ffffed10222bc5ff R12: 0000200000000112 [ 115.411702][ T1684] R13: 0000000000000012 R14: 0000000000000ff3 R15: ffffc9000f01fb58 [ 115.411711][ T1684] ? _copy_to_iter+0x411/0x1520 [ 115.411726][ T1684] ? _copy_to_iter+0x43f/0x1520 [ 115.411739][ T1684] ? __cfi__copy_to_iter+0x10/0x10 [ 115.411752][ T1684] ? __check_object_size+0x54c/0x870 [ 115.411765][ T1684] ? __cfi___check_object_size+0x10/0x10 [ 115.411777][ T1684] seq_read_iter+0xcb2/0xf30 [ 115.411791][ T1684] seq_read+0x368/0x490 [ 115.411804][ T1684] ? __cfi_seq_read+0x10/0x10 [ 115.411817][ T1684] ? __cfi_selinux_file_permission+0x10/0x10 [ 115.411829][ T1684] ? __import_iovec+0x5b9/0x7d0 [ 115.411844][ T1684] ? __cfi_seq_read+0x10/0x10 [ 115.411856][ T1684] proc_reg_read+0x182/0x2f0 [ 115.411869][ T1684] vfs_readv+0x5e7/0xa00 [ 115.411882][ T1684] ? __cfi_proc_reg_read+0x10/0x10 [ 115.411894][ T1684] ? do_readv+0x2e0/0x2e0 [ 115.411907][ T1684] ? __cfi_mutex_unlock+0x10/0x10 [ 115.411923][ T1684] __x64_sys_preadv+0x19f/0x2c0 [ 115.411935][ T1684] ? __cfi___x64_sys_preadv+0x10/0x10 [ 115.411948][ T1684] ? __kasan_check_read+0x15/0x20 [ 115.411959][ T1684] x64_sys_call+0x1ee9/0x2ee0 [ 115.411969][ T1684] do_syscall_64+0x57/0xf0 [ 115.411982][ T1684] ? clear_bhb_loop+0x50/0xa0 [ 115.411995][ T1684] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 115.412009][ T1684] RIP: 0033:0x7f551079e0d9 [ 115.412019][ T1684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.412028][ T1684] RSP: 002b:00007f550f1f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 115.412041][ T1684] RAX: ffffffffffffffda RBX: 00007f5510a25fa0 RCX: 00007f551079e0d9 [ 115.412049][ T1684] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 115.412057][ T1684] RBP: 00007f550f1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 115.412064][ T1684] R10: 00000000000008b3 R11: 0000000000000246 R12: 0000000000000001 [ 115.412071][ T1684] R13: 00007f5510a26038 R14: 00007f5510a25fa0 R15: 00007fff3d4fd678 [ 115.412081][ T1684] [ 115.862993][ T1695] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.907647][ T36] audit: type=1400 audit(1786093402.560:278): avc: denied { bind } for pid=1694 comm="syz.0.529" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.927846][ T36] audit: type=1400 audit(1786093402.560:279): avc: denied { node_bind } for pid=1694 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 115.964875][ T314] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 115.978172][ T360] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 116.134797][ T314] usb 4-1: Invalid ep0 maxpacket: 64 [ 116.156293][ T360] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.167252][ T360] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 116.176483][ T360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.185236][ T360] usb 3-1: config 0 descriptor?? [ 116.224783][ T310] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 116.264799][ T314] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 116.355039][ T310] usb 2-1: device descriptor read/64, error -71 [ 116.374770][ T1033] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 116.392824][ T360] usbhid 3-1:0.0: can't add hid device: -71 [ 116.398920][ T360] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 116.407596][ T360] usb 3-1: USB disconnect, device number 57 [ 116.424789][ T314] usb 4-1: Invalid ep0 maxpacket: 64 [ 116.430214][ T314] usb usb4-port1: attempt power cycle [ 116.526142][ T1033] usb 1-1: unable to get BOS descriptor or descriptor too short [ 116.534543][ T1033] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.546062][ T1033] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 116.555133][ T1033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.563151][ T1033] usb 1-1: Product: syz [ 116.567327][ T1033] usb 1-1: Manufacturer: syz [ 116.571928][ T1033] usb 1-1: SerialNumber: syz [ 116.604830][ T310] usb 2-1: device descriptor read/64, error -71 [ 116.774783][ T314] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 116.785662][ T1033] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 116.795087][ T1033] usb 1-1: USB disconnect, device number 53 [ 116.801127][ T314] usb 4-1: Invalid ep0 maxpacket: 64 [ 116.808884][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 116.824812][ T360] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 116.844822][ T310] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 116.934795][ T314] usb 4-1: new low-speed USB device