last executing test programs: 4.632433153s ago: executing program 3 (id=1012): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000000000000000000000000000000000000a0101010000000000000000000000000000ffff000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000c0) r1 = socket$unix(0x1, 0x5, 0x0) getpeername$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x180862) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x10000, 0x7}) ioctl$BLKRRPART(r3, 0x125f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100230100003402000017000000e9400006803c000400675b6d286165732900000000000000000000000000000000000000000000000014000000bf6e3d7de774fc79872f0b8fa15bf788c9914c"], 0x54}}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x40104d05, &(0x7f0000000240)="000001010000000900000100") r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3) setreuid(0x0, 0xee01) r6 = socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200601, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x40) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x7fffffe, 0x0, 0xff, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000240)={@mcast1, 0x8000000, 0x2, 0x2, 0x8, 0xe9e, 0x4}, 0x20) lsm_get_self_attr(0x65, &(0x7f0000001600)={0x0, 0x0, 0x1026, 0x1006, ""/4102}, &(0x7f0000001380)=0x1026, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x46, 0x0, 0x0) 4.381246779s ago: executing program 3 (id=1013): syz_usb_connect$uac1(0x3, 0x86, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000020410e424240000102030109027400030104c06b0904000000010100000a240106001e000201020924030100030505000b2408057114044392b9730904010000010200000904010101010200000905010920000900040725010000060009040200000802", @ANYRES32=0x0], 0x0) 3.844332703s ago: executing program 1 (id=1017): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x46, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) (fail_nth: 6) 3.600298749s ago: executing program 1 (id=1018): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) write(r0, &(0x7f0000000080)='4', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001"], 0x1c, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) mremap(&(0x7f0000407000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000071c000/0x1000)=nil) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.953779395s ago: executing program 3 (id=1023): syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040000020806500007050102000200070582020002000904000104080662"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket(0x2c, 0x5, 0x5e84) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000240)="44001d000000000000ffff0100006bddc65b99fba9d5c8ef68ff58efbe93a0629498d350fee76658d4aa1d0e2d8f1d3c7405171a2c2065144cf5de98818512ac0ff961817366b82d6754b7ef2e2cb1a114d1c7df9a35592abc1ac9653fa1c8c857451727e47d272af028ef9fa1e3b29195", 0x71, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000100)=0xd, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x8001, 0x81}, @sack_perm, @window={0x3, 0x0, 0x4}, @window={0x3, 0x3ff, 0x6}, @sack_perm, @window={0x3, 0x1, 0x10}, @sack_perm], 0x8) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = dup3(r3, r4, 0x0) getpeername$tipc(r5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0xfffffffffffffffe}) 2.7737823s ago: executing program 1 (id=1024): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="303030303030303030303030303034303030302c75735f690400000000000000", @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, 0x0) 2.456399138s ago: executing program 1 (id=1025): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f0000000480)={0x1ffff, 0xffffffffffffffff, 0x1}) (fail_nth: 1) 2.442289548s ago: executing program 1 (id=1026): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x46, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) 2.38394206s ago: executing program 1 (id=1027): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x1, 0x51, {0x51, 0x31, "c6872618ce9fa699a5348d8de90de054d98fce76c2200171555c6e83bf2954604e9880a79defb04feb437d8f288f4e2454e97edec420e39c0bfdeea19ac6ddb7f17077abd1423ef2a9fbe350057586"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}}, &(0x7f0000000340)={0x34, &(0x7f0000000100)={0x40, 0xd, 0x6d, "8927c43e203c83ce3e1fe88888af39bfbedb71583dafd225f702ac89941ae685e8ec4ebb0bd80e7b6a12a1e96e408c081063d3ee84dcfdca71d7fa56b0b7b049f3073b4aebfdc337e459234b765f7e396ae913483797466163f3ef9544268cd6a7d82823a885f328f387f928b2"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000240)={0x20, 0x0, 0xb, {0x9, "bd73c217406fae6174"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000300)={0x20, 0x0, 0x1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000280)={0x20, 0x12, 0x3, "00a448"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.887587072s ago: executing program 2 (id=1033): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)={0x40, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@mcast2}]}, 0x40}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0xa0, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x81, 0x25, 0x70, 0x3ff}}, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x2, 0x68, 0x9}}, @val={0x2d, 0x1a, {0xc, 0x2, 0x5, 0x0, {0x93, 0x11df, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x152a, 0x5}}, @void, @void, @val={0x76, 0x6, {0x7, 0x3, 0x24, 0x1}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_SSID={0x8, 0x34, @random="4fc4717f"}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0xa0}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rename(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0xfffffffffffffffd, 0x41, 0xc3d, 0x0, 0x100, 0x1000000003, 0xa1d, 0x7, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.781765964s ago: executing program 2 (id=1034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a009000ffffffffffff00000000000086dd694fd2cd001b3afffe80000000000000000100000000000eff02fff50000000000000000f4c0a1a50200"], 0x55) 1.645071968s ago: executing program 2 (id=1035): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x46, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) futex(0x0, 0xb, 0x2, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) sendfile(r10, r9, 