last executing test programs: 5.557560159s ago: executing program 1 (id=1313): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) socket$nl_audit(0x10, 0x3, 0x9) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) unlink(0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000001040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f00000004c0)=@newtaction={0x9c4, 0x30, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{0x158, 0x1, [@m_ipt={0x9c, 0xc, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x6a, 0x6, "21591c3439bfabaa55edda90e70dcc8fda236e3541e304d44bcc70895125fbcc34175b6f3c922f45c30ca1b88cf658b02772b9dc4360849271139abeee09b45dda580aefec07b11dfdcd17eb433ed7ba1b70cda7dcee3d65cd2505ecaae05383a9c6e12f9fd6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0xb8, 0x7, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x72, 0x6, {0x0, 'security\x00', 0x2, 0x2, "401554ee1759036853aa5d858d39c9563a862c47ac15f8ab37ee97448c0c874d7120b67102ee93279dfb98274856b14384b17b71705edee84012035e02ebab3ebc77dba996628950"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}]}, {0xc, 0x6, "dfca1cf0785578dd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x858, 0x1, [@m_ipt={0x5c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x34, 0x6, "51cfe5cbabe794ff18650c3f9f9d63530703f8ae1217bdab5c7452fa0a40a488d29b7c7024d811f02af6beb6a9b39212"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x1bc, 0x16, 0x0, 0x0, {{0x8}, {0x104, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x6b, 0x6, {0x6, 'security\x00', 0x4, 0x7, "999fc19b9500fc5912c78c73cf9df47deaf7f752a072243302694e5b5574690234c17ea61ae8297456eace5f3b28a3bf20803e2e931de1793070e78ef7566cc1cb"}}, @TCA_IPT_TARG={0x66, 0x6, {0x8001, 'nat\x00', 0x7, 0x3ff, "9d4494e1719bce7ae013c1b7be18c51ae5f072c06d0af19164561bf66c290e21b43aad98327bce49dc57f473a8519b8b6672681f3bcc87962cb546fe"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x93, 0x6, "2199c124e625329b19c30c9894eb07cdfade8747fd81701f2e229c14c564cbc2343079c97c204e6fde1b6d6f554b9c5e8abcddc9f4593de713209cda9ec9120bf94d1082020799d45c91d724a7bd7db76abe8c288aa6732a9cbb2c73311f567dc56a87465256c2345b9404c9fcf1bb8d1a60e583f39f923a6947ea15995e679ba2c45a9232e2efd6a852576a3250cb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x11c, 0x17, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x6}]}, {0xec, 0x6, "0b0589b9acaccc3af0da8a9324998c80728dd2a8df429fb264c87635fdd5f16f18a3c05dc4cc1aee5b93df3eb8a8a279f4cf83aee267f46c6b005de666ff027f89cbbc86767231b152c26245b1b090f1516f4fab6070f8b28dbd12f4f8db8d53724ff54d7bfdd4a2f36508a0ff4ce9329d51eea98394bdf28d4d28e80e473872bfe4df27a06b8fce286ae89ddda07e6b4143fe0fad907a55d65bb13c100d6ce8eea6eee1c80a64d12465350b7cd85acc53f9ac768759e794398223544c2410df251e26aa84ed64f1e3a773b72871eaea2b4e659ac908a59acebfb086fe6c9d34323f75a068b4327a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0xbc, 0x3, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x80000001}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0x77, 0x6, {0x5, 'security\x00', 0x3, 0x6, "59276d0c711b2f12a16dde5bc073779df349e30cc09a4ba6a0d418494d1924845d171759db097cab947980d842b98de95a7061ef995bbbff2513b656b3b1334d1baa61fc7f5778ca2f6e656e56"}}]}, {0xb, 0x6, "550962da70c4aa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ipt={0xb4, 0xb, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x81, 0x6, "0c321a2b530da6169f7f85f046cd10211512064932c83238fb3c675bf6ce925f46dc0e89dfcc4af167b950d695f96151c427ea89a84d015960dd0df3a8ba01dec6250e5cf92fd749fa03756abee4b617767d070095248fbfefdb72877e242242bca591830251c75500981e819c89159e221c797c6026c3c6ae2d1cb7b8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0x174, 0x7, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x4b, 0x6, {0x7, 'nat\x00', 0x2, 0x1, "5710989a4d1d29eac73bddef3d6120b831b9b5181a9eee200f560069d3d3225267"}}]}, {0xdb, 0x6, "4bab773751c98786b78e59db329588cc57d71c0a4685e082cda49372269240859671664fb70a808e65aa10bba9be4eea14ae2d156a9ca36bd3522213b51ab6d826dc0471c0c7f3f8955259e6e3ab1f449dde41aabe2932e47518730f9988731f7f0a62fa57999ea9527e4e7f47e45b26ae95cd7d0f58b276c7fd7c739dc957cf358f4426baf8e80bb0b34af58608a3e8476f92751e93bb0aa6bcef1e2b621c6e84d66a30f1e9cefad5136a15468d9c443805ccb8fe58c33940458250c763b78bf37d48887b26140ab415e9147e9c10c5161f7ebbcb4759"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0x1c4, 0x7, 0x0, 0x0, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0xcb, 0x6, {0x80, 'security\x00', 0xf, 0x0, "e8ca3d212ee48757fc2fc19d3891b61abf3ed3221197fe61a1d5b52661f0f5d0b70c8a49c5a3f377899dda156c4443a5dda2ff3d7014d460592b06e176e153249bbcd25e144ddc1367d4fdf3ceed69a006948f3b40bce563329e537b17abdc6da9a18cedfafaa63485144b1f7ac888ce46ae3bd001520b9deb3af44c582ee8bf3c2ac1d0f90ba19746276e80e57f329145976c2cbc7c4c91c913eaf3c8941fe36f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xffff}, @TCA_IPT_TARG={0x8f, 0x6, {0x400, 'nat\x00', 0x22, 0x8, "46f1115d35a11b45e1e57c9115c12c057000e1f28c6b32d8e36c60b70b8950d2343b96dbd40ded04ebf22c33458d282c544541fe86e6e1c4692f34bbadc1406ff56e4ace936eed5893952d385834e5b493e14bee26bf16b0e2f4492a5168dc68beea4d75ee"}}]}, {0x12, 0x6, "eb56fbab591ca45c4a5cbf2d7d4f"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x78, 0x10, 0x0, 0x0, {{0x8}, {0x4}, {0x4e, 0x6, "926f2cb6513be74f3867bf37cf2168110bc4ff4d0df9b49c257dca86337024051d33cef2f74de1383a067d89893b158c78c998121cfe777eea2ef2ab51b83ff81f8ecefa9f39301a609c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x9c4}, 0x1, 0x0, 0x0, 0x28008824}, 0x0) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="009888f8020404005600040059260306f3e8dd86e745c92089abd1e4c00326595fe13e2cf021a666c575f8cf1fcc2ea6fc695bc9edd28339ba24a9a426febbb64c98bb52f91803"], 0x47) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x40) write(r2, &(0x7f0000000240)='1', 0x1) 5.557402789s ago: executing program 1 (id=1314): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket(0x2, 0x2, 0x1) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0xfb, 0xa6, 0x1, 0x5, "40a84cc4b8f29c74af38156fc10299ed", "af2e1f060bd7bbbf1fcc2244b25d55e9cbb38329c3b5c3b34ba879205fdba24b9a7e53191cf593a7190a7e9e8bd2819961ce5df7489ac3410702ec3b3eaffe58ad5ca874fddebbf9d08ce7f0623cc9dfe90fb8d8899ba524149482e234fd59dcfafb70122624b089e737d3711ee703eea8343ec02716c0d95e2de079c6a1cb467cae1338b87712a6778ded7fb79bd5574f"}, 0xa6, 0x2) dup3(r4, r5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f00000003c0)=[@exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/151, 0x97, 0x2, 0x30}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/120, 0x78, 0x1, 0x2e}, @fda={0x66646185, 0x6, 0x1, 0x14}}, &(0x7f0000000380)={0x0, 0x28, 0x50}}}, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 5.557152539s ago: executing program 1 (id=1315): ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x5) r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000480001"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004880) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="c805000020", 0x5}], 0x1) r3 = socket$inet6(0x10, 0x3, 0x6) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r1) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000a00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x124, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf7f}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x40804) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r5) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r5) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000080)={{0x1002, 0x2, 0xfffd, 0xb}, 'syz1\x00', 0x2d}) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f00000002c0)={0x39, {0x21001006, 0x10, 0x2840800, 0x8, 0x14b, 0x7}}) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r7, 0x5501) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) fsconfig$FSCONFIG_SET_PATH(r8, 0x3, &(0x7f00000023c0)='fscrypt:', &(0x7f0000002400)='./file0\x00', r8) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="060000007000fddbdf250600000014d09a1cab657eba2dfdc9ae92a4622a304d25e41751258241a7c044cd51077c4bbc9e057152a6d566d842e50eaeaddcbe37ebaafadb105bf25121186fd28c05b00b27"], 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x20040000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x9, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10002, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x4, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x1d, 0x8, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x7, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0xb, 0xaf, 0x8, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1d, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.891156955s ago: executing program 2 (id=1318): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x4ae, r0) 4.883237396s ago: executing program 2 (id=1319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000040180c200002ebbbbbbbbbbbb08004500002000680000032f"], 0x32) 4.788161588s ago: executing program 2 (id=1320): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000340)={0x5a55, 0x3, 0x5, 0x9, 0x8}) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x1, 0x400000) ioctl$RTC_PIE_OFF(r2, 0x7006) syz_usb_connect(0x5, 0x51, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000019}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xa5) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000340)={0x9, 0x0, [{0x0, 0x5, 0x5, 0x1000, 0x0, 0x40}, {0x40000001, 0x5, 0x0, 0xffffff80, 0x1, 0xc70, 0x3}, {0x80000001, 0x80000006, 0x2, 0x8, 0x6, 0x101, 0xfff}, {0x80000019, 0x4, 0x4, 0x7, 0x8000, 0x6, 0x59ac0000}, {0x4, 0xe, 0x0, 0x4, 0xb, 0x374, 0x4}, {0x8000000b, 0x7fffffff, 0x3, 0x8, 0x100, 0x5, 0x8}, {0xc0000000, 0xb5, 0x2, 0x8, 0x7, 0x10000, 0x6}, {0x80000000, 0x4, 0x4, 0x0, 0x8, 0x20, 0x9}, {0x80000007, 0x0, 0x7, 0xd950, 0xfffffff9, 0x0, 0x7fff}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 4.033674917s ago: executing program 1 (id=1331): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x41) 3.972336459s ago: executing program 1 (id=1332): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.507991746s ago: executing program 2 (id=1340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7ffe) 2.485979697s ago: executing program 2 (id=1342): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xf6, 0x8001ff, 0x43, 0x7ffffffe, 0x8, "ea04f301fee41e8fc30100ffff00000100", 0x303, 0x9}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x8, 0x4, 0x0, 0xa, 0x21, 0x10000000000}, &(0x7f0000000040)={0x1f, 0xfffffffffffffffd, 0x80000005, 0x0, 0xffffffffffffffe3, 0x7, 0x6}, 0x0, 0x0, 0x0) 2.485477527s ago: executing program 2 (id=1343): syz_usb_connect(0x3, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x5c, 0xa8, 0xea, 0x40, 0x482, 0x203, 0x5cd2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x0, 0x40, 0x3, "", [{{0x9, 0x4, 0x4, 0x4, 0x0, 0x18, 0x78, 0xe3, 0xf7}}]}}]}}, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109240, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0xc14cc000) lsm_set_self_attr(0x66, &(0x7f0000000380)={0x65, 0x0, 0x66, 0x46, "4b0d814e10e14464ab3517e8b7d3513391426bd994796298cff0d3adfca373d0ffbf84012c9d7efad43b6333981f70086f9ab9cdbad06650d7d2b83632f2f94169ae115ddd0a"}, 0x66, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000400)={&(0x7f0000000280)=""/190, 0xbe, 0x4}) sendto$inet(r1, &(0x7f0000000240)='D', 0x1, 0x2004c015, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000880)="18a05163b336a0d2d92b76251e53d2", 0xf}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r2) exit(0x9) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x4, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x3}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) sendto(r3, &(0x7f0000000e00)="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", 0x1000, 0x4000080, &(0x7f0000001e00)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x40}, 0x80) sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) fadvise64(r0, 0xfffffffffffffff8, 0x3ff, 0x4) 2.427837879s ago: executing program 3 (id=1346): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) socket$nl_audit(0x10, 0x3, 0x9) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) unlink(0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000001040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f00000004c0)=@newtaction={0xb0c, 0x30, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{0x158, 0x1, [@m_ipt={0x9c, 0xc, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x6a, 0x6, "21591c3439bfabaa55edda90e70dcc8fda236e3541e304d44bcc70895125fbcc34175b6f3c922f45c30ca1b88cf658b02772b9dc4360849271139abeee09b45dda580aefec07b11dfdcd17eb433ed7ba1b70cda7dcee3d65cd2505ecaae05383a9c6e12f9fd6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0xb8, 0x7, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x72, 0x6, {0x0, 'security\x00', 0x2, 0x2, "401554ee1759036853aa5d858d39c9563a862c47ac15f8ab37ee97448c0c874d7120b67102ee93279dfb98274856b14384b17b71705edee84012035e02ebab3ebc77dba996628950"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}]}, {0xc, 0x6, "dfca1cf0785578dd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x9a0, 0x1, [@m_ipt={0x5c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x34, 0x6, "51cfe5cbabe794ff18650c3f9f9d63530703f8ae1217bdab5c7452fa0a40a488d29b7c7024d811f02af6beb6a9b39212"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x1bc, 0x16, 0x0, 0x0, {{0x8}, {0x104, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x6b, 0x6, {0x6, 'security\x00', 0x4, 0x7, "999fc19b9500fc5912c78c73cf9df47deaf7f752a072243302694e5b5574690234c17ea61ae8297456eace5f3b28a3bf20803e2e931de1793070e78ef7566cc1cb"}}, @TCA_IPT_TARG={0x66, 0x6, {0x8001, 'nat\x00', 0x7, 0x3ff, "9d4494e1719bce7ae013c1b7be18c51ae5f072c06d0af19164561bf66c290e21b43aad98327bce49dc57f473a8519b8b6672681f3bcc87962cb546fe"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x93, 0x6, "2199c124e625329b19c30c9894eb07cdfade8747fd81701f2e229c14c564cbc2343079c97c204e6fde1b6d6f554b9c5e8abcddc9f4593de713209cda9ec9120bf94d1082020799d45c91d724a7bd7db76abe8c288aa6732a9cbb2c73311f567dc56a87465256c2345b9404c9fcf1bb8d1a60e583f39f923a6947ea15995e679ba2c45a9232e2efd6a852576a3250cb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x11c, 0x17, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x6}]}, {0xec, 0x6, "0b0589b9acaccc3af0da8a9324998c80728dd2a8df429fb264c87635fdd5f16f18a3c05dc4cc1aee5b93df3eb8a8a279f4cf83aee267f46c6b005de666ff027f89cbbc86767231b152c26245b1b090f1516f4fab6070f8b28dbd12f4f8db8d53724ff54d7bfdd4a2f36508a0ff4ce9329d51eea98394bdf28d4d28e80e473872bfe4df27a06b8fce286ae89ddda07e6b4143fe0fad907a55d65bb13c100d6ce8eea6eee1c80a64d12465350b7cd85acc53f9ac768759e794398223544c2410df251e26aa84ed64f1e3a773b72871eaea2b4e659ac908a59acebfb086fe6c9d34323f75a068b4327a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0xbc, 0x3, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x80000001}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0x77, 0x6, {0x5, 'security\x00', 0x3, 0x6, "59276d0c711b2f12a16dde5bc073779df349e30cc09a4ba6a0d418494d1924845d171759db097cab947980d842b98de95a7061ef995bbbff2513b656b3b1334d1baa61fc7f5778ca2f6e656e56"}}]}, {0xb, 0x6, "550962da70c4aa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ipt={0xb4, 0xb, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x81, 0x6, "0c321a2b530da6169f7f85f046cd10211512064932c83238fb3c675bf6ce925f46dc0e89dfcc4af167b950d695f96151c427ea89a84d015960dd0df3a8ba01dec6250e5cf92fd749fa03756abee4b617767d070095248fbfefdb72877e242242bca591830251c75500981e819c89159e221c797c6026c3c6ae2d1cb7b8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0x174, 0x7, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x4b, 0x6, {0x7, 'nat\x00', 0x2, 0x1, "5710989a4d1d29eac73bddef3d6120b831b9b5181a9eee200f560069d3d3225267"}}]}, {0xdb, 0x6, "4bab773751c98786b78e59db329588cc57d71c0a4685e082cda49372269240859671664fb70a808e65aa10bba9be4eea14ae2d156a9ca36bd3522213b51ab6d826dc0471c0c7f3f8955259e6e3ab1f449dde41aabe2932e47518730f9988731f7f0a62fa57999ea9527e4e7f47e45b26ae95cd7d0f58b276c7fd7c739dc957cf358f4426baf8e80bb0b34af58608a3e8476f92751e93bb0aa6bcef1e2b621c6e84d66a30f1e9cefad5136a15468d9c443805ccb8fe58c33940458250c763b78bf37d48887b26140ab415e9147e9c10c5161f7ebbcb4759"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0x1c4, 0x7, 0x0, 0x0, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0xcb, 0x6, {0x80, 'security\x00', 0xf, 0x0, "e8ca3d212ee48757fc2fc19d3891b61abf3ed3221197fe61a1d5b52661f0f5d0b70c8a49c5a3f377899dda156c4443a5dda2ff3d7014d460592b06e176e153249bbcd25e144ddc1367d4fdf3ceed69a006948f3b40bce563329e537b17abdc6da9a18cedfafaa63485144b1f7ac888ce46ae3bd001520b9deb3af44c582ee8bf3c2ac1d0f90ba19746276e80e57f329145976c2cbc7c4c91c913eaf3c8941fe36f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xffff}, @TCA_IPT_TARG={0x8f, 0x6, {0x400, 'nat\x00', 0x22, 0x8, "46f1115d35a11b45e1e57c9115c12c057000e1f28c6b32d8e36c60b70b8950d2343b96dbd40ded04ebf22c33458d282c544541fe86e6e1c4692f34bbadc1406ff56e4ace936eed5893952d385834e5b493e14bee26bf16b0e2f4492a5168dc68beea4d75ee"}}]}, {0x12, 0x6, "eb56fbab591ca45c4a5cbf2d7d4f"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x1c0, 0x10, 0x0, 0x0, {{0x8}, {0x14c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffff8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0xcf, 0x6, {0x2, 'mangle\x00', 0x8, 0x3, "20d5e11597e9e3420451a0645a98a5a0df20df4c3c87ae8c21ad889c1b126d62b648a144852b152b7fe44f2b373633bbe3e1cb255836aa8cbfbf95a91a84fb3b1ff4092e3881f0aabfae00ec8c388034ec8f21de84b75dbc5d1ca7dd41732221d0dd6e78739ba78c0b45c7253271b595558be3df39bf470e6107d974e449a5c13fdc7fbb85694d4f3a35b20830710437e11fe7595000685f4c3d628832a71b13230503c5e2"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x400}, @TCA_IPT_INDEX={0x8, 0x3, 0x73ac}, @TCA_IPT_INDEX={0x8, 0x3, 0x10001}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x4e, 0x6, "926f2cb6513be74f3867bf37cf2168110bc4ff4d0df9b49c257dca86337024051d33cef2f74de1383a067d89893b158c78c998121cfe777eea2ef2ab51b83ff81f8ecefa9f39301a609c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0xb0c}, 0x1, 0x0, 0x0, 0x28008824}, 0x0) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="009888f8020404005600040059260306f3e8dd86e745c92089abd1e4c00326595fe13e2cf021a666c575f8cf1fcc2ea6fc695bc9edd28339ba24a9a426febbb64c98bb52f91803"], 0x47) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x40) write(r2, &(0x7f0000000240)='1', 0x1) 2.427683868s ago: executing program 3 (id=1347): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x1a}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000e58000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x4b564d06, 0xec000000, 0xcd}]}) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='dummy_udc.0', 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='\n', 0x1) 2.36017039s ago: executing program 3 (id=1348): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) 2.35976571s ago: executing program 3 (id=1349): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000340)={0x5a55, 0x3, 0x5, 0x9, 0x8}) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x1, 0x400000) ioctl$RTC_PIE_OFF(r2, 0x7006) syz_usb_connect(0x5, 0x51, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000019}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xa5) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000340)={0x9, 0x0, [{0x0, 0x5, 0x5, 0x1000, 0x0, 0x40}, {0x40000001, 0x5, 0x0, 0xffffff80, 0x1, 0xc70, 0x3}, {0x80000001, 0x80000006, 0x2, 0x8, 0x6, 0x101, 0xfff}, {0x80000019, 0x4, 0x4, 0x7, 0x8000, 0x6, 0x59ac0000}, {0x4, 0xe, 0x0, 0x4, 0xb, 0x374, 0x4}, {0x8000000b, 0x7fffffff, 0x3, 0x8, 0x100, 0x5, 0x8}, {0xc0000000, 0xb5, 0x2, 0x8, 0x7, 0x10000, 0x6}, {0x80000000, 0x4, 0x4, 0x0, 0x8, 0x20, 0x9}, {0x80000007, 0x0, 0x7, 0xd950, 0xfffffff9, 0x0, 0x7fff}]}) 1.074892333s ago: executing program 0 (id=1357): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x1a}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000e58000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x4b564d06, 0xec000000, 0xcd}]}) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='dummy_udc.0', 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='\n', 0x1) 990.684255ms ago: executing program 1 (id=1358): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000440)={0x14, &(0x7f0000000280)={0x0, 0x23, 0x90, {0x90, 0x3, "7f945cf3e24350a6de1a383d515c3a444b59da2d942dd92358562b493472f2975483969b7be890d8a134c3509b58082aa9b5ad12de416ca136e7ce4db60b283119d496d49c6f830fb015ff3d1f22f58343776652476051a33711d89c30b57e36babcac50aa779a10a58fc918db8d4c8869500ff8fbeaa5e590315eeda18fb020cfbf2291afa8d73263bad2d23ca6"}}, &(0x7f0000000380)={0x0, 0x3, 0x7f, @string={0x7f, 0x3, "d5e6b1203c7f6b326eb4722a4f51dd9c4773bf31ccd2b351ab4983e78d4644b23a5f18b204132a48e1fe0c8aae741f3577e4e03006634ac26db737adb1a9deba3c1e6440a42929bda77bd8ba9a736bb8fa437e3d6c021559514023b9917d07caaac524afb6409ba707b0f2469888d681554cc6cc2c0d72b8f7567ec6e1"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000480)={0x40, 0x5, 0x6e, "e3998264b9777312d31af5890d943a5ca84c4f61828a36b3edb005c71ccbc33f0529bb61b9dadb5b1e04e9d3c9b6b9412f8f51b029502c2df63f0d01523de609e11d4130b70a518e6d8184655e1dd2bf957c0f4059b03608b9d16460fcac4049a2ece12a4622411b74780ba78ceb"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xf8}, &(0x7f0000000580)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f00000005c0)={0x40, 0xa0, 0x4, 0x3}, &(0x7f0000000640)={0xc0, 0xa2, 0x2f, "dddafa81212f52618f9e42c7d0543782e94e3b6073e7b4dac25d35bbe06e6a3f11afd1fcdc50880bb571988c7d9eba"}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x50, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRES64=0x0]) 977.975835ms ago: executing program 0 (id=1359): r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) chroot(0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) read$FUSE(r1, &(0x7f0000001500)={0x2020}, 0x2020) write$selinux_load(r0, 0x0, 0xfebc) 92.109098ms ago: executing program 0 (id=1360): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000000)) 92.024008ms ago: executing program 0 (id=1361): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="1c80fe001800077bab092500090007000a0700000000000600003693", 0x1c) 91.919988ms ago: executing program 0 (id=1362): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r0, 0x89a2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback={0x0, 0x7ffffffe}}, 0x1c) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/devices/usb5/power/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='on\x00', 0x3) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000080)={0x1}) read(r2, &(0x7f0000000340)=""/72, 0x48) 91.845628ms ago: executing program 0 (id=1363): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002240)=0x4) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x11, 0x0, 0x1, 0xf, 0x6, @broadcast}, 0x14) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) pipe2(&(0x7f0000000080), 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407fe5ffff0000000000010902240001000000000904ebff010300000009210000000122180009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00221e0000000501477948badb25ff0904a1015b1353084ea1"], 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 51.363609ms ago: executing program 3 (id=1364): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="67726574e170302038"], 0xa) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00302bfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES8=r5, @ANYRES64=r6], 0xfdef) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 0s ago: executing program 3 (id=1365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0xfff, 0xffffffffffffffff, &(0x7f0000000200)="9de7a1175c9faf0d43bed9cb1cba47af2faacd464e61bdb8", 0x18, 0x10, 0x0, 0x1}]) setsockopt$inet6_opts(r2, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) inotify_init() r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000002640)=@vmx={0x1, 0x0, 0x1a4, {0x40000, 0x8080000, {}, 0x0, 0x4}, {"d07ee51100", "d07ee511000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00"}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000280)={[0xc, 0xffff, 0x0, 0xfffffffffffffffd, 0x8800, 0x4, 0xc9, 0x3, 0x2, 0x33, 0x7, 0x3, 0x3, 0xea, 0x5], 0x8000000}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x80dc2, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r7, 0x4068aea3, &(0x7f0000000340)) r8 = fcntl$getown(r6, 0x9) syz_open_procfs(r8, &(0x7f0000000000)='net/fib_triestat\x00') r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r9, 0x0, 0x4, &(0x7f0000000080)="d69012773a47c11765a02651cc7105b65e13c8ef3749e75a7603d45ae2b9fae33107f0be6cf5adfef007", 0x2a) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000c00000/0x400000)=nil) write(r7, &(0x7f0000000080)='4', 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. [ 21.061687][ T36] audit: type=1400 audit(1785961371.550:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.062797][ T287] cgroup: Unknown subsys name 'net' [ 21.084402][ T36] audit: type=1400 audit(1785961371.550:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.111728][ T36] audit: type=1400 audit(1785961371.570:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.111874][ T287] cgroup: Unknown subsys name 'devices' [ 21.232810][ T287] cgroup: Unknown subsys name 'hugetlb' [ 21.238453][ T287] cgroup: Unknown subsys name 'rlimit' [ 21.351135][ T36] audit: type=1400 audit(1785961371.840:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.374404][ T36] audit: type=1400 audit(1785961371.840:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.399188][ T36] audit: type=1400 audit(1785961371.840:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.407713][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.431067][ T36] audit: type=1400 audit(1785961371.920:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.456634][ T36] audit: type=1400 audit(1785961371.920:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.489820][ T36] audit: type=1400 audit(1785961371.970:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.515436][ T36] audit: type=1400 audit(1785961371.970:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.515804][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.220552][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.241017][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.248141][ T294] bridge_slave_0: entered allmulticast mode [ 22.255474][ T294] bridge_slave_0: entered promiscuous mode [ 