number 62 using dummy_hcd [ 116.955138][ T314] usb 4-1: Invalid ep0 maxpacket: 64 [ 116.960527][ T314] usb usb4-port1: unable to enumerate USB device [ 116.974805][ T310] usb 2-1: device descriptor read/64, error -71 [ 116.975884][ T360] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.992016][ T360] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 117.001379][ T360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.010548][ T360] usb 3-1: config 0 descriptor?? [ 117.214779][ T310] usb 2-1: device descriptor read/64, error -71 [ 117.324883][ T310] usb usb2-port1: attempt power cycle [ 117.534832][ T321] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 117.617350][ T1682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.625929][ T1682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.664933][ T321] usb 1-1: device descriptor read/64, error -71 [ 117.671230][ T310] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 117.696080][ T310] usb 2-1: device descriptor read/8, error -71 [ 117.825841][ T310] usb 2-1: device descriptor read/8, error -71 [ 117.835294][ T360] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 117.843381][ T360] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input46 [ 117.924781][ T321] usb 1-1: device descriptor read/64, error -71 [ 117.964782][ T45] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 118.064781][ T310] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 118.085911][ T310] usb 2-1: device descriptor read/8, error -71 [ 118.115963][ T45] usb 4-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 118.127031][ T45] usb 4-1: config 1 interface 0 has no altsetting 0 [ 118.135830][ T45] usb 4-1: string descriptor 0 read error: -22 [ 118.142036][ T45] usb 4-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 118.151105][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.160064][ T1727] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 118.167325][ T321] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 118.215767][ T310] usb 2-1: device descriptor read/8, error -71 [ 118.304802][ T321] usb 1-1: device descriptor read/64, error -71 [ 118.324866][ T310] usb usb2-port1: unable to enumerate USB device [ 118.376354][ T1727] netlink: 32 bytes leftover after parsing attributes in process `syz.3.539'. [ 118.544770][ T321] usb 1-1: device descriptor read/64, error -71 [ 118.664909][ T321] usb usb1-port1: attempt power cycle [ 118.892819][ T45] usbhid 4-1:1.0: can't add hid device: -71 [ 118.905703][ T45] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 118.915881][ T45] usb 4-1: USB disconnect, device number 63 [ 118.921267][ T1732] netlink: 68 bytes leftover after parsing attributes in process `syz.3.541'. [ 118.979337][ T1739] netlink: 68 bytes leftover after parsing attributes in process `syz.3.544'. [ 119.014781][ T321] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 119.035764][ T321] usb 1-1: device descriptor read/8, error -71 [ 119.165788][ T321] usb 1-1: device descriptor read/8, error -71 [ 119.394783][ T1033] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 119.403624][ T310] usb 3-1: USB disconnect, device number 58 [ 119.403744][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 119.425796][ T321] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 119.445837][ T321] usb 1-1: device descriptor read/8, error -71 [ 119.546075][ T1033] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.554522][ T1033] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.566101][ T1033] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 119.575230][ T1033] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.583225][ T1033] usb 2-1: Product: syz [ 119.587439][ T1033] usb 2-1: Manufacturer: syz [ 119.592045][ T1033] usb 2-1: SerialNumber: syz [ 119.595864][ T321] usb 1-1: device descriptor read/8, error -71 [ 119.704890][ T321] usb usb1-port1: unable to enumerate USB device [ 119.734777][ T310] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 119.807693][ T1033] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 119.820777][ T1033] usb 2-1: USB disconnect, device number 56 [ 119.885925][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.896876][ T310] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.906146][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.915075][ T310] usb 3-1: config 0 descriptor?? [ 120.104779][ T360] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 