last executing test programs: 1.831520636s ago: executing program 1 (id=286): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x403, 0x0) ioctl$FIBMAP(r0, 0x2203, 0x0) 1.782852675s ago: executing program 1 (id=289): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000240)=0x2000, 0x4) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) 1.733006914s ago: executing program 1 (id=290): r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x3) fchdir(r1) creat(&(0x7f00000002c0)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x102) 1.704235899s ago: executing program 1 (id=291): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) unshare(0x64000600) 1.637733051s ago: executing program 1 (id=292): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000500)=0x8, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 1.394998186s ago: executing program 3 (id=302): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r0, 0x11a, 0x2, 0x0, 0x0) 1.381885888s ago: executing program 3 (id=303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="f00fba2c8d03000000c80f00c666b80a000f00d00f4ca362000000eae374a70937008fc978c25000f30f060f001926660f5631", 0x33}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.307505621s ago: executing program 3 (id=304): r0 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x800, @dev, 0x7}, 0x1c) write$binfmt_script(r1, &(0x7f00000028c0)={'#! ', '', [], 0xa, "bdd92f0efe80000000000000b320655800b2b184ef1b05713031e573a3d16b0acc6de928"}, 0x28) 1.295623334s ago: executing program 3 (id=305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x108046, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.190160623s ago: executing program 3 (id=311): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.126572625s ago: executing program 3 (id=312): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000140)={0x2, 0x100, 0x4, 0x8, 0x28, 0x2, 0xc, 0x7, 0x5, 0x5, 0x5, 0xa, 0xd, 0x6}) 787.280037ms ago: executing program 1 (id=313): r0 = syz_usb_connect$uac2(0x2, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000080)={0x20, 0x1, 0x5, "a9b5fc7c02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000380)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 535.633223ms ago: executing program 2 (id=319): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='!:my_eprobe raw_syscalls/', 0x19) 523.016595ms ago: executing program 2 (id=320): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 194.938455ms ago: executing program 2 (id=321): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) capset(&(0x7f0000000500)={0x19980330}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 177.336728ms ago: executing program 2 (id=323): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = dup2(r1, r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x5) 162.280781ms ago: executing program 2 (id=324): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x5) io_setup(0x400, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="0300ffff0000", 0x6}]) 142.303265ms ago: executing program 0 (id=325): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 108.503411ms ago: executing program 0 (id=326): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) 89.374374ms ago: executing program 0 (id=327): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x810, 0xffffffffffffffff, 0x0) setrlimit(0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) brk(0x600000000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) brk(0x600000000000) 44.823942ms ago: executing program 0 (id=328): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4603000702810000000000000003003e00f9ffffff040100000000000040000000000000008b00000000000000330d000005003800040078007f00090051e57464"], 0xb48) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 36.430854ms ago: executing program 2 (id=329): ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000000c0)={0x1, [0x0]}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) syz_open_dev$loop(0x0, 0x4, 0x80000) syz_usb_connect(0x1, 0x36, &(0x7f0000001040)={{0x12, 0x1, 0x110, 0x3, 0x13, 0x54, 0x8, 0xb2e8, 0xf5e0, 0x49a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0xf, 0x7, 0x20, 0x7, "", [{{0x9, 0x4, 0x39, 0x6, 0x0, 0x8, 0x1, 0x1, 0x7}}, {{0x9, 0x4, 0x36, 0x8, 0x0, 0xff, 0xff, 0xff, 0x7}}, {{0x9, 0x4, 0xb1, 0x81, 0x0, 0x2e, 0x23, 0xe1, 0x5}}]}}]}}, &(0x7f00000014c0)={0x0, 0x0, 0x5, &(0x7f0000001200)={0x5, 0xf, 0x5}, 0x4, [{0x5b, &(0x7f0000001280)=@string={0x5b, 0x3, "41f4bb145e818e385c7b2040487b43a3690014d5af66754586e2f938a78df7baacf9215168b940ec76be9c37e090cc03cdc958c5af22bfcde4e28c30fd7215965dd9ef372b45290b8a995e9191fb8a87594a3c84c0fab80320"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x43e}}, {0x0, 0x0}]}) mmap$IORING_OFF_SQES(0x0, 0x7f, 0x9, 0x4010, 0xffffffffffffffff, 0x10000000) 15.347598ms ago: executing program 0 (id=330): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000faffffff220000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x24040) 0s ago: executing program 0 (id=331): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffff9, 0x12f382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n [ 32.099168][ T376] __dump_stack+0x21/0x30 [ 32.099225][ T376] dump_stack_lvl+0x140/0x1c0 [ 32.099255][ T376] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.099286][ T376] ? handle_mm_fault+0x16fe/0x1ba0 [ 32.099312][ T376] dump_stack+0x19/0x20 [ 32.099341][ T376] should_fail_ex+0x3c2/0x510 [ 32.099368][ T376] should_failslab+0xac/0x100 [ 32.099394][ T376] kmem_cache_alloc_noprof+0x42/0x410 [ 32.099416][ T376] ? __cfi_handle_mm_fault+0x10/0x10 [ 32.099441][ T376] ? lock_vma_under_rcu+0x4cf/0x590 [ 32.099466][ T376] ? getname_flags+0xcc/0x6b0 [ 32.099491][ T376] getname_flags+0xcc/0x6b0 [ 32.099516][ T376] getname+0x1b/0x30 [ 32.099538][ T376] do_sys_openat2+0xda/0x1d0 [ 32.099576][ T376] ? do_sys_open+0x100/0x100 [ 32.099608][ T376] ? __kasan_check_write+0x18/0x20 [ 32.099630][ T376] ? do_user_addr_fault+0xbf5/0x1230 [ 32.099652][ T376] __x64_sys_openat+0x13a/0x170 [ 32.099685][ T376] x64_sys_call+0xe69/0x2ee0 [ 32.099704][ T376] do_syscall_64+0x57/0xf0 [ 32.100114][ T376] ? clear_bhb_loop+0x50/0xa0 [ 32.100145][ T376] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.100172][ T376] RIP: 0033:0x7f14f9d5e98e [ 32.100194][ T376] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 32.100212][ T376] RSP: 002b:00007f14f87f4ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 32.100242][ T376] RAX: ffffffffffffffda RBX: 00007f14f87f76c0 RCX: 00007f14f9d5e98e [ 32.100259][ T376] RDX: 0000000000000002 RSI: 00007f14f9e3440a RDI: ffffffffffffff9c [ 32.100274][ T376] RBP: 00007f14f9e3506b