22.263034][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.270067][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.277138][ T294] bridge_slave_1: entered allmulticast mode [ 22.283448][ T294] bridge_slave_1: entered promiscuous mode [ 22.380374][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.388691][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.395815][ T298] bridge_slave_0: entered allmulticast mode [ 22.402133][ T298] bridge_slave_0: entered promiscuous mode [ 22.408622][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.415686][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.422802][ T298] bridge_slave_1: entered allmulticast mode [ 22.429087][ T298] bridge_slave_1: entered promiscuous mode [ 22.471207][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.478287][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.485408][ T299] bridge_slave_0: entered allmulticast mode [ 22.491673][ T299] bridge_slave_0: entered promiscuous mode [ 22.499527][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.506721][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.513953][ T299] bridge_slave_1: entered allmulticast mode [ 22.520128][ T299] bridge_slave_1: entered promiscuous mode [ 22.560321][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.567450][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.574617][ T300] bridge_slave_0: entered allmulticast mode [ 22.580765][ T300] bridge_slave_0: entered promiscuous mode [ 22.589803][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.596853][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.603923][ T300] bridge_slave_1: entered allmulticast mode [ 22.610235][ T300] bridge_slave_1: entered promiscuous mode [ 22.683202][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.690263][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.697580][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.704601][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.726464][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.733628][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.740891][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.747945][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.798971][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.806048][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.813331][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.820361][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.835675][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.842994][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.850213][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.857744][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.865277][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.872570][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.894723][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.901768][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.909557][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.916608][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.924535][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.931576][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.939132][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.946188][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.989730][ T298] veth0_vlan: entered promiscuous mode [ 22.998214][ T294] veth0_vlan: entered promiscuous mode [ 23.017396][ T294] veth1_macvtap: entered promiscuous mode [ 23.026663][ T298] veth1_macvtap: entered promiscuous mode [ 23.034844][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.041925][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.058851][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.065900][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.104130][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.124521][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.131601][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.139878][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.146915][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.172586][ T312] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.192557][ T300] veth0_vlan: entered promiscuous mode [ 23.206740][ T300] veth1_macvtap: entered promiscuous mode [ 23.223193][ T299] veth0_vlan: entered promiscuous mode [ 23.262107][ T299] veth1_macvtap: entered promiscuous mode [ 23.269373][ T317] netlink: 'syz.3.5': attribute type 29 has an invalid length. [ 23.321178][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 23.354444][ T321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=321 comm=syz.2.3 [ 23.601083][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.641056][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.661050][ T66] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.751078][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 23.757340][ T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 23.765513][ T31] usb 1-1: config 0 has no interface number 0 [ 23.772900][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 23.782266][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.790250][ T31] usb 1-1: Product: syz [ 23.794572][ T31] usb 1-1: Manufacturer: syz [ 23.799168][ T31] usb 1-1: SerialNumber: syz [ 23.802155][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 23.804983][ T31] usb 1-1: config 0 descriptor?? [ 23.815051][ T66] usb 4-1: Using ep0 maxpacket: 8 [ 23.822054][ T31] smsc95xx v2.0.0 [ 23.825083][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.839293][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.849076][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 23.862933][ T66] usb 4-1: config 1 has an invalid descriptor of length 134, skipping remainder of the config [ 23.873354][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 23.882532][ T66] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 23.891463][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 23.899533][ T9] usb 2-1: Manufacturer: syz [ 23.905556][ T9] usb 2-1: config 0 descriptor?? [ 23.910601][ T66] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 23.919963][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.928150][ T66] usb 4-1: Product: syz [ 23.933338][ T66] usb 4-1: Manufacturer: syz [ 23.937970][ T66] usb 4-1: SerialNumber: syz [ 24.224036][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 24.234914][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 24.336077][ T9] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 24.343425][ T9] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 24.352928][ T9] appleir 0003:05AC:8243.0001: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 24.601857][ T333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.610395][ T333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.620231][ T333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.628975][ T333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.708299][ T9] usb 2-1: USB disconnect, device number 2 [ 25.045862][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 25.056751][ T31] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 25.211072][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.361087][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 25.367317][ T45] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 25.378718][ T45] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 25.391569][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 25.391977][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 25.404789][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=00c0, bcdDevice= 0.00 [ 25.414498][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.423742][ T45] usb 2-1: config 0 descriptor?? [ 25.681015][ T337] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.832116][ T337] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.843787][ T337] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 25.853124][ T337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.856806][ T128] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.861732][ T337] usb 3-1: Product: syz [ 25.872183][ T337] usb 3-1: Manufacturer: syz [ 25.876795][ T337] usb 3-1: SerialNumber: syz [ 26.084437][ T36] kauditd_printk_skb: 68 callbacks suppressed [ 26.084453][ T36] audit: type=1400 audit(1785961376.570:142): avc: denied { create } for pid=353 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 26.110401][ T36] audit: type=1400 audit(1785961376.570:143): avc: denied { write } for pid=353 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 26.111794][ T337] usb 3-1: 1:1 : unsupported format bits 0x2020000 [ 26.136249][ T337] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 26.144147][ T337] usb 3-1: 2:1 : unsupported format bits 0x2020000 [ 26.157681][ T337] usb 3-1: USB disconnect, device number 2 [ 26.166406][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.265011][ T66] usb 4-1: unit 6 not found! [ 26.271247][ T66] usb 4-1: unit 0 not found! [ 26.281148][ T66] usb 4-1: USB disconnect, device number 2 [ 26.297535][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.352327][ T36] audit: type=1400 audit(1785961376.840:144): avc: denied { write } for pid=364 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.373916][ T9] usb 1-1: USB disconnect, device number 2 [ 26.396222][ T36] audit: type=1400 audit(1785961376.880:145): avc: denied { read } for pid=368 comm="syz.3.19" dev="nsfs" ino=4026532400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.417238][ T36] audit: type=1400 audit(1785961376.880:146): avc: denied { open } for pid=368 comm="syz.3.19" path="net:[4026532400]" dev="nsfs" ino=4026532400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.440498][ T36] audit: type=1400 audit(1785961376.880:147): avc: denied { write } for pid=366 comm="syz.0.18" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 26.463356][ T36] audit: type=1400 audit(1785961376.880:148): avc: denied { ioctl } for pid=366 comm="syz.0.18" path="socket:[3840]" dev="sockfs" ino=3840 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.488030][ T36] audit: type=1400 audit(1785961376.940:149): avc: denied { create } for pid=370 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.507795][ T36] audit: type=1400 audit(1785961376.940:150): avc: denied { setopt } for pid=370 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.711025][ T66] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.771031][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.871010][ T66] usb 4-1: Using ep0 maxpacket: 32 [ 26.877538][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 26.887385][ T66] usb 4-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 26.896527][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.904624][ T66] usb 4-1: Product: syz [ 26.908883][ T66] usb 4-1: Manufacturer: syz [ 26.913520][ T66] usb 4-1: SerialNumber: syz [ 26.921057][ T336] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.929792][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 26.938257][ T9] usb 1-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 26.948778][ T9] usb 1-1: too many endpoints for config 1 interface 1 altsetting 235: 99, using maximum allowed: 30 [ 26.960007][ T9] usb 1-1: config 1 interface 1 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 99 [ 26.973216][ T9] usb 1-1: config 1 interface 1 has no altsetting 1 [ 26.981388][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.990494][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.998621][ T9] usb 1-1: Product: syz [ 27.003067][ T9] usb 1-1: Manufacturer: syz [ 27.007680][ T9] usb 1-1: SerialNumber: syz [ 27.082191][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.093234][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.103036][ T336] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 27.115960][ T336] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 27.125048][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.126199][ T369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.133869][ T336] usb 3-1: config 0 descriptor?? [ 27.143893][ T369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.158285][ T36] audit: type=1400 audit(1785961377.640:151): avc: denied { getopt } for pid=368 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.179817][ T66] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 27.186814][ T66] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 27.197379][ T66] usb 4-1: USB disconnect, device number 3 [ 27.209738][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.226292][ T9] usb 1-1: selecting invalid altsetting 1 [ 27.232315][ T9] cdc_ncm 1-1:1.0: bind() failure [ 27.239490][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 27.246978][ T9] cdc_ncm 1-1:1.1: bind() failure [ 27.254983][ T9] usb 1-1: USB disconnect, device number 3 [ 27.698656][ T383] syz.3.25 uses obsolete (PF_INET,SOCK_PACKET) [ 27.743100][ T387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.27'. [ 27.753536][ T336] usbhid 3-1:0.0: can't add hid device: -71 [ 27.759605][ T336] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 27.783520][ T336] usb 3-1: USB disconnect, device number 3 [ 27.861674][ T323] Bluetooth: hci0: command 0x1003 tx timeout [ 27.867722][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 28.072402][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 28.095470][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 28.115810][ T45] usb 2-1: USB disconnect, device number 3 [ 28.343385][ T428] Zero length message leads to an empty skb [ 28.511027][ T337] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 28.674563][ T337] usb 3-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 28.684013][ T337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.701947][ T337] usb 3-1: Product: syz [ 28.713177][ T337] usb 3-1: Manufacturer: syz [ 28.717972][ T337] usb 3-1: SerialNumber: syz [ 28.926080][ T426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.934624][ T426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.945431][ T337] usb 3-1: MIDIStreaming interface descriptor not found [ 28.954470][ T337] usb 3-1: USB disconnect, device number 4 [ 28.965167][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.041061][ T66] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.191019][ T66] usb 1-1: Using ep0 maxpacket: 32 [ 29.197261][ T66] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 29.211035][ T66] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 29.220075][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.229085][ T66] usb 1-1: config 0 descriptor?? [ 29.235051][ T66] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 29.272305][ T446] syzkaller1: entered promiscuous mode [ 29.277783][ T446] syzkaller1: entered allmulticast mode [ 29.285479][ T446] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 29.295737][ T446] SELinux: failed to load policy [ 29.362840][ T448] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 29.439136][ T66] usb 1-1: USB disconnect, device number 4 [ 29.460719][ T455] Mass Storage Function, version: 2009/09/11 [ 29.467583][ T457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=457 comm=syz.2.53 [ 29.467781][ T455] LUN: removable file: (no medium) [ 29.490769][ T455] mass_storage.usb0/lun.0: unable to open backing file: fi [ 29.881035][ T66] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 30.031050][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 30.037190][ T66] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 30.045426][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.056342][ T66] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 30.069164][ T66] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 30.078201][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.086805][ T66] usb 1-1: config 0 descriptor?? [ 30.495865][ T66] nintendo 0003:057E:2019.0002: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 30.561100][ T66] nintendo 0003:057E:2019.0002: Failed to get joycon info; ret=-38 [ 30.569025][ T66] nintendo 0003:057E:2019.0002: Failed to retrieve controller info; ret=-38 [ 30.577765][ T66] nintendo 0003:057E:2019.0002: Failed to initialize controller; ret=-38 [ 30.586892][ T66] nintendo 0003:057E:2019.0002: probe - fail = -38 [ 30.593544][ T66] nintendo 0003:057E:2019.0002: probe with driver nintendo failed with error -38 [ 30.897437][ T66] usb 1-1: USB disconnect, device number 5 [ 36.911756][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 36.911773][ T36] audit: type=1400 audit(2000000008.710:193): avc: denied { setopt } for pid=466 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.913983][ T470] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 36.956812][ T36] audit: type=1400 audit(2000000008.750:194): avc: denied { create } for pid=478 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 36.960814][ T470] SELinux: failed to load policy [ 36.985136][ T479] capability: warning: `syz.3.61' uses 32-bit capabilities (legacy support in use) [ 36.988089][ T470] tmpfs: Bad value for 'gid' [ 37.006574][ T470] tmpfs: Bad value for 'gid' [ 37.062257][ T36] audit: type=1400 audit(2000000008.860:195): avc: denied { mount } for pid=480 comm="syz.3.62" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 37.095932][ T477] FAULT_INJECTION: forcing a failure. [ 37.095932][ T477] name failslab, interval 1, probability 0, space 0, times 1 [ 37.108595][ T477] CPU: 0 UID: 0 PID: 477 Comm: syz.2.60 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 37.108625][ T477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.108645][ T477] Call Trace: [ 37.108651][ T477] [ 37.108658][ T477] __dump_stack+0x21/0x30 [ 37.108692][ T477] dump_stack_lvl+0x140/0x1c0 [ 37.108716][ T477] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.108743][ T477] dump_stack+0x19/0x20 [ 37.108766][ T477] should_fail_ex+0x3c2/0x510 [ 37.108787][ T477] should_failslab+0xac/0x100 [ 37.108810][ T477] kmem_cache_alloc_node_noprof+0x45/0x420 [ 37.108830][ T477] ? __alloc_skb+0x10c/0x360 [ 37.108855][ T477] __alloc_skb+0x10c/0x360 [ 37.108879][ T477] __neigh_notify+0x83/0x140 [ 37.108903][ T477] neigh_cleanup_and_release+0x2c/0x1a0 [ 37.108928][ T477] neigh_flush_dev+0x79c/0x950 [ 37.108948][ T477] ? _raw_write_lock_bh+0x96/0xf0 [ 37.108972][ T477] neigh_changeaddr+0x34/0x60 [ 37.108993][ T477] ndisc_netdev_event+0x221/0x670 [ 37.109015][ T477] ? __cfi_ndisc_netdev_event+0x10/0x10 [ 37.109035][ T477] notifier_call_chain+0x106/0x2b0 [ 37.109054][ T477] raw_notifier_call_chain+0x31/0x40 [ 37.109072][ T477] dev_set_mac_address+0x3c1/0x530 [ 37.109093][ T477] ? __cfi_dev_set_mac_address+0x10/0x10 [ 37.109115][ T477] ? full_name_hash+0xa1/0xf0 [ 37.109136][ T477] dev_set_mac_address_user+0x35/0x60 [ 37.109157][ T477] dev_ifsioc+0x9b5/0xc10 [ 37.109183][ T477] dev_ioctl+0x9c1/0x1000 [ 37.109209][ T477] sock_do_ioctl+0x249/0x330 [ 37.109231][ T477] ? sock_show_fdinfo+0xd0/0xd0 [ 37.109252][ T477] ? __cfi_vfs_write+0x10/0x10 [ 37.109271][ T477] ? __kasan_check_write+0x18/0x20 [ 37.109289][ T477] ? mutex_unlock+0x90/0x240 [ 37.109319][ T477] sock_ioctl+0x568/0x7e0 [ 37.109341][ T477] ? __cfi_sock_ioctl+0x10/0x10 [ 37.109362][ T477] ? bpf_lsm_file_ioctl+0xd/0x20 [ 37.109385][ T477] ? security_file_ioctl+0x3e/0x110 [ 37.109412][ T477] ? __cfi_sock_ioctl+0x10/0x10 [ 37.109432][ T477] __se_sys_ioctl+0x135/0x1b0 [ 37.109454][ T477] __x64_sys_ioctl+0x7f/0xa0 [ 37.109475][ T477] x64_sys_call+0x1878/0x2ee0 [ 37.109493][ T477] do_syscall_64+0x57/0xf0 [ 37.109513][ T477] ? clear_bhb_loop+0x50/0xa0 [ 37.109537][ T477] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.109560][ T477] RIP: 0033:0x7f10f399e0d9 [ 37.109577][ T477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.109592][ T477] RSP: 002b:00007f10f23f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.109617][ T477] RAX: ffffffffffffffda RBX: 00007f10f3c25fa0 RCX: 00007f10f399e0d9 [ 37.109631][ T477] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000004 [ 37.109644][ T477] RBP: 00007f10f23f7090 R08: 0000000000000000 R09: 0000000000000000 [ 37.109656][ T477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.109667][ T477] R13: 00007f10f3c26038 R14: 00007f10f3c25fa0 R15: 00007ffc03b9df18 [ 37.109683][ T477] [ 37.171063][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.278124][ T36] audit: type=1400 audit(2000000009.070:196): avc: denied { create } for pid=489 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.421059][ T337] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.437064][ T36] audit: type=1400 audit(2000000009.080:197): avc: denied { accept } for pid=489 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.470190][ T36] audit: type=1400 audit(2000000009.080:198): avc: denied { connect } for pid=489 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.471046][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 37.489553][ T36] audit: type=1400 audit(2000000009.080:199): avc: denied { shutdown } for pid=489 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.495921][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.525527][ T45] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 37.535995][ T45] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 37.545100][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.553898][ T45] usb 2-1: Product: syz [ 37.558109][ T45] usb 2-1: Manufacturer: syz [ 37.562748][ T45] usb 2-1: SerialNumber: syz [ 37.572649][ T45] usb 2-1: config 0 descriptor?? [ 37.581041][ T330] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.592978][ T36] audit: type=1400 audit(2000000009.390:200): avc: denied { relabelfrom } for pid=502 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 37.601056][ T337] usb 4-1: Using ep0 maxpacket: 32 [ 37.618700][ T337] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 37.627201][ T337] usb 4-1: config 0 has no interface number 0 [ 37.629299][ T36] audit: type=1400 audit(2000000009.390:201): avc: denied { relabelto } for pid=502 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 37.633582][ T337] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 37.662855][ T337] usb 4-1: config 0 interface 196 has no altsetting 0 [ 37.671094][ T337] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 37.680194][ T337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.688225][ T337] usb 4-1: Product: syz [ 37.693051][ T337] usb 4-1: Manufacturer: syz [ 37.697630][ T337] usb 4-1: SerialNumber: syz [ 37.703195][ T337] usb 4-1: config 0 descriptor?? [ 37.708522][ T481] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 37.741104][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 37.747951][ T330] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 37.755815][ T505] capability: warning: `syz.0.69' uses deprecated v2 capabilities in a way that may be insecure [ 37.758263][ T330] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 37.776233][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.784843][ T36] audit: type=1400 audit(2000000009.580:202): avc: denied { read } for pid=507 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.797468][ T330] usb 3-1: Product: syz [ 37.808045][ T330] usb 3-1: Manufacturer: syz [ 37.812699][ T330] usb 3-1: SerialNumber: syz [ 37.818897][ T330] r8152-cfgselector 3-1: Unknown version 0x0000 [ 37.825205][ T330] r8152-cfgselector 3-1: config 0 descriptor?? [ 38.032970][ T330] r8152-cfgselector 3-1: Needed 2 retries to read version [ 38.040152][ T330] r8152-cfgselector 3-1: Unknown version 0x0000 [ 38.046525][ T330] r8152-cfgselector 3-1: bad CDC descriptors [ 38.110994][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 38.261013][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 38.267257][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.278216][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.287980][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 38.297033][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.305583][ T45] usb 1-1: config 0 descriptor?? [ 38.311786][ T45] hub 1-1:0.0: USB hub found [ 38.512297][ T45] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 38.521093][ T517] device-mapper: ioctl: device name cannot contain '/' [ 38.713952][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 38.719986][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 38.751441][ T45] usb 1-1: USB disconnect, device number 6 [ 39.461036][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 39.591001][ T45] usb 1-1: device descriptor read/64, error -71 [ 39.841021][ T45] usb 1-1: device descriptor read/64, error -71 [ 39.917458][ T9] usb 2-1: USB disconnect, device number 4 [ 39.947209][ T523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.74'. [ 39.988173][ T527] 8021q: VLANs not supported on lo [ 40.017305][ T529] FAULT_INJECTION: forcing a failure. [ 40.017305][ T529] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.030898][ T529] CPU: 1 UID: 0 PID: 529 Comm: syz.1.77 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 40.030932][ T529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.030943][ T529] Call Trace: [ 40.030950][ T529] [ 40.030956][ T529] __dump_stack+0x21/0x30 [ 40.030984][ T529] dump_stack_lvl+0x140/0x1c0 [ 40.031013][ T529] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.031040][ T529] dump_stack+0x19/0x20 [ 40.031063][ T529] should_fail_ex+0x3c2/0x510 [ 40.031085][ T529] should_fail+0xf/0x20 [ 40.031104][ T529] should_fail_usercopy+0x1e/0x30 [ 40.031126][ T529] _copy_from_iter+0x1a6/0x1520 [ 40.031150][ T529] ? __kasan_check_write+0x18/0x20 [ 40.031170][ T529] ? _copy_from_iter+0x215/0x1520 [ 40.031194][ T529] ? __cfi__copy_from_iter+0x10/0x10 [ 40.031217][ T529] ? __virt_addr_valid+0x2a1/0x370 [ 40.031240][ T529] ? __cfi__copy_from_iter+0x10/0x10 [ 40.031263][ T529] ? __check_object_size+0x54c/0x870 [ 40.031284][ T529] ? __cfi___check_object_size+0x10/0x10 [ 40.031304][ T529] copy_page_from_iter+0x1e5/0x2a0 [ 40.031329][ T529] skb_copy_datagram_from_iter+0x300/0x6f0 [ 40.031351][ T529] tun_get_user+0xd99/0x3720 [ 40.031372][ T529] ? ptr_ring_consume+0x430/0x430 [ 40.031390][ T529] ? _parse_integer+0x2e/0x40 [ 40.031409][ T529] ? irqentry_exit+0x4a/0x60 [ 40.031426][ T529] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 40.031453][ T529] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 40.031479][ T529] ? __kasan_check_write+0x18/0x20 [ 40.031497][ T529] ? ref_tracker_alloc+0x32b/0x5b0 [ 