0x0, 0x7fffffff) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 1.294712137s ago: executing program 3 (id=1044): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16=r2, @ANYRES64=r2], 0x0) move_mount(r0, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00', 0x4) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4044881) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x300}, 0x0) close(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, &(0x7f0000000100)={0x5, 0x8}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (async) fchdir(r0) (async) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16=r2, @ANYRES64=r2], 0x0) (async) move_mount(r0, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00', 0x4) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4044881) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x300}, 0x0) (async) close(r0) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, &(0x7f0000000100)={0x5, 0x8}, 0x20) (async) 1.078624572s ago: executing program 0 (id=1046): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x46, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) (fail_nth: 7) 651.710683ms ago: executing program 0 (id=1047): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f0000000480)={0x1ffff, 0xffffffffffffffff, 0x1}) 651.127503ms ago: executing program 2 (id=1048): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e284) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip6tnl0\x00', 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 622.006144ms ago: executing program 0 (id=1049): socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xe96, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x100}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x11, 0x257, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x800, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeed4, 0x800, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x1, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r0, '\x00', {0xfff9, 0x7, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000340)) 608.305384ms ago: executing program 0 (id=1050): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) r0 = openat(0xffffffffffffff9c, 0x0, 0xc2c02e4d8eb3a414, 0x4) sendto(0xffffffffffffffff, &(0x7f00000002c0)="cde5e79eab350f4b29c251db8a37a78d491a4cac790adf23d02cfd5c849ae2eb8b19801d361e4602cad3574348283128b0b2f9e917d25e9beb8de11375577aa9d06a58c333f3ea416421a80a231eb00db542341dc685247edb88aeaed358d9fc0dbcf1117a54c12c0d17612d1f9b54206b9714282d08115368b40e5b39a87a7e4ac185afbead16648ad16e60d9c4d3aad77c3c90368fc501e31233a847a798f4074217dd92cdc3c156433b4f7325c411a93b7202b49142a121e0a5e522908af12fe8f05fc6013f335bbb939d4b3c3e704e57012ffdb04a3c39e79060b29067bb984bfd7429528eea4d9dbf70138ce68e95f5362c820e5309393c8d7ad3f70ad7a7", 0x101, 0x8000, 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) 567.098945ms ago: executing program 0 (id=1051): syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a640)={0x2020}, 0x2020) 566.703975ms ago: executing program 0 (id=1052): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) dup(r0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x23, 0x0, 0x101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="01051400100014000600460000200000000040119078ac140002ac1800014404bb7012344e2000089078f441e336bfdec8719fe3bdac438984d382bfa91e35bc69d28955bf44dbdfeac600e88f307e0247b4e4432b7c07a59d02a979ecc43f4c9ef7b9c096254385562860f82e1b336ad6e33ff6fcdf63766f4ae13f136a0414f96797e56d8e6d5a013f23c13c5d24b8229ad7909f9a3543dd63e45baa210785cc2bbede10e8bce99765c0d9a7208352783cf2b69578b4b2ab3cab216c54ffd7abd44d8d41690d3aabf2d626e7729f2e48fd1054de50ba045433d699a5576b91ce2192ce4da80b0de94369d7d62f"], 0x2a) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xfb, 0x2c, 0x6, 0xfe, "ef909812d2c47bbd9c8985d2cb4f6618", "1f5627abaf622dbe32dacdea8241d8fa4eedfb6f3ef8f0"}, 0x2c, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) listen(r7, 0x0) accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000000100)=0x203, 0x0) getdents64(r3, &(0x7f0000001fc0)=""/4079, 0xfef) syz_usb_connect$cdc_ncm(0x0, 0xc7, &(0x7f0000000080)=ANY=[@ANYRESOCT=r3], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000002c00)={0x0, 0x22, 0x1, @thr={0x0, 0x0}}, &(0x7f0000002c40)) clock_gettime(0x0, &(0x7f0000000100)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 399.948899ms ago: executing program 3 (id=1053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f0000000480)={0x1ffff, 0xffffffffffffffff, 0x1}) (fail_nth: 2) 113.087796ms ago: executing program 2 (id=1054): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)={0x40, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@mcast2}]}, 0x40}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0xa0, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x81, 0x25, 0x70, 0x3ff}}, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x2, 0x68, 0x9}}, @val={0x2d, 0x1a, {0xc, 0x2, 0x5, 0x0, {0x93, 0x11df, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x152a, 0x5}}, @void, @void, @val={0x76, 0x6, {0x7, 0x3, 0x24, 0x1}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_SSID={0x8, 0x34, @random="4fc4717f"}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0xa0}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rename(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0xfffffffffffffffd, 0x41, 0xc3d, 0x0, 0x100, 0x1000000003, 0xa1d, 0x7, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 94.337667ms ago: executing program 3 (id=1055): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e284) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip6tnl0\x00', 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000018000)=[@textreal={0x8, &(0x7f0000000080)="f30f0966b8a18200000f23c00f21f86635020002000f23f8f3ab66b98b02000066b89ce5225366ba000000000f300f20e06635200000000f22e00fbfdebaf80c66b856c0668d66efbafc0ced66b9d00b00000f32660f3880affe2bb80f008ec0", 0x60}], 0x1, 0x69, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r5, 0x5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = accept$inet6(r5, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x400, 