R08: 0000000000000000 R09: 0000000000000000 [ 32.100287][ T376] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000a7 [ 32.100301][ T376] R13: 0000200000000400 R14: 0000000000000003 R15: 00007fff2df8f058 [ 32.100318][ T376] [ 32.285385][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.466614][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.476832][ T9] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 768 [ 32.486716][ T9] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 32.502903][ T9] usb 3-1: New USB device found, idVendor=174c, idProduct=46aa, bcdDevice= 1.00 [ 32.512052][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.520107][ T9] usb 3-1: Product: syz [ 32.524348][ T9] usb 3-1: Manufacturer: syz [ 32.529003][ T9] usb 3-1: SerialNumber: syz [ 32.545170][ T9] usb-storage 3-1:1.0: USB Mass Storage device detected [ 32.553693][ T9] scsi host1: usb-storage 3-1:1.0 [ 32.673168][ T399] batadv_slave_0: entered promiscuous mode [ 32.679807][ T398] batadv_slave_0: left promiscuous mode [ 32.710142][ T403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 32.730713][ T405] sd 0:0:1:0: PR command failed: 1026 [ 32.736274][ T405] sd 0:0:1:0: Sense Key : 0x5 [current] [ 32.742000][ T405] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 32.762305][ T66] usb 3-1: USB disconnect, device number 2 [ 32.828996][ T416] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.201334][ T457] FAULT_INJECTION: forcing a failure. [ 33.201334][ T457] name failslab, interval 1, probability 0, space 0, times 0 [ 33.214090][ T457] CPU: 1 UID: 0 PID: 457 Comm: syz.3.65 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 33.214118][ T457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 33.214130][ T457] Call Trace: [ 33.214136][ T457] [ 33.214144][ T457] __dump_stack+0x21/0x30 [ 33.214177][ T457] dump_stack_lvl+0x140/0x1c0 [ 33.214204][ T457] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.214234][ T457] dump_stack+0x19/0x20 [ 33.214259][ T457] should_fail_ex+0x3c2/0x510 [ 33.214284][ T457] should_failslab+0xac/0x100 [ 33.214309][ T457] __kmalloc_cache_noprof+0x41/0x470 [ 33.214331][ T457] ? ovl_init_fs_context+0xb8/0x790 [ 33.214355][ T457] ovl_init_fs_context+0xb8/0x790 [ 33.214377][ T457] alloc_fs_context+0x5c7/0x800 [ 33.214404][ T457] fs_context_for_mount+0x26/0x40 [ 33.214431][ T457] __se_sys_fsopen+0xab/0x390 [ 33.214449][ T457] __x64_sys_fsopen+0x5f/0x80 [ 33.214466][ T457] x64_sys_call+0x2d40/0x2ee0 [ 33.214485][ T457] do_syscall_64+0x57/0xf0 [ 33.214504][ T457] ? clear_bhb_loop+0x50/0xa0 [ 33.214554][ T457] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.214574][ T457] RIP: 0033:0x7f14f9d9e159 [ 33.214586][ T457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.214598][ T457] RSP: 002b:00007f14f87f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 33.214613][ T457] RAX: ffffffffffffffda RBX: 00007f14fa025fa0 RCX: 00007f14f9d9e159 [ 33.214624][ T457] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000200 [ 33.214634][ T457] RBP: 00007f14f9e3506b R08: 0000000000000000 R09: 0000000000000000 [ 33.214643][ T457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.214651][ T457] R13: 00007f14fa026038 R14: 00007f14fa025fa0 R15: 00007fff2df8f058 [ 33.214664][ T457] [ 33.414291][ T459] netlink: 60 bytes leftover after parsing attributes in process `syz.2.66'. [ 33.420733][ T461] FAULT_INJECTION: forcing a failure. [ 33.420733][ T461] name failslab, interval 1, probability 0, space 0, times 0 [ 33.435940][ T461] CPU: 1 UID: 0 PID: 461 Comm: syz.3.67 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 33.435978][ T461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 33.435992][ T461] Call Trace: [ 33.435999][ T461] [ 33.436007][ T461] __dump_stack+0x21/0x30 [ 33.436043][ T461] dump_stack_lvl+0x140/0x1c0 [ 33.436075][ T461] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.436107][ T461] ? __futex_wait+0x330/0x3d0 [ 33.436130][ T461] dump_stack+0x19/0x20 [ 33.436159][ T461] should_fail_ex+0x3c2/0x510 [ 33.436188][ T461] should_failslab+0xac/0x100 [ 33.436217][ T461] kmem_cache_alloc_noprof+0x42/0x410 [ 33.436241][ T461] ? fcntl_setlease+0x106/0x570 [ 33.436268][ T461] fcntl_setlease+0x106/0x570 [ 33.436292][ T461] ? __cfi_futex_wait+0x10/0x10 [ 33.436313][ T461] ? __cfi_fcntl_setlease+0x10/0x10 [ 33.436339][ T461] ? vfs_write+0xbcf/0xfd0 [ 33.436364][ T461] do_fcntl+0x5de/0x1580 [ 33.436390][ T461] ? __cfi_selinux_file_fcntl+0x10/0x10 [ 33.436414][ T461] ? check_fcntl_cmd+0xb0/0xb0 [ 33.436440][ T461] ? mutex_unlock+0x90/0x240 [ 33.436472][ T461] ? bpf_lsm_file_fcntl+0xd/0x20 [ 33.436503][ T461] ? security_file_fcntl+0x3e/0x110 [ 33.436526][ T461] __se_sys_fcntl+0xe4/0x180 [ 33.436554][ T461] __x64_sys_fcntl+0x7f/0xa0 [ 33.436579][ T461] x64_sys_call+0x1cb3/0x2ee0 [ 33.436600][ T461] do_syscall_64+0x57/0xf0 [ 33.436623][ T461] ? clear_bhb_loop+0x50/0xa0 [ 33.436654][ T461] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.436683][ T461] RIP: 0033:0x7f14f9d9e159 [ 33.436702][ T461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.436720][ T461] RSP: 002b:00007f14f87f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 33.436745][ T461] RAX: ffffffffffffffda RBX: 00007f14fa025fa0 RCX: 00007f14f9d9e159 [ 33.436762][ T461] RDX: 0000000000000001 RSI: 0000000000000400 RDI: 0000000000000003 [ 33.436776][ T461] RBP: 00007f14f9e3506b R08: 0000000000000000 R09: 0000000000000000 [ 33.436790][ T461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.436804][ T461] R13: 00007f14fa026038 R14: 00007f14fa025fa0 R15: 00007fff2df8f058 [ 33.436824][ T461] [ 33.796721][ T489] rust_binder: Failed to allocate buffer. len:8192, is_oneway:true [ 33.796785][ T489] rust_binder: Failure in copy_transaction_data: ENOSPC [ 33.805093][ T489] rust_binder: 488:489 transaction async to 488:0 failed ENOSPC, code 0 size 0-0 [ 33.833741][ T311] rust_binder: 488: undelivered TRANSACTION_ERROR: 29201 [ 33.936973][ T518] FAULT_INJECTION: forcing a failure. [ 33.936973][ T518] name failslab, interval 1, probability 0, space 0, times 0 [ 33.949997][ T518] CPU: 0 UID: 0 PID: 518 Comm: syz.0.95 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 33.950028][ T518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 33.950041][ T518] Call Trace: [ 33.950048][ T518] [ 33.950056][ T518] __dump_stack+0x21/0x30 [ 33.950091][ T518] dump_stack_lvl+0x140/0x1c0 [ 33.950120][ T518] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.950150][ T518] ? __cfi___futex_queue+0x10/0x10 [ 33.950180][ T518] dump_stack+0x19/0x20 [ 33.950208][ T518] should_fail_ex+0x3c2/0x510 [ 33.950234][ T518] ? iovec_from_user+0x94/0x310 [ 33.950254][ T518] should_failslab+0xac/0x100 [ 33.950283][ T518] __kmalloc_noprof+0x69/0x510 [ 33.950307][ T518] ? iovec_from_user+0x94/0x310 [ 33.950326][ T518] ? __cfi___futex_wait+0x10/0x10 [ 33.950348][ T518] iovec_from_user+0x94/0x310 [ 33.950367][ T518] __import_iovec+0x154/0x7d0 [ 33.950388][ T518] import_iovec+0x80/0xb0 [ 33.950408][ T518] vfs_readv+0x1cb/0xa00 [ 33.950448][ T518] ? do_readv+0x2e0/0x2e0 [ 33.950482][ T518] __x64_sys_preadv+0x19f/0x2c0 [ 33.950507][ T518] ? __cfi___x64_sys_preadv+0x10/0x10 [ 33.950534][ T518] ? switch_fpu_return+0x12/0x20 [ 33.950561][ T518] x64_sys_call+0x1ee9/0x2ee0 [ 33.950582][ T518] do_syscall_64+0x57/0xf0 [ 33.950604][ T518] ? clear_bhb_loop+0x50/0xa0 [ 33.950633][ T518] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.950661][ T518] RIP: 0033:0x7fd1de19e159 [ 33.950679][ T518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.950697][ T518] RSP: 002b:00007fd1df05b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 33.950720][ T518] RAX: ffffffffffffffda RBX: 00007fd1de425fa0 RCX: 00007fd1de19e159 [ 33.950736][ T518] RDX: 0000000000000009 RSI: 0000200000003fc0 RDI: 0000000000000003 [ 33.950751][ T518] RBP: 00007fd1de23506b R08: 0000000000000002 R09: 0000000000000000 [ 33.950764][ T518] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 33.950778][ T518] R13: 00007fd1de426038 R14: 00007fd1de425fa0 R15: 00007fff06f633f8 [ 33.950797][ T518] [ 34.221585][ T532] FAULT_INJECTION: forcing a failure. [ 34.221585][ T532] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.250610][ T532] CPU: 0 UID: 0 PID: 532 Comm: syz.2.101 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 34.250641][ T532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 34.250654][ T532] Call Trace: [ 34.250661][ T532] [ 34.250669][ T532] __dump_stack+0x21/0x30 [ 34.250704][ T532] dump_stack_lvl+0x140/0x1c0 [ 34.250732][ T532] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.250761][ T532] ? check_stack_object+0x138/0x150 [ 34.250785][ T532] dump_stack+0x19/0x20 [ 34.250812][ T532] should_fail_ex+0x3c2/0x510 [ 34.250837][ T532] should_fail+0xf/0x20 [ 34.250861][ T532] should_fail_usercopy+0x1e/0x30 [ 34.250887][ T532] set_fd_set+0x2d/0x90 [ 34.250914][ T532] core_sys_select+0x5eb/0x7f0 [ 34.250944][ T532] ? __cfi_core_sys_select+0x10/0x10 [ 34.250981][ T532] ? __cfi_set_user_sigmask+0x10/0x10 [ 34.251028][ T532] ? mutex_unlock+0x90/0x240 [ 34.251059][ T532] __se_sys_pselect6+0x268/0x320 [ 34.251093][ T532] ? __x64_sys_pselect6+0x110/0x110 [ 34.251127][ T532] ? __kasan_check_write+0x18/0x20 [ 34.251150][ T532] __x64_sys_pselect6+0xe9/0x110 [ 34.251183][ T532] x64_sys_call+0x2980/0x2ee0 [ 34.251204][ T532] do_syscall_64+0x57/0xf0 [ 34.251227][ T532] ? clear_bhb_loop+0x50/0xa0 [ 34.251258][ T532] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.251287][ T532] RIP: 0033:0x7f0e1f39e159 [ 34.251305][ T532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.251324][ T532] RSP: 002b:00007f0e202e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 34.251349][ T532] RAX: ffffffffffffffda RBX: 00007f0e1f625fa0 RCX: 00007f0e1f39e159 [ 34.251365][ T532] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000040 [ 34.251381][ T532] RBP: 00007f0e1f43506b R08: 0000200000000280 R09: 0000000000000000 [ 34.251402][ T532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.251417][ T532] R13: 00007f0e1f626038 R14: 00007f0e1f625fa0 R15: 00007ffc344163b8 [ 34.251438][ T532] [ 34.467334][ T549] netlink: 108 bytes leftover after parsing attributes in process `syz.0.107'. [ 34.495947][ T553] netlink: 68 bytes leftover after parsing attributes in process `syz.0.111'. [ 34.523243][ T36] kauditd_printk_skb: 149 callbacks suppressed [ 34.523257][ T36] audit: type=1400 audit(1790756470.780:223): avc: denied { read } for pid=556 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.567780][ T36] audit: type=1400 audit(1790756470.810:224): avc: denied { create } for pid=554 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.587916][ T36] audit: type=1400 audit(1790756470.810:225): avc: denied { connect } for pid=554 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.607556][ T36] audit: type=1400 audit(1790756470.810:226): avc: denied { write } for pid=554 comm="syz.2.112" laddr=fe80::102e:32ff:fecb:4463 lport=1 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.632659][ T36] audit: type=1400 audit(1790756470.820:227): avc: denied { setopt } for pid=554 comm="syz.2.112" laddr=fe80::102e:32ff:fecb:4463 lport=1 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.670936][ T36] audit: type=1400 audit(1790756470.820:228): avc: denied { read } for pid=554 comm="syz.2.112" laddr=fe80::102e:32ff:fecb:4463 lport=1 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.700065][ T564] ======================================================= [ 34.700065][ T564] WARNING: The mand mount option has been deprecated and [ 34.700065][ T564] and is ignored by this kernel. Remove the mand [ 34.700065][ T564] option from the mount to silence this warning. [ 34.700065][ T564] ======================================================= [ 34.708874][ T36] audit: type=1400 audit(1790756470.920:229): avc: denied { write } for pid=556 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.763365][ T36] audit: type=1400 audit(1790756471.020:230): avc: denied { mounton } for pid=561 comm="syz.1.115" path="/21/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 34.789044][ T36] audit: type=1400 audit(1790756471.020:231): avc: denied { mount } for pid=561 comm="syz.1.115" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.811084][ T36] audit: type=1400 audit(1790756471.020:232): avc: denied { read } for pid=561 comm="syz.1.115" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 35.084857][ T66] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 35.094931][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.109297][ T578] FAULT_INJECTION: forcing a failure. [ 35.109297][ T578] name failslab, interval 1, probability 0, space 0, times 0 [ 35.114871][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.122644][ T578] CPU: 1 UID: 0 PID: 578 Comm: syz.3.122 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 35.122721][ T578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 35.122755][ T578] Call Trace: [ 35.122780][ T578] [ 35.122798][ T578] __dump_stack+0x21/0x30 [ 35.122879][ T578] dump_stack_lvl+0x140/0x1c0 [ 35.122951][ T578] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.123018][ T578] dump_stack+0x19/0x20 [ 35.123088][ T578] should_fail_ex+0x3c2/0x510 [ 35.123152][ T578] should_failslab+0xac/0x100 [ 35.123216][ T578] __kmalloc_cache_noprof+0x41/0x470 [ 35.123281][ T578] ? __kasan_kmalloc+0x96/0xb0 [ 35.123338][ T578] ? ramfs_init_fs_context+0x62/0x190 [ 35.123393][ T578] ramfs_init_fs_context+0x62/0x190 [ 35.123458][ T578] ? __cfi_ramfs_init_fs_context+0x10/0x10 [ 35.123555][ T578] alloc_fs_context+0x5c7/0x800 [ 35.123624][ T578] fs_context_for_mount+0x26/0x40 [ 35.123706][ T578] __se_sys_fsopen+0xab/0x390 [ 35.123754][ T578] __x64_sys_fsopen+0x5f/0x80 [ 35.123808][ T578] x64_sys_call+0x2d40/0x2ee0 [ 35.123857][ T578] do_syscall_64+0x57/0xf0 [ 35.123915][ T578] ? clear_bhb_loop+0x50/0xa0 [ 35.123989][ T578] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.124057][ T578] RIP: 0033:0x7f14f9d9e159 [ 35.124104][ T578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.124143][ T578] RSP: 002b:00007f14f87f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 35.124200][ T578] RAX: ffffffffffffffda RBX: 00007f14fa025fa0 RCX: 00007f14f9d9e159 [ 35.124238][ T578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 35.124270][ T578] RBP: 00007f14f9e3506b R08: 0000000000000000 R09: 0000000000000000 [ 35.124300][ T578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.124337][ T578] R13: 00007f14fa026038 R14: 00007f14fa025fa0 R15: 00007fff2df8f058 [ 35.124383][ T578] [ 35.244818][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 35.335825][ T66] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 35.336126][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 35.347016][ T66] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 35.350793][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.358770][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.373354][ T580] rust_binder: 579:580 got transaction to invalid handle 1 [ 35.377853][ T66] usb 2-1: Product: syz [ 35.383882][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.388631][ T66] usb 2-1: Manufacturer: syz [ 35.396820][ T580] rust_binder: 579:580 transaction async to 0:0 failed ENOENT, code 0 size 0-0 [ 35.402202][ T66] usb 2-1: SerialNumber: syz [ 35.416105][ T580] rust_binder: 579: undelivered TRANSACTION_ERROR: 29201 [ 35.421983][ T66] r8152-cfgselector 2-1: Unknown version 0x0000 [ 35.429633][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.430162][ T66] r8152-cfgselector 2-1: config 0 descriptor?? [ 35.438711][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 35.450111][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.458262][ T9] usb 3-1: Product: syz [ 35.462570][ T9] usb 3-1: Manufacturer: syz [ 35.467567][ T9] usb 3-1: SerialNumber: syz [ 35.472382][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.483046][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 35.493463][ T10] usb 1-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 35.506200][ T10] usb 1-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 35.520183][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 35.529974][ T10] usb 1-1: config 1 interface 1 has no altsetting 0 [ 35.538132][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 35.543496][ T584] capability: warning: `syz.3.125' uses deprecated v2 capabilities in a way that may be insecure [ 35.547232][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.547255][ T10] usb 1-1: Product: syz [ 35.569952][ T10] usb 1-1: Manufacturer: syz [ 35.574564][ T10] usb 1-1: SerialNumber: syz [ 35.694641][ T9] usb 3-1: 0:2 : does not exist [ 35.702971][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 35.714522][ T9] usb 3-1: USB disconnect, device number 3 [ 35.726533][ T585] udevd[585]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.783651][ T10] usb 1-1: selecting invalid altsetting 0 [ 35.864338][ T45] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 35.983379][ T10] usb 1-1: 1:1: cannot get freq (v2/v3): err -32 [ 36.377821][ T597] FAULT_INJECTION: forcing a failure. [ 36.377821][ T597] name failslab, interval 1, probability 0, space 0, times 0 [ 36.391132][ T597] CPU: 0 UID: 0 PID: 597 Comm: syz.1.130 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 36.391169][ T597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 36.391195][ T597] Call Trace: [ 36.391202][ T597] [ 36.391211][ T597] __dump_stack+0x21/0x30 [ 36.391250][ T597] dump_stack_lvl+0x140/0x1c0 [ 36.391282][ T597] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.391315][ T597] ? _raw_spin_lock+0x92/0x120 [ 36.391339][ T597] ? __cfi__raw_spin_lock+0x10/0x10 [ 36.391362][ T597] ? __asan_memset+0x39/0x50 [ 36.391387][ T597] dump_stack+0x19/0x20 [ 36.391418][ T597] should_fail_ex+0x3c2/0x510 [ 36.391447][ T597] should_failslab+0xac/0x100 [ 36.391476][ T597] kmem_cache_alloc_noprof+0x42/0x410 [ 36.391501][ T597] ? alloc_empty_file+0xbf/0x270 [ 36.391531][ T597] ? mntput_no_expire+0x104/0x6c0 [ 36.391566][ T597] alloc_empty_file+0xbf/0x270 [ 36.391597][ T597] dentry_open+0x4b/0xb0 [ 36.391628][ T597] __se_sys_open_tree+0x798/0x900 [ 36.391651][ T597] ? fput+0x1a4/0x230 [ 36.391681][ T597] ? __x64_sys_open_tree+0xa0/0xa0 [ 36.391706][ T597] ? __kasan_check_write+0x18/0x20 [ 36.391728][ T597] ? fpregs_restore_userregs+0x11c/0x260 [ 36.391777][ T597] __x64_sys_open_tree+0x7f/0xa0 [ 36.391801][ T597] x64_sys_call+0x2d58/0x2ee0 [ 36.391823][ T597] do_syscall_64+0x57/0xf0 [ 36.391845][ T597] ? clear_bhb_loop+0x50/0xa0 [ 36.391876][ T597] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.391906][ T597] RIP: 0033:0x7f782279e159 [ 36.391925][ T597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.391944][ T597] RSP: 002b:00007f78211f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 36.391969][ T597] RAX: ffffffffffffffda RBX: 00007f7822a25fa0 RCX: 00007f782279e159 [ 36.391987][ T597] RDX: 0000000000089901 RSI: 0000200000000640 RDI: 0000000000000003 [ 36.392002][ T597] RBP: 00007f782283506b R08: 0000000000000000 R09: 0000000000000000 [ 36.392017][ T597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.392031][ T597] R13: 00007f7822a26038 R14: 00007f7822a25fa0 R15: 00007ffeef50ed38 [ 36.392052][ T597] [ 36.475707][ T45] usb 1-1: USB disconnect, device number 2 [ 36.653283][ T610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 36.704329][ T619] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 36.762578][ T630] netlink: 44 bytes leftover after parsing attributes in process `syz.2.146'. [ 36.768491][ T632] FAULT_INJECTION: forcing a failure. [ 36.768491][ T632] name failslab, interval 1, probability 0, space 0, times 0 [ 36.771725][ T630] netlink: 35 bytes leftover after parsing attributes in process `syz.2.146'. [ 36.784334][ T632] CPU: 1 UID: 0 PID: 632 Comm: syz.3.147 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 36.784403][ T632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 