120.124535][ T310] usbhid 3-1:0.0: can't add hid device: -71 [ 120.130532][ T310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 120.139305][ T310] usb 3-1: USB disconnect, device number 59 [ 120.254793][ T360] usb 4-1: Using ep0 maxpacket: 32 [ 120.262322][ T360] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 120.271490][ T360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.279920][ T360] usb 4-1: Product: syz [ 120.284124][ T360] usb 4-1: Manufacturer: syz [ 120.288754][ T360] usb 4-1: SerialNumber: syz [ 120.307755][ T1753] tipc: Enabling of bearer rejected, failed to enable media [ 120.318034][ T1753] tipc: Enabling of bearer rejected, already enabled [ 120.340003][ T1755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'. [ 120.374378][ T673] Bluetooth: hci0: Frame reassembly failed (-84) [ 120.375750][ T1765] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 120.380996][ T36] audit: type=1400 audit(1786093407.020:280): avc: denied { write } for pid=1763 comm="syz.1.553" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 120.415708][ T36] audit: type=1400 audit(1786093407.020:281): avc: denied { open } for pid=1763 comm="syz.1.553" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 120.418383][ T1767] batadv_slave_1: entered promiscuous mode [ 120.440306][ T36] audit: type=1400 audit(1786093407.050:282): avc: denied { ioctl } for pid=1763 comm="syz.1.553" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 120.471725][ T1767] batadv_slave_1: left promiscuous mode [ 120.485986][ T1772] FAULT_INJECTION: forcing a failure. [ 120.485986][ T1772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.499085][ T1772] CPU: 1 UID: 0 PID: 1772 Comm: syz.0.556 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 120.499118][ T1772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.499131][ T1772] Call Trace: [ 120.499138][ T1772] [ 120.499147][ T1772] __dump_stack+0x21/0x30 [ 120.499179][ T1772] dump_stack_lvl+0x140/0x1c0 [ 120.499204][ T1772] ? __cfi_dump_stack_lvl+0x10/0x10 [ 120.499231][ T1772] ? vsnprintf+0x7b4/0x1ad0 [ 120.499252][ T1772] ? check_stack_object+0x10f/0x150 [ 120.499275][ T1772] dump_stack+0x19/0x20 [ 120.499300][ T1772] should_fail_ex+0x3c2/0x510 [ 120.499323][ T1772] should_fail+0xf/0x20 [ 120.499341][ T1772] should_fail_usercopy+0x1e/0x30 [ 120.499365][ T1772] _copy_from_user+0x20/0xa0 [ 120.499391][ T1772] kstrtouint_from_user+0xde/0x170 [ 120.499413][ T1772] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 120.499434][ T1772] ? selinux_file_permission+0x318/0xb60 [ 120.499455][ T1772] ? __cfi_selinux_file_permission+0x10/0x10 [ 120.499474][ T1772] proc_fail_nth_write+0x8f/0x220 [ 120.499502][ T1772] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 120.499531][ T1772] ? bpf_lsm_file_permission+0xd/0x20 [ 120.499556][ T1772] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 120.499583][ T1772] vfs_write+0x3c1/0xfd0 [ 120.499604][ T1772] ? __cfi_vfs_write+0x10/0x10 [ 120.499623][ T1772] ? __kasan_check_write+0x18/0x20 [ 120.499644][ T1772] ? mutex_lock+0x97/0x1d0 [ 120.499670][ T1772] ? __cfi_mutex_lock+0x10/0x10 [ 120.499699][ T1772] ksys_write+0x145/0x260 [ 120.499726][ T1772] ? fput+0x1a4/0x230 [ 120.499749][ T1772] ? __cfi_ksys_write+0x10/0x10 [ 120.499769][ T1772] ? __x64_sys_preadv+0x1dd/0x2c0 [ 120.499792][ T1772] ? __kasan_check_read+0x15/0x20 [ 120.499811][ T1772] __x64_sys_write+0x7f/0x90 [ 120.499831][ T1772] x64_sys_call+0x271c/0x2ee0 [ 120.499850][ T1772] do_syscall_64+0x57/0xf0 [ 120.499871][ T1772] ? clear_bhb_loop+0x50/0xa0 [ 120.499897][ T1772] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.499921][ T1772] RIP: 0033:0x7f551075e90e [ 120.499939][ T1772] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 120.499956][ T1772] RSP: 002b:00007f550f1f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 120.499979][ T1772] RAX: ffffffffffffffda RBX: 00007f550f1f76c0 RCX: 00007f551075e90e [ 120.499995][ T1772] RDX: 0000000000000001 RSI: 00007f550f1f70a0 RDI: 0000000000000004 [ 120.500008][ T1772] RBP: 00007f550f1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 120.500021][ T1772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.500033][ T1772] R13: 00007f5510a26038 R14: 00007f5510a25fa0 R15: 00007fff3d4fd678 [ 120.500051][ T1772] [ 120.504166][ T360] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 120.604778][ T310] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 120.624435][ T360] usb 4-1: USB disconnect, device number 64 [ 120.784755][ T310] usb 3-1: Invalid ep0 maxpacket: 64 [ 120.799141][ T45] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 120.934832][ T310] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 120.942487][ T45] usb 1-1: device descriptor read/64, error -71 [ 121.094780][ T310] usb 3-1: Invalid ep0 maxpacket: 64 [ 121.100194][ T310] usb usb3-port1: attempt power cycle [ 121.184794][ T45] usb 1-1: device descriptor read/64, error -71 [ 121.424872][ T45] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 121.445038][ T310] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 121.465162][ T310] usb 3-1: Invalid ep0 maxpacket: 64 [ 121.555008][ T45] usb 1-1: device descriptor read/64, error -71 [ 121.574833][ T603] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 121.594838][ T310] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 121.615346][ T310] usb 3-1: Invalid ep0 maxpacket: 64 [ 121.620779][ T310] usb usb3-port1: unable to enumerate USB device [ 121.726205][ T603] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.734604][ T603] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.746291][ T603] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 121.755389][ T603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.763463][ T603] usb 4-1: Product: syz [ 121.767813][ T603] usb 4-1: Manufacturer: syz [ 121.772414][ T603] usb 4-1: SerialNumber: syz [ 121.804775][ T45] usb 1-1: device descriptor read/64, error -71 [ 121.914905][ T45] usb usb1-port1: attempt power cycle [ 121.982841][ T603] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 121.992675][ T603] usb 4-1: USB disconnect, device number 65 [ 122.003032][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 122.254789][ T45] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 122.275865][ T45] usb 1-1: device descriptor read/8, error -71 [ 122.405812][ T45] usb 1-1: device descriptor read/8, error -71 [ 122.434787][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 122.441820][ T327] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 122.469599][ T1789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.564'. [ 122.655027][ T45] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 122.675767][ T45] usb 1-1: device descriptor read/8, error -71 [ 122.704776][ T360] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 122.784779][ T603] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 122.794771][ T314] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 122.805748][ T45] usb 1-1: device descriptor read/8, error -71 [ 122.854794][ T360] usb 2-1: Using ep0 maxpacket: 32 [ 122.860323][ T360] usb 2-1: no configurations [ 122.865046][ T360] usb 2-1: can't read configurations, error -22 [ 122.914974][ T45] usb usb1-port1: unable to enumerate USB device [ 122.945850][ T603] usb 4-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 122.956831][ T603] usb 4-1: config 1 interface 0 has no altsetting 0 [ 122.965352][ T603] usb 4-1: string descriptor 0 read error: -22 [ 122.965941][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.971620][ T603] usb 4-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 122.982521][ T314] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 122.992130][ T603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.001075][ T360] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 123.001360][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.013824][ T1802] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 123.020481][ T314] usb 3-1: config 0 descriptor?? [ 123.154972][ T360] usb 2-1: Using ep0 maxpacket: 32 [ 123.160552][ T360] usb 2-1: no configurations [ 123.165216][ T360] usb 2-1: can't read configurations, error -22 [ 123.171586][ T360] usb usb2-port1: attempt power cycle [ 123.227473][ T1802] netlink: 32 bytes leftover after parsing attributes in process `syz.3.569'. [ 123.239736][ T314] usbhid 3-1:0.0: can't add hid device: -71 [ 123.246115][ T314] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 123.256445][ T314] usb 3-1: USB disconnect, device number 64 [ 123.514774][ T360] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 123.535144][ T360] usb 2-1: Using ep0 maxpacket: 32 [ 123.540690][ T360] usb 2-1: no configurations [ 123.545344][ T360] usb 2-1: can't read configurations, error -22 [ 123.559869][ T1809] netlink: 68 bytes leftover after parsing attributes in process `syz.0.571'. [ 123.674775][ T360] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 123.684781][ T45] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 123.695145][ T360] usb 2-1: Using ep0 maxpacket: 32 [ 123.700654][ T360] usb 2-1: no configurations [ 123.705520][ T360] usb 2-1: can't read configurations, error -22 [ 123.711896][ T360] usb usb2-port1: unable to enumerate USB device [ 123.745766][ T603] usbhid 4-1:1.0: can't add hid device: -71 [ 123.751762][ T603] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 123.768082][ T603] usb 4-1: USB disconnect, device number 66 [ 123.844776][ T45] usb 3-1: Invalid ep0 maxpacket: 64 [ 123.954819][ T310] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 123.974786][ T45] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 124.064791][ T603] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 124.104777][ T310] usb 1-1: Using ep0 maxpacket: 8 [ 124.112296][ T310] usb 1-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 124.121432][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.129509][ T45] usb 3-1: Invalid ep0 maxpacket: 64 [ 124.134871][ T310] usb 1-1: Product: syz [ 124.139051][ T310] usb 1-1: Manufacturer: syz [ 124.143656][ T310] usb 1-1: SerialNumber: syz [ 124.148429][ T45] usb usb3-port1: attempt power cycle [ 124.236232][ T603] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.244617][ T603] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.256210][ T603] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 124.265318][ T603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.273320][ T603] usb 4-1: Product: syz [ 124.277792][ T603] usb 4-1: Manufacturer: syz [ 124.282419][ T603] usb 4-1: SerialNumber: syz [ 124.363343][ T310] usb 1-1: USB disconnect, device number 62 [ 124.382078][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 124.484779][ T45] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 124.499546][ T603] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 124.506222][ T45] usb 3-1: Invalid ep0 maxpacket: 64 [ 124.515613][ T603] usb 4-1: USB disconnect, device number 67 [ 124.526439][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 124.634822][ T45] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 124.655187][ T45] usb 3-1: Invalid ep0 maxpacket: 64 [ 124.660642][ T45] usb usb3-port1: unable to enumerate USB device [ 125.041693][ T1826] netlink: 68 bytes leftover after parsing attributes in process `syz.3.578'. [ 125.104831][ T360] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 125.255826][ T360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.266792][ T360] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.275857][ T360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.284499][ T360] usb 1-1: config 0 descriptor?? [ 125.294807][ T1033] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 125.444770][ T1033] usb 4-1: Using ep0 maxpacket: 32 [ 125.451006][ T1033] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.461142][ T1033] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 125.480852][ T1033] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 125.492976][ T1033] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.496449][ T1832] netlink: 'syz.1.581': attribute type 10 has an invalid length. [ 125.502947][ T1033] usb 4-1: Product: syz [ 125.509104][ T1832] netlink: 40 bytes leftover after parsing attributes in process `syz.1.581'. [ 125.513629][ T1033] usb 4-1: Manufacturer: syz [ 125.522041][ T1832] veth1: entered promiscuous mode [ 125.526876][ T360] usbhid 1-1:0.0: can't add hid device: -71 [ 125.537624][ T1033] usb 4-1: SerialNumber: syz [ 125.542742][ T360] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 125.552337][ T1033] usb 4-1: config 0 descriptor?? [ 125.562462][ T360] usb 1-1: USB disconnect, device number 63 [ 126.014804][ T360] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 126.165928][ T360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.176892][ T360] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 126.185953][ T360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.194556][ T360] usb 1-1: config 0 descriptor?? [ 126.802252][ T1817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.810813][ T1817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.005150][ T360] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 127.012652][ T360] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input47 [ 127.374229][ C0] ------------[ cut