40.031520][ T529] ? selinux_file_permission+0x1a1/0xb60 [ 40.031539][ T529] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 40.031561][ T529] ? selinux_file_permission+0x318/0xb60 [ 40.031581][ T529] ? __kasan_check_write+0x18/0x20 [ 40.031600][ T529] ? proc_fail_nth_write+0x184/0x220 [ 40.031627][ T529] tun_chr_write_iter+0x1fa/0x310 [ 40.031655][ T529] vfs_write+0x75f/0xfd0 [ 40.031676][ T529] ? __cfi_vfs_write+0x10/0x10 [ 40.031698][ T529] ksys_write+0x145/0x260 [ 40.031717][ T529] ? __cfi_ksys_write+0x10/0x10 [ 40.031737][ T529] ? __kasan_check_read+0x15/0x20 [ 40.031755][ T529] __x64_sys_write+0x7f/0x90 [ 40.031775][ T529] x64_sys_call+0x271c/0x2ee0 [ 40.031792][ T529] do_syscall_64+0x57/0xf0 [ 40.031813][ T529] ? clear_bhb_loop+0x50/0xa0 [ 40.031836][ T529] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.031857][ T529] RIP: 0033:0x7fc5f039e0d9 [ 40.031872][ T529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.031888][ T529] RSP: 002b:00007fc5f12c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 40.031909][ T529] RAX: ffffffffffffffda RBX: 00007fc5f0625fa0 RCX: 00007fc5f039e0d9 [ 40.031923][ T529] RDX: 000000000000ffdd RSI: 0000200000000740 RDI: 0000000000000003 [ 40.031937][ T529] RBP: 00007fc5f12c6090 R08: 0000000000000000 R09: 0000000000000000 [ 40.031949][ T529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.031962][ T529] R13: 00007fc5f0626038 R14: 00007fc5f0625fa0 R15: 00007ffd4eb27e08 [ 40.031978][ T529] [ 40.234715][ T9] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 40.235885][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 40.354905][ T337] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 40.362483][ T337] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 40.373501][ T337] usb 4-1: USB disconnect, device number 4 [ 40.511015][ T45] usb 1-1: device descriptor read/64, error -71 [ 40.661047][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 40.711015][ T66] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.751021][ T45] usb 1-1: device descriptor read/64, error -71 [ 40.757291][ T337] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 40.811003][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 40.817470][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 40.826314][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.836443][ T9] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 40.846960][ T9] usb 3-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 40.856022][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.864044][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 40.869332][ T9] usb 3-1: Product: syz [ 40.871141][ T45] usb usb1-port1: attempt power cycle [ 40.873735][ T9] usb 3-1: Manufacturer: syz [ 40.883541][ T9] usb 3-1: SerialNumber: syz [ 40.888290][ T66] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.898607][ T66] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 40.909555][ T66] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 40.918650][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.920994][ T337] usb 4-1: Using ep0 maxpacket: 32 [ 40.926656][ T66] usb 2-1: Product: syz [ 40.933131][ T337] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 40.935974][ T66] usb 2-1: Manufacturer: syz [ 40.944553][ T337] usb 4-1: config 0 has no interface number 0 [ 40.948662][ T66] usb 2-1: SerialNumber: syz [ 40.956417][ T337] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 40.960372][ T66] usb 2-1: config 0 descriptor?? [ 40.971222][ T337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.981330][ T337] usb 4-1: Product: syz [ 40.985489][ T337] usb 4-1: Manufacturer: syz [ 40.990060][ T337] usb 4-1: SerialNumber: syz [ 40.995368][ T337] usb 4-1: config 0 descriptor?? [ 41.001276][ T337] smsc95xx v2.0.0 [ 41.121432][ T9] usb 3-1: unit 2 not found! [ 41.132216][ T9] usb 3-1: USB disconnect, device number 6 [ 41.162655][ T472] udevd[472]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.211037][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 41.231933][ T45] usb 1-1: device descriptor read/8, error -71 [ 41.362106][ T45] usb 1-1: device descriptor read/8, error -71 [ 41.401738][ T337] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 41.412710][ T337] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 41.621058][ T45] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 41.642052][ T45] usb 1-1: device descriptor read/8, error -71 [ 41.782106][ T45] usb 1-1: device descriptor read/8, error -71 [ 41.891222][ T45] usb usb1-port1: unable to enumerate USB device [ 41.920977][ T36] kauditd_printk_skb: 8934 callbacks suppressed [ 41.920994][ T36] audit: type=1326 audit(2000000013.710:9137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=552 comm="syz.2.87" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f399e0d9 code=0x7ff00000 [ 41.952506][ T36] audit: type=1326 audit(2000000013.720:9138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=552 comm="syz.2.87" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f399e0d9 code=0x7ff00000 [ 41.977785][ T36] audit: type=1326 audit(2000000013.720:9139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=552 comm="syz.2.87" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f399e0d9 code=0x7ff00000 [ 42.002941][ T36] audit: type=1326 audit(2000000013.720:9140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=552 comm="syz.2.87" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f399e0d9 code=0x7ff00000 [ 42.028068][ T36] audit: type=1326 audit(2000000013.720:9141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=552 comm="syz.2.87" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f399e0d9 code=0x7ff00000 [ 42.053184][ T36] audit: type=1326 audit(2000000013.720:9142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=552 comm="syz.2.87" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f399e0d9 code=0x7ff00000 [ 42.078289][ T36] audit: type=1326 audit(2000000013.720:9143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=552 comm="syz.2.87" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f399e0d9 code=0x7ff00000 [ 42.103420][ T36] audit: type=1326 audit(2000000013.720:9144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=552 comm="syz.2.87" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f399e0d9 code=0x7ff00000 [ 42.128492][ T36] audit: type=1326 audit(2000000013.720:9145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=552 comm="syz.2.87" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f399e0d9 code=0x7ff00000 [ 42.153569][ T36] audit: type=1326 audit(2000000013.720:9146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=552 comm="syz.2.87" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f399e0d9 code=0x7ff00000 [ 42.291231][ T562] loop7: detected capacity change from 0 to 7 [ 42.299802][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 42.309664][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 42.318829][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 42.327027][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 42.336202][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 42.344286][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 42.353450][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 42.361322][ T562] loop7: unable to read partition table [ 42.361900][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 42.371242][ T562] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 42.376099][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 42.398168][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 42.407361][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 42.415474][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 42.424621][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 42.441006][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 42.450155][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 42.641631][ T337] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 42.652449][ T337] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 43.311011][ T337] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 43.461026][ T337] usb 3-1: Using ep0 maxpacket: 16 [ 43.467273][ T337] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.477455][ T337] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.483866][ T66] usb 2-1: USB disconnect, device number 5 [ 43.487722][ T337] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 43.503340][ T337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.513815][ T337] usb 3-1: Product: syz [ 43.517994][ T337] usb 3-1: Manufacturer: syz [ 43.522611][ T337] usb 3-1: SerialNumber: syz [ 43.729525][ T337] usb 3-1: 0:2 : does not exist [ 43.736237][ T337] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 43.747031][ T337] usb 3-1: USB disconnect, device number 7 [ 43.754433][ T472] udevd[472]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.821018][ T66] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 43.864312][ T9] usb 4-1: USB disconnect, device number 5 [ 43.951878][ T66] usb 2-1: device descriptor read/64, error -71 [ 44.191235][ T66] usb 2-1: device descriptor read/64, error -71 [ 44.251003][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 44.321078][ T335] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 44.400999][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 44.407169][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 44.418016][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 44.431016][ T66] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 44.438547][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 44.447681][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.456696][ T9] usb 4-1: config 0 descriptor?? [ 44.471002][ T335] usb 1-1: Using ep0 maxpacket: 16 [ 44.477183][ T335] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.487352][ T335] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 44.497692][ T335] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 44.506785][ T335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.511173][ T337] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 44.514800][ T335] usb 1-1: Product: syz [ 44.526438][ T335] usb 1-1: Manufacturer: syz [ 44.531149][ T335] usb 1-1: SerialNumber: syz [ 44.536309][ T335] usb 1-1: config 0 descriptor?? [ 44.591004][ T66] usb 2-1: device descriptor read/64, error -71 [ 44.651051][ T337] usb 3-1: device descriptor read/64, error -71 [ 44.831009][ T66] usb 2-1: device descriptor read/64, error -71 [ 44.866707][ T9] wacom 0003:056A:0013.0003: ignoring exceeding usage max [ 44.874832][ T9] wacom 0003:056A:0013.0003: Unknown device_type for 'HID 056a:0013'. Assuming pen. [ 44.884910][ T9] wacom 0003:056A:0013.0003: hidraw0: USB HID v0.01 Device [HID 056a:0013] on usb-dummy_hcd.3-1/input0 [ 44.891032][ T337] usb 3-1: device descriptor read/64, error -71 [ 44.901041][ T9] input: Wacom Graphire3 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0013.0003/input/input5 [ 44.941086][ T66] usb usb2-port1: attempt power cycle [ 45.068898][ T9] usb 4-1: USB disconnect, device number 6 [ 45.151026][ T337] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 45.281011][ T337] usb 3-1: device descriptor read/64, error -71 [ 45.281011][ T66] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 45.311954][ T66] usb 2-1: device descriptor read/8, error -71 [ 45.441964][ T66] usb 2-1: device descriptor read/8, error -71 [ 45.541044][ T337] usb 3-1: device descriptor read/64, error -71 [ 45.651551][ T337] usb usb3-port1: attempt power cycle [ 45.681042][ T66] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 45.711974][ T66] usb 2-1: device descriptor read/8, error -71 [ 45.842034][ T66] usb 2-1: device descriptor read/8, error -71 [ 45.931007][ T330] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 45.951079][ T66] usb usb2-port1: unable to enumerate USB device [ 45.991030][ T337] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 46.011979][ T337] usb 3-1: device descriptor read/8, error -71 [ 46.082032][ T330] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 46.090261][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 46.101238][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.110988][ T330] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 46.119994][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.128603][ T330] usb 4-1: config 0 descriptor?? [ 46.141959][ T337] usb 3-1: device descriptor read/8, error -71 [ 46.340517][ T330] usbhid 4-1:0.0: can't add hid device: -71 [ 46.346820][ T330] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 46.355779][ T330] usb 4-1: USB disconnect, device number 7 [ 46.391036][ T337] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 46.411980][ T337] usb 3-1: device descriptor read/8, error -71 [ 46.520164][ T623] FAULT_INJECTION: forcing a failure. [ 46.520164][ T623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.533364][ T623] CPU: 0 UID: 0 PID: 623 Comm: syz.1.113 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 46.533394][ T623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.533404][ T623] Call Trace: [ 46.533410][ T623] [ 46.533417][ T623] __dump_stack+0x21/0x30 [ 46.533444][ T623] dump_stack_lvl+0x140/0x1c0 [ 46.533466][ T623] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.533491][ T623] dump_stack+0x19/0x20 [ 46.533512][ T623] should_fail_ex+0x3c2/0x510 [ 46.533531][ T623] should_fail+0xf/0x20 [ 46.533559][ T623] should_fail_usercopy+0x1e/0x30 [ 46.533581][ T623] _copy_to_iter+0x56d/0x1520 [ 46.533599][ T623] ? __cfi__copy_to_iter+0x10/0x10 [ 46.533611][ T623] ? __check_object_size+0x54c/0x870 [ 46.533622][ T623] ? __cfi___check_object_size+0x10/0x10 [ 46.533635][ T623] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 46.533648][ T623] ? __skb_try_recv_datagram+0x3e0/0x4e0 [ 46.533664][ T623] __skb_datagram_iter+0x103/0x940 [ 46.533673][ T623] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 46.533682][ T623] skb_copy_datagram_iter+0x44/0x160 [ 46.533692][ T623] netlink_recvmsg+0x2d4/0xe60 [ 46.533703][ T623] ? __cfi_netlink_recvmsg+0x10/0x10 [ 46.533714][ T623] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 46.533726][ T623] ? security_socket_recvmsg+0x44/0x130 [ 46.533740][ T623] ? __cfi_netlink_recvmsg+0x10/0x10 [ 46.533750][ T623] sock_recvmsg+0x185/0x1e0 [ 46.533763][ T623] ____sys_recvmsg+0x1e7/0x4a0 [ 46.533774][ T623] ? __sys_recvmsg_sock+0x60/0x60 [ 46.533785][ T623] ? import_iovec+0x80/0xb0 [ 46.533799][ T623] ___sys_recvmsg+0x214/0x590 [ 46.533810][ T623] ? __sys_recvmsg+0x2a0/0x2a0 [ 46.533820][ T623] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 46.533831][ T623] ? selinux_file_permission+0x318/0xb60 [ 46.533842][ T623] do_recvmmsg+0x36d/0x7f0 [ 46.533853][ T623] ? __sys_recvmmsg+0x2a0/0x2a0 [ 46.533863][ T623] ? __cfi_vfs_write+0x10/0x10 [ 46.533874][ T623] ? _copy_from_user+0x87/0xa0 [ 46.533888][ T623] __x64_sys_recvmmsg+0x1b8/0x250 [ 46.533899][ T623] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 46.533910][ T623] ? __kasan_check_read+0x15/0x20 [ 46.533920][ T623] x64_sys_call+0x292c/0x2ee0 [ 46.533929][ T623] do_syscall_64+0x57/0xf0 [ 46.533941][ T623] ? clear_bhb_loop+0x50/0xa0 [ 46.533954][ T623] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.533966][ T623] RIP: 0033:0x7fc5f039e0d9 [ 46.533976][ T623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.533985][ T623] RSP: 002b:00007fc5f12c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 46.533997][ T623] RAX: ffffffffffffffda RBX: 00007fc5f0625fa0 RCX: 00007fc5f039e0d9 [ 46.534005][ T623] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 46.534012][ T623] RBP: 00007fc5f12c6090 R08: 0000200000003700 R09: 0000000000000000 [ 46.534019][ T623] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 46.534025][ T623] R13: 00007fc5f0626038 R14: 00007fc5f0625fa0 R15: 00007ffd4eb27e08 [ 46.534033][ T623] [ 46.553804][ T337] usb 3-1: device descriptor read/8, error -71 [ 46.850860][ T630] FAULT_INJECTION: forcing a failure. [ 46.850860][ T630] name failslab, interval 1, probability 0, space 0, times 0 [ 46.863765][ T630] CPU: 0 UID: 0 PID: 630 Comm: syz.1.115 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 46.863784][ T630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.863790][ T630] Call Trace: [ 46.863794][ T630] [ 46.863798][ T630] __dump_stack+0x21/0x30 [ 46.863817][ T630] dump_stack_lvl+0x140/0x1c0 [ 46.863831][ T630] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.863845][ T630] dump_stack+0x19/0x20 [ 46.863858][ T630] should_fail_ex+0x3c2/0x510 [ 46.863869][ T630] should_failslab+0xac/0x100 [ 46.863882][ T630] kmem_cache_alloc_node_noprof+0x45/0x420 [ 46.863893][ T630] ? __alloc_skb+0x10c/0x360 [ 46.863907][ T630] __alloc_skb+0x10c/0x360 [ 46.863920][ T630] inet6_netconf_notify_devconf+0x10b/0x1e0 [ 46.863936][ T630] addrconf_ifdown+0x1651/0x1970 [ 46.863947][ T630] ? addrconf_cleanup+0x150/0x150 [ 46.863957][ T630] ? __kasan_check_write+0x18/0x20 [ 46.863966][ T630] ? mutex_unlock+0x90/0x240 [ 46.863980][ T630] ? __cfi_mutex_unlock+0x10/0x10 [ 46.863993][ T630] ? macsec_notify+0x111/0x4f0 [ 46.864006][ T630] ? __cfi_mutex_unlock+0x10/0x10 [ 46.864019][ T630] addrconf_notify+0x17a/0xeb0 [ 46.864031][ T630] ? ip6mr_device_event+0x1f4/0x230 [ 46.864041][ T630] ? __cfi_addrconf_notify+0x10/0x10 [ 46.864052][ T630] notifier_call_chain+0x106/0x2b0 [ 46.864063][ T630] raw_notifier_call_chain+0x31/0x40 [ 46.864073][ T630] unregister_netdevice_many_notify+0xde1/0x1be0 [ 46.864088][ T630] ? avc_has_extended_perms+0x7fb/0xe60 [ 46.864100][ T630] ? __cfi_unregister_netdevice_many_notify+0x10/0x10 [ 46.864114][ T630] ? cred_has_capability+0x296/0x3a0 [ 46.864124][ T630] ? arch_stack_walk+0x10a/0x170 [ 46.864134][ T630] ? selinux_perf_event_alloc+0x110/0x110 [ 46.864144][ T630] ? __kasan_check_read+0x15/0x20 [ 46.864154][ T630] unregister_netdevice_queue+0x302/0x350 [ 46.864166][ T630] ? selinux_capable+0x38/0x50 [ 46.864178][ T630] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 46.864191][ T630] ? ns_capable+0x90/0xf0 [ 46.864206][ T630] ip6_tnl_siocdevprivate+0x47f/0xe70 [ 46.864216][ T630] ? __cfi_ip6_tnl_siocdevprivate+0x10/0x10 [ 46.864226][ T630] ? proc_fail_nth_write+0x184/0x220 [ 46.864241][ T630] ? full_name_hash+0xa1/0xf0 [ 46.864254][ T630] dev_ifsioc+0x94e/0xc10 [ 46.864269][ T630] dev_ioctl+0xa62/0x1000 [ 46.864283][ T630] sock_ioctl+0x74e/0x7e0 [ 46.864295][ T630] ? __cfi_sock_ioctl+0x10/0x10 [ 46.864306][ T630] ? bpf_lsm_file_ioctl+0xd/0x20 [ 46.864320][ T630] ? security_file_ioctl+0x3e/0x110 [ 46.864335][ T630] ? __cfi_sock_ioctl+0x10/0x10 [ 46.864346][ T630] __se_sys_ioctl+0x135/0x1b0 [ 46.864358][ T630] __x64_sys_ioctl+0x7f/0xa0 [ 46.864378][ T630] x64_sys_call+0x1878/0x2ee0 [ 46.864387][ T630] do_syscall_64+0x57/0xf0 [ 46.864398][ T630] ? clear_bhb_loop+0x50/0xa0 [ 46.864412][ T630] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.864424][ T630] RIP: 0033:0x7fc5f039e0d9 [ 46.864434][ T630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.864442][ T630] RSP: 002b:00007fc5f12c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.864455][ T630] RAX: ffffffffffffffda RBX: 00007fc5f0625fa0 RCX: 00007fc5f039e0d9 [ 46.864462][ T630] RDX: 0000200000000880 RSI: 00000000000089f2 RDI: 0000000000000003 [ 46.864469][ T630] RBP: 00007fc5f12c6090 R08: 0000000000000000 R09: 0000000000000000 [ 46.864476][ T630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.864484][ T630] R13: 00007fc5f0626038 R14: 00007fc5f0625fa0 R15: 00007ffd4eb27e08 [ 46.864493][ T630] [ 46.911010][ T330] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 47.100426][ T336] usb 1-1: USB disconnect, device number 11 [ 47.101553][ T337] usb usb3-port1: unable to enumerate USB device [ 47.317836][ T642] process 'syz.1.121' launched './file0' with NULL argv: empty string added [ 47.326867][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 47.326882][ T36] audit: type=1400 audit(2000000019.120:9219): avc: denied { execute_no_trans } for pid=641 comm="syz.1.121" path="/21/file0" dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 47.391013][ T330] usb 4-1: Using ep0 maxpacket: 16 [ 47.397114][ T330] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 47.405211][ T330] usb 4-1: config 0 has no interface number 0 [ 47.411314][ T330] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 47.421391][ T330] usb 4-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 47.433552][ T330] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 47.442705][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.450676][ T330] usb 4-1: Product: syz [ 47.454844][ T330] usb 4-1: Manufacturer: syz [ 47.459426][ T330] usb 4-1: SerialNumber: syz [ 47.464754][ T330] usb 4-1: config 0 descriptor?? [ 47.469994][ T621] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 47.477792][ T330] asix 4-1:0.34: probe with driver asix failed with error -22 [ 47.601009][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 47.621007][ T336] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 47.731005][ T45] usb 2-1: device descriptor read/64, error -71 [ 47.781131][ T336] usb 1-1: Using ep0 maxpacket: 16 [ 47.793431][ T36] audit: type=1400 audit(2000000019.590:9220): avc: denied { bind } for pid=653 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.794325][ T336] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 47.820825][ T336] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.831117][ T336] usb 1-1: config 0 has no interface number 0 [ 47.837445][ T336] usb 1-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 47.846652][ T36] audit: type=1400 audit(2000000019.630:9221): avc: denied { write } for pid=657 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 47.853424][ T336] usb 1-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.881694][ T336] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 47.890933][ T336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.898967][ T336] usb 1-1: Product: syz [ 47.904531][ T336] usb 1-1: Manufacturer: syz [ 47.909143][ T336] usb 1-1: SerialNumber: syz [ 47.917701][ T336] usb 1-1: config 0 descriptor?? [ 47.923534][ T336] asix 1-1:0.34: probe with driver asix failed with error -22 [ 47.927133][ T36] audit: type=1400 audit(2000000019.720:9222): avc: denied { ioctl } for pid=657 comm="syz.2.128" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10338 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.011029][ T45] usb 2-1: device descriptor read/64, error -71 [ 48.251677][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 48.253588][ T665] SELinux: policydb version 1633771873 does not match my version range 15-33 [ 48.268457][ T665] SELinux: failed to load policy [ 48.283657][ T667] FAULT_INJECTION: forcing a failure. [ 48.283657][ T667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.296765][ T667] CPU: 0 UID: 0 PID: 667 Comm: syz.2.131 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 48.296791][ T667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.296798][ T667] Call Trace: [ 48.296802][ T667] [ 48.296806][ T667] __dump_stack+0x21/0x30 [ 48.296826][ T667] dump_stack_lvl+0x140/0x1c0 [ 48.296840][ T667] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.296854][ T667] ? check_stack_object+0x138/0x150 [ 48.296865][ T667] dump_stack+0x19/0x20 [ 48.296878][ T667] should_fail_ex+0x3c2/0x510 [ 48.296890][ T667] should_fail+0xf/0x20 [ 48.296899][ T667] should_fail_usercopy+0x1e/0x30 [ 48.296911][ T667] _copy_to_user+0x24/0xa0 [ 48.296924][ T667] simple_read_from_buffer+0xed/0x160 [ 48.296938][ T667] proc_fail_nth_read+0x1aa/0x220 [ 48.296953][ T667] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 48.296967][ T667] ? bpf_lsm_file_permission+0xd/0x20 [ 48.296981][ T667] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 48.296994][ T667] vfs_read+0x288/0xc70 [ 48.297005][ T667] ? __cfi_vfs_read+0x10/0x10 [ 48.297014][ T667] ? __kasan_check_write+0x18/0x20 [ 48.297024][ T667] ? mutex_lock+0x97/0x1d0 [ 48.297037][ T667] ? __cfi_mutex_lock+0x10/0x10 [ 48.297051][ T667] ksys_read+0x145/0x260 [ 48.297061][ T667] ? __cfi_ksys_read+0x10/0x10 [ 48.297071][ T667] ? __kasan_check_read+0x15/0x20 [ 48.297081][ T667] __x64_sys_read+0x7f/0x90 [ 48.297090][ T667] x64_sys_call+0x2638/0x2ee0 [ 48.297099][ T667] do_syscall_64+0x57/0xf0 [ 48.297110][ T667] ? clear_bhb_loop+0x50/0xa0 [ 48.297124][ T667] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.297137][ T667] RIP: 0033:0x7f10f395e90e [ 48.297146][ T667] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 48.297154][ T667] RSP: 002b:00007f10f23f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 48.297166][ T667] RAX: ffffffffffffffda RBX: 00007f10f23f76c0 RCX: 00007f10f395e90e [ 48.297174][ T667] RDX: 000000000000000f RSI: 00007f10f23f70a0 RDI: 0000000000000004 [ 48.297181][ T667] RBP: 00007f10f23f7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.297187][ T667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.297193][ T667] R13: 00007f10f3c26038 R14: 00007f10f3c25fa0 R15: 00007ffc03b9df18 [ 48.297201][ T667] [ 48.306546][ T36] audit: type=1400 audit(2000000020.100:9223): avc: denied { nlmsg_write } for pid=668 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.561006][ T66] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 48.611005][ T45] usb 2-1: device descriptor read/64, error -71 [ 48.712221][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 48.720216][ T66] usb 3-1: not running at top speed; connect to a high speed hub [ 48.728666][ T66] usb 3-1: config 9 has an invalid interface number: 46 but max is 0 [ 48.736806][ T66] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 48.746984][ T66] usb 3-1: config 9 has no interface number 0 [ 48.753087][ T66] usb 3-1: config 9 interface 46 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 48.764738][ T66] usb 3-1: config 9 interface 46 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.777697][ T66] usb 3-1: config 9 interface 46 has no altsetting 0 [ 48.785754][ T66] usb 3-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=48.db [ 48.794825][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.802830][ T66] usb 3-1: Product: syz [ 48.806982][ T66] usb 3-1: Manufacturer: syz [ 48.811597][ T66] usb 3-1: SerialNumber: syz [ 48.851043][ T45] usb 2-1: device descriptor read/64, error -71 [ 48.961101][ T45] usb usb2-port1: attempt power cycle [ 49.019246][ T66] pl2303 3-1:9.46: required endpoints