36.784440][ T632] Call Trace: [ 36.784458][ T632] [ 36.784477][ T632] __dump_stack+0x21/0x30 [ 36.784565][ T632] dump_stack_lvl+0x140/0x1c0 [ 36.784648][ T632] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.784725][ T632] ? update_cfs_group+0x127/0x250 [ 36.784791][ T632] dump_stack+0x19/0x20 [ 36.784866][ T632] should_fail_ex+0x3c2/0x510 [ 36.784932][ T632] should_failslab+0xac/0x100 [ 36.785002][ T632] kmem_cache_alloc_noprof+0x42/0x410 [ 36.785061][ T632] ? ring_buffer_record_is_set_on+0x4c/0x70 [ 36.785136][ T632] ? vm_area_dup+0x3f/0x560 [ 36.785208][ T632] ? xfd_validate_state+0x68/0x140 [ 36.785279][ T632] vm_area_dup+0x3f/0x560 [ 36.785337][ T632] ? __split_vma+0x1b8/0xc10 [ 36.785401][ T632] __split_vma+0x1ce/0xc10 [ 36.785459][ T632] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 36.785532][ T632] vms_gather_munmap_vmas+0x2a2/0xd90 [ 36.785591][ T632] ? mas_walk+0x45f/0x720 [ 36.785698][ T632] mmap_region+0x621/0x1d10 [ 36.785796][ T632] ? __cfi_mmap_region+0x10/0x10 [ 36.785856][ T632] ? __kasan_check_read+0x15/0x20 [ 36.785920][ T632] ? __cfi_futex_wake_mark+0x10/0x10 [ 36.785977][ T632] ? security_capable+0x44/0x130 [ 36.786042][ T632] do_mmap+0xa47/0x1370 [ 36.786093][ T632] ? __cfi_selinux_mmap_file+0x10/0x10 [ 36.786145][ T632] ? __cfi_do_mmap+0x10/0x10 [ 36.786189][ T632] ? __kasan_check_write+0x18/0x20 [ 36.786248][ T632] ? down_write_killable+0xee/0x2d0 [ 36.786324][ T632] ? __cfi_down_write_killable+0x10/0x10 [ 36.786399][ T632] ? do_futex+0x32a/0x510 [ 36.786477][ T632] vm_mmap_pgoff+0x367/0x4b0 [ 36.786535][ T632] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 36.786591][ T632] ? xfd_validate_state+0x68/0x140 [ 36.786674][ T632] ksys_mmap_pgoff+0xfa/0x1e0 [ 36.786723][ T632] ? __kasan_check_write+0x18/0x20 [ 36.786767][ T632] __x64_sys_mmap+0x121/0x140 [ 36.786823][ T632] x64_sys_call+0x13bf/0x2ee0 [ 36.786873][ T632] do_syscall_64+0x57/0xf0 [ 36.786931][ T632] ? clear_bhb_loop+0x50/0xa0 [ 36.787003][ T632] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.787093][ T632] RIP: 0033:0x7f14f9d9e159 [ 36.787152][ T632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.787206][ T632] RSP: 002b:00007f14f87f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 36.787259][ T632] RAX: ffffffffffffffda RBX: 00007f14fa025fa0 RCX: 00007f14f9d9e159 [ 36.787300][ T632] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000001000 [ 36.787337][ T632] RBP: 00007f14f9e3506b R08: ffffffffffffffff R09: 0000000000000000 [ 36.787370][ T632] R10: 0000000000003032 R11: 0000000000000246 R12: 0000000000000000 [ 36.787415][ T632] R13: 00007f14fa026038 R14: 00007f14fa025fa0 R15: 00007fff2df8f058 [ 36.787453][ T632] [ 37.089339][ T630] netlink: 'syz.2.146': attribute type 6 has an invalid length. [ 37.097107][ T630] netlink: 'syz.2.146': attribute type 4 has an invalid length. [ 37.424144][ T670] netlink: 104 bytes leftover after parsing attributes in process `syz.0.164'. [ 37.848684][ T728] capability: warning: `syz.1.192' uses 32-bit capabilities (legacy support in use) [ 38.498862][ T786] rust_binder: 785:786 failed to claim space for a BINDER_TYPE_PTR (offset: 112, limit: 128, size: 18446744073709551556) [ 38.511681][ T786] rust_binder: 785:786 error while translating object: EINVAL [ 38.519624][ T786] rust_binder: Failure in copy_transaction_data: EINVAL [ 38.519656][ T786] rust_binder: 785:786 transaction call to 785:0 failed EINVAL, code 0 size 88-24 [ 38.534877][ T66] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.546763][ T310] rust_binder: 785: undelivered TRANSACTION_ERROR: 29201 [ 38.580811][ T791] sit: non-ECT from 172.30.0.3 with TOS=0x1 [ 38.705923][ T66] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 38.724819][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.736100][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.746280][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 38.761885][ T66] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 38.783308][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.802211][ T66] usb 2-1: config 0 descriptor?? [ 38.826770][ T811] ªªªªª»: renamed from dummy0 (while UP) [ 38.850121][ T813] Invalid argument reading file caps for ./file0 [ 38.872523][ T818] FAULT_INJECTION: forcing a failure. [ 38.872523][ T818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.885758][ T818] CPU: 1 UID: 0 PID: 818 Comm: syz.3.233 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 38.885793][ T818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 38.885807][ T818] Call Trace: [ 38.885814][ T818] [ 38.885822][ T818] __dump_stack+0x21/0x30 [ 38.885878][ T818] dump_stack_lvl+0x140/0x1c0 [ 38.885911][ T818] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.885945][ T818] ? check_stack_object+0x10f/0x150 [ 38.885971][ T818] dump_stack+0x19/0x20 [ 38.886002][ T818] should_fail_ex+0x3c2/0x510 [ 38.886031][ T818] should_fail+0xf/0x20 [ 38.886057][ T818] should_fail_usercopy+0x1e/0x30 [ 38.886087][ T818] _copy_from_user+0x20/0xa0 [ 38.886120][ T818] copy_clone_args_from_user+0x20c/0x740 [ 38.886155][ T818] ? futex_wait+0x2b8/0x7c0 [ 38.886176][ T818] ? __delayed_free_task+0x40/0x40 [ 38.886210][ T818] __se_sys_clone3+0x143/0x360 [ 38.886240][ T818] ? do_futex+0x32a/0x510 [ 38.886268][ T818] ? __x64_sys_clone3+0x80/0x80 [ 38.886300][ T818] ? __se_sys_futex+0x13c/0x320 [ 38.886329][ T818] ? fput+0x1a4/0x230 [ 38.886359][ T818] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 38.886391][ T818] __x64_sys_clone3+0x5f/0x80 [ 38.886415][ T818] x64_sys_call+0x28fc/0x2ee0 [ 38.886440][ T818] do_syscall_64+0x57/0xf0 [ 38.886460][ T818] ? clear_bhb_loop+0x50/0xa0 [ 38.886485][ T818] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.886510][ T818] RIP: 0033:0x7f14f9d9e159 [ 38.886525][ T818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.886541][ T818] RSP: 002b:00007f14f87f6ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 38.886561][ T818] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f14f9d9e159 [ 38.886575][ T818] RDX: 00007f14f87f6f10 RSI: 0000000000000058 RDI: 00007f14f87f6f10 [ 38.886587][ T818] RBP: 00007f14f9e3506b R08: 0000000000000000 R09: 0000000000000058 [ 38.886599][ T818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.886610][ T818] R13: 00007f14fa026038 R14: 00007f14fa025fa0 R15: 00007fff2df8f058 [ 38.886625][ T818] [ 39.195580][ T831] netlink: 'syz.2.239': attribute type 16 has an invalid length. [ 39.203478][ T831] netlink: 63874 bytes leftover after parsing attributes in process `syz.2.239'. [ 39.315319][ T66] holtek_kbd 0003:04D9:A055.0001: unknown main item tag 0x0 [ 39.322773][ T66] holtek_kbd 