here ]------------ [ 127.379719][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 127.388303][ C0] index 65278 is out of range for type 'const int[34]' [ 127.395148][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 127.395167][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.395176][ C0] Call Trace: [ 127.395181][ C0] [ 127.395187][ C0] __dump_stack+0x21/0x30 [ 127.395211][ C0] dump_stack_lvl+0x140/0x1c0 [ 127.395230][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 127.395248][ C0] ? start_kernel+0x462/0x4bb [ 127.395265][ C0] dump_stack+0x19/0x20 [ 127.395283][ C0] ubsan_epilogue+0xe/0x40 [ 127.395294][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 127.395313][ C0] aiptek_irq+0x208d/0x2a00 [ 127.395330][ C0] ? _raw_spin_unlock+0x45/0x60 [ 127.395344][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 127.395358][ C0] __usb_hcd_giveback_urb+0x36e/0x530 [ 127.395378][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 127.395397][ C0] dummy_timer+0xa3f/0x4900 [ 127.395415][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 127.395427][ C0] ? timerqueue_del+0xd7/0x130 [ 127.395439][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 127.395458][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 127.395469][ C0] __hrtimer_run_queues+0x3ae/0x8e0 [ 127.395497][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 127.395514][ C0] ? read_tsc+0xd/0x20 [ 127.395536][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 127.395563][ C0] hrtimer_run_softirq+0x159/0x560 [ 127.395584][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 127.395604][ C0] handle_softirqs+0x1aa/0x620 [ 127.395618][ C0] __irq_exit_rcu+0x47/0xb0 [ 127.395629][ C0] irq_exit_rcu+0xd/0x30 [ 127.395640][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 127.395659][ C0] [ 127.395663][ C0] [ 127.395667][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 127.395685][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 127.395705][ C0] Code: cc cc cc cc cc cc cc b8 34 bc 0f d6 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 19 43 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 127.395716][ C0] RSP: 0018:ffffffff87407da0 EFLAGS: 000002c2 [ 127.395729][ C0] RAX: ffff8881f6e00000 RBX: ffffffff874156c0 RCX: ffffffff85a444fd [ 127.395739][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000048f054 [ 127.395747][ C0] RBP: ffffffff87407da0 R08: ffff8881f6e395eb R09: 1ffff1103edc72bd [ 127.395756][ C0] R10: dffffc0000000000 R11: ffffed103edc72be R12: 0000000000000000 [ 127.395764][ C0] R13: 1ffffffff0e82ad8 R14: dffffc0000000000 R15: ffffffff87ecbfa8 [ 127.395774][ C0] ? ct_kernel_exit+0x7d/0xb0 [ 127.395786][ C0] default_idle+0x17/0x30 [ 127.395797][ C0] arch_cpu_idle+0xd/0x20 [ 127.395809][ C0] default_idle_call+0x3e/0x80 [ 127.395821][ C0] do_idle+0x2fc/0x570 [ 127.395834][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 127.395849][ C0] cpu_startup_entry+0x47/0x60 [ 127.395862][ C0] rest_init+0x10b/0x130 [ 127.395874][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 127.395892][ C0] start_kernel+0x462/0x4bb [ 127.395907][ C0] x86_64_start_reservations+0x2e/0x30 [ 127.395924][ C0] x86_64_start_kernel+0x6a/0x7b [ 127.395940][ C0] common_startup_64+0x13b/0x157 [ 127.395958][ C0] [ 127.395963][ C0] ---[ end trace ]--- [ 127.434750][ T36] audit: type=1400 audit(1786093414.040:283): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2408]" dev="pipefs" ino=2408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 127.437469][ C0] ------------[ cut here ]------------ [ 127.437490][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 127.684786][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 127.690099][ C0] index 65279 is out of range for type 'const int[34]' [ 127.690118][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 127.690144][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.690156][ C0] Call Trace: [ 127.690163][ C0] [ 127.690171][ C0] __dump_stack+0x21/0x30 [ 127.690203][ C0] dump_stack_lvl+0x140/0x1c0 [ 127.690229][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 127.690254][ C0] ? input_event_dispose+0x2f5/0x6d0 [ 127.690284][ C0] dump_stack+0x19/0x20 [ 127.690309][ C0] ubsan_epilogue+0xe/0x40 [ 127.690327][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 127.690354][ C0] aiptek_irq+0x1f3c/0x2a00 [ 127.690379][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 127.690401][ C0] __usb_hcd_giveback_urb+0x36e/0x530 [ 127.690430][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 127.690466][ C0] dummy_timer+0xa3f/0x4900 [ 127.690492][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 127.690511][ C0] ? timerqueue_del+0xd7/0x130 [ 127.690531][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 127.690558][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 127.690576][ C0] __hrtimer_run_queues+0x3ae/0x8e0 [ 127.690604][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 127.690631][ C0] ? read_tsc+0xd/0x20 [ 127.690654][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 127.690679][ C0] hrtimer_run_softirq+0x159/0x560 [ 127.690697][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 127.690724][ C0] handle_softirqs+0x1aa/0x620 [ 127.690745][ C0] __irq_exit_rcu+0x47/0xb0 [ 127.690764][ C0] irq_exit_rcu+0xd/0x30 [ 127.690782][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 127.690809][ C0] [ 127.690816][ C0] [ 127.690823][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 127.690849][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 127.690878][ C0] Code: cc cc cc cc cc cc cc b8 34 bc 0f d6 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 19 43 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 127.690896][ C0] RSP: 0018:ffffffff87407da0 EFLAGS: 000002c2 [ 127.690915][ C0] RAX: ffff8881f6e00000 RBX: ffffffff874156c0 RCX: ffffffff85a444fd [ 127.690930][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000048f054 [ 127.690943][ C0] RBP: ffffffff87407da0 R08: ffff8881f6e395eb R09: 1ffff1103edc72bd [ 127.690958][ C0] R10: dffffc0000000000 R11: ffffed103edc72be R12: 0000000000000000 [ 127.690972][ C0] R13: 1ffffffff0e82ad8 R14: dffffc0000000000 R15: ffffffff87ecbfa8 [ 127.690989][ C0] ? ct_kernel_exit+0x7d/0xb0 [ 127.691009][ C0] default_idle+0x17/0x30 [ 127.691027][ C0] arch_cpu_idle+0xd/0x20 [ 127.691045][ C0] default_idle_call+0x3e/0x80 [ 127.691064][ C0] do_idle+0x2fc/0x570 [ 127.691085][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 127.691108][ C0] cpu_startup_entry+0x47/0x60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 127.691129][ C0] rest_init+0x10b/0x130 [ 127.691149][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 127.691177][ C0] start_kernel+0x462/0x4bb [ 127.691201][ C0] x86_64_start_reservations+0x2e/0x30 [ 127.691227][ C0] x86_64_start_kernel+0x6a/0x7b [ 127.691252][ C0] common_startup_64+0x13b/0x157 [ 127.691281][ C0] [ 127.691289][ C0] ---[ end trace ]--- [ 128.063420][ T327] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 128.115014][ T1033] usb 4-1: USB disconnect, device number 68 [ 128.350611][ T671] bridge_slave_1: left allmulticast mode [ 128.356323][ T671] bridge_slave_1: left promiscuous mode [ 128.361958][ T671] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.369707][ T671] bridge_slave_0: left allmulticast mode [ 128.375494][ T671] bridge_slave_0: left promiscuous mode [ 128.381460][ T671] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.384955][ T1033] usb 1-1: USB disconnect, device number 64 [ 128.388561][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 128.406149][ T671] bridge_slave_1: left allmulticast mode [ 128.411825][ T671] bridge_slave_1: left promiscuous mode [ 128.424299][ T671] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.432210][ T671] bridge_slave_0: left allmulticast mode [ 128.437979][ T671] bridge_slave_0: left promiscuous mode [ 128.443615][ T671] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.596514][ T671] tipc: Disabling bearer [ 128.601822][ T671] tipc: Left network mode [ 128.606552][ T671] tipc: Disabling bearer [ 128.611812][ T671] tipc: Left network mode [ 128.617290][ T671] veth1_macvtap: left promiscuous mode [ 128.622787][ T671] veth0_vlan: left promiscuous mode [ 128.628274][ T671] veth1_macvtap: left promiscuous mode [ 128.633751][ T671] veth0_vlan: left promiscuous mode [ 128.946427][ T671] bridge_slave_1: left allmulticast mode [ 128.952108][ T671] bridge_slave_1: left promiscuous mode [ 128.957775][ T671] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.965310][ T671] bridge_slave_0: left allmulticast mode [ 128.970955][ T671] bridge_slave_0: left promiscuous mode [ 128.976580][ T671] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.066595][ T671] tipc: Disabling bearer [ 129.071973][ T671] tipc: Left network mode [ 129.077247][ T671] veth1_macvtap: left promiscuous mode [ 129.082766][ T671] veth0_vlan: left promiscuous mode