0x4) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000400)=0x1000, 0x4) sendto$inet6(r6, &(0x7f0000001000)='\x00'/1349, 0x545, 0x40, 0x0, 0x0) close(r6) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) 0s ago: executing program 2 (id=1056): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x46, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) kernel console output (not intermixed with test programs): ace 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 112.334175][ T566] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 112.344088][ T566] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.352451][ T566] usb 4-1: Product: syz [ 112.356664][ T566] usb 4-1: Manufacturer: syz [ 112.361443][ T566] usb 4-1: SerialNumber: syz [ 112.367976][ T566] usb 4-1: config 0 descriptor?? [ 112.373280][ T2229] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 112.377106][ T339] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 112.380862][ T2229] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 112.387973][ T339] usb 1-1: 2:1 : unknown format tag 0x1003 is detected. processed as MPEG. [ 112.403838][ T339] usb 1-1: found format II with max.bitrate = 257, frame size=36221 [ 112.412423][ T339] usb 1-1: 2:1 : unknown format tag 0x1003 is detected. processed as MPEG. [ 112.421366][ T339] usb 1-1: found format II with max.bitrate = 257, frame size=36221 [ 112.433487][ T339] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 112.451115][ T339] usb 1-1: USB disconnect, device number 32 [ 112.460304][ T1871] udevd[1871]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 112.617630][ T2229] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 112.624976][ T2229] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 112.694285][ T2234] input: syz1 as /devices/virtual/input/input99 [ 112.844570][ T566] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 112.923266][ T2240] capability: warning: `syz.0.680' uses 32-bit capabilities (legacy support in use) [ 112.927383][ T36] audit: type=1400 audit(1785826137.635:345): avc: denied { ioctl } for pid=2239 comm="syz.0.680" path="socket:[19642]" dev="sockfs" ino=19642 ioctlcmd=0x6f05 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.974477][ T2247] capability: warning: `syz.0.681' uses deprecated v2 capabilities in a way that may be insecure [ 113.036987][ T1868] usb 2-1: USB disconnect, device number 30 [ 113.056731][ T566] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 113.067203][ T566] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 113.078556][ T566] asix 4-1:0.34: probe with driver asix failed with error -61 [ 113.264894][ T45] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 113.328487][ T315] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 113.424201][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 113.431570][ T45] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 113.443576][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 113.456249][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 113.470261][ T45] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 113.479656][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.489351][ T45] usb 3-1: config 0 descriptor?? [ 113.500118][ T315] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.509160][ T315] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.519754][ T315] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 113.531261][ T315] usb 1-1: string descriptor 0 read error: -22 [ 113.537585][ T315] usb 1-1: New USB device found, idVendor=1235, idProduct=8208, bcdDevice= 0.40 [ 113.547006][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.558005][ T315] usb 1-1: Focusrite Clarett USB Mixer Driver enabled (pid=0x8208); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 113.572871][ T315] usb 1-1: Error initialising Clarett USB Mixer Driver: -22 [ 113.581967][ T315] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 113.585899][ T1830] udevd[1830]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 113.708938][ T2257] 9pnet_fd: Insufficient options for proto=fd [ 113.715591][ T2257] x_tables: duplicate entry at hook 1 [ 113.788484][ T339] usb 1-1: USB disconnect, device number 33 [ 113.935700][ T45] magicmouse 0003:05AC:0324.0009: unknown main item tag 0x0 [ 113.944387][ T45] magicmouse 0003:05AC:0324.0009: unknown main item tag 0x0 [ 113.952135][ T45] magicmouse 0003:05AC:0324.0009: unknown main item tag 0x0 [ 113.960758][ T45] magicmouse 0003:05AC:0324.0009: unknown main item tag 0x0 [ 113.968485][ T45] magicmouse 0003:05AC:0324.0009: unknown main item tag 0x0 [ 113.975822][ T45] magicmouse 0003:05AC:0324.0009: unknown main item tag 0x0 [ 113.983408][ T45] magicmouse 0003:05AC:0324.0009: unknown main item tag 0x4 [ 113.991965][ T45] magicmouse 0003:05AC:0324.0009: hidraw0: USB HID v10.00 Device [HID 05ac:0324] on usb-dummy_hcd.2-1/input0 [ 113.998013][ T2265] input: syz1 as /devices/virtual/input/input100 [ 114.150762][ T45] usb 3-1: USB disconnect, device number 33 [ 114.391014][ T2284] incfs: Backing dir is not set, filesystem can't be mounted. [ 114.399454][ T2284] incfs: mount failed -2 [ 114.404573][ T2284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 114.448072][ T36] audit: type=1400 audit(1785826139.075:346): avc: denied { ioctl } for pid=2286 comm="syz.1.694" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 114.475381][ T2287] netlink: 40 bytes leftover after parsing attributes in process `syz.1.694'. [ 114.738747][ T2301] syzkaller1: entered promiscuous mode [ 114.744444][ T2301] syzkaller1: entered allmulticast mode [ 114.745248][ T45] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 114.831017][ T36] audit: type=1400 audit(1785826139.440:347): avc: denied { write } for pid=2228 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.842124][ T2305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.861093][ T2305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.905550][ T45] usb 2-1: device descriptor read/64, error -71 [ 114.980352][ T566] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 115.140639][ T566] usb 3-1: Using ep0 maxpacket: 16 [ 115.147065][ T566] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 115.155364][ T566] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.165518][ T566] usb 3-1: config 0 has no interface number 0 [ 115.171685][ T45] usb 2-1: device descriptor read/64, error -71 [ 115.179203][ T566] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 115.188556][ T566] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.197264][ T566] usb 3-1: Product: syz [ 115.201749][ T566] usb 3-1: Manufacturer: syz [ 115.206508][ T566] usb 3-1: SerialNumber: syz [ 115.211948][ T566] usb 3-1: config 0 descriptor?? [ 115.429311][ T45] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 115.568615][ T45] usb 2-1: device descriptor read/64, error -71 [ 115.652838][ T566] usb 3-1: Found UVC 0.00 device syz (046d:08d3) [ 115.659875][ T566] usb 3-1: No valid video chain found. [ 115.666478][ T566] usb 3-1: USB disconnect, device number 34 [ 115.836902][ T45] usb 2-1: device descriptor read/64, error -71 [ 115.954697][ T45] usb usb2-port1: attempt power cycle [ 116.190510][ T1868] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 116.319229][ T45] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 116.341757][ T45] usb 2-1: device descriptor read/8, error -71 [ 116.348399][ T9] usb 4-1: USB disconnect, device number 34 [ 116.363177][ T1868] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 116.375577][ T1868] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 116.388418][ T1868] usb 1-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice= 0.40 [ 116.390061][ T2323] tipc: Started in network mode [ 116.397841][ T1868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.402999][ T2323] tipc: Node identity 7f000001, cluster identity 4711 [ 116.411358][ T1868] usb 1-1: Product: syz [ 116.420064][ T2323] tipc: Enabled bearer , priority 10 [ 116.422704][ T1868] usb 1-1: Manufacturer: syz [ 116.433559][ T1868] usb 1-1: SerialNumber: syz [ 116.435541][ T2323] syzkaller1: entered promiscuous mode [ 116.444052][ T2323] syzkaller1: entered allmulticast mode [ 116.469380][ T315] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 116.481076][ T45] usb 2-1: device descriptor read/8, error -71 [ 116.619701][ T315] usb 3-1: device descriptor read/64, error -71 [ 116.659436][ T2317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.668191][ T2317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.679531][ T1868] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 116.688826][ T1868] usb 1-1: cannot setup if 2: error -71 [ 116.694470][ T1868] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 116.705220][ T1868] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 116.714369][ T1868] usb 1-1: cannot setup if 2: error -71 [ 116.720036][ T1868] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 116.730775][ T1868] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 116.737978][ T45] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 116.739888][ T1868] usb 1-1: cannot setup if 2: error -71 [ 116.753736][ T1868] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 116.760610][ T45] usb 2-1: device descriptor read/8, error -71 [ 116.765744][ T1868] usb 1-1: USB disconnect, device number 34 [ 116.770767][ T1830] udevd[1830]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 116.888455][ T315] usb 3-1: device descriptor read/64, error -71 [ 116.932564][ T45] usb 2-1: device descriptor read/8, error -71 [ 117.049714][ T9] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 117.060591][ T45] usb usb2-port1: unable to enumerate USB device [ 117.146463][ T315] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 117.221695][ T9] usb 4-1: Invalid ep0 maxpacket: 64 [ 117.242970][ T2327] netlink: 'syz.0.709': attribute type 1 has an invalid length. [ 117.251464][ T2328] netlink: 'syz.0.709': attribute type 1 has an invalid length. [ 117.286191][ T315] usb 3-1: device descriptor read/64, error -71 [ 117.361471][ T9] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 117.522748][ T9] usb 4-1: Invalid ep0 maxpacket: 64 [ 117.528379][ T9] usb usb4-port1: attempt power cycle [ 117.544260][ T315] usb 3-1: device descriptor read/64, error -71 [ 117.630283][ T45] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 117.638048][ T566] tipc: Node number set to 2130706433 [ 117.673336][ T315] usb usb3-port1: attempt power cycle [ 117.804109][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 117.812602][ T45] usb 1-1: config 3 has an invalid interface number: 207 but max is 0 [ 117.820891][ T45] usb 1-1: config 3 has no interface number 0 [ 117.827019][ T45] usb 1-1: config 3 interface 207 has no altsetting 0 [ 117.835468][ T45] usb 1-1: New USB device found, idVendor=0586, idProduct=3418, bcdDevice=5f.f6 [ 117.844528][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.852739][ T45] usb 1-1: Product: syz [ 117.856929][ T45] usb 1-1: Manufacturer: syz [ 117.861542][ T45] usb 1-1: SerialNumber: syz [ 117.899570][ T9] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 117.921437][ T9] usb 4-1: Invalid ep0 maxpacket: 64 [ 118.018017][ T566] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 118.039537][ T315] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 118.061149][ T9] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 118.069620][ T315] usb 3-1: device descriptor read/8, error -71 [ 118.082978][ T9] usb 4-1: Invalid ep0 maxpacket: 64 [ 118.088441][ T9] usb usb4-port1: unable to enumerate USB device [ 118.089463][ T45] cdc_ether 1-1:3.207: More than one union descriptor, skipping ... [ 118.103280][ T45] usb 1-1: bad CDC descriptors [ 118.109414][ T45] usb 1-1: USB disconnect, device number 35 [ 118.190326][ T566] usb 2-1: Using ep0 maxpacket: 16 [ 118.196622][ T566] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 118.204839][ T566] usb 2-1: config 0 has no interface number 0 [ 118.210930][ T566] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 118.212927][ T315] usb 3-1: device descriptor read/8, error -71 [ 118.220812][ T566] usb 2-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid maxpacket 19008, setting to 1024 [ 118.238162][ T566] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 