0003:04D9:A055.0001: unknown main item tag 0x0 [ 39.330194][ T66] holtek_kbd 0003:04D9:A055.0001: collection stack underflow [ 39.338138][ T66] holtek_kbd 0003:04D9:A055.0001: item 0 0 0 12 parsing failed [ 39.346124][ T66] holtek_kbd 0003:04D9:A055.0001: probe with driver holtek_kbd failed with error -22 [ 39.385776][ T845] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.489742][ T871] zero sized request [ 39.522478][ T310] usb 2-1: USB disconnect, device number 3 [ 39.532650][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 39.532666][ T36] audit: type=1400 audit(1790756475.790:279): avc: denied { setopt } for pid=877 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.744830][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 39.864840][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.895908][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.908400][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 39.917892][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.925953][ T9] usb 4-1: Product: syz [ 39.930131][ T9] usb 4-1: Manufacturer: syz [ 39.934877][ T9] usb 4-1: SerialNumber: syz [ 39.941865][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 39.947866][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 40.015990][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.026934][ T10] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 40.038557][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.047810][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.055945][ T10] usb 1-1: Product: syz [ 40.060176][ T10] usb 1-1: Manufacturer: syz [ 40.064995][ T10] usb 1-1: SerialNumber: syz [ 40.071610][ T10] cdc_mbim 1-1:1.0: skipping garbage [ 40.084018][ T36] audit: type=1400 audit(1790756476.340:280): avc: denied { write } for pid=885 comm="syz.1.265" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.139180][ T36] audit: type=1400 audit(1790756476.400:281): avc: denied { read } for pid=887 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 40.170247][ T36] audit: type=1400 audit(1790756476.430:282): avc: denied { read write } for pid=873 comm="syz.3.259" name="cdc-wdm0" dev="devtmpfs" ino=459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 40.178169][ T66] usb 4-1: USB disconnect, device number 2 [ 40.204435][ T36] audit: type=1400 audit(1790756476.430:283): avc: denied { open } for pid=873 comm="syz.3.259" path="/dev/cdc-wdm0" dev="devtmpfs" ino=459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 40.273567][ T882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 40.286457][ T895] bridge0: port 3(veth0) entered blocking state [ 40.292813][ T895] bridge0: port 3(veth0) entered disabled state [ 40.299352][ T895] veth0: entered allmulticast mode [ 40.305237][ T895] veth0: entered promiscuous mode [ 40.310424][ T895] bridge0: port 3(veth0) entered blocking state [ 40.316759][ T895] bridge0: port 3(veth0) entered forwarding state [ 40.360053][ T36] audit: type=1400 audit(1790756476.620:284): avc: denied { create } for pid=896 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.380214][ T36] audit: type=1400 audit(1790756476.620:285): avc: denied { setopt } for pid=896 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.381188][ T899] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 40.408926][ T36] audit: type=1400 audit(1790756476.640:286): avc: denied { mounton } for pid=897 comm="syz.2.269" path="/57/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 40.442247][ T901] tipc: Started in network mode [ 40.447371][ T901] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 40.456931][ T901] tipc: Enabled bearer , priority 10 Stopping sshd: stopped /usr/sbin/sshd (pid 202) OK Stopping crond: stopped /usr/sbin/crond (pid 195) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 149) [ 40.637567][ T36] audit: type=1400 audit(1790756476.900:287): avc: denied { search } for pid=921 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 40.714860][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 40.774257][ T36] audit: type=1400 audit(1790756477.030:288): avc: denied { read } for pid=936 comm="syz.3.276" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 40.867241][ T943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.278'. [ 40.885008][ T882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 40.886632][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 40.909045][ T10] cdc_mbim 1-1:1.0: dwNtbInMaxSize=255 is too small. Using 2048 OK [ 40.924967][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.934740][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.934829][ T10] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 40.956548][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.970475][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 Stopping iptables: [ 40.989109][ T9] usb 3-1: config 0 descriptor?? OK Stopping system message bus: [ 41.060748][ T959] type: 167772167 invalid [ 41.116528][ T10] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 41.131009][ T10] wwan wwan0: port wwan0mbim0 attached done [ 41.150382][ T10] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, a2:7f:1b:8b:1d:23 [ 41.175513][ T10] usb 1-1: USB disconnect, device number 3 [ 41.193625][ T10] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 41.257489][ T10] wwan wwan0: port wwan0mbim0 disconnected killall: can't kill pid 891: No such process Stopping klogd: [ 41.375290][ T990] input: syz0 as /devices/virtual/input/input5 OK [ 41.407653][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 41.419457][ T9] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 Stopping acpid: [ 41.471367][ T1003] IPv4: Oversized IP packet from 127.0.0.1 [ 41.477357][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 41.498491][ T1005] netlink: 24 bytes leftover after parsing attributes in process `syz.3.300'. [ 41.584994][ T45] tipc: Node number set to 4269801488 [ 41.676872][ T45] usb 3-1: USB disconnect, device number 4 [ 42.034802][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 42.187951][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 42.194517][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.205491][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.215278][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 42.224390][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.234112][ T9] usb 4-1: config 0 descriptor?? [ 42.374855][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 42.405883][ T1049] FAULT_INJECTION: forcing a failure. [ 42.405883][ T1049] name failslab, interval 1, probability 0, space 0, times 0 [ 42.418817][ T1049] CPU: 1 UID: 0 PID: 1049 