missing [ 49.027435][ T66] usb 3-1: USB disconnect, device number 12 [ 49.301008][ T45] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 49.321929][ T45] usb 2-1: device descriptor read/8, error -71 [ 49.373675][ T66] usb 4-1: USB disconnect, device number 8 [ 49.451993][ T45] usb 2-1: device descriptor read/8, error -71 [ 49.691007][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 49.711455][ T66] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 49.719097][ T36] audit: type=1400 audit(2000000021.510:9224): avc: denied { bind } for pid=689 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.731533][ T45] usb 2-1: device descriptor read/8, error -71 [ 49.746136][ T36] audit: type=1400 audit(2000000021.540:9225): avc: denied { read } for pid=691 comm="syz.2.139" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.768768][ T36] audit: type=1400 audit(2000000021.540:9226): avc: denied { open } for pid=691 comm="syz.2.139" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.795159][ T36] audit: type=1400 audit(2000000021.560:9227): avc: denied { ioctl } for pid=691 comm="syz.2.139" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.820630][ T36] audit: type=1400 audit(2000000021.600:9228): avc: denied { ioctl } for pid=693 comm="syz.2.140" path="socket:[9713]" dev="sockfs" ino=9713 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.872003][ T45] usb 2-1: device descriptor read/8, error -71 [ 49.900998][ T66] usb 4-1: Using ep0 maxpacket: 32 [ 49.907188][ T66] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 49.915442][ T66] usb 4-1: config 0 has no interface number 0 [ 49.921577][ T66] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 49.933045][ T66] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 49.942322][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.950326][ T66] usb 4-1: Product: syz [ 49.954576][ T66] usb 4-1: Manufacturer: syz [ 49.959222][ T66] usb 4-1: SerialNumber: syz [ 49.964349][ T66] usb 4-1: config 0 descriptor?? [ 49.969618][ T678] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 49.981177][ T45] usb usb2-port1: unable to enumerate USB device [ 50.041036][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 50.178295][ T678] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 50.192139][ T31] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 50.202252][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 50.215981][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.225130][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 50.233202][ T31] usb 3-1: SerialNumber: syz [ 50.240093][ T694] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 50.391229][ T9] usb 1-1: USB disconnect, device number 12 [ 50.450382][ T31] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 50.459849][ T31] usb 3-1: USB disconnect, device number 13 [ 50.486505][ T700] netlink: 20 bytes leftover after parsing attributes in process `syz.0.143'. [ 50.659692][ T9] logitech-hidpp-device 0005:046D:B012.0004: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 50.791081][ T335] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 50.942015][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 50.953117][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.962934][ T335] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 50.974792][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.983601][ T335] usb 2-1: config 0 descriptor?? [ 50.989860][ T335] hub 2-1:0.0: USB hub found [ 51.004873][ T66] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 51.009455][ T31] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 51.016849][ T66] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 51.033120][ T66] asix 4-1:0.188: probe with driver asix failed with error -71 [ 51.046805][ T66] usb 4-1: USB disconnect, device number 9 [ 51.172415][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 51.180855][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 51.189846][ T335] hub 2-1:0.0: 1 port detected [ 51.192018][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 51.206354][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 51.216224][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 51.225949][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 51.238302][ T31] usb 1-1: string descriptor 0 read error: -22 [ 51.244580][ T31] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 51.253777][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.262444][ T31] usb 1-1: config 0 descriptor?? [ 51.267733][ T721] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 51.301104][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 51.311581][ T542] udevd[542]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.470989][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 51.477323][ T9] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 51.482186][ T31] usb 1-1: USB disconnect, device number 13 [ 51.485501][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.501576][ T9] usb 3-1: config 0 has no interface number 0 [ 51.507718][ T9] usb 3-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 51.518528][ T9] usb 3-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.532948][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 51.542152][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.550318][ T9] usb 3-1: Product: syz [ 51.554773][ T9] usb 3-1: Manufacturer: syz [ 51.559636][ T9] usb 3-1: SerialNumber: syz [ 51.565561][ T9] usb 3-1: config 0 descriptor?? [ 51.570819][ T730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.151'. [ 51.571796][ T9] asix 3-1:0.34: probe with driver asix failed with error -22 [ 51.794616][ T696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.803178][ T696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.811731][ T335] usb 2-1: USB disconnect, device number 14 [ 51.818041][ T9] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 51.831088][ T45] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 51.980995][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 51.987474][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 51.995883][ T45] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 52.004835][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.024377][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.036623][ T45] usb 4-1: string descriptor 0 read error: -22 [ 52.042917][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.051985][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.064414][ T45] usb 4-1: 0:2 : does not exist [ 52.162693][ T742] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.275251][ T732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.284526][ T732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.294199][ T335] usb 4-1: USB disconnect, device number 10 [ 52.561041][ T45] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 52.713865][ T45] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 52.723269][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.731295][ T45] usb 2-1: Product: syz [ 52.735506][ T45] usb 2-1: Manufacturer: syz [ 52.740086][ T45] usb 2-1: SerialNumber: syz [ 53.071054][ T45] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 53.232326][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.243281][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.253178][ T45] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 53.262394][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.274184][ T45] usb 4-1: config 0 descriptor?? [ 53.683824][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 53.689847][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 53.698521][ T45] usb 4-1: USB disconnect, device number 11 [ 54.055705][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 54.055723][ T36] audit: type=1400 audit(2000000025.850:9240): avc: denied { mounton } for pid=770 comm="syz.0.166" path="/proc/139/task" dev="proc" ino=10653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 54.095969][ T335] usb 3-1: USB disconnect, device number 14 [ 54.145495][ T776] udc dummy_udc.0: soft-connect without a gadget driver [ 54.471351][ T784] syzkaller1: entered promiscuous mode [ 54.476907][ T784] syzkaller1: entered allmulticast mode [ 54.499287][ T36] audit: type=1400 audit(2000000026.290:9241): avc: denied { read write } for pid=779 comm="syz.0.170" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.522758][ T36] audit: type=1400 audit(2000000026.290:9242): avc: denied { open } for pid=779 comm="syz.0.170" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.637127][ T794] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.131072.0), cmd(9) [ 54.701002][ T335] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 54.718800][ T796] sock: sock_timestamping_bind_phc: sock not bind to device [ 54.853425][ T335] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 54.862618][ T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.870625][ T335] usb 3-1: Product: syz [ 54.874888][ T335] usb 3-1: Manufacturer: syz [ 54.879745][ T335] usb 3-1: SerialNumber: syz [ 54.981025][ T330] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 55.031525][ T801] FAULT_INJECTION: forcing a failure. [ 55.031525][ T801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.045115][ T801] CPU: 0 UID: 0 PID: 801 Comm: syz.0.178 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 55.045135][ T801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.045142][ T801] Call Trace: [ 55.045146][ T801] [ 55.045151][ T801] __dump_stack+0x21/0x30 [ 55.045170][ T801] dump_stack_lvl+0x140/0x1c0 [ 55.045184][ T801] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.045198][ T801] ? __kasan_check_read+0x15/0x20 [ 55.045209][ T801] ? vmx_read_guest_seg_ar+0x179/0x350 [ 55.045226][ T801] dump_stack+0x19/0x20 [ 55.045238][ T801] should_fail_ex+0x3c2/0x510 [ 55.045250][ T801] should_fail+0xf/0x20 [ 55.045260][ T801] should_fail_usercopy+0x1e/0x30 [ 55.045272][ T801] __kvm_read_guest_page+0x177/0x210 [ 55.045283][ T801] kvm_vcpu_read_guest_page+0x31c/0x400 [ 55.045294][ T801] kvm_fetch_guest_virt+0x146/0x190 [ 55.045309][ T801] ? __cfi_kvm_fetch_guest_virt+0x10/0x10 [ 55.045324][ T801] __do_insn_fetch_bytes+0x57a/0x740 [ 55.045335][ T801] ? x86_decode_insn+0x50b0/0x50b0 [ 55.045344][ T801] ? kvm_io_bus_read+0x295/0x5e0 [ 55.045357][ T801] ? __asan_memcpy+0x5a/0x80 [ 55.045367][ T801] x86_decode_insn+0x326/0x50b0 [ 55.045379][ T801] ? __cfi_x86_decode_insn+0x10/0x10 [ 55.045388][ T801] ? __kasan_check_write+0x18/0x20 [ 55.045398][ T801] ? vmx_read_guest_seg_ar+0x1c8/0x350 [ 55.045410][ T801] ? __asan_memset+0x39/0x50 [ 55.045419][ T801] ? init_decode_cache+0x7c/0x90 [ 55.045429][ T801] ? init_emulate_ctxt+0x403/0x540 [ 55.045441][ T801] ? kvm_inject_realmode_interrupt+0x2d0/0x2d0 [ 55.045453][ T801] ? __kasan_check_write+0x18/0x20 [ 55.045463][ T801] x86_decode_emulated_instruction+0x66/0x180 [ 55.045475][ T801] x86_emulate_instruction+0x2d7/0x19f0 [ 55.045488][ T801] handle_ud+0x199/0x330 [ 55.045498][ T801] ? __cfi_handle_ud+0x10/0x10 [ 55.045508][ T801] ? __cfi_rcu_note_context_switch+0x10/0x10 [ 55.045522][ T801] ? clear_bhb_loop+0x50/0xa0 [ 55.045536][ T801] ? clear_bhb_loop+0x50/0xa0 [ 55.045549][ T801] ? clear_bhb_loop+0x50/0xa0 [ 55.045562][ T801] ? clear_bhb_loop+0x50/0xa0 [ 55.045574][ T801] ? clear_bhb_loop+0x12/0xa0 [ 55.045587][ T801] handle_exception_nmi+0x194/0xe60 [ 55.045599][ T801] ? __cfi_handle_exception_nmi+0x10/0x10 [ 55.045609][ T801] vmx_handle_exit+0x1379/0x1c00 [ 55.045624][ T801] ? irqentry_exit+0x4a/0x60 [ 55.045633][ T801] ? kvm_deliver_exception_payload+0xd0/0x1e0 [ 55.045646][ T801] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 55.045661][ T801] vcpu_run+0x4c14/0x7830 [ 55.045679][ T801] ? signal_pending+0xc0/0xc0 [ 55.045692][ T801] ? complete_emulated_mmio+0x4ef/0x790 [ 55.045707][ T801] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 55.045721][ T801] ? _parse_integer_limit+0x195/0x1e0 [ 55.045732][ T801] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 55.045745][ T801] ? kstrtoull+0x13b/0x1e0 [ 55.045755][ T801] ? kstrtouint+0x78/0xf0 [ 55.045764][ T801] ? ioctl_has_perm+0x1bc/0x500 [ 55.045777][ T801] ? __asan_memcpy+0x5a/0x80 [ 55.045787][ T801] ? ioctl_has_perm+0x408/0x500 [ 55.045796][ T801] ? has_cap_mac_admin+0xd0/0xd0 [ 55.045806][ T801] ? __kasan_check_write+0x18/0x20 [ 55.045816][ T801] ? mutex_lock_killable+0x97/0x1d0 [ 55.045829][ T801] ? __cfi_mutex_lock_killable+0x10/0x10 [ 55.045843][ T801] ? proc_fail_nth_write+0x184/0x220 [ 55.045862][ T801] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 55.045885][ T801] kvm_vcpu_ioctl+0xa43/0x1000 [ 55.045901][ T801] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 55.045917][ T801] ? __cfi_vfs_write+0x10/0x10 [ 55.045931][ T801] ? __kasan_check_write+0x18/0x20 [ 55.045940][ T801] ? mutex_unlock+0x90/0x240 [ 55.045959][ T801] ? __cfi_mutex_unlock+0x10/0x10 [ 55.045973][ T801] ? bpf_lsm_file_ioctl+0xd/0x20 [ 55.045987][ T801] ? security_file_ioctl+0x3e/0x110 [ 55.046002][ T801] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 55.046011][ T801] __se_sys_ioctl+0x135/0x1b0 [ 55.046024][ T801] __x64_sys_ioctl+0x7f/0xa0 [ 55.046035][ T801] x64_sys_call+0x1878/0x2ee0 [ 55.046044][ T801] do_syscall_64+0x57/0xf0 [ 55.046055][ T801] ? clear_bhb_loop+0x50/0xa0 [ 55.046068][ T801] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.046081][ T801] RIP: 0033:0x7fd8edd9e0d9 [ 55.046092][ T801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.046104][ T801] RSP: 002b:00007fd8eecd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.046116][ T801] RAX: ffffffffffffffda RBX: 00007fd8ee025fa0 RCX: 00007fd8edd9e0d9 [ 55.046124][ T801] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 55.046131][ T801] RBP: 00007fd8eecd9090 R08: 0000000000000000 R09: 0000000000000000 [ 55.046138][ T801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.046144][ T801] R13: 00007fd8ee026038 R14: 00007fd8ee025fa0 R15: 00007ffda8d80d78 [ 55.046157][ T801] [ 55.181041][ T330] usb 4-1: Using ep0 maxpacket: 16 [ 55.185915][ T335] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 55.190119][ T330] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 55.196970][ T335] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 55.198478][ T330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.207905][ T335] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 55.209818][ T330] usb 4-1: config 0 has no interface number 0 [ 55.217195][ T335] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 55.222024][ T330] usb 4-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 55.225671][ T335] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 55.230296][ T330] usb 4-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.241278][ T335] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 55.248315][ T330] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 55.266051][ T335] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 55.278300][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.282631][ T335] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 55.288114][ T330] usb 4-1: Product: syz [ 55.296215][ T335] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 55.300981][ T330] usb 4-1: Manufacturer: syz [ 55.308466][ T335] usb 3-1: USB disconnect, device number 15 [ 55.318852][ T472] udevd[472]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.550997][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 55.553393][ T330] usb 4-1: SerialNumber: syz [ 55.706823][ T330] usb 4-1: config 0 descriptor?? [ 55.712597][ T330] asix 4-1:0.34: probe with driver asix failed with error -22 [ 55.723480][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.735421][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.746093][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 55.755152][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.764723][ T9] usb 1-1: config 0 descriptor?? [ 55.766280][ T330] usb 2-1: USB disconnect, device number 15 [ 55.785903][ T36] audit: type=1400 audit(2000000027.580:9243): avc: denied { setopt } for pid=805 comm="syz.1.180" lport=103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.816966][ T806] raw_sendmsg: syz.1.180 forgot to set AF_INET. Fix it! [ 55.816990][ T36] audit: type=1400 audit(2000000027.610:9244): avc: denied { write } for pid=805 comm="syz.1.180" lport=103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.921184][ T812] netlink: 'syz.1.183': attribute type 7 has an invalid length. [ 55.928855][ T812] netlink: 'syz.1.183': attribute type 5 has an invalid length. [ 55.936559][ T812] netlink: 17 bytes leftover after parsing attributes in process `syz.1.183'. [ 55.945748][ T812] netlink: 'syz.1.183': attribute type 7 has an invalid length. [ 55.953465][ T812] netlink: 'syz.1.183': attribute type 5 has an invalid length. [ 55.961172][ T812] netlink: 17 bytes leftover after parsing attributes in process `syz.1.183'. [ 55.970718][ T812] netlink: 'syz.1.183': attribute type 7 has an invalid length. [ 55.978401][ T812] netlink: 'syz.1.183': attribute type 5 has an invalid length. [ 55.986142][ T812] netlink: 17 bytes leftover after parsing attributes in process `syz.1.183'. [ 55.995244][ T812] netlink: 'syz.1.183': attribute type 7 has an invalid length. [ 56.002914][ T812] netlink: 'syz.1.183': attribute type 5 has an invalid length. [ 56.010540][ T812] netlink: 17 bytes leftover after parsing attributes in process `syz.1.183'. [ 56.019971][ T812] netlink: 'syz.1.183': attribute type 7 has an invalid length. [ 56.027645][ T812] netlink: 'syz.1.183': attribute type 5 has an invalid length. [ 56.035321][ T812] netlink: 17 bytes leftover after parsing attributes in process `syz.1.183'. [ 56.044339][ T812] netlink: 17 bytes leftover after parsing attributes in process `syz.1.183'. [ 56.053349][ T812] netlink: 17 bytes leftover after parsing attributes in process `syz.1.183'. [ 56.062372][ T812] netlink: 17 bytes leftover after parsing attributes in process `syz.1.183'. [ 56.071324][ T812] netlink: 17 bytes leftover after parsing attributes in process `syz.1.183'. [ 56.080241][ T812] netlink: 17 bytes leftover after parsing attributes in process `syz.1.183'. [ 56.108239][ T816] FAULT_INJECTION: forcing a failure. [ 56.108239][ T816] name failslab, interval 1, probability 0, space 0, times 0 [ 56.121030][ T816] CPU: 1 UID: 0 PID: 816 Comm: syz.2.184 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 56.121059][ T816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.121071][ T816] Call Trace: [ 56.121077][ T816] [ 56.121084][ T816] __dump_stack+0x21/0x30 [ 56.121110][ T816] dump_stack_lvl+0x140/0x1c0 [ 56.121134][ T816] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.121160][ T816] dump_stack+0x19/0x20 [ 56.121183][ T816] should_fail_ex+0x3c2/0x510 [ 56.121204][ T816] should_failslab+0xac/0x100 [ 56.121225][ T816] __kmalloc_cache_noprof+0x41/0x470 [ 56.121243][ T816] ? __percpu_counter_init_many+0x47e/0x570 [ 56.121262][ T816] ? io_uring_alloc_task_context+0x1a7/0x6b0 [ 56.121281][ T816] io_uring_alloc_task_context+0x1a7/0x6b0 [ 56.121300][ T816] ? alloc_file_pseudo+0x191/0x1f0 [ 56.121324][ T816] ? __cfi_io_uring_alloc_task_context+0x10/0x10 [ 56.121345][ T816] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 56.121372][ T816] __io_uring_add_tctx_node+0x324/0x590 [ 56.121395][ T816] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 56.121416][ T816] ? anon_inode_create_getfile+0x3f/0x50 [ 56.121440][ T816] io_uring_create+0xc78/0x13f0 [ 56.121460][ T816] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 56.121484][ T816] ? __kasan_check_write+0x18/0x20 [ 56.121503][ T816] ? __x64_sys_io_uring_setup+0x80/0x80 [ 56.121529][ T816] ? __kasan_check_read+0x15/0x20 [ 56.121548][ T816] __x64_sys_io_uring_setup+0x5f/0x80 [ 56.121573][ T816] x64_sys_call+0x22c0/0x2ee0 [ 56.121590][ T816] do_syscall_64+0x57/0xf0 [ 56.121611][ T816] ? clear_bhb_loop+0x50/0xa0 [ 56.121635][ T816] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.121656][ T816] RIP: 0033:0x7f10f399e0d9 [ 56.121670][ T816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.121683][ T816] RSP: 002b:00007f10f23f6ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 56.121703][ T816] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f10f399e0d9 [ 56.121717][ T816] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 56.121730][ T816] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 56.121744][ T816] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 56.121757][ T816] R13: 0000200000000b10 R14: 00007f10f23f6fd8 R15: 0000000000000000 [ 56.121774][ T816] [ 56.372824][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 56.379856][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 56.391523][ T9] usb 1-1: USB disconnect, device number 14 [ 56.404132][ T36] audit: type=1400 audit(2000000028.190:9245): avc: denied { append } for pid=823 comm="syz.2.187" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.731024][ T45] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 56.884087][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 56.895106][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 56.908369][ T45] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 56.917665][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.925378][ T834] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.934910][ T45] usb 2-1: config 0 descriptor?? [ 56.940378][ T829] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 57.393634][ T829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.402178][ T829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.412511][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.419754][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.426754][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.434164][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.441598][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.448561][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.455648][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.462585][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.469900][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.477176][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.484443][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.491629][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.498591][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.510271][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.517629][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.524816][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.531763][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.538593][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.545662][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.552847][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.559665][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.566821][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.573782][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.580583][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.587382][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.594169][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.601137][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.608033][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.614847][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.621701][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.628460][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.635252][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.642049][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.648835][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.655639][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.662431][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.669193][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.675994][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.682775][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.689566][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.696385][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.703216][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.709996][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.716865][ T45] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 57.724292][ T45] kone 0003:1E7D:2CED.0005: hidraw0: USB HID v80.