118.248309][ T566] usb 2-1: config 0 interface 41 has no altsetting 0 [ 118.256575][ T566] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 118.265701][ T566] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.273821][ T566] usb 2-1: Product: syz [ 118.278558][ T566] usb 2-1: Manufacturer: syz [ 118.283166][ T566] usb 2-1: SerialNumber: syz [ 118.288446][ T566] usb 2-1: config 0 descriptor?? [ 118.293868][ T2354] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.301361][ T2354] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.491918][ T315] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 118.514487][ T315] usb 3-1: device descriptor read/8, error -71 [ 118.525647][ T2354] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.532912][ T2354] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.654609][ T315] usb 3-1: device descriptor read/8, error -71 [ 118.772156][ T315] usb usb3-port1: unable to enumerate USB device [ 118.901535][ T45] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 118.974457][ T566] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 118.986006][ T566] usb 2-1: USB disconnect, device number 35 [ 119.064391][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.075602][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.085408][ T45] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 119.094472][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.103105][ T45] usb 1-1: config 0 descriptor?? [ 119.465226][ T2362] input: syz1 as /devices/virtual/input/input101 [ 119.498242][ T2366] syzkaller1: entered promiscuous mode [ 119.503753][ T2366] syzkaller1: entered allmulticast mode [ 119.542478][ T2357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.551471][ T2357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.578010][ T36] audit: type=1326 audit(1785826143.850:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2368 comm="syz.1.724" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52bc79e019 code=0x0 [ 119.605859][ T64] device offline error, dev sda, sector 1245494 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 119.616622][ T64] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2036 starting block 155686) [ 119.628529][ T64] Buffer I/O error on device sda1, logical block 155648 [ 119.635552][ T64] device offline error, dev sda, sector 1245998 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 119.637754][ T36] audit: type=1400 audit(1785826143.906:349): avc: granted { setsecparam } for pid=2367 comm="syz.2.723" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 119.646154][ T64] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2036 starting block 155749) [ 119.677339][ T64] Buffer I/O error on device sda1, logical block 155711 [ 119.684356][ T64] device offline error, dev sda, sector 1253654 op 0x1:(WRITE) flags 0x0 phys_seg 4 prio class 2 [ 119.694931][ T64] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2036 starting block 156706) [ 119.706618][ T64] Buffer I/O error on device sda1, logical block 156668 [ 119.713827][ T64] Buffer I/O error on device sda1, logical block 156669 [ 119.720867][ T64] Buffer I/O error on device sda1, logical block 156670 [ 119.727941][ T64] Buffer I/O error on device sda1, logical block 156671 [ 119.735008][ T64] device offline error, dev sda, sector 1134902 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 119.745701][ T64] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2029 starting block 141862) [ 119.757380][ T64] Buffer I/O error on device sda1, logical block 141824 [ 119.764542][ T64] Buffer I/O error on device sda1, logical block 141825 [ 119.771501][ T64] Buffer I/O error on device sda1, logical block 141826 [ 119.778513][ T64] device offline error, dev sda, sector 1143094 op 0x1:(WRITE) flags 0x0 phys_seg 4 prio class 2 [ 119.789369][ T64] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 142886) [ 119.801045][ T64] Buffer I/O error on device sda1, logical block 142848 [ 119.808208][ T45] hid-led 0003:1D34:000A.000A: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 119.819523][ T64] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 142891) [ 119.831254][ T64] device offline error, dev sda, sector 1130806 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 119.841941][ T64] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2027 starting block 141350) [ 119.844322][ T313] device offline error, dev sda, sector 1114974 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 119.853667][ T64] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2027 starting block 141354) [ 119.872516][ T2377] input: syz1 as /devices/virtual/input/input102 [ 119.875850][ T64] device offline error, dev sda, sector 1114566 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 119.892917][ T313] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139371) [ 119.904541][ T313] device offline error, dev sda, sector 1115566 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 119.904742][ T355] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2035, error -5) [ 119.915448][ T313] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139445) [ 119.929922][ T2377] FAULT_INJECTION: forcing a failure. [ 119.929922][ T2377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.940321][ T313] device offline error, dev sda, sector 1138998 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 119.954747][ T36] audit: type=1400 audit(1785826144.202:350): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 119.966082][ T45] hid-led 0003:1D34:000A.000A: Dream Cheeky Webmail Notifier initialized [ 119.989912][ T355] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2027, error -5) [ 120.002031][ T2377] CPU: 1 UID: 0 PID: 2377 Comm: syz.3.725 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 120.002065][ T2377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.002078][ T2377] Call Trace: [ 120.002085][ T2377] [ 120.002093][ T2377] __dump_stack+0x21/0x30 [ 120.002124][ T2377] dump_stack_lvl+0x140/0x1c0 [ 120.002148][ T2377] ? __cfi_dump_stack_lvl+0x10/0x10 [ 120.002173][ T2377] ? _parse_integer_limit+0x195/0x1e0 [ 120.002193][ T2377] dump_stack+0x19/0x20 [ 120.002216][ T2377] should_fail_ex+0x3c2/0x510 [ 120.002237][ T2377] should_fail+0xf/0x20 [ 120.002256][ T2377] should_fail_usercopy+0x1e/0x30 [ 120.002278][ T2377] _copy_from_user+0x20/0xa0 [ 120.002301][ T2377] input_event_from_user+0xb2/0x290 [ 120.002324][ T2377] ? __cfi_input_event_from_user+0x10/0x10 [ 120.002347][ T2377] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 120.002369][ T2377] ? input_event+0x3a/0xc0 [ 120.002394][ T2377] uinput_write+0x275/0xf10 [ 120.002412][ T2377] ? __cfi_uinput_write+0x10/0x10 [ 120.002429][ T2377] ? proc_fail_nth_write+0x184/0x220 [ 120.002455][ T2377] ? bpf_lsm_file_permission+0xd/0x20 [ 120.002479][ T2377] ? __cfi_uinput_write+0x10/0x10 [ 120.002496][ T2377] vfs_write+0x3c1/0xfd0 [ 120.002516][ T2377] ? __cfi_vfs_write+0x10/0x10 [ 120.002535][ T2377] ? __fget_files+0x2bc/0x330 [ 120.002557][ T2377] ksys_write+0x145/0x260 [ 120.002575][ T2377] ? __cfi_ksys_write+0x10/0x10 [ 120.002595][ T2377] ? __kasan_check_read+0x15/0x20 [ 120.002614][ T2377] __x64_sys_write+0x7f/0x90 [ 120.002633][ T2377] x64_sys_call+0x271c/0x2ee0 [ 120.002650][ T2377] do_syscall_64+0x57/0xf0 [ 120.002670][ T2377] ? clear_bhb_loop+0x50/0xa0 [ 120.002694][ T2377] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.002716][ T2377] RIP: 0033:0x7f9dee79e019 [ 120.002732][ T2377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.002747][ T2377] RSP: 002b:00007f9def737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 120.002819][ T2377] RAX: ffffffffffffffda RBX: 00007f9deea25fa0 RCX: 00007f9dee79e019 [ 120.002834][ T2377] RDX: 000000000000045c RSI: 0000200000000300 RDI: 0000000000000003 [ 120.002847][ T2377] RBP: 00007f9def737090 R08: 0000000000000000 R09: 0000000000000000 [ 120.002860][ T2377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.002872][ T2377] R13: 00007f9deea26038 R14: 00007f9deea25fa0 R15: 00007fff18532358 [ 120.002888][ T2377] [ 120.003001][ T36] audit: type=1400 audit(1785826144.202:351): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.027865][ T10] usb 1-1: USB disconnect, device number 36 [ 120.029712][ T36] audit: type=1400 audit(1785826144.202:352): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.036807][ T2369] Buffer I/O error on dev sda1, logical block 130, lost async page write [ 120.042254][ T36] audit: type=1400 audit(1785826144.202:353): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.046881][ T2369] Buffer I/O error on dev sda1, logical block 33724, lost async page write [ 120.262239][ T36] audit: type=1400 audit(1785826144.202:354): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.279434][ T73] Aborting journal on device sda1-8. [ 120.281437][ T36] audit: type=1400 audit(1785826144.202:355): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.310962][ T286] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz-executor: Detected aborted journal [ 120.331695][ T73] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 120.346301][ T36] audit: type=1400 audit(1785826144.202:356): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.361477][ T73] JBD2: I/O error when updating journal superblock for sda1-8. [ 120.440105][ T286] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 120.448995][ T286] EXT4-fs (sda1): I/O error while writing superblock [ 120.451428][ T2369] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 120.456085][ T286] EXT4-fs (sda1): Remounting filesystem read-only [ 120.494397][ T2381] netlink: 248 bytes leftover after parsing attributes in process `syz.1.727'. [ 120.503481][ T36] audit: type=1400 audit(1785826144.693:357): avc: denied { nlmsg_read } for pid=2380 comm="syz.1.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.543293][ T2381] tipc: Enabling of bearer rejected, already enabled [ 120.813141][ T2398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.733'. [ 120.823813][ T2398] netlink: 64 bytes leftover after parsing attributes in process `syz.0.733'. [ 120.833433][ T2398] netlink: 240 bytes leftover after parsing attributes in process `syz.0.733'. [ 120.844515][ T2398] tc_dump_action: action bad kind [ 120.865729][ T566] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 120.880267][ T2379] Write-error on swap-device (8:0:800502) Aug 4 06:49:05 syzkaller kern.alert kernel: [ 120.880267][ T2379] Write-error on swap-device (8:0:800502) [ 121.016988][ T758] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 121.027790][ T566] usb 2-1: Using ep0 maxpacket: 32 [ 121.037902][ T566] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.052042][ T566] usb 2-1: config 0 has no interfaces? [ 121.057100][ T2403] input: syz1 as /devices/virtual/input/input103 [ 121.057553][ T566] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 121.073403][ T566] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.073853][ T2403] FAULT_INJECTION: forcing a failure. [ 121.073853][ T2403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.082150][ T566] usb 2-1: config 0 descriptor?? [ 121.107593][ T2403] CPU: 0 UID: 0 PID: 2403 Comm: syz.0.735 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 121.107628][ T2403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.107641][ T2403] Call Trace: [ 121.107649][ T2403] [ 121.107657][ T2403] __dump_stack+0x21/0x30 [ 121.107691][ T2403] dump_stack_lvl+0x140/0x1c0 [ 121.107727][ T2403] ? __cfi_dump_stack_lvl+0x10/0x10 [ 121.107755][ T2403] ? _parse_integer_limit+0x195/0x1e0 [ 121.107781][ T2403] dump_stack+0x19/0x20 [ 121.107806][ T2403] should_fail_ex+0x3c2/0x510 [ 121.107829][ T2403] should_fail+0xf/0x20 [ 121.107849][ T2403] should_fail_usercopy+0x1e/0x30 [ 121.107872][ T2403] _copy_from_user+0x20/0xa0 [ 121.107898][ T2403] input_event_from_user+0xb2/0x290 [ 121.107923][ T2403] ? __cfi_input_event_from_user+0x10/0x10 [ 121.107948][ T2403] ? __kasan_check_read+0x15/0x20 [ 121.107967][ T2403] ? input_event+0xa9/0xc0 [ 121.107996][ T2403] uinput_write+0x275/0xf10 [ 121.108016][ T2403] ? __cfi_uinput_write+0x10/0x10 [ 121.108034][ T2403] ? proc_fail_nth_write+0x184/0x220 [ 121.108063][ T2403] ? bpf_lsm_file_permission+0xd/0x20 [ 121.108090][ T2403] ? __cfi_uinput_write+0x10/0x10 [ 121.108108][ T2403] vfs_write+0x3c1/0xfd0 [ 121.108130][ T2403] ? __cfi_vfs_write+0x10/0x10 [ 121.108150][ T2403] ? __fget_files+0x2bc/0x330 [ 121.108176][ T2403] ksys_write+0x145/0x260 [ 121.108197][ T2403] ? __cfi_ksys_write+0x10/0x10 [ 121.108218][ T2403] ? __kasan_check_read+0x15/0x20 [ 121.108238][ T2403] __x64_sys_write+0x7f/0x90 [ 121.108260][ T2403] x64_sys_call+0x271c/0x2ee0 [ 121.108279][ T2403] do_syscall_64+0x57/0xf0 [ 121.108302][ T2403] ? clear_bhb_loop+0x50/0xa0 [ 121.108328][ T2403] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 121.108354][ T2403] RIP: 0033:0x7fb21799e019 [ 121.108372][ T2403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.108391][ T2403] RSP: 002b:00007fb218789028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.108415][ T2403] RAX: ffffffffffffffda RBX: 00007fb217c25fa0 RCX: 00007fb21799e019 [ 121.108432][ T2403] RDX: 000000000000045c RSI: 0000200000000300 RDI: 0000000000000003 [ 121.108446][ T2403] RBP: 00007fb218789090 R08: 0000000000000000 R09: 0000000000000000 [ 121.108461][ T2403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.108474][ T2403] R13: 00007fb217c26038 R14: 00007fb217c25fa0 R15: 00007ffebf7defd8 [ 121.108493][ T2403] [ 121.277461][ T758] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 121.332570][ T315] usb 2-1: USB disconnect, device number 36 [ 121.335780][ T2408] input: syz1 as /devices/virtual/input/input104 [ 121.384018][ T758] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9699, setting to 1024 [ 121.395629][ T758] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 121.405184][ T758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.420354][ T758] usb 3-1: config 0 descriptor?? [ 121.424197][ T2410] incfs_lookup_dentry err:-13 [ 121.430707][ T2390] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 121.646346][ T2421] syzkaller1: entered promiscuous mode [ 121.651876][ T2421] syzkaller1: entered allmulticast mode [ 121.935509][ T315] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 122.062191][ T2442] input: syz1 as /devices/virtual/input/input105 [ 122.086887][ T315] usb 1-1: device descriptor read/64, error -71 [ 122.162566][ T566] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 122.311015][ T758] hid-led 0003:27B8:01ED.000B: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 122.314988][ T2451] udevd[2451]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 122.324975][ T758] hid-led 0003:27B8:01ED.000B: ThingM blink(1) initialized [ 122.345584][ T566] usb 2-1: config 1 has an invalid interface number: 161 but max is 0 [ 122.347422][ T315] usb 1-1: device descriptor read/64, error -71 [ 122.354415][ T566] usb 2-1: config 1 has no interface number 0 [ 122.366750][ T566] usb 2-1: config 1 interface 161 has no altsetting 0 [ 122.374889][ T566] usb 2-1: New USB device found, idVendor=0411, idProduct=003d, bcdDevice=bb.be [ 122.383972][ T566] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.392014][ T566] usb 2-1: Product: syz [ 122.396278][ T566] usb 2-1: Manufacturer: syz [ 122.400956][ T339] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 122.408612][ T566] usb 2-1: SerialNumber: syz [ 122.574545][ T339] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.584864][ T339] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 122.599258][ T339] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 122.608380][ T339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.616564][ T339] usb 4-1: Product: syz [ 122.620898][ T339] usb 4-1: Manufacturer: syz [ 122.625524][ T339] usb 4-1: SerialNumber: syz [ 122.633080][ T339] usb-storage 4-1:1.0: USB Mass Storage device detected [ 122.638346][ T315] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 122.640534][ T566] asix 2-1:1.161: probe with driver asix failed with error -22 [ 122.656202][ T339] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 122.664771][ T339] scsi host1: usb-storage 4-1:1.0 [ 122.671815][ T566] usb 2-1: Found UVC 15.ff device syz (0411:003d) [ 122.678306][ T566] usb 2-1: No valid video chain found. [ 122.689540][ T566] usb 2-1: USB disconnect, device number 37 [ 122.778928][ T315] usb 1-1: device descriptor read/64, error -71 [ 122.849692][ T339] usb 4-1: USB disconnect, device number 39 [ 123.038422][ T315] usb 1-1: device descriptor read/64, error -71 [ 123.157471][ T315] usb usb1-port1: attempt power cycle [ 123.408331][ T2466] syzkaller1: entered promiscuous mode [ 123.413934][ T2466] syzkaller1: entered allmulticast mode [ 123.482830][ T2468] futex_wake_op: syz.3.753 tries to shift op by 144; fix this program [ 123.525272][ T315] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 123.548000][ T315] usb 1-1: device descriptor read/8, error -71 [ 123.688528][ T315] usb 1-1: device descriptor read/8, error -71 [ 123.773985][ T339] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 123.938126][ T339] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.948382][ T339] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 123.957361][ T339] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.957917][ T315] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 123.973011][ T339] usb 4-1: string descriptor 0 read error: -22 [ 123.984545][ T339] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.984932][ T10] usb 3-1: USB disconnect, device number 39 [ 123.993651][ T339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.013707][ T315] usb 1-1: device descriptor read/8, error -71 [ 124.022053][ T339] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 124.031429][ T339] cdc_ncm 4-1:1.0: bind() failure [ 124.155378][ T315] usb 1-1: device descriptor read/8, error -71 [ 124.190811][ T2480] input: syz1 as /devices/virtual/input/input106 [ 124.242431][ T339] usb 4-1: USB disconnect, device number 40 [ 124.282563][ T315] usb usb1-port1: unable to enumerate USB device [ 124.310275][ T2495] syzkaller1: entered promiscuous mode [ 124.317819][ T2495] syzkaller1: entered allmulticast mode [ 124.386391][ T2499] input: syz1 as /devices/virtual/input/input107 [ 124.402095][ T2499] FAULT_INJECTION: forcing a failure. [ 124.402095][ T2499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.416507][ T2499] CPU: 1 UID: 0 PID: 2499 Comm: syz.2.763 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 124.416542][ T2499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.416554][ T2499] Call Trace: [ 124.416560][ T2499] [ 124.416568][ T2499] __dump_stack+0x21/0x30 [ 124.416598][ T2499] dump_stack_lvl+0x140/0x1c0 [ 124.416625][ T2499] ? __cfi_dump_stack_lvl+0x10/0x10 [ 124.416652][ T2499] ? _parse_integer_limit+0x195/0x1e0 [ 124.416674][ T2499] dump_stack+0x19/0x20 [ 124.416699][ T2499] should_fail_ex+0x3c2/0x510 [ 124.416721][ T2499] should_fail+0xf/0x20 [ 124.416741][ T2499] should_fail_usercopy+0x1e/0x30 [ 124.416762][ T2499] _copy_from_user+0x20/0xa0 [ 124.416784][ T2499] input_event_from_user+0xb2/0x290 [ 124.416808][ T2499] ? __cfi_input_event_from_user+0x10/0x10 [ 124.416832][ T2499] ? __kasan_check_read+0x15/0x20 [ 124.416853][ T2499] ? input_event+0xa9/0xc0 [ 124.416880][ T2499] uinput_write+0x275/0xf10 [ 124.416899][ T2499] ? __cfi_uinput_write+0x10/0x10 [ 124.416918][ T2499] ? proc_fail_nth_write+0x184/0x220 [ 124.416946][ T2499] ? bpf_lsm_file_permission+0xd/0x20 [ 124.416971][ T2499] ? __cfi_uinput_write+0x10/0x10 [ 124.416990][ T2499] vfs_write+0x3c1/0xfd0 [ 124.417011][ T2499] ? __cfi_vfs_write+0x10/0x10 [ 124.417031][ T2499] ? __fget_files+0x2bc/0x330 [ 124.417056][ T2499] ksys_write+0x145/0x260 [ 124.417075][ T2499] ? xfd_validate_state+0x68/0x140 [ 124.417102][ T2499] ? __cfi_ksys_write+0x10/0x10 [ 124.417124][ T2499] ? __kasan_check_read+0x15/0x20 [ 124.417143][ T2499] __x64_sys_write+0x7f/0x90 [ 124.417164][ T2499] x64_sys_call+0x271c/0x2ee0 [ 124.417184][ T2499] do_syscall_64+0x57/0xf0 [ 124.417207][ T2499] ? clear_bhb_loop+0x50/0xa0 [ 124.417234][ T2499] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 124.417266][ T2499] RIP: 0033:0x7f2f26f9e019 [ 124.417283][ T2499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.417299][ T2499] RSP: 002b:00007f2f27ddb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.417323][ T2499] RAX: ffffffffffffffda RBX: 00007f2f27225fa0 RCX: 00007f2f26f9e019 [ 124.417338][ T2499] RDX: 000000000000045c RSI: 0000200000000300 RDI: 0000000000000003 [ 124.417352][ T2499] RBP: 00007f2f27ddb090 R08: 0000000000000000 R09: 0000000000000000 [ 124.417364][ T2499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.417374][ T2499] R13: 00007f2f27226038 R14: 00007f2f27225fa0 R15: 00007fffb3188b18 [ 124.417384][ T2499] [ 124.454289][ T2503] syzkaller1: entered promiscuous mode [ 124.679162][ T2503] syzkaller1: entered allmulticast mode [ 124.747780][ T758] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 124.802675][ T2503] Write-error on swap-device (8:0:788654) Aug 4 06:49:08 [ 124.813899][ T2512] input: syz1 as /devices/virtual/input/input108 syzkaller kern.alert kernel: [ 124.802675][ T2503] Write-error on swap-device (8:0:788654) [ 124.889690][ T2520] syzkaller1: entered promiscuous mode [ 124.895221][ T2520] syzkaller1: entered allmulticast mode [ 124.934557][ T758] usb 2-1: not running at top speed; connect to a high speed hub [ 124.943403][ T758] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 124.954976][ T758] usb 2-1: language id specifier not provided by device, defaulting to English [ 124.965471][ T758] usb 2-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 124.974593][ T758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.982765][ T758] usb 2-1: Product: ࠉ [ 124.986981][ T758] usb 2-1: Manufacturer: 曯钎펊᮪첈躂敓ᵔ펠ꭧ襊횛蟇匜灔芌䮄䴱誁딼ފⰵ⁵ᔪ㡥톞䤞꣞띉᪝烲팭⳻龭㢥⮿ź엜 [ 125.002242][ T758] usb 2-1: SerialNumber: 핕͎ፈ☔涺㬃稾䲆횒옓↗ᙉ赠ꌖ驝护海㜽곿钢銛蜡ອ㙻睐잋ꒁ뽧縉蜿ꡁᥖ꧙쎤鸾파ﰡ׭䟏ⵅ甦꼠ၿ边톴婴໼躺馵䍃ƴԎ쵦ᬠ勖㬞溵쎁릊Ѧ恕㥩젧뭍䘣ᾏ੥ꕔ㳔濼䦵䔽֔苀鹲䉢䇌镒ᘜ濒醙嫱숬ꊿ⊽綰築釫㹌ᦔ暔챌ԉ㽁庹뷲뼩린ꍺᤑרּ쯁墨㪘출㇃㐴豑釛⮬欿垪 [ 125.135981][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 125.136015][ T36] audit: type=1400 audit(1785826148.984:363): avc: denied { execute } for pid=2538 comm="syz.2.775" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=22672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 125.191589][ T339] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 125.229609][ T2546] input: syz1 as /devices/virtual/input/input109 [ 125.275886][ T2548] can0: slcan on ttyS3. [ 125.290974][ T2501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.307187][ T2501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.322234][ T758] usb 2-1: 1:1 : no UAC_FORMAT_TYPE desc [ 125.330251][ T758] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 125.337144][ T339] usb 1-1: device descriptor read/64, error -71 [ 125.354791][ T758] usb 2-1: USB disconnect, device number 38 [ 125.549077][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 125.603280][ T339] usb 1-1: device descriptor read/64, error -71 [ 125.711610][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 125.718268][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.726879][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 125.733377][ T368] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 125.735848][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.753464][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.764630][ T10] usb 3-1: language id specifier not provided by device, defaulting to English [ 125.774858][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.783974][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 125.792092][ T10] usb 3-1: Product: Н [ 125.796240][ T10] usb 3-1: Manufacturer: ␁ [ 125.800849][ T10] usb 3-1: SerialNumber: syz [ 125.874207][ T339] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 125.895844][ T368] usb 4-1: Using ep0 maxpacket: 8 [ 125.902388][ T368] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.911277][ T368] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 125.919501][ T368] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 125.928314][ T368] usb 4-1: config 4 has no interface number 0 [ 125.935904][ T368] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 125.945702][ T368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.954384][ T368] usb 4-1: Product: syz [ 125.958554][ T368] usb 4-1: Manufacturer: syz [ 125.963322][ T368] usb 4-1: SerialNumber: syz [ 126.015029][ T339] usb 1-1: device descriptor read/64, error -71 [ 126.029934][ T10] usb 3-1: 0:2 : does