Comm: syz.2.320 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 42.418850][ T1049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 42.418865][ T1049] Call Trace: [ 42.418872][ T1049] [ 42.418880][ T1049] __dump_stack+0x21/0x30 [ 42.418917][ T1049] dump_stack_lvl+0x140/0x1c0 [ 42.418949][ T1049] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.418983][ T1049] dump_stack+0x19/0x20 [ 42.419014][ T1049] should_fail_ex+0x3c2/0x510 [ 42.419054][ T1049] should_failslab+0xac/0x100 [ 42.419080][ T1049] __kmalloc_cache_noprof+0x41/0x470 [ 42.419102][ T1049] ? tty_alloc_file+0x5f/0x140 [ 42.419124][ T1049] tty_alloc_file+0x5f/0x140 [ 42.419163][ T1049] ptmx_open+0x59/0x2f0 [ 42.419196][ T1049] ? selinux_file_open+0x46c/0x630 [ 42.419221][ T1049] chrdev_open+0x4eb/0x610 [ 42.419247][ T1049] ? __cfi_chrdev_open+0x10/0x10 [ 42.419274][ T1049] ? bpf_lsm_file_open+0xd/0x20 [ 42.419305][ T1049] ? __cfi_chrdev_open+0x10/0x10 [ 42.419331][ T1049] do_dentry_open+0x97c/0x1510 [ 42.419364][ T1049] vfs_open+0x86/0x240 [ 42.419396][ T1049] ? __cfi_vfs_open+0x10/0x10 [ 42.419428][ T1049] ? may_open+0x352/0x430 [ 42.419457][ T1049] path_openat+0x2c49/0x35a0 [ 42.419491][ T1049] ? schedule+0xc5/0x240 [ 42.419510][ T1049] ? kasan_save_alloc_info+0x3a/0x50 [ 42.419526][ T1049] ? getname+0x1b/0x30 [ 42.419564][ T1049] ? x64_sys_call+0xe69/0x2ee0 [ 42.419585][ T1049] ? do_syscall_64+0x57/0xf0 [ 42.419608][ T1049] ? do_filp_open+0x440/0x440 [ 42.419643][ T1049] do_filp_open+0x1f2/0x440 [ 42.419666][ T1049] ? __cfi_do_filp_open+0x10/0x10 [ 42.419711][ T1049] ? alloc_fd+0x4c1/0x570 [ 42.419740][ T1049] do_sys_openat2+0x134/0x1d0 [ 42.419772][ T1049] ? fput+0x1a4/0x230 [ 42.419813][ T1049] ? do_sys_open+0x100/0x100 [ 42.419848][ T1049] ? __cfi_ksys_write+0x10/0x10 [ 42.419885][ T1049] __x64_sys_openat+0x13a/0x170 [ 42.419916][ T1049] x64_sys_call+0xe69/0x2ee0 [ 42.419934][ T1049] do_syscall_64+0x57/0xf0 [ 42.419956][ T1049] ? clear_bhb_loop+0x50/0xa0 OK [ 42.419976][ T1049] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.420011][ T1049] RIP: 0033:0x7f0e1f39e159 [ 42.420028][ T1049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 Stopping syslogd[ 42.420045][ T1049] RSP: 002b:00007f0e202e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 : [ 42.420066][ T1049] RAX: ffffffffffffffda RBX: 00007f0e1f625fa0 RCX: 00007f0e1f39e159 [ 42.420085][ T1049] RDX: 0000000000002000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 42.420096][ T1049] RBP: 00007f0e1f43506b R08: 0000000000000000 R09: 0000000000000000 [ 42.420105][ T1049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.420114][ T1049] R13: 00007f0e1f626038 R14: 00007f0e1f625fa0 R15: 00007ffc344163b8 stopped /sbin/sy[ 42.420126][ T1049] slogd (pid 93)[ 42.616936][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short OK [ 42.765256][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 42.782803][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 42.795564][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 42.804724][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.822302][ T10] usb 2-1: Product: syz [ 42.826849][ T10] usb 2-1: Manufacturer: syz [ 42.831760][ T10] usb 2-1: SerialNumber: syz [ 42.841150][ T1069] __vm_enough_memory: pid: 1069, comm: syz.0.327, bytes: 11727153299456 not enough memory for the allocation [ 42.853497][ T1069] __vm_enough_memory: pid: 1069, comm: syz.0.327, bytes: 11727153299456 not enough memory for the allocation umount: can't remount debugfs read-only [ 42.892362][ T1071] Invalid argument reading file caps for ./file0 [ 42.925900][ T9] savu 0003:1E7D:2D5A.0003: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 Connection to 10.128.0.158 closed by remote host. [ 42.944232][ T1077] loop9: detected capacity change from 0 to 16384 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 43.001893][ T1077] loop9: detected capacity change from 16384 to 16382 [ 43.019803][ T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 43.026665][ T9] usb 4-1: USB disconnect, device number 3 [ 43.038576][ T10] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 43.047617][ T10] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 43.064008][ T10] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 43.094728][ T10] usb 2-1: USB disconnect, device number 4 [ 43.229016][ T53] bridge_slave_1: left allmulticast mode [ 43.234694][ T53] bridge_slave_1: left promiscuous mode [ 43.240412][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.248018][ T53] bridge_slave_0: left allmulticast mode [ 43.253671][ T53] bridge_slave_0: left promiscuous mode [ 43.259371][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.366956][ T53] veth1_macvtap: left promiscuous mode [ 43.372492][ T53] veth0_vlan: left promiscuous mode [ 43.567763][ T53] bridge_slave_1: left allmulticast mode [ 43.573529][ T53] bridge_slave_1: left promiscuous mode [ 43.579184][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.586670][ T53] bridge_slave_0: left allmulticast mode [ 43.592323][ T53] bridge_slave_0: left promiscuous mode [ 43.598065][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.605774][ T53] bridge_slave_1: left allmulticast mode [ 43.611419][ T53] bridge_slave_1: left promiscuous mode [ 43.617168][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.624543][ T53] bridge_slave_0: left allmulticast mode [ 43.630196][ T53] bridge_slave_0: left promiscuous mode [ 43.635894][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.643522][ T53] veth0: left allmulticast mode [ 43.648409][ T53] veth0: left promiscuous mode [ 43.653242][ T53] bridge0: port 3(veth0) entered disabled state [ 43.659953][ T53] bridge_slave_1: left allmulticast mode [ 43.665661][ T53] bridge_slave_1: left promiscuous mode [ 43.671281][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.678745][ T53] bridge_slave_0: left allmulticast mode [ 43.684379][ T53] bridge_slave_0: left promiscuous mode [ 43.690118][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.887954][ T53] tipc: Disabling bearer [ 43.893413][ T53] tipc: Left network mode [ 43.900276][ T53] veth1_macvtap: left promiscuous mode [ 43.905856][ T53] veth0_vlan: left promiscuous mode [ 43.911400][ T53] veth1_macvtap: left promiscuous mode [ 43.916927][ T53] veth0_vlan: left promiscuous mode [ 43.922479][ T53] veth1_macvtap: left promiscuous mode [ 43.927999][ T53] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 44.387186][ T53] ------------[ cut here ]------------ [ 44.392676][ T53] WARNING: CPU: 1 PID: 53 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 44.402640][ T53] Modules linked in: [ 44.406573][ T53] CPU: 1 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 44.418358][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 44.428456][ T53] Workqueue: netns cleanup_net [ 44.433230][ T53] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 44.439257][ T53] Code: e8 d1 7f d5 fc 4b 83 3c 3e 00 75 19 e8 f5 97 7c fc 49 81 ff f8 07 00 00 74 1b e8 e7 97 7c fc 49 83 c7 08 eb c9 e8 dc 97 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 44.458927][ T53] RSP: 0018:ffffc9000036fb90 EFLAGS: 00010293 [ 44.465040][ T53] RAX: ffffffff850ae194 RBX: ffff888125e0ea80 RCX: ffff888100ac0000 [ 44.473032][ T53] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888101fb0000 [ 44.481061][ T53] RBP: ffffc9000036fbb0 R08: ffffffff87d44647 R09: 1ffffffff0fa88c8 [ 44.489117][ T53] R10: dffffc0000000000 R11: fffffbfff0fa88c9 R12: dffffc0000000000 [ 44.497132][ T53] R13: dffffc0000000000 R14: ffff888101fb0000 R15: 0000000000000000 [ 44.505150][ T53] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 44.514083][ T53] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.520692][ T53] CR2: 000055556e58b8a8 CR3: 000000010af82000 CR4: 00000000003526b0 [ 44.528730][ T53] Call Trace: [ 44.532009][ T53] [ 44.534973][ T53] cleanup_net+0x6ba/0xc90 [ 44.539398][ T53] ? __cfi_cleanup_net+0x10/0x10 [ 44.544365][ T53] ? kick_pool+0xb9/0x540 [ 44.548730][ T53] process_scheduled_works+0x7f4/0x1060 [ 44.554283][ T53] worker_thread+0xc99/0x13f0 [ 44.559005][ T53] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 44.564749][ T53] ? __kasan_check_read+0x15/0x20 [ 44.569814][ T53] kthread+0x2c4/0x360 [ 44.573881][ T53] ? __cfi_worker_thread+0x10/0x10 [ 44.579025][ T53] ? __cfi_kthread+0x10/0x10 [ 44.583623][ T53] ret_from_fork+0x67/0xa0 [ 44.588075][ T53] ? __cfi_kthread+0x10/0x10 [ 44.592678][ T53] ret_from_fork_asm+0x1a/0x30 [ 44.597491][ T53] [ 44.600506][ T53] ---[ end trace 0000000000000000 ]--- [ 44.606261][ T53] ------------[ cut here ]------------ [ 44.611724][ T53] WARNING: CPU: 0 PID: 53 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 44.621785][ T53] Modules linked in: [ 44.625699][ T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u8:3 Tainted: G W syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 44.638748][ T53] Tainted: [W]=WARN [ 44.642538][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 44.652591][ T53] Workqueue: netns cleanup_net [ 44.657425][ T53] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 44.663522][ T53] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 a0 97 7c fc 49 81 ff f8 07 00 00 74 1b e8 92 97 7c fc 49 83 c7 08 eb c5 e8 87 97 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 77 97 7c fc 5b 41 5c 41 5e 41 [ 44.683157][ T53] RSP: 0018:ffffc9000036fb90 EFLAGS: 00010293 [ 44.689269][ T53] RAX: ffffffff850ae1e9 RBX: ffff888101fb0800 RCX: ffff888100ac0000 [ 44.697294][ T53] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888101fb0808 [ 44.705309][ T53] RBP: ffffc9000036fbb0 R08: ffffffff87d44647 R09: 1ffffffff0fa88c8 [ 44.713301][ T53] R10: dffffc0000000000 R11: fffffbfff0fa88c9 R12: dffffc0000000000 [ 44.721301][ T53] R13: dffffc0000000000 R14: ffff888101fb0000 R15: 0000000000000008 [ 44.729315][ T53] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 44.738285][ T53] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.744941][ T53] CR2: 00007f4647970bd0 CR3: 000000010af82000 CR4: 00000000003526b0 [ 44.752913][ T53] Call Trace: [ 44.756259][ T53] [ 44.759206][ T53] cleanup_net+0x6ba/0xc90 [ 44.763637][ T53] ? __cfi_cleanup_net+0x10/0x10 [ 44.768609][ T53] ? kick_pool+0xb9/0x540 [ 44.772966][ T53] process_scheduled_works+0x7f4/0x1060 [ 44.778542][ T53] worker_thread+0xc99/0x13f0 [ 44.783222][ T53] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 44.788972][ T53] ? __kasan_check_read+0x15/0x20 [ 44.794007][ T53] kthread+0x2c4/0x360 [ 44.798109][ T53] ? __cfi_worker_thread+0x10/0x10 [ 44.803227][ T53] ? __cfi_kthread+0x10/0x10 [ 44.807855][ T53] ret_from_fork+0x67/0xa0 [ 44.812297][ T53] ? __cfi_kthread+0x10/0x10 [ 44.816952][ T53] ret_from_fork_asm+0x1a/0x30 [ 44.821726][ T53] [ 44.824740][ T53] ---[ end trace 0000000000000000 ]--- [ 44.840076][ T53] ------------[ cut here ]------------ [ 44.845636][ T53] WARNING: CPU: 1 PID: 53 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310 [ 44.855054][ T53] Modules linked in: [ 44.858957][ T53] CPU: 1 UID: 0 PID: 53 Comm: kworker/u8:3 Tainted: G W syzkaller #0 f0d7327441b04c8c94f545cf67fb8a2d8e8662cf [ 44.872018][ T53] Tainted: [W]=WARN [ 44.875881][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 44.885988][ T53] Workqueue: netns cleanup_net [ 44.890769][ T53] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 44.896464][ T53] Code: 3c 20 00 74 08 48 89 df e8 df 42 f0 fc 48 8b 3b e8 17 33 db fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 5a 97 fc <0f> 0b e9 b0 fd ff ff e8 e6 5a 97 fc 0f 0b e9 18 fe ff ff e8 da 5a [ 44.916133][ T53] RSP: 0018:ffffc9000036fb70 EFLAGS: 00010293 [ 44.922263][ T53] RAX: ffffffff84f01e7e RBX: ffff888125e0ea80 RCX: ffff888100ac0000 [ 44.930259][ T53] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888100ac0000 [ 44.938283][ T53] RBP: ffffc9000036fb98 R08: ffffffff87d44647 R09: 1ffffffff0fa88c8 [ 44.946282][ T53] R10: dffffc0000000000 R11: fffffbfff0fa88c9 R12: 1ffffffff0fa861c [ 44.954257][ T53] R13: dffffc0000000000 R14: ffff888125e0f680 R15: dffffc0000000000 [ 44.962290][ T53] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 44.971257][ T53] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.977913][ T53] CR2: 000055556e58b8a8 CR3: 000000010af82000 CR4: 00000000003526b0 [ 44.985924][ T53] Call Trace: [ 44.989405][ T53] [ 44.992333][ T53] xfrm_net_exit+0x31/0x80 [ 44.996793][ T53] cleanup_net+0x6ba/0xc90 [ 45.001217][ T53] ? __cfi_cleanup_net+0x10/0x10 [ 45.006210][ T53] ? kick_pool+0xb9/0x540 [ 45.010546][ T53] process_scheduled_works+0x7f4/0x1060 [ 45.016118][ T53] worker_thread+0xc99/0x13f0 [ 45.020818][ T53] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 45.026564][ T53] ? __kasan_check_read+0x15/0x20 [ 45.031631][ T53] kthread+0x2c4/0x360 [ 45.035736][ T53] ? __cfi_worker_thread+0x10/0x10 [ 45.040864][ T53] ? __cfi_kthread+0x10/0x10 [ 45.045495][ T53] ret_from_fork+0x67/0xa0 [ 45.049919][ T53] ? __cfi_kthread+0x10/0x10 [ 45.054514][ T53] ret_from_fork_asm+0x1a/0x30 [ 45.059326][ T53] [ 45.062345][ T53] ---[ end trace 0000000000000000 ]--- [ 45.172817][ T1078] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 45.179521][ T1078] ACPI: PM: Preparing to enter system sleep state S5 [ 45.186369][ T1078] kvm: exiting hardware virtualization [ 45.191866][ T1078] reboot: Power down serialport: VM disconnected.