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 57.738879][ T45] usb 2-1: USB disconnect, device number 16 [ 57.752292][ T9] usb 4-1: USB disconnect, device number 12 [ 57.761723][ T336] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 57.784506][ T866] FAULT_INJECTION: forcing a failure. [ 57.784506][ T866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.797600][ T866] CPU: 1 UID: 0 PID: 866 Comm: syz.3.202 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 57.797628][ T866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.797636][ T866] Call Trace: [ 57.797641][ T866] [ 57.797645][ T866] __dump_stack+0x21/0x30 [ 57.797664][ T866] dump_stack_lvl+0x140/0x1c0 [ 57.797678][ T866] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.797692][ T866] ? _parse_integer+0x2e/0x40 [ 57.797702][ T866] ? kstrtoull+0x13b/0x1e0 [ 57.797712][ T866] dump_stack+0x19/0x20 [ 57.797725][ T866] should_fail_ex+0x3c2/0x510 [ 57.797737][ T866] should_fail+0xf/0x20 [ 57.797747][ T866] should_fail_usercopy+0x1e/0x30 [ 57.797759][ T866] _copy_from_user+0x20/0xa0 [ 57.797771][ T866] ___sys_sendmsg+0x1c7/0x370 [ 57.797783][ T866] ? __sys_sendmsg+0x2a0/0x2a0 [ 57.797793][ T866] ? proc_fail_nth_write+0x184/0x220 [ 57.797807][ T866] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 57.797823][ T866] ? __fget_files+0x2bc/0x330 [ 57.797836][ T866] __x64_sys_sendmsg+0x206/0x2e0 [ 57.797846][ T866] ? fput+0x1a4/0x230 [ 57.797859][ T866] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 57.797869][ T866] ? ksys_write+0x1f3/0x260 [ 57.797880][ T866] ? __kasan_check_read+0x15/0x20 [ 57.797891][ T866] x64_sys_call+0x2a4c/0x2ee0 [ 57.797900][ T866] do_syscall_64+0x57/0xf0 [ 57.797912][ T866] ? clear_bhb_loop+0x50/0xa0 [ 57.797927][ T866] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.797939][ T866] RIP: 0033:0x7f071099e0d9 [ 57.797949][ T866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.797958][ T866] RSP: 002b:00007f0711894028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.797971][ T866] RAX: ffffffffffffffda RBX: 00007f0710c25fa0 RCX: 00007f071099e0d9 [ 57.797979][ T866] RDX: 0000000004000000 RSI: 0000200000001a40 RDI: 0000000000000003 [ 57.797986][ T866] RBP: 00007f0711894090 R08: 0000000000000000 R09: 0000000000000000 [ 57.797993][ T866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.797999][ T866] R13: 00007f0710c26038 R14: 00007f0710c25fa0 R15: 00007ffcfd978d78 [ 57.798009][ T866] [ 57.982285][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.031709][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.041899][ T336] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 58.050935][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.059636][ T336] usb 3-1: config 0 descriptor?? [ 58.182746][ T36] audit: type=1400 audit(2000000029.980:9246): avc: denied { create } for pid=875 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 58.331022][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 58.468940][ T336] usbhid 3-1:0.0: can't add hid device: -71 [ 58.476056][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 58.480991][ T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 58.483725][ T336] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 58.501000][ T336] usb 3-1: USB disconnect, device number 16 [ 58.506965][ T9] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 58.516337][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 58.527350][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.537105][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 58.546137][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.554663][ T9] usb 4-1: config 0 descriptor?? [ 58.640982][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 58.647113][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 58.655215][ T10] usb 2-1: config 0 has no interface number 0 [ 58.660989][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 58.662766][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 58.667494][ T45] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 58.676062][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.684239][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.691587][ T10] usb 2-1: Product: syz [ 58.701888][ T45] usb 1-1: config 0 has no interface number 0 [ 58.705853][ T10] usb 2-1: Manufacturer: syz [ 58.712138][ T45] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 58.716511][ T10] usb 2-1: SerialNumber: syz [ 58.726693][ T45] usb 1-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.731944][ T10] usb 2-1: config 0 descriptor?? [ 58.750583][ T45] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 58.751113][ T10] smsc95xx v2.0.0 [ 58.760209][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.764864][ T868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.773535][ T45] usb 1-1: Product: syz [ 58.780012][ T868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.785229][ T45] usb 1-1: Manufacturer: syz [ 58.796513][ T45] usb 1-1: SerialNumber: syz [ 58.797689][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 58.807952][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 58.807976][ T45] usb 1-1: config 0 descriptor?? [ 58.820735][ T880] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 58.828863][ T45] asix 1-1:0.34: probe with driver asix failed with error -22 [ 58.832103][ T9] usb 4-1: USB disconnect, device number 13 [ 59.164771][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 59.175556][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 59.291000][ T9] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 59.352919][ T36] audit: type=1400 audit(2000000031.150:9247): avc: denied { ioctl } for pid=895 comm="syz.3.216" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 59.442039][ T9] usb 3-1: config 0 has an invalid interface number: 15 but max is 0 [ 59.450235][ T9] usb 3-1: config 0 has no interface number 0 [ 59.456404][ T9] usb 3-1: config 0 interface 15 altsetting 8 endpoint 0x81 has invalid maxpacket 3840, setting to 64 [ 59.467580][ T9] usb 3-1: config 0 interface 15 has no altsetting 0 [ 59.474604][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 59.483743][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.492534][ T9] usb 3-1: config 0 descriptor?? [ 59.497819][ T893] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 59.505912][ T9] usbhid 3-1:0.15: fixing wrong optional hid class descriptors count [ 59.906143][ T9] hid (null): unknown global tag 0xc [ 59.912026][ T9] hid (null): unknown global tag 0xc [ 59.918180][ T9] kye 0003:0458:501B.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 59.928959][ T9] kye 0003:0458:501B.0006: unknown main item tag 0x0 [ 59.935718][ T9] kye 0003:0458:501B.0006: unknown main item tag 0x3 [ 59.942612][ T9] kye 0003:0458:501B.0006: unknown global tag 0xc [ 59.949045][ T9] kye 0003:0458:501B.0006: item 0 0 1 12 parsing failed [ 59.956258][ T9] kye 0003:0458:501B.0006: parse failed [ 59.961867][ T9] kye 0003:0458:501B.0006: probe with driver kye failed with error -22 [ 59.986191][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 59.996973][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 60.109041][ T45] usb 3-1: USB disconnect, device number 17 [ 60.490997][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 60.652152][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.663359][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.674150][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 60.683477][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.692308][ T36] audit: type=1400 audit(2000000032.490:9248): avc: denied { write } for pid=910 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.692382][ T10] usb 4-1: config 0 descriptor?? [ 61.121503][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 61.128900][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 61.138882][ T10] usb 4-1: USB disconnect, device number 14 [ 61.227121][ T913] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.12288.0), cmd(3) [ 61.237723][ T66] usb 1-1: USB disconnect, device number 15 [ 61.253159][ T330] usb 2-1: USB disconnect, device number 17 [ 61.264613][ T36] audit: type=1400 audit(2000000033.060:9249): avc: denied { wake_alarm } for pid=915 comm="syz.2.224" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.267061][ T916] rust_binder: Write failure EFAULT in pid:145 [ 61.295246][ T36] audit: type=1400 audit(2000000033.090:9250): avc: denied { append } for pid=914 comm="syz.0.223" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 61.703037][ T36] audit: type=1400 audit(2000000033.500:9251): avc: denied { connect } for pid=927 comm="syz.3.228" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.704230][ T928] fuse: Unknown parameter 'grp_id' [ 61.723641][ T36] audit: type=1400 audit(2000000033.500:9252): avc: denied { mounton } for pid=927 comm="syz.3.228" path="/63/file0" dev="tmpfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 62.113460][ T36] audit: type=1400 audit(2000000033.910:9253): avc: denied { bind } for pid=934 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.132993][ T36] audit: type=1400 audit(2000000033.910:9254): avc: denied { listen } for pid=934 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.152668][ T36] audit: type=1400 audit(2000000033.910:9255): avc: denied { write } for pid=934 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.172396][ T36] audit: type=1326 audit(2000000033.910:9256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=934 comm="syz.2.230" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10f399e0d9 code=0x0 [ 62.421006][ T66] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 62.450998][ T45] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 62.570984][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 62.577148][ T66] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 62.585329][ T66] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.595508][ T66] usb 1-1: config 0 has no interface number 0 [ 62.601740][ T66] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 62.610992][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 62.611788][ T66] usb 1-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.618005][ T45] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 62.631527][ T66] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 62.638820][ T45] usb 2-1: config 0 has no interface number 0 [ 62.647204][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.654384][ T45] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 62.661453][ T66] usb 1-1: Product: syz [ 62.670087][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.674299][ T66] usb 1-1: Manufacturer: syz [ 62.682709][ T45] usb 2-1: Product: syz [ 62.687202][ T66] usb 1-1: SerialNumber: syz [ 62.691152][ T45] usb 2-1: Manufacturer: syz [ 62.696445][ T66] usb 1-1: config 0 descriptor?? [ 62.700357][ T45] usb 2-1: SerialNumber: syz [ 62.707198][ T940] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 62.717504][ T45] usb 2-1: config 0 descriptor?? [ 62.721166][ T66] asix 1-1:0.34: probe with driver asix failed with error -22 [ 62.723546][ T45] smsc95xx v2.0.0 [ 63.124130][ T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 63.135012][ T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 63.212725][ T945] rust_binder: Write failure EFAULT in pid:164 [ 63.262926][ T954] syzkaller0: entered promiscuous mode [ 63.274811][ T954] syzkaller0: entered allmulticast mode [ 63.334863][ T958] incfs: Backing dir is not set, filesystem can't be mounted. [ 63.342521][ T958] incfs: mount failed -2 [ 63.500405][ T972] FAULT_INJECTION: forcing a failure. [ 63.500405][ T972] name failslab, interval 1, probability 0, space 0, times 0 [ 63.513084][ T972] CPU: 0 UID: 0 PID: 972 Comm: syz.3.244 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 63.513123][ T972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.513135][ T972] Call Trace: [ 63.513142][ T972] [ 63.513150][ T972] __dump_stack+0x21/0x30 [ 63.513180][ T972] dump_stack_lvl+0x140/0x1c0 [ 63.513201][ T972] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.513215][ T972] ? avc_has_perm+0x155/0x240 [ 63.513227][ T972] ? __cfi_avc_has_perm+0x10/0x10 [ 63.513238][ T972] dump_stack+0x19/0x20 [ 63.513251][ T972] should_fail_ex+0x3c2/0x510 [ 63.513268][ T972] should_failslab+0xac/0x100 [ 63.513292][ T972] __kmalloc_cache_noprof+0x41/0x470 [ 63.513312][ T972] ? vhost_task_create+0x12c/0x3f0 [ 63.513333][ T972] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 63.513350][ T972] vhost_task_create+0x12c/0x3f0 [ 63.513361][ T972] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 63.513373][ T972] ? __cfi_vhost_task_create+0x10/0x10 [ 63.513384][ T972] ? __cfi_vhost_task_fn+0x10/0x10 [ 63.513394][ T972] ? __kasan_check_write+0x18/0x20 [ 63.513405][ T972] ? mutex_lock+0x97/0x1d0 [ 63.513429][ T972] ? __cfi_mutex_lock+0x10/0x10 [ 63.513449][ T972] ? kernel_text_address+0xa9/0xe0 [ 63.513476][ T972] kvm_mmu_post_init_vm+0x161/0x300 [ 63.513502][ T972] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 63.513520][ T972] ? _parse_integer_limit+0x195/0x1e0 [ 63.513531][ T972] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 63.513544][ T972] ? kstrtoull+0x13b/0x1e0 [ 63.513556][ T972] ? kstrtouint+0x78/0xf0 [ 63.513574][ T972] ? ioctl_has_perm+0x1bc/0x500 [ 63.513592][ T972] ? __asan_memcpy+0x5a/0x80 [ 63.513611][ T972] ? ioctl_has_perm+0x408/0x500 [ 63.513629][ T972] ? has_cap_mac_admin+0xd0/0xd0 [ 63.513640][ T972] ? __kasan_check_write+0x18/0x20 [ 63.513650][ T972] ? mutex_lock_killable+0x97/0x1d0 [ 63.513664][ T972] ? __cfi_mutex_lock_killable+0x10/0x10 [ 63.513677][ T972] ? proc_fail_nth_write+0x184/0x220 [ 63.513693][ T972] kvm_vcpu_ioctl+0xa43/0x1000 [ 63.513708][ T972] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 63.513727][ T972] ? __cfi_vfs_write+0x10/0x10 [ 63.513747][ T972] ? __kasan_check_write+0x18/0x20 [ 63.513765][ T972] ? mutex_unlock+0x90/0x240 [ 63.513783][ T972] ? __cfi_mutex_unlock+0x10/0x10 [ 63.513797][ T972] ? bpf_lsm_file_ioctl+0xd/0x20 [ 63.513811][ T972] ? security_file_ioctl+0x3e/0x110 [ 63.513826][ T972] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 63.513835][ T972] __se_sys_ioctl+0x135/0x1b0 [ 63.513855][ T972] __x64_sys_ioctl+0x7f/0xa0 [ 63.513877][ T972] x64_sys_call+0x1878/0x2ee0 [ 63.513894][ T972] do_syscall_64+0x57/0xf0 [ 63.513916][ T972] ? clear_bhb_loop+0x50/0xa0 [ 63.513931][ T972] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.513943][ T972] RIP: 0033:0x7f071099e0d9 [ 63.513954][ T972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.513963][ T972] RSP: 002b:00007f0711894028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.513975][ T972] RAX: ffffffffffffffda RBX: 00007f0710c25fa0 RCX: 00007f071099e0d9 [ 63.513984][ T972] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 63.513996][ T972] RBP: 00007f0711894090 R08: 0000000000000000 R09: 0000000000000000 [ 63.514008][ T972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.514019][ T972] R13: 00007f0710c26038 R14: 00007f0710c25fa0 R15: 00007ffcfd978d78 [ 63.514035][ T972] [ 63.877641][ T975] random: crng reseeded on system resumption [ 63.940795][ T981] incfs: Backing dir is not set, filesystem can't be mounted. [ 63.948013][ T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 63.948327][ T981] incfs: mount failed -2 [ 63.959287][ T45] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 64.098433][ T994] validate_nla: 57 callbacks suppressed [ 64.098451][ T994] netlink: 'syz.2.252': attribute type 58 has an invalid length. [ 64.113116][ T994] netlink: 'syz.2.252': attribute type 58 has an invalid length. [ 64.150227][ T998] Invalid argument reading file caps for ./file0 [ 64.370993][ T66] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 64.521021][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 64.527254][ T66] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 64.535460][ T66] usb 4-1: config 1 has no interface number 0 [ 64.541563][ T66] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 64.551467][ T66] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 64.561461][ T66] usb 4-1: config 1 interface 105 has no altsetting 0 [ 64.569654][ T66] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 64.578751][ T66] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 64.586851][ T66] usb 4-1: Product: syz [ 64.591025][ T66] usb 4-1: Manufacturer: syz [ 64.595613][ T66] usb 4-1: SerialNumber: syz [ 64.601302][ T999] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 64.608591][ T999] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 64.717855][ T1006] incfs: Backing dir is not set, filesystem can't be mounted. [ 64.725415][ T1006] incfs: mount failed -2 [ 64.752477][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 64.752494][ T36] audit: type=1400 audit(2000000036.550:9269): avc: denied { setattr } for pid=1009 comm="syz.2.258" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 64.782539][ T36] audit: type=1400 audit(2000000036.560:9270): avc: denied { read } for pid=1011 comm="syz.2.259" name="nofua" dev="configfs" ino=12252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 64.805359][ T36] audit: type=1400 audit(2000000036.580:9271): avc: denied { write } for pid=1013 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.010736][ T36] audit: type=1400 audit(2000000036.800:9272): avc: denied { getopt } for pid=1021 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.021155][ T1022] ======================================================= [ 65.021155][ T1022] WARNING: The mand mount option has been deprecated and [ 65.021155][ T1022] and is ignored by this kernel. Remove the mand [ 65.021155][ T1022] option from the mount to silence this warning. [ 65.021155][ T1022] ======================================================= [ 65.031613][ T999] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 65.066192][ T1022] bpf: Bad value for 'gid' [ 65.073897][ T999] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 65.085642][ T36] audit: type=1400 audit(2000000036.870:9273): avc: denied { read } for pid=1021 comm="syz.2.264" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.190632][ T10] usb 1-1: USB disconnect, device number 16 [ 65.224823][ T9] usb 2-1: USB disconnect, device number 18 [ 65.311052][ T45] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 65.472004][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.488606][ T45] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 65.497742][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.505756][ T45] usb 3-1: Product: syz [ 65.509904][ T45] usb 3-1: Manufacturer: syz [ 65.514502][ T45] usb 3-1: SerialNumber: syz [ 65.521565][ T45] pl2303 3-1:1.0: required endpoints missing [ 65.581004][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 65.631002][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 65.722000][ T45] usb 3-1: USB disconnect, device number 18 [ 65.732031][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.743015][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.752765][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 65.761952][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.770534][ T10] usb 1-1: config 0 descriptor?? [ 65.781988][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.792997][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.802748][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.815701][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.824805][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.833435][ T9] usb 2-1: config 0 descriptor?? [ 65.976811][ T1033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.985402][ T1033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.993508][ T1033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.002041][ T1033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.010061][ T1033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.018706][ T1033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.026879][ T1033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.035390][ T1033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.044275][ T1033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.052891][ T1033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.073023][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 66.078974][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 66.093039][ T10] usb 1-1: USB disconnect, device number 17 [ 66.456308][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 66.463103][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 66.473294][ T9] usb 2-1: USB disconnect, device number 19 [ 66.491009][ T335] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 66.511041][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 66.640990][ T335] usb 3-1: Using ep0 maxpacket: 16 [ 66.647184][ T335] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 66.655318][ T335] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.665421][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 66.670558][ T335] usb 3-1: config 0 has no interface number 0 [ 66.676960][ T335] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 66.687093][ T335] usb 3-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.700598][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 66.708771][ T10] usb 1-1: config 0 has no interface number 0 [ 66.715642][ T335] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 66.724784][ T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.732858][ T335] usb 3-1: Product: syz [ 66.737210][ T335] usb 3-1: Manufacturer: syz [ 66.741846][ T335] usb 3-1: SerialNumber: syz [ 66.746494][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 66.755843][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.764117][ T335] usb 3-1: config 0 descriptor?? [ 66.769151][ T10] usb 1-1: Product: syz [ 66.773348][ T10] usb 1-1: Manufacturer: syz [ 66.773393][ T1045] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 66.777952][ T10] usb 1-1: SerialNumber: syz [ 66.790454][ T335] asix 3-1:0.34: probe with driver asix failed with error -22 [ 66.798586][ T10] usb 1-1: config 0 descriptor?? [ 66.806675][ T10] smsc95xx v2.0.0 [ 67.103191][ T66] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 67.115459][ T66] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 67.127654][ T66] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 36:05:a9:22:99:59 [ 67.143031][ T66] usb 4-1: USB disconnect, device number 15 [ 67.149245][ T66] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 67.160346][ T36] audit: type=1400 audit(2000000038.940:9274): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 67.181438][ T36] audit: type=1400 audit(2000000038.940:9275): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.206513][ T36] audit: type=1400 audit(2000000038.940:9276): avc: denied { read } for pid=150 comm="dhcpcd" name="n15" dev="tmpfs" ino=1976 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.235185][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 67.254195][ T66] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 67.270264][ T66] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 67.279698][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 67.289816][ T36] audit: type=1400 audit(2000000038.940:9277): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1976 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.312884][ T66] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 67.323803][ T36] audit: type=1400 audit(2000000038.940:9278): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1976 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.561010][ T45] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 67.712105][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.722264][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 67.733394][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 67.744323][ T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 67.755220][ T45] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.769537][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.778645][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.786900][ T45] usb 2-1: Product: syz [ 67.791816][ T45] usb 2-1: Manufacturer: syz [ 67.796421][ T45] usb 2-1: SerialNumber: syz [ 67.803250][ T1081] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 67.811190][ T45] cdc_mbim 2-1:1.0: skipping garbage [ 68.011175][ T1081] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 68.134002][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 68.144887][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 68.354115][ T1108] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 68.361840][ T1108] SELinux: failed to load policy [ 68.377220][ T1110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=1110 comm=syz.3.288 [ 68.412877][ T1114] __nla_validate_parse: 27 callbacks suppressed [ 68.412897][ T1114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.290'. [ 68.630864][ T1081] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 68.741006][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 68.871865][ T45] cdc_mbim 2-1:1.0: bind() failure [ 68.877934][ T45] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 68.886209][ T45] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 68.892076][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.895683][ T45] usb 2-1: USB disconnect, device number 20 [ 68.907095][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.921741][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 68.930824][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.939499][ T10] usb 4-1: config 0 descriptor?? [ 69.245680][ T66] usb 3-1: USB disconnect, device number 19 [ 69.296440][ T1124] FAULT_INJECTION: forcing a failure. [ 69.296440][ T1124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.310098][ T1124] CPU: 0 UID: 0 PID: 1124 Comm: syz.2.294 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 69.310120][ T1124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.310128][ T1124] Call Trace: [ 69.310134][ T1124] [ 69.310139][ T1124] __dump_stack+0x21/0x30 [ 69.310157][ T1124] dump_stack_lvl+0x140/0x1c0 [ 69.310171][ T1124] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.310185][ T1124] ? check_stack_object+0x138/0x150 [ 69.310200][ T1124] dump_stack+0x19/0x20 [ 69.310213][ T1124] should_fail_ex+0x3c2/0x510 [ 69.310224][ T1124] should_fail+0xf/0x20 [ 69.310234][ T1124] should_fail_usercopy+0x1e/0x30 [ 69.310246][ T1124] _copy_to_user+0x24/0xa0 [ 69.310260][ T1124] simple_read_from_buffer+0xed/0x160 [ 69.310275][ T1124] proc_fail_nth_read+0x1aa/0x220 [ 69.310289][ T1124] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 69.310303][ T1124] ? bpf_lsm_file_permission+0xd/0x20 [ 69.310317][ T1124] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 69.310330][ T1124] vfs_read+0x288/0xc70 [ 69.310341][ T1124] ? __cfi_vfs_read+0x10/0x10 [ 69.310350][ T1124] ? __kasan_check_write+0x18/0x20 [ 69.310361][ T1124] ? mutex_lock+0x97/0x1d0 [ 69.310374][ T1124] ? __cfi_mutex_lock+0x10/0x10 [ 69.310388][ T1124] ksys_read+0x145/0x260 [ 69.310398][ T1124] ? __cfi_ksys_read+0x10/0x10 [ 69.310408][ T1124] ? __kasan_check_read+0x15/0x20 [ 69.310418][ T1124] __x64_sys_read+0x7f/0x90 [ 69.310428][ T1124] x64_sys_call+0x2638/0x2ee0 [ 69.310437][ T1124] do_syscall_64+0x57/0xf0 [ 69.310448][ T1124] ? clear_bhb_loop+0x50/0xa0 [ 69.310462][ T1124] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.310475][ T1124] RIP: 0033:0x7f10f395e90e [ 69.310485][ T1124] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 69.310494][ T1124] RSP: 002b:00007f10f23f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 69.310506][ T1124] RAX: ffffffffffffffda RBX: 00007f10f23f76c0 RCX: 00007f10f395e90e [ 69.310514][ T1124] RDX: 000000000000000f RSI: 00007f10f23f70a0 RDI: 0000000000000005 [ 69.310521][ T1124] RBP: 00007f10f23f7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.310528][ T1124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.310534][ T1124] R13: 00007f10f3c26038 R14: 00007f10f3c25fa0 R15: 00007ffc03b9df18 [ 69.310542][ T1124] [ 69.551768][ T335] usb 1-1: USB disconnect, device number 18 [ 69.573121][ T10] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 69.581990][ T1130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 69.592993][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0007/input/input8 [ 69.663664][ T10] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 69.781487][ T10] usb 4-1: USB disconnect, device number 16 [ 69.931019][ T335] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 69.931019][ T330] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 70.021022][ T45] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 70.071014][ T330] usb 2-1: device descriptor read/64, error -71 [ 70.091992][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.102935][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.112688][ T335] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 70.121830][ T335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.130347][ T335] usb 1-1: config 0 descriptor?? [ 70.172060][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.183081][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.192931][ T45] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 70.202050][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.211419][ T45] usb 3-1: config 0 descriptor?? [ 70.305891][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 70.305909][ T36] audit: type=1400 audit(2000000042.100:9292): avc: denied { ioctl } for pid=1150 comm="syz.3.301" path="socket:[13544]" dev="sockfs" ino=13544 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.341028][ T330] usb 2-1: device descriptor read/64, error -71 [ 70.539177][ T335] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 70.546026][ T335] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 70.552877][ T335] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 70.559660][ T335] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 70.566455][ T335] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 70.573250][ T335] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 70.580025][ T335] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 70.581059][ T330] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 70.587647][ T335] pyra 0003:1E7D:2CF6.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 70.596894][ T31] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 70.741051][ T330] usb 2-1: device descriptor read/64, error -71 [ 70.760982][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 70.767187][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.778118][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.787915][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 70.796978][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.805677][ T31] usb 4-1: config 0 descriptor?? [ 70.811657][ T31] hub 4-1:0.0: USB hub found [ 70.820260][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 70.826256][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 70.834972][ T45] usb 3-1: USB disconnect, device number 20 [ 70.939148][ T1133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.947759][ T1133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.981005][ T330] usb 2-1: device descriptor read/64, error -71 [ 71.013890][ T31] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 71.022977][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 71.028909][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 71.051830][ T31] usb 4-1: USB disconnect, device number 17 [ 71.091151][ T330] usb usb2-port1: attempt power cycle [ 71.212707][ T335] pyra 0003:1E7D:2CF6.0008: couldn't init struct pyra_device [ 71.220144][ T335] pyra 0003:1E7D:2CF6.0008: couldn't install mouse [ 71.231771][ T335] pyra 0003:1E7D:2CF6.0008: probe with driver pyra failed with error -5 [ 71.441040][ T330] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 71.462682][ T45] usb 1-1: USB disconnect, device number 19 [ 71.469341][ T330] usb 2-1: device descriptor read/8, error -71 [ 71.576031][ T335] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 71.617555][ T330] usb 2-1: device descriptor read/8, error -71 [ 71.628860][ T36] audit: type=1400 audit(2000000043.420:9293): avc: denied { connect } for pid=1174 comm="syz.3.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.732087][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.742996][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.752747][ T335] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 71.761953][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.770716][ T335] usb 3-1: config 0 descriptor?? [ 71.880998][ T330] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 71.901990][ T330] usb 2-1: device descriptor read/8, error -71 [ 72.031994][ T330] usb 2-1: device descriptor read/8, error -71 [ 72.051016][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 72.151076][ T330] usb usb2-port1: unable to enumerate USB device [ 72.179613][ T335] usbhid 3-1:0.0: can't add hid device: -71 [ 72.185597][ T335] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 72.194507][ T335] usb 3-1: USB disconnect, device number 21 [ 72.210989][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 72.217161][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 72.225495][ T10] usb 4-1: config 0 has no interface number 0 [ 72.233014][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 72.242091][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.250070][ T10] usb 4-1: Product: syz [ 72.254524][ T10] usb 4-1: Manufacturer: syz [ 72.259334][ T10] usb 4-1: SerialNumber: syz [ 72.264817][ T10] usb 4-1: config 0 descriptor?? [ 72.271145][ T10] smsc95xx v2.0.0 [ 72.501396][ T330] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 72.650992][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 72.657236][ T330] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 72.665544][ T330] usb 1-1: config 0 has no interface number 0 [ 72.671672][ T330] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 72.671853][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 72.681828][ T330] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 72.693195][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 72.717683][ T330] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 72.727664][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.735823][ T330] usb 1-1: Product: syz [ 72.740872][ T330] usb 1-1: Manufacturer: syz [ 72.745585][ T330] usb 1-1: SerialNumber: syz [ 72.750274][ T1204] netlink: 'syz.1.320': attribute type 4 has an invalid length. [ 72.754103][ T330] usb 1-1: config 0 descriptor?? [ 72.758136][ T1204] netlink: 17 bytes leftover after parsing attributes in process `syz.1.320'. [ 72.763751][ T1200] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 72.779467][ T1200] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 72.795240][ T1206] binfmt_misc: register: failed to install interpreter file ./file0 [ 72.908041][ T1216] netlink: 'syz.2.326': attribute type 1 has an invalid length. [ 73.007192][ T1200] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 73.014409][ T1200] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 73.050997][ T45] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 73.161010][ T66] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 73.200985][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 73.207198][ T45] usb 2-1: config 32 has an invalid interface number: 64 but max is 0 [ 73.215563][ T45] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 73.225776][ T45] usb 2-1: config 32 has no interface number 0 [ 73.232050][ T330] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 73.242084][ T45] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 73.251173][ T330] asix 1-1:0.34: probe with driver asix failed with error -32 [ 73.260366][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.311938][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.322894][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.332819][ T66] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 73.341943][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.350563][ T66] usb 3-1: config 0 descriptor?? [ 73.471251][ T335] usb 2-1: USB disconnect, device number 25 [ 73.758657][ T66] usbhid 3-1:0.0: can't add hid device: -71 [ 73.764667][ T66] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 73.773407][ T66] usb 3-1: USB disconnect, device number 22 [ 74.031591][ T1227] FAULT_INJECTION: forcing a failure. [ 74.031591][ T1227] name failslab, interval 1, probability 0, space 0, times 0 [ 74.044283][ T1227] CPU: 1 UID: 0 PID: 1227 Comm: syz.1.330 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 74.044317][ T1227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.044330][ T1227] Call Trace: [ 74.044337][ T1227] [ 74.044343][ T1227] __dump_stack+0x21/0x30 [ 74.044362][ T1227] dump_stack_lvl+0x140/0x1c0 [ 74.044378][ T1227] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.044403][ T1227] dump_stack+0x19/0x20 [ 74.044428][ T1227] should_fail_ex+0x3c2/0x510 [ 74.044449][ T1227] should_failslab+0xac/0x100 [ 74.044466][ T1227] __kmalloc_cache_node_noprof+0x46/0x430 [ 74.044477][ T1227] ? __get_vm_area_node+0x150/0x390 [ 74.044492][ T1227] ? kasan_save_alloc_info+0x3a/0x50 [ 74.044513][ T1227] ? __kasan_slab_alloc+0x73/0x90 [ 74.044534][ T1227] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 74.044551][ T1227] __get_vm_area_node+0x150/0x390 [ 74.044576][ T1227] __vmalloc_node_range_noprof+0x340/0x1300 [ 74.044603][ T1227] ? copy_process+0x57c/0x3350 [ 74.044624][ T1227] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 74.044644][ T1227] ? kasan_save_alloc_info+0x3a/0x50 [ 74.044662][ T1227] ? __kasan_slab_alloc+0x73/0x90 [ 74.044683][ T1227] ? arch_dup_task_struct+0x5b/0xe0 [ 74.044715][ T1227] ? __asan_memcpy+0x5a/0x80 [ 74.044733][ T1227] dup_task_struct+0x5d6/0xd80 [ 74.044746][ T1227] ? copy_process+0x57c/0x3350 [ 74.044757][ T1227] ? _raw_spin_lock_irq+0x93/0x120 [ 74.044770][ T1227] ? copy_process+0x3350/0x3350 [ 74.044786][ T1227] ? __kasan_check_write+0x18/0x20 [ 74.044796][ T1227] copy_process+0x57c/0x3350 [ 74.044818][ T1227] ? kasan_save_alloc_info+0x3a/0x50 [ 74.044845][ T1227] ? __cfi_copy_process+0x10/0x10 [ 74.044871][ T1227] ? __kmalloc_cache_noprof+0x23c/0x470 [ 74.044886][ T1227] ? __kasan_check_write+0x18/0x20 [ 74.044896][ T1227] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 74.044909][ T1227] vhost_task_create+0x1f7/0x3f0 [ 74.044919][ T1227] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 74.044931][ T1227] ? __cfi_vhost_task_create+0x10/0x10 [ 74.044942][ T1227] ? __cfi_vhost_task_fn+0x10/0x10 [ 74.044960][ T1227] ? __kasan_check_write+0x18/0x20 [ 74.044979][ T1227] ? mutex_lock+0x97/0x1d0 [ 74.045003][ T1227] ? __cfi_mutex_lock+0x10/0x10 [ 74.045025][ T1227] ? kernel_text_address+0xa9/0xe0 [ 74.045039][ T1227] kvm_mmu_post_init_vm+0x161/0x300 [ 74.045053][ T1227] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 74.045067][ T1227] ? _parse_integer_limit+0x195/0x1e0 [ 74.045078][ T1227] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 74.045095][ T1227] ? kstrtoull+0x13b/0x1e0 [ 74.045114][ T1227] ? kstrtouint+0x78/0xf0 [ 74.045132][ T1227] ? ioctl_has_perm+0x1bc/0x500 [ 74.045150][ T1227] ? __asan_memcpy+0x5a/0x80 [ 74.045167][ T1227] ? ioctl_has_perm+0x408/0x500 [ 74.045176][ T1227] ? has_cap_mac_admin+0xd0/0xd0 [ 74.045186][ T1227] ? __kasan_check_write+0x18/0x20 [ 74.045195][ T1227] ? mutex_lock_killable+0x97/0x1d0 [ 74.045208][ T1227] ? __cfi_mutex_lock_killable+0x10/0x10 [ 74.045222][ T1227] ? proc_fail_nth_write+0x184/0x220 [ 74.045243][ T1227] kvm_vcpu_ioctl+0xa43/0x1000 [ 74.045263][ T1227] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 74.045281][ T1227] ? __cfi_vfs_write+0x10/0x10 [ 74.045300][ T1227] ? __kasan_check_write+0x18/0x20 [ 74.045313][ T1227] ? mutex_unlock+0x90/0x240 [ 74.045326][ T1227] ? __cfi_mutex_unlock+0x10/0x10 [ 74.045340][ T1227] ? bpf_lsm_file_ioctl+0xd/0x20 [ 74.045353][ T1227] ? security_file_ioctl+0x3e/0x110 [ 74.045368][ T1227] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 74.045382][ T1227] __se_sys_ioctl+0x135/0x1b0 [ 74.045405][ T1227] __x64_sys_ioctl+0x7f/0xa0 [ 74.045426][ T1227] x64_sys_call+0x1878/0x2ee0 [ 74.045444][ T1227] do_syscall_64+0x57/0xf0 [ 74.045458][ T1227] ? clear_bhb_loop+0x50/0xa0 [ 74.045474][ T1227] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.045487][ T1227] RIP: 0033:0x7fc5f039e0d9 [ 74.045497][ T1227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.045506][ T1227] RSP: 002b:00007fc5f12c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.045521][ T1227] RAX: ffffffffffffffda RBX: 00007fc5f0625fa0 RCX: 00007fc5f039e0d9 [ 74.045535][ T1227] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 74.045547][ T1227] RBP: 00007fc5f12c6090 R08: 0000000000000000 R09: 0000000000000000 [ 74.045560][ T1227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.045572][ T1227] R13: 00007fc5f0626038 R14: 00007fc5f0625fa0 R15: 00007ffd4eb27e08 [ 74.045588][ T1227] [ 74.045598][ T1227] syz.1.330: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 74.334811][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 74.352840][ T1227] ,cpuset= [ 74.358720][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 74.362283][ T1227] syz1 [ 74.374831][ T10] usb 4-1: USB disconnect, device number 18 [ 74.378521][ T1227] ,mems_allowed=0 [ 74.540066][ T1227] CPU: 0 UID: 0 PID: 1227 Comm: syz.1.330 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 74.540092][ T1227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.540102][ T1227] Call Trace: [ 74.540109][ T1227] [ 74.540116][ T1227] __dump_stack+0x21/0x30 [ 74.540136][ T1227] dump_stack_lvl+0x140/0x1c0 [ 74.540150][ T1227] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.540171][ T1227] dump_stack+0x19/0x20 [ 74.540183][ T1227] warn_alloc+0x1e7/0x2c0 [ 74.540197][ T1227] ? __kasan_kmalloc+0x28/0xb0 [ 74.540210][ T1227] ? __cfi_warn_alloc+0x10/0x10 [ 74.540222][ T1227] ? __get_vm_area_node+0x150/0x390 [ 74.540237][ T1227] ? kasan_save_alloc_info+0x3a/0x50 [ 74.540251][ T1227] ? __get_vm_area_node+0x382/0x390 [ 74.540271][ T1227] __vmalloc_node_range_noprof+0x365/0x1300 [ 74.540288][ T1227] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 74.540303][ T1227] ? kasan_save_alloc_info+0x3a/0x50 [ 74.540317][ T1227] ? __kasan_slab_alloc+0x73/0x90 [ 74.540329][ T1227] ? arch_dup_task_struct+0x5b/0xe0 [ 74.540343][ T1227] ? __asan_memcpy+0x5a/0x80 [ 74.540354][ T1227] dup_task_struct+0x5d6/0xd80 [ 74.540371][ T1227] ? copy_process+0x57c/0x3350 [ 74.540382][ T1227] ? _raw_spin_lock_irq+0x93/0x120 [ 74.540395][ T1227] ? copy_process+0x3350/0x3350 [ 74.540406][ T1227] ? __kasan_check_write+0x18/0x20 [ 74.540417][ T1227] copy_process+0x57c/0x3350 [ 74.540430][ T1227] ? kasan_save_alloc_info+0x3a/0x50 [ 74.540444][ T1227] ? __cfi_copy_process+0x10/0x10 [ 74.540456][ T1227] ? __kmalloc_cache_noprof+0x23c/0x470 [ 74.540467][ T1227] ? __kasan_check_write+0x18/0x20 [ 74.540477][ T1227] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 74.540489][ T1227] vhost_task_create+0x1f7/0x3f0 [ 74.540500][ T1227] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 74.540512][ T1227] ? __cfi_vhost_task_create+0x10/0x10 [ 74.540523][ T1227] ? __cfi_vhost_task_fn+0x10/0x10 [ 74.540533][ T1227] ? __kasan_check_write+0x18/0x20 [ 74.540543][ T1227] ? mutex_lock+0x97/0x1d0 [ 74.540556][ T1227] ? __cfi_mutex_lock+0x10/0x10 [ 74.540569][ T1227] ? kernel_text_address+0xa9/0xe0 [ 74.540583][ T1227] kvm_mmu_post_init_vm+0x161/0x300 [ 74.540597][ T1227] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 74.540612][ T1227] ? _parse_integer_limit+0x195/0x1e0 [ 74.540628][ T1227] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 74.540642][ T1227] ? kstrtoull+0x13b/0x1e0 [ 74.540651][ T1227] ? kstrtouint+0x78/0xf0 [ 74.540661][ T1227] ? ioctl_has_perm+0x1bc/0x500 [ 74.540671][ T1227] ? __asan_memcpy+0x5a/0x80 [ 74.540681][ T1227] ? ioctl_has_perm+0x408/0x500 [ 74.540690][ T1227] ? has_cap_mac_admin+0xd0/0xd0 [ 74.540699][ T1227] ? __kasan_check_write+0x18/0x20 [ 74.540709][ T1227] ? mutex_lock_killable+0x97/0x1d0 [ 74.540722][ T1227] ? __cfi_mutex_lock_killable+0x10/0x10 [ 74.540736][ T1227] ? proc_fail_nth_write+0x184/0x220 [ 74.540751][ T1227] kvm_vcpu_ioctl+0xa43/0x1000 [ 74.540762][ T1227] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 74.540772][ T1227] ? __cfi_vfs_write+0x10/0x10 [ 74.540782][ T1227] ? __kasan_check_write+0x18/0x20 [ 74.540792][ T1227] ? mutex_unlock+0x90/0x240 [ 74.540805][ T1227] ? __cfi_mutex_unlock+0x10/0x10 [ 74.540819][ T1227] ? bpf_lsm_file_ioctl+0xd/0x20 [ 74.540832][ T1227] ? security_file_ioctl+0x3e/0x110 [ 74.540847][ T1227] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 74.540857][ T1227] __se_sys_ioctl+0x135/0x1b0 [ 74.540869][ T1227] __x64_sys_ioctl+0x7f/0xa0 [ 74.540880][ T1227] x64_sys_call+0x1878/0x2ee0 [ 74.540889][ T1227] do_syscall_64+0x57/0xf0 [ 74.540901][ T1227] ? clear_bhb_loop+0x50/0xa0 [ 74.540916][ T1227] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.540934][ T1227] RIP: 0033:0x7fc5f039e0d9 [ 74.540949][ T1227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.540963][ T1227] RSP: 002b:00007fc5f12c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.540981][ T1227] RAX: ffffffffffffffda RBX: 00007fc5f0625fa0 RCX: 00007fc5f039e0d9 [ 74.540995][ T1227] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 74.541006][ T1227] RBP: 00007fc5f12c6090 R08: 0000000000000000 R09: 0000000000000000 [ 74.541016][ T1227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.541026][ T1227] R13: 00007fc5f0626038 R14: 00007fc5f0625fa0 R15: 00007ffd4eb27e08 [ 74.541040][ T1227] [ 74.572847][ T36] audit: type=1400 audit(2000000046.370:9294): avc: denied { search } for pid=1232 comm="syz.2.332" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.577816][ T1227] Mem-Info: [ 74.578600][ T36] audit: type=1400 audit(2000000046.370:9295): avc: denied { append } for pid=1232 comm="syz.2.332" name="uprobe_events" dev="tracefs" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 74.583465][ T1227] active_anon:27852 inactive_anon:0 isolated_anon:0 [ 74.583465][ T1227] active_file:18598 inactive_file:2362 isolated_file:0 [ 74.583465][ T1227] unevictable:0 dirty:155 writeback:0 [ 74.583465][ T1227] slab_reclaimable:4907 slab_unreclaimable:71860 [ 74.583465][ T1227] mapped:25841 shmem:20645 pagetables:1110 [ 74.583465][ T1227] sec_pagetables:0 bounce:0 [ 74.583465][ T1227] kernel_misc_reclaimable:0 [ 74.583465][ T1227] free:1502873 free_pcp:1821 free_cma:0 [ 75.061618][ T1227] Node 0 active_anon:111460kB inactive_anon:0kB active_file:74392kB inactive_file:9448kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:111588kB dirty:620kB writeback:0kB shmem:82588kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4736kB pagetables:4896kB sec_pagetables:0kB all_unreclaimable? no [ 75.094797][ T1227] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963408kB mlocked:0kB bounce:0kB free_pcp:5244kB local_pcp:5176kB free_cma:0kB [ 75.127683][ T1227] lowmem_reserve[]: 0 3921 3921 [ 75.132653][ T1227] Normal free:3051040kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:111360kB inactive_anon:0kB active_file:74392kB inactive_file:9448kB unevictable:0kB writepending:620kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:4024kB local_pcp:1364kB free_cma:0kB [ 75.164049][ T1227] lowmem_reserve[]: 0 0 0 [ 75.168468][ T1227] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 75.184007][ T1227] Normal: 1649*4kB (UME) 171*8kB (UME) 154*16kB (UME) 170*32kB (UME) 187*64kB (UME) 158*128kB (UME) 37*256kB (UME) 20*512kB (UME) 11*1024kB (UM) 6*2048kB (UME) 723*4096kB (UM) = 3052732kB [ 75.202677][ T1227] 41603 total pagecache pages [ 75.207394][ T1227] 0 pages in swap cache [ 75.211610][ T1227] Free swap = 124728kB [ 75.215955][ T1227] Total swap = 124996kB [ 75.220160][ T1227] 2097051 pages RAM [ 75.224052][ T1227] 0 pages HighMem/MovableOnly [ 75.231024][ T1227] 352233 pages reserved [ 75.235415][ T1227] 0 pages cma reserved [ 75.242400][ T1227] Memory allocations: [ 75.251054][ T1227] 0 B 0 init/main.c:1477 func:do_initcalls [ 75.258286][ T1227] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 75.270669][ T1227] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 75.279598][ T330] usb 1-1: USB disconnect, device number 20 [ 75.279702][ T1227] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 75.294483][ T1227] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 75.302593][ T1227] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 75.311347][ T1227] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 75.319447][ T1227] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 75.327597][ T1227] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 75.335645][ T1227] 0 B 0 init/initramfs.c:101 func:find_link [ 75.390000][ T1263] usb usb8: usbfs: process 1263 (syz.2.346) did not claim interface 0 before use [ 75.435911][ T36] audit: type=1326 audit(2000000047.230:9296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1268 comm="syz.1.348" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc5f039e0d9 code=0x0 [ 75.501012][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 75.620997][ T330] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 75.652315][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.663381][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.673152][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 75.682244][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.691047][ T10] usb 4-1: config 0 descriptor?? [ 75.711019][ T335] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 75.721000][ T497] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 75.770991][ T330] usb 1-1: Using ep0 maxpacket: 32 [ 75.777201][ T330] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 75.785384][ T330] usb 1-1: config 0 has no interface number 0 [ 75.792962][ T330] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 75.802072][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.810065][ T330] usb 1-1: Product: syz [ 75.814257][ T330] usb 1-1: Manufacturer: syz [ 75.818860][ T330] usb 1-1: SerialNumber: syz [ 75.824155][ T330] usb 1-1: config 0 descriptor?? [ 75.829894][ T330] smsc95xx v2.0.0 [ 75.870988][ T497] usb 2-1: Using ep0 maxpacket: 16 [ 75.872085][ T335] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.877209][ T497] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.887531][ T335] usb 3-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice= 0.40 [ 75.896120][ T497] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.906622][ T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.915646][ T497] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.922267][ T335] usb 3-1: Product: syz [ 75.931346][ T497] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.935440][ T335] usb 3-1: Manufacturer: syz [ 75.943593][ T497] usb 2-1: Product: syz [ 75.948368][ T335] usb 3-1: SerialNumber: syz [ 75.952521][ T497] usb 2-1: Manufacturer: syz [ 75.961632][ T497] usb 2-1: SerialNumber: syz [ 76.123787][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 76.131256][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 76.140126][ T10] usb 4-1: USB disconnect, device number 19 [ 76.159779][ T1272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.168744][ T1272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.231240][ T330] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 76.242012][ T330] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 76.695312][ T1280] FAULT_INJECTION: forcing a failure. [ 76.695312][ T1280] name failslab, interval 1, probability 0, space 0, times 0 [ 76.707973][ T1280] CPU: 0 UID: 0 PID: 1280 Comm: syz.3.351 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 76.708007][ T1280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.708019][ T1280] Call Trace: [ 76.708027][ T1280] [ 76.708035][ T1280] __dump_stack+0x21/0x30 [ 76.708057][ T1280] dump_stack_lvl+0x140/0x1c0 [ 76.708070][ T1280] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.708085][ T1280] ? kasan_save_track+0x4f/0x80 [ 76.708096][ T1280] ? kasan_save_alloc_info+0x3a/0x50 [ 76.708115][ T1280] dump_stack+0x19/0x20 [ 76.708139][ T1280] should_fail_ex+0x3c2/0x510 [ 76.708160][ T1280] should_failslab+0xac/0x100 [ 76.708182][ T1280] kmem_cache_alloc_noprof+0x42/0x410 [ 76.708195][ T1280] ? mas_wr_store_type+0x13f3/0x1b40 [ 76.708210][ T1280] ? mas_alloc_nodes+0x254/0x9d0 [ 76.708220][ T1280] mas_alloc_nodes+0x254/0x9d0 [ 76.708229][ T1280] mas_preallocate+0x79b/0xc90 [ 76.708243][ T1280] ? __cfi_mas_preallocate+0x10/0x10 [ 76.708264][ T1280] ? __asan_memset+0x39/0x50 [ 76.708282][ T1280] ? vm_area_alloc+0x5f/0x190 [ 76.708308][ T1280] mmap_region+0x1409/0x1d10 [ 76.708328][ T1280] ? xas_alloc+0x25f/0x530 [ 76.708344][ T1280] ? __cfi_mmap_region+0x10/0x10 [ 76.708355][ T1280] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10 [ 76.708369][ T1280] ? file_mmap_ok+0x147/0x1a0 [ 76.708379][ T1280] do_mmap+0xb61/0x13b0 [ 76.708389][ T1280] ? __cfi_do_mmap+0x10/0x10 [ 76.708400][ T1280] ? down_write_killable+0xee/0x2d0 [ 76.708418][ T1280] ? __cfi_down_write_killable+0x10/0x10 [ 76.708435][ T1280] ? io_uring_install_fd+0x2d/0x60 [ 76.708464][ T1280] vm_mmap_pgoff+0x367/0x4b0 [ 76.708480][ T1280] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 76.708490][ T1280] ? __fget_files+0x2bc/0x330 [ 76.708502][ T1280] ksys_mmap_pgoff+0x165/0x1e0 [ 76.708519][ T1280] __x64_sys_mmap+0x121/0x140 [ 76.708529][ T1280] x64_sys_call+0x13bf/0x2ee0 [ 76.708538][ T1280] do_syscall_64+0x57/0xf0 [ 76.708557][ T1280] ? clear_bhb_loop+0x50/0xa0 [ 76.708583][ T1280] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.708607][ T1280] RIP: 0033:0x7f071099de42 [ 76.708621][ T1280] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 76.708630][ T1280] RSP: 002b:00007f0711893ed8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 76.708642][ T1280] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f071099de42 [ 76.708649][ T1280] RDX: 0000000000000003 RSI: 0000000000011080 RDI: 0000000000000000 [ 76.708656][ T1280] RBP: 0000000000008001 R08: 000000000000001d R09: 0000000000000000 [ 76.708662][ T1280] R10: 0000000000008001 R11: 0000000000000246 R12: 0000200000000b08 [ 76.708669][ T1280] R13: 0000200000000b10 R14: 00007f0711893fd8 R15: 0000000000000000 [ 76.708677][ T1280] [ 77.340987][ T45] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 77.490978][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 77.497149][ T45] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.508245][ T45] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.518014][ T45] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 77.530808][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 77.537425][ T45] usb 4-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 77.546485][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.555196][ T45] usb 4-1: config 0 descriptor?? [ 77.976558][ T45] ntrig 0003:1B96:0012.0009: hidraw0: USB HID v0.01 Device [HID 1b96:0012] on usb-dummy_hcd.3-1/input0 [ 77.988021][ T330] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 77.999631][ T330] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 78.009054][ T330] usb 1-1: USB disconnect, device number 21 [ 78.176051][ T45] ntrig 0003:1B96:0012.0009: Firmware version: 1.15.25.63.3 (ff43 fb27) [ 78.379550][ T45] usb 4-1: USB disconnect, device number 20 [ 78.444158][ T497] usb 2-1: 0:2 : does not exist [ 78.455465][ T497] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 78.466591][ T335] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 78.469112][ T497] usb 2-1: USB disconnect, device number 26 [ 78.483197][ T472] udevd[472]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.489264][ T335] usb 3-1: USB disconnect, device number 23 [ 78.750990][ T330] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 78.790988][ T497] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 78.821006][ T335] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 78.901334][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 78.907474][ T330] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 78.915624][ T330] usb 1-1: config 0 has no interface number 0 [ 78.921786][ T330] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 78.931987][ T497] usb 2-1: device descriptor read/64, error -71 [ 78.938469][ T330] usb 1-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 78.950475][ T330] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 78.959598][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.967606][ T330] usb 1-1: Product: syz [ 78.971777][ T330] usb 1-1: Manufacturer: syz [ 78.976354][ T330] usb 1-1: SerialNumber: syz [ 78.981086][ T335] usb 3-1: Using ep0 maxpacket: 16 [ 78.986584][ T330] usb 1-1: config 0 descriptor?? [ 78.987647][ T335] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 78.991870][ T1306] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 79.001019][ T335] usb 3-1: config 0 has no interface number 0 [ 79.007614][ T330] asix 1-1:0.34: probe with driver asix failed with error -22 [ 79.013154][ T335] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 79.032574][ T335] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 79.045282][ T335] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 79.054385][ T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.062831][ T335] usb 3-1: Product: syz [ 79.067013][ T335] usb 3-1: Manufacturer: syz [ 79.071653][ T335] usb 3-1: SerialNumber: syz [ 79.076738][ T335] usb 3-1: config 0 descriptor?? [ 79.082790][ T1278] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 79.089947][ T1278] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 79.120979][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 79.170981][ T497] usb 2-1: device descriptor read/64, error -71 [ 79.191285][ T335] asix 3-1:0.34: probe with driver asix failed with error -71 [ 79.204450][ T335] usb 3-1: USB disconnect, device number 24 [ 79.282060][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.293033][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.302805][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 79.311858][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.320326][ T10] usb 4-1: config 0 descriptor?? [ 79.411036][ T497] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 79.541297][ T497] usb 2-1: device descriptor read/64, error -71 [ 79.561013][ T335] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 79.711048][ T335] usb 3-1: Using ep0 maxpacket: 8 [ 79.717132][ T335] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 79.725418][ T335] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 79.735746][ T335] usb 3-1: config 179 has no interface number 0 [ 79.742035][ T335] usb 3-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 79.755263][ T335] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 79.764359][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.772772][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 79.778899][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 79.790574][ T10] usb 4-1: USB disconnect, device number 21 [ 79.791909][ T497] usb 2-1: device descriptor read/64, error -71 [ 79.911166][ T497] usb usb2-port1: attempt power cycle [ 79.989965][ T330] usb 3-1: USB disconnect, device number 25 [ 80.251043][ T497] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 80.271961][ T497] usb 2-1: device descriptor read/8, error -71 [ 80.293849][ T36] audit: type=1400 audit(2000000052.090:9297): avc: denied { relabelfrom } for pid=1313 comm="syz.3.361" name="uprobe_events" dev="tracefs" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 80.293854][ T1314] SELinux: Context system_u:object_r:tpm_device_t:s0 is not valid (left unmapped). [ 80.326969][ T36] audit: type=1400 audit(2000000052.130:9298): avc: denied { relabelto } for pid=1313 comm="syz.3.361" name="uprobe_events" dev="tracefs" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 80.354533][ T36] audit: type=1400 audit(2000000052.130:9299): avc: denied { associate } for pid=1313 comm="syz.3.361" name="uprobe_events" dev="tracefs" ino=1034 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tpm_device_t:s0" [ 80.401957][ T497] usb 2-1: device descriptor read/8, error -71 [ 80.640994][ T497] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 80.662016][ T497] usb 2-1: device descriptor read/8, error -71 [ 80.691068][ T330] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 80.740997][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 80.801991][ T497] usb 2-1: device descriptor read/8, error -71 [ 80.851001][ T330] usb 4-1: Using ep0 maxpacket: 8 [ 80.857071][ T330] usb 4-1: config 0 interface 0 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 80.869991][ T330] usb 4-1: config 0 interface 0 has no altsetting 0 [ 80.876612][ T330] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 80.885646][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.890984][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 80.899116][ T330] usb 4-1: config 0 descriptor?? [ 80.899940][ T10] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 80.912477][ T10] usb 3-1: config 0 has no interface number 0 [ 80.918580][ T10] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 80.921072][ T497] usb usb2-port1: unable to enumerate USB device [ 80.928885][ T10] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 80.946433][ T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 80.955570][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.963630][ T10] usb 3-1: Product: syz [ 80.967828][ T10] usb 3-1: Manufacturer: syz [ 80.972447][ T10] usb 3-1: SerialNumber: syz [ 80.977626][ T10] usb 3-1: config 0 descriptor?? [ 80.982887][ T1329] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 80.990114][ T1329] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 81.198797][ T1329] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 81.206117][ T1329] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 81.307435][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.314638][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.321810][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.328986][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.336135][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.343320][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.350453][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.357594][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.364753][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.371901][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.379019][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.386171][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.393319][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.400430][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.407576][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.414425][ T10] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 81.414720][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.425070][ T10] asix 3-1:0.34: probe with driver asix failed with error -32 [ 81.431858][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.446447][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.453625][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.461233][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.468542][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.476351][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.483497][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.490654][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.497799][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.505083][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.506624][ T1325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.512480][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.522885][ T1325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.533266][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.541589][ T1325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.542835][ T497] usb 1-1: USB disconnect, device number 22 [ 81.553432][ T1325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.559674][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.572875][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.580747][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.588318][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.595472][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.602608][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.609729][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.616967][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.624369][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.631557][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.638673][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.645812][ T330] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 81.653522][ T330] zydacron 0003:13EC:0006.000A: hidraw0: USB HID v0.06 Device [HID 13ec:0006] on usb-dummy_hcd.3-1/input0 [ 81.667548][ T330] usb 4-1: USB disconnect, device number 22 [ 81.861008][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 81.910990][ T497] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 82.032017][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.043008][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.052753][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 82.061835][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.063464][ T497] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 82.070800][ T10] usb 2-1: config 0 descriptor?? [ 82.082673][ T497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.098188][ T497] usb 1-1: Product: syz [ 82.102739][ T497] usb 1-1: Manufacturer: 멥쵍ⵝ⩨ஊ縋㎛辏愛㐜뺙譐̍ᦄ襵㞺凾蛙쐢뷹큩⌹荃ፎᆲ싂뗲깈퓲㲕虙鵅쥲巓軗셙搆빩暮︦㙅缛祘䒷湖픶ඒ㠬췡襰澍⍨Ӫт诬ۮ棗☧嫝维⅀∠᜔᳑놗렙ﳦ㣜䟱ǵ䐖䊒뒺ﾵ즥띍큊ಕቋ亘㎷읕Ꞇ㔥Іㅾ萋 [ 82.132170][ T497] usb 1-1: SerialNumber: syz [ 82.302404][ T1345] FAULT_INJECTION: forcing a failure. [ 82.302404][ T1345] name failslab, interval 1, probability 0, space 0, times 0 [ 82.315132][ T1345] CPU: 0 UID: 0 PID: 1345 Comm: syz.3.374 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 82.315170][ T1345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.315181][ T1345] Call Trace: [ 82.315189][ T1345] [ 82.315197][ T1345] __dump_stack+0x21/0x30 [ 82.315224][ T1345] dump_stack_lvl+0x140/0x1c0 [ 82.315248][ T1345] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.315274][ T1345] ? io_wq_create+0x68c/0x9d0 [ 82.315294][ T1345] dump_stack+0x19/0x20 [ 82.315308][ T1345] should_fail_ex+0x3c2/0x510 [ 82.315320][ T1345] should_failslab+0xac/0x100 [ 82.315333][ T1345] __kmalloc_cache_noprof+0x41/0x470 [ 82.315344][ T1345] ? __io_uring_add_tctx_node+0x14a/0x590 [ 82.315357][ T1345] __io_uring_add_tctx_node+0x14a/0x590 [ 82.315377][ T1345] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 82.315400][ T1345] ? anon_inode_create_getfile+0x3f/0x50 [ 82.315426][ T1345] io_uring_create+0xc78/0x13f0 [ 82.315443][ T1345] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 82.315457][ T1345] ? __kasan_check_write+0x18/0x20 [ 82.315467][ T1345] ? __x64_sys_io_uring_setup+0x80/0x80 [ 82.315481][ T1345] ? __kasan_check_read+0x15/0x20 [ 82.315490][ T1345] __x64_sys_io_uring_setup+0x5f/0x80 [ 82.315505][ T1345] x64_sys_call+0x22c0/0x2ee0 [ 82.315522][ T1345] do_syscall_64+0x57/0xf0 [ 82.315543][ T1345] ? clear_bhb_loop+0x50/0xa0 [ 82.315568][ T1345] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.315586][ T1345] RIP: 0033:0x7f071099e0d9 [ 82.315596][ T1345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.315605][ T1345] RSP: 002b:00007f07117e9ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 82.315617][ T1345] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f071099e0d9 [ 82.315625][ T1345] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 82.315632][ T1345] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 82.315639][ T1345] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 82.315649][ T1345] R13: 0000200000000b10 R14: 00007f07117e9fd8 R15: 0000000000000000 [ 82.315664][ T1345] [ 82.341063][ T497] usb 1-1: MIDIStreaming interface descriptor not found [ 82.423078][ T36] audit: type=1400 audit(2000000054.210:9300): avc: denied { write } for pid=1354 comm="syz.3.375" name="netlink" dev="proc" ino=4026532404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 82.445424][ T497] usb 1-1: USB disconnect, device number 23 [ 82.494788][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 82.577911][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 82.587645][ T10] usb 2-1: USB disconnect, device number 31 [ 82.638505][ T1360] rust_binder: Write failure EFAULT in pid:327 [ 82.638526][ T1360] FAULT_INJECTION: forcing a failure. [ 82.638526][ T1360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.657864][ T1360] CPU: 0 UID: 0 PID: 1360 Comm: syz.3.377 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 82.657896][ T1360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.657908][ T1360] Call Trace: [ 82.657914][ T1360] [ 82.657922][ T1360] __dump_stack+0x21/0x30 [ 82.657952][ T1360] dump_stack_lvl+0x140/0x1c0 [ 82.657977][ T1360] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.658003][ T1360] dump_stack+0x19/0x20 [ 82.658027][ T1360] should_fail_ex+0x3c2/0x510 [ 82.658047][ T1360] should_fail+0xf/0x20 [ 82.658066][ T1360] should_fail_usercopy+0x1e/0x30 [ 82.658087][ T1360] _copy_to_user+0x24/0xa0 [ 82.658111][ T1360] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x258f/0x3fe0 [ 82.658140][ T1360] ? __asan_set_shadow_00+0x12/0x20 [ 82.658165][ T1360] ? do_vfs_ioctl+0x182d/0x2010 [ 82.658187][ T1360] ? arch_stack_walk+0x10a/0x170 [ 82.658206][ T1360] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 82.658230][ T1360] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 82.658257][ T1360] ? _parse_integer+0x2e/0x40 [ 82.658279][ T1360] ? ioctl_has_perm+0x39a/0x500 [ 82.658298][ T1360] ? __cfi__RNvYNCINvMNtNtCsjYlAz7NZ3Sw_4core3fmt2rtNtB8_8Argument9new_debugNtNtCsbuTvttuFvbr_6kernel5error5ErrorE0INtNtNtBc_3ops8function6FnOnceTINtNtNtBc_3ptr8non_null7NonNulluEQNtBa_9FormatterEE9call_onceCswPamI0U300_11rust_binder+0x10/0x10 [ 82.658358][ T1360] ? __cfi__RNvYNCINvMNtNtCsjYlAz7NZ3Sw_4core3fmt2rtNtB8_8Argument11new_displaylE0INtNtNtBc_3ops8function6FnOnceTINtNtNtBc_3ptr8non_null7NonNulluEQNtBa_9FormatterEE9call_onceCswPamI0U300_11rust_binder+0x10/0x10 [ 82.658409][ T1360] ? selinux_file_ioctl+0x732/0x1480 [ 82.658427][ T1360] ? vfs_write+0xbcf/0xfd0 [ 82.658446][ T1360] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 82.658464][ T1360] ? __cfi_vfs_write+0x10/0x10 [ 82.658482][ T1360] ? __kasan_check_write+0x18/0x20 [ 82.658501][ T1360] ? mutex_unlock+0x90/0x240 [ 82.658525][ T1360] ? __cfi_mutex_unlock+0x10/0x10 [ 82.658552][ T1360] ? bpf_lsm_file_ioctl+0xd/0x20 [ 82.658575][ T1360] ? security_file_ioctl+0x3e/0x110 [ 82.658602][ T1360] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 82.658629][ T1360] __se_sys_ioctl+0x135/0x1b0 [ 82.658651][ T1360] __x64_sys_ioctl+0x7f/0xa0 [ 82.658672][ T1360] x64_sys_call+0x1878/0x2ee0 [ 82.658690][ T1360] do_syscall_64+0x57/0xf0 [ 82.658710][ T1360] ? clear_bhb_loop+0x50/0xa0 [ 82.658734][ T1360] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.658771][ T1360] RIP: 0033:0x7f071099e0d9 [ 82.658789][ T1360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.658811][ T1360] RSP: 002b:00007f0711894028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.658833][ T1360] RAX: ffffffffffffffda RBX: 00007f0710c25fa0 RCX: 00007f071099e0d9 [ 82.658848][ T1360] RDX: 0000200000000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 82.658862][ T1360] RBP: 00007f0711894090 R08: 0000000000000000 R09: 0000000000000000 [ 82.658874][ T1360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.658887][ T1360] R13: 00007f0710c26038 R14: 00007f0710c25fa0 R15: 00007ffcfd978d78 [ 82.658903][ T1360] [ 83.060999][ T497] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 83.143882][ T1365] kvm: kvm [1364]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 83.152490][ T1365] kvm: kvm [1364]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 83.211092][ T497] usb 1-1: Using ep0 maxpacket: 32 [ 83.219656][ T497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.230720][ T497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.240501][ T497] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 83.249633][ T1300] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 83.257258][ T497] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.266036][ T497] usb 1-1: config 0 descriptor?? [ 83.271851][ T497] hub 1-1:0.0: USB hub found [ 83.475363][ T497] hub 1-1:0.0: 1 port detected [ 83.516771][ T330] usb 3-1: USB disconnect, device number 26 [ 83.520999][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 83.592916][ T1380] fuse: Bad value for 'fd' [ 83.670994][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 83.677419][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 83.685536][ T10] usb 2-1: config 0 has no interface number 0 [ 83.692999][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 83.702112][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.710118][ T10] usb 2-1: Product: syz [ 83.714332][ T10] usb 2-1: Manufacturer: syz [ 83.718921][ T10] usb 2-1: SerialNumber: syz [ 83.724236][ T10] usb 2-1: config 0 descriptor?? [ 83.730492][ T10] smsc95xx v2.0.0 [ 83.930997][ T330] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 84.061036][ T330] usb 3-1: device descriptor read/64, error -71 [ 84.078702][ T497] hub 1-1:0.0: activate --> -90 [ 84.131192][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 84.141983][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 84.301012][ T1300] usb 4-1: device descriptor read/64, error -71 [ 84.311119][ T330] usb 3-1: device descriptor read/64, error -71 [ 84.511828][ T497] usb 1-1-port1: config error [ 84.512668][ T1038] usb 1-1: USB disconnect, device number 24 [ 84.551053][ T330] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 84.572057][ T1300] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 84.582950][ T1300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.594054][ T1300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.603801][ T1300] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 84.617500][ T1300] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 84.626649][ T1300] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 84.634875][ T1300] usb 4-1: Manufacturer: syz [ 84.640099][ T1300] usb 4-1: config 0 descriptor?? [ 84.690998][ T330] usb 3-1: device descriptor read/64, error -71 [ 84.940988][ T330] usb 3-1: device descriptor read/64, error -71 [ 85.047874][ T1300] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 85.055215][ T1300] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 85.062924][ T330] usb usb3-port1: attempt power cycle [ 85.069554][ T1300] appleir 0003:05AC:8243.000B: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 85.260996][ T337] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 85.301750][ T1390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.310319][ T1390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.318839][ T1390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.328171][ T1390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.381997][ T9] usb 4-1: USB disconnect, device number 23 [ 85.401119][ T330] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 85.421024][ T337] usb 1-1: Using ep0 maxpacket: 16 [ 85.427292][ T330] usb 3-1: device descriptor read/8, error -71 [ 85.433563][ T337] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 85.441687][ T337] usb 1-1: config 0 has no interface number 0 [ 85.447778][ T337] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 85.457796][ T337] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 85.469130][ T337] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 85.478231][ T337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.486265][ T337] usb 1-1: Product: syz [ 85.490429][ T337] usb 1-1: Manufacturer: syz [ 85.495047][ T337] usb 1-1: SerialNumber: syz [ 85.500296][ T337] usb 1-1: config 0 descriptor?? [ 85.505705][ T1392] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.513136][ T1392] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.571997][ T330] usb 3-1: device descriptor read/8, error -71 [ 85.721969][ T1392] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.729168][ T1392] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.754660][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 85.765472][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 85.810985][ T330] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 85.831945][ T330] usb 3-1: device descriptor read/8, error -71 [ 85.937011][ T337] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 85.947507][ T337] asix 1-1:0.34: probe with driver asix failed with error -32 [ 85.961985][ T330] usb 3-1: device descriptor read/8, error -71 [ 85.962329][ T9] usb 2-1: USB disconnect, device number 32 [ 86.071057][ T330] usb usb3-port1: unable to enumerate USB device [ 86.150985][ T1300] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 86.300978][ T1300] usb 4-1: Using ep0 maxpacket: 32 [ 86.307085][ T1300] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 86.315192][ T1300] usb 4-1: config 0 has no interface number 0 [ 86.322646][ T1300] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 86.331719][ T1300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.339731][ T1300] usb 4-1: Product: syz [ 86.343901][ T1300] usb 4-1: Manufacturer: syz [ 86.348481][ T1300] usb 4-1: SerialNumber: syz [ 86.353615][ T1300] usb 4-1: config 0 descriptor?? [ 86.359245][ T1300] smsc95xx v2.0.0 [ 86.541901][ T1404] fuse: Bad value for 'fd' [ 86.627729][ T1413] Invalid ELF header type: 2 != 1 [ 86.629404][ T36] audit: type=1400 audit(2000000058.420:9301): avc: denied { module_load } for pid=1411 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 86.636660][ T1413] Invalid ELF header type: 2 != 1 [ 86.760981][ T1300] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 86.771787][ T1300] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 86.981029][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 87.021001][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 87.132093][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 87.142965][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.154295][ T10] usb 3-1: device descriptor read/64, error -71 [ 87.160582][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.170352][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 87.184032][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 87.193119][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 87.201229][ T9] usb 2-1: Manufacturer: syz [ 87.206538][ T9] usb 2-1: config 0 descriptor?? [ 87.382257][ T1300] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 87.393214][ T1300] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 87.400990][ T10] usb 3-1: device descriptor read/64, error -71 [ 87.402529][ T1300] usb 4-1: USB disconnect, device number 24 [ 87.616127][ T9] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 87.623329][ T9] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 87.631680][ T9] appleir 0003:05AC:8243.000C: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 87.651002][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 87.780995][ T10] usb 3-1: device descriptor read/64, error -71 [ 87.871864][ T1416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.880319][ T1416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.889756][ T1416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.899006][ T1416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.952041][ T335] usb 2-1: USB disconnect, device number 33 [ 88.021011][ T10] usb 3-1: device descriptor read/64, error -71 [ 88.035800][ T1300] usb 1-1: USB disconnect, device number 25 [ 88.131083][ T10] usb usb3-port1: attempt power cycle [ 88.150998][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 88.300987][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 88.307157][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 88.315434][ T9] usb 4-1: config 0 has no interface number 0 [ 88.322949][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 88.332033][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.340035][ T9] usb 4-1: Product: syz [ 88.344206][ T9] usb 4-1: Manufacturer: syz [ 88.350362][ T9] usb 4-1: SerialNumber: syz [ 88.355921][ T9] usb 4-1: config 0 descriptor?? [ 88.361607][ T9] smsc95xx v2.0.0 [ 88.470980][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 88.491562][ T1433] fuse: Bad value for 'fd' [ 88.492115][ T10] usb 3-1: device descriptor read/8, error -71 [ 88.612334][ T36] audit: type=1400 audit(2000000060.410:9302): avc: denied { read } for pid=1438 comm="syz.1.407" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.635095][ T36] audit: type=1400 audit(2000000060.410:9303): avc: denied { open } for pid=1438 comm="syz.1.407" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.659979][ T10] usb 3-1: device descriptor read/8, error -71 [ 88.763203][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 88.774498][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 88.911011][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 88.931958][ T10] usb 3-1: device descriptor read/8, error -71 [ 89.062376][ T10] usb 3-1: device descriptor read/8, error -71 [ 89.181084][ T10] usb usb3-port1: unable to enumerate USB device [ 89.241011][ T330] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 89.310996][ T335] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 89.390974][ T330] usb 2-1: Using ep0 maxpacket: 16 [ 89.397168][ T330] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 89.405445][ T330] usb 2-1: config 0 has no interface number 0 [ 89.411677][ T330] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 89.421715][ T330] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 89.433006][ T330] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 89.442094][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.450090][ T330] usb 2-1: Product: syz [ 89.454399][ T330] usb 2-1: Manufacturer: syz [ 89.459006][ T330] usb 2-1: SerialNumber: syz [ 89.464284][ T330] usb 2-1: config 0 descriptor?? [ 89.469539][ T1442] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.472019][ T335] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 89.476779][ T1442] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.487943][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.505577][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.515401][ T335] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 89.529135][ T335] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 89.538232][ T335] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 89.546397][ T335] usb 1-1: Manufacturer: syz [ 89.551781][ T335] usb 1-1: config 0 descriptor?? [ 89.700253][ T1442] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.708434][ T1442] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.754692][ T1460] netlink: 324 bytes leftover after parsing attributes in process `syz.2.417'. [ 89.916963][ T330] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 89.927105][ T330] asix 2-1:0.34: probe with driver asix failed with error -32 [ 89.965934][ T335] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 89.976135][ T335] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 89.987831][ T335] appleir 0003:05AC:8243.000D: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 90.221020][ T330] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 90.222317][ T1448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.237375][ T1448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.247574][ T1448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.256178][ T1448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.265354][ T337] usb 1-1: USB disconnect, device number 26 [ 90.372072][ T330] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.382252][ T330] usb 3-1: config 0 has no interfaces? [ 90.387736][ T330] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 90.396880][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.405092][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 90.416036][ T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 90.416229][ T330] usb 3-1: config 0 descriptor?? [ 90.607080][ T337] usb 4-1: USB disconnect, device number 25 [ 90.631196][ T1482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.639711][ T1482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.650368][ T330] usb 3-1: USB disconnect, device number 35 [ 90.660580][ T1490] netlink: 128 bytes leftover after parsing attributes in process `syz.2.427'. [ 90.669548][ T1490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.427'. [ 90.723522][ T36] audit: type=1400 audit(2000000062.520:9304): avc: denied { set_context_mgr } for pid=1497 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 90.743532][ T36] audit: type=1400 audit(2000000062.540:9305): avc: denied { map } for pid=1497 comm="syz.2.431" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.751580][ T1498] rust_binder: 1497:1498 error while translating object: EINVAL [ 90.767446][ T36] audit: type=1400 audit(2000000062.550:9306): avc: denied { call } for pid=1497 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 90.775530][ T1498] rust_binder: Failure in copy_transaction_data: EINVAL [ 90.793972][ T1498] rust_binder: 1497:1498 transaction call to 1497:0 failed EINVAL, code 0 size 120-24 [ 90.799314][ T36] audit: type=1400 audit(2000000062.550:9307): avc: denied { transfer } for pid=1497 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 90.892575][ T1498] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 90.911288][ T1498] kvm: kvm [1497]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 90.920264][ T1498] kvm: kvm [1497]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 90.940484][ T1498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.431'. [ 90.949364][ T1498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'. [ 91.091016][ T330] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 91.163098][ T1516] lo: entered promiscuous mode [ 91.242107][ T330] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 91.251881][ T330] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 91.262914][ T330] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 91.272023][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.280124][ T330] usb 1-1: Product: syz [ 91.285239][ T330] usb 1-1: Manufacturer: syz [ 91.289905][ T330] usb 1-1: SerialNumber: syz [ 91.294871][ T1515] lo: left promiscuous mode [ 91.500865][ T330] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 91.557372][ T330] rust_binder: 1497: undelivered TRANSACTION_ERROR: 29201 [ 91.660983][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 91.698567][ T1532] FAULT_INJECTION: forcing a failure. [ 91.698567][ T1532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.701658][ T1505] can: request_module (can-proto-6) failed. [ 91.711653][ T36] audit: type=1400 audit(2000000063.500:9308): avc: denied { read write } for pid=1504 comm="syz.0.434" name="lp0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 91.731082][ T1532] CPU: 1 UID: 0 PID: 1532 Comm: syz.2.443 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 91.731115][ T1532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.731127][ T1532] Call Trace: [ 91.731135][ T1532] [ 91.731144][ T1532] __dump_stack+0x21/0x30 [ 91.731177][ T1532] dump_stack_lvl+0x140/0x1c0 [ 91.731200][ T1532] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.731224][ T1532] ? __sys_recvmsg_sock+0x60/0x60 [ 91.731244][ T1532] dump_stack+0x19/0x20 [ 91.731266][ T1532] should_fail_ex+0x3c2/0x510 [ 91.731286][ T1532] should_fail+0xf/0x20 [ 91.731304][ T1532] should_fail_usercopy+0x1e/0x30 [ 91.731325][ T1532] _copy_from_user+0x20/0xa0 [ 91.731347][ T1532] ___sys_recvmsg+0x174/0x590 [ 91.731367][ T1532] ? __sys_recvmsg+0x2a0/0x2a0 [ 91.731385][ T1532] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 91.731404][ T1532] ? selinux_file_permission+0x318/0xb60 [ 91.731424][ T1532] ? __cfi_set_normalized_timespec64+0x10/0x10 [ 91.731455][ T1532] do_recvmmsg+0x36d/0x7f0 [ 91.731475][ T1532] ? __sys_recvmmsg+0x2a0/0x2a0 [ 91.731494][ T1532] ? __cfi_vfs_write+0x10/0x10 [ 91.731515][ T1532] ? _copy_from_user+0x87/0xa0 [ 91.731539][ T1532] __x64_sys_recvmmsg+0x1b8/0x250 [ 91.731559][ T1532] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 91.731578][ T1532] ? __kasan_check_read+0x15/0x20 [ 91.731597][ T1532] x64_sys_call+0x292c/0x2ee0 [ 91.731614][ T1532] do_syscall_64+0x57/0xf0 [ 91.731633][ T1532] ? clear_bhb_loop+0x50/0xa0 [ 91.731657][ T1532] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.731679][ T1532] RIP: 0033:0x7f10f399e0d9 [ 91.731696][ T1532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.731712][ T1532] RSP: 002b:00007f10f23f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 91.731731][ T1532] RAX: ffffffffffffffda RBX: 00007f10f3c25fa0 RCX: 00007f10f399e0d9 [ 91.731745][ T1532] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 91.731758][ T1532] RBP: 00007f10f23f7090 R08: 0000200000003700 R09: 0000000000000000 [ 91.731770][ T1532] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 91.731782][ T1532] R13: 00007f10f3c26038 R14: 00007f10f3c25fa0 R15: 00007ffc03b9df18 [ 91.731798][ T1532] [ 91.758183][ T330] usb 1-1: USB disconnect, device number 27 [ 91.763078][ T36] audit: type=1400 audit(2000000063.500:9309): avc: denied { open } for pid=1504 comm="syz.0.434" path="/dev/usb/lp0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 91.793594][ T330] usblp0: removed [ 91.798654][ T1539] FAULT_INJECTION: forcing a failure. [ 91.798654][ T1539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.013182][ T1539] CPU: 1 UID: 0 PID: 1539 Comm: syz.0.445 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 92.013209][ T1539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.013219][ T1539] Call Trace: [ 92.013225][ T1539] [ 92.013232][ T1539] __dump_stack+0x21/0x30 [ 92.013261][ T1539] dump_stack_lvl+0x140/0x1c0 [ 92.013284][ T1539] ? __cfi_dump_stack_lvl+0x10/0x10 [ 92.013307][ T1539] dump_stack+0x19/0x20 [ 92.013326][ T1539] should_fail_ex+0x3c2/0x510 [ 92.013343][ T1539] should_fail+0xf/0x20 [ 92.013359][ T1539] should_fail_usercopy+0x1e/0x30 [ 92.013377][ T1539] _copy_from_iter+0x1a6/0x1520 [ 92.013397][ T1539] ? __virt_addr_valid+0x2a1/0x370 [ 92.013416][ T1539] ? __cfi__copy_from_iter+0x10/0x10 [ 92.013434][ T1539] ? __check_object_size+0x54c/0x870 [ 92.013450][ T1539] ? __cfi___check_object_size+0x10/0x10 [ 92.013466][ T1539] ? skb_put+0x10e/0x200 [ 92.013486][ T1539] netlink_sendmsg+0x66d/0xad0 [ 92.013501][ T1539] ? __cfi_netlink_sendmsg+0x10/0x10 [ 92.013517][ T1539] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 92.013534][ T1539] ? security_socket_sendmsg+0x3d/0x100 [ 92.013554][ T1539] ____sys_sendmsg+0x9a1/0xa00 [ 92.013570][ T1539] ? __import_iovec+0x5b9/0x7d0 [ 92.013589][ T1539] ? __sys_sendmsg_sock+0x50/0x50 [ 92.013605][ T1539] ? import_iovec+0x80/0xb0 [ 92.013625][ T1539] ___sys_sendmsg+0x2a6/0x370 [ 92.013640][ T1539] ? __sys_sendmsg+0x2a0/0x2a0 [ 92.013655][ T1539] ? proc_fail_nth_write+0x184/0x220 [ 92.013676][ T1539] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 92.013699][ T1539] ? __fget_files+0x2bc/0x330 [ 92.013717][ T1539] __x64_sys_sendmsg+0x206/0x2e0 [ 92.013732][ T1539] ? fput+0x1a4/0x230 [ 92.013750][ T1539] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 92.013765][ T1539] ? ksys_write+0x1f3/0x260 [ 92.013780][ T1539] ? __kasan_check_read+0x15/0x20 [ 92.013796][ T1539] x64_sys_call+0x2a4c/0x2ee0 [ 92.013813][ T1539] do_syscall_64+0x57/0xf0 [ 92.013830][ T1539] ? clear_bhb_loop+0x50/0xa0 [ 92.013851][ T1539] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 92.013869][ T1539] RIP: 0033:0x7fd8edd9e0d9 [ 92.013883][ T1539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.013896][ T1539] RSP: 002b:00007fd8eecd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.013913][ T1539] RAX: ffffffffffffffda RBX: 00007fd8ee025fa0 RCX: 00007fd8edd9e0d9 [ 92.013925][ T1539] RDX: 0000000000004014 RSI: 0000200000000000 RDI: 0000000000000003 [ 92.013935][ T1539] RBP: 00007fd8eecd9090 R08: 0000000000000000 R09: 0000000000000000 [ 92.013945][ T1539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.013955][ T1539] R13: 00007fd8ee026038 R14: 00007fd8ee025fa0 R15: 00007ffda8d80d78 [ 92.013969][ T1539] [ 92.023359][ T10] usb 2-1: USB disconnect, device number 34 [ 92.032833][ T1300] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 92.043875][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 92.074891][ T36] audit: type=1400 audit(2000000063.870:9310): avc: denied { ioctl } for pid=1542 comm="syz.0.446" path="socket:[16555]" dev="sockfs" ino=16555 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.076258][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.076286][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.076308][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 92.077034][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 92.200985][ T1300] usb 3-1: Using ep0 maxpacket: 32 [ 92.202114][ T1300] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 92.206484][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 92.221308][ T1300] usb 3-1: config 0 has no interface number 0 [ 92.226129][ T9] usb 4-1: Manufacturer: syz [ 92.250130][ T1300] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 92.266560][ T1552] rust_binder: Write failure EFAULT in pid:199 [ 92.275375][ T1300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.278377][ T9] usb 4-1: config 0 descriptor?? [ 92.291001][ T1300] usb 3-1: Product: syz [ 92.454423][ T1300] usb 3-1: Manufacturer: syz [ 92.459038][ T1300] usb 3-1: SerialNumber: syz [ 92.464526][ T1300] usb 3-1: config 0 descriptor?? [ 92.470631][ T1300] smsc95xx v2.0.0 [ 92.472230][ T1555] netlink: 188 bytes leftover after parsing attributes in process `syz.1.452'. [ 92.703044][ T9] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 92.710404][ T9] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 92.718985][ T9] appleir 0003:05AC:8243.000E: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 92.800987][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 92.871892][ T1300] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 92.882677][ T1300] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 92.952203][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.962383][ T10] usb 2-1: config 0 has no interfaces? [ 92.967868][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 92.977036][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.977696][ T1524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.989996][ T10] usb 2-1: config 0 descriptor?? [ 92.994579][ T1524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.012227][ T1524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.021786][ T1524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.030840][ T10] usb 4-1: USB disconnect, device number 26 [ 93.204537][ T337] usb 2-1: USB disconnect, device number 35 [ 93.371084][ T330] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 93.520976][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 93.527179][ T330] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 93.535336][ T330] usb 1-1: config 0 has no interface number 0 [ 93.541455][ T330] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 93.555917][ T330] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 93.570089][ T330] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 93.580837][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.588869][ T330] usb 1-1: Product: syz [ 93.593044][ T330] usb 1-1: Manufacturer: syz [ 93.597637][ T330] usb 1-1: SerialNumber: syz [ 93.603191][ T330] usb 1-1: config 0 descriptor?? [ 93.608408][ T1565] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 93.620786][ T1565] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 93.775724][ T36] audit: type=1400 audit(2000000065.570:9311): avc: denied { create } for pid=1582 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 93.829246][ T36] audit: type=1400 audit(2000000065.620:9312): avc: denied { unmount } for pid=1582 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.832197][ T1565] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 93.871027][ T1565] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 94.051011][ T497] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 94.085223][ T330] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 94.095792][ T330] asix 1-1:0.34: probe with driver asix failed with error -61 [ 94.231918][ T497] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 94.242828][ T497] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.253949][ T497] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.263908][ T497] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 94.277674][ T497] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 94.286742][ T497] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 94.294850][ T497] usb 2-1: Manufacturer: syz [ 94.301366][ T497] usb 2-1: config 0 descriptor?? [ 94.500441][ T1300] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 94.511547][ T1300] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 94.715049][ T497] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 94.722271][ T1300] usb 3-1: USB disconnect, device number 36 [ 94.729258][ T497] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 94.736493][ T1592] netlink: 'syz.3.465': attribute type 3 has an invalid length. [ 94.741276][ T497] appleir 0003:05AC:8243.000F: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 94.744382][ T1592] netlink: 944 bytes leftover after parsing attributes in process `syz.3.465'. [ 94.771062][ T36] audit: type=1400 audit(2000000066.560:9313): avc: denied { accept } for pid=1591 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 94.971520][ T1588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.979978][ T1588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.988505][ T1588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.997079][ T1588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.005828][ T10] usb 2-1: USB disconnect, device number 36 [ 95.223636][ T1614] FAULT_INJECTION: forcing a failure. [ 95.223636][ T1614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.236728][ T1614] CPU: 1 UID: 0 PID: 1614 Comm: syz.2.474 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 95.236757][ T1614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.236769][ T1614] Call Trace: [ 95.236776][ T1614] [ 95.236781][ T1614] __dump_stack+0x21/0x30 [ 95.236800][ T1614] dump_stack_lvl+0x140/0x1c0 [ 95.236814][ T1614] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.236828][ T1614] ? _parse_integer+0x2e/0x40 [ 95.236838][ T1614] ? kstrtoull+0x13b/0x1e0 [ 95.236848][ T1614] dump_stack+0x19/0x20 [ 95.236860][ T1614] should_fail_ex+0x3c2/0x510 [ 95.236872][ T1614] should_fail+0xf/0x20 [ 95.236888][ T1614] should_fail_usercopy+0x1e/0x30 [ 95.236900][ T1614] _copy_from_user+0x20/0xa0 [ 95.236913][ T1614] ___sys_sendmsg+0x1c7/0x370 [ 95.236924][ T1614] ? __sys_sendmsg+0x2a0/0x2a0 [ 95.236934][ T1614] ? proc_fail_nth_write+0x184/0x220 [ 95.236949][ T1614] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 95.236965][ T1614] ? __fget_files+0x2bc/0x330 [ 95.236978][ T1614] __x64_sys_sendmsg+0x206/0x2e0 [ 95.236988][ T1614] ? fput+0x1a4/0x230 [ 95.237001][ T1614] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 95.237011][ T1614] ? ksys_write+0x1f3/0x260 [ 95.237022][ T1614] ? __kasan_check_read+0x15/0x20 [ 95.237033][ T1614] x64_sys_call+0x2a4c/0x2ee0 [ 95.237042][ T1614] do_syscall_64+0x57/0xf0 [ 95.237054][ T1614] ? clear_bhb_loop+0x50/0xa0 [ 95.237068][ T1614] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.237081][ T1614] RIP: 0033:0x7f10f399e0d9 [ 95.237092][ T1614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.237100][ T1614] RSP: 002b:00007f10f23f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.237113][ T1614] RAX: ffffffffffffffda RBX: 00007f10f3c25fa0 RCX: 00007f10f399e0d9 [ 95.237121][ T1614] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 95.237128][ T1614] RBP: 00007f10f23f7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.237136][ T1614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.237143][ T1614] R13: 00007f10f3c26038 R14: 00007f10f3c25fa0 R15: 00007ffc03b9df18 [ 95.237151][ T1614] [ 95.461091][ T1617] netlink: 'syz.2.475': attribute type 4 has an invalid length. [ 95.468843][ T1617] netlink: 'syz.2.475': attribute type 32 has an invalid length. [ 95.589520][ T1625] netlink: 'syz.3.479': attribute type 4 has an invalid length. [ 95.597231][ T1625] netlink: 'syz.3.479': attribute type 32 has an invalid length. [ 95.673808][ T1638] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(251658244.65535.0), cmd(3) [ 95.730992][ T497] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 95.860987][ T497] usb 3-1: device descriptor read/64, error -71 [ 96.101057][ T497] usb 3-1: device descriptor read/64, error -71 [ 96.101057][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 96.142428][ T66] usb 1-1: USB disconnect, device number 28 [ 96.173348][ T36] audit: type=1400 audit(2000000067.970:9314): avc: denied { getopt } for pid=1654 comm="syz.3.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.195162][ T36] audit: type=1400 audit(2000000067.990:9315): avc: denied { associate } for pid=1656 comm="syz.3.491" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 96.271141][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 96.277420][ T10] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 96.287817][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 96.298999][ T10] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 96.308325][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.316575][ T10] usb 2-1: Product: syz [ 96.320818][ T10] usb 2-1: Manufacturer: syz [ 96.325586][ T10] usb 2-1: SerialNumber: syz [ 96.350991][ T497] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 96.490992][ T497] usb 3-1: device descriptor read/64, error -71 [ 96.535150][ T36] audit: type=1400 audit(2000000068.330:9316): avc: denied { mounton } for pid=1643 comm="syz.1.487" path="/88/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 96.570529][ T10] usb 2-1: USB disconnect, device number 37 [ 96.572855][ T472] udevd[472]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 96.577936][ T66] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 96.730993][ T497] usb 3-1: device descriptor read/64, error -71 [ 96.752052][ T66] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 96.763008][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.773918][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.783931][ T66] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 96.797567][ T66] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 96.806760][ T66] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 96.814861][ T66] usb 1-1: Manufacturer: syz [ 96.819951][ T66] usb 1-1: config 0 descriptor?? [ 96.841110][ T497] usb usb3-port1: attempt power cycle [ 96.930994][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 97.082058][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.093032][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.102894][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.115796][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.124851][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.133359][ T10] usb 2-1: config 0 descriptor?? [ 97.181013][ T497] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 97.202122][ T497] usb 3-1: device descriptor read/8, error -71 [ 97.227692][ T66] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 97.234982][ T66] appleir 0003:05AC:8243.0010: No inputs registered, leaving [ 97.243342][ T66] appleir 0003:05AC:8243.0010: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 97.332023][ T497] usb 3-1: device descriptor read/8, error -71 [ 97.491522][ T1658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.500058][ T1658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.508621][ T1658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.517249][ T1658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.526300][ T330] usb 1-1: USB disconnect, device number 29 [ 97.541339][ T10] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 97.550327][ T10] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 97.580993][ T497] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 97.602010][ T497] usb 3-1: device descriptor read/8, error -71 [ 97.732003][ T497] usb 3-1: device descriptor read/8, error -71 [ 97.841067][ T497] usb usb3-port1: unable to enumerate USB device [ 98.151475][ C1] plantronics 0003:047F:FFFF.0011: hid_field_extract() called with n (132) > 32! (swapper/1) [ 98.270987][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 98.363157][ T9] usb 2-1: USB disconnect, device number 38 [ 98.407747][ T36] audit: type=1400 audit(2000000070.200:9317): avc: denied { create } for pid=1700 comm="syz.3.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 98.421291][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 98.437368][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 98.449184][ T10] usb 1-1: config 0 has no interface number 0 [ 98.457031][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 98.466280][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.474440][ T10] usb 1-1: Product: syz [ 98.478663][ T10] usb 1-1: Manufacturer: syz [ 98.486605][ T10] usb 1-1: SerialNumber: syz [ 98.496836][ T10] usb 1-1: config 0 descriptor?? [ 98.503968][ T10] smsc95xx v2.0.0 [ 98.525215][ T1715] overlayfs: failed to clone upperpath [ 98.532362][ T36] audit: type=1400 audit(2000000070.330:9318): avc: denied { create } for pid=1714 comm="syz.3.512" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.553233][ T36] audit: type=1400 audit(2000000070.330:9319): avc: denied { rename } for pid=1714 comm="syz.3.512" name="file0" dev="tmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.575871][ T36] audit: type=1400 audit(2000000070.330:9320): avc: denied { unlink } for pid=298 comm="syz-executor" name="file1" dev="tmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.840992][ T330] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 98.910695][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 98.923164][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 98.990998][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 98.997342][ T330] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 99.005505][ T330] usb 3-1: config 0 has no interface number 0 [ 99.011807][ T330] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 99.021840][ T330] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 99.033608][ T330] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 99.034452][ T1725] printk: legacy console [ttyS0] disabled [ 99.042781][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.056580][ T330] usb 3-1: Product: syz [ 99.056599][ T330] usb 3-1: Manufacturer: syz [ 99.066156][ T330] usb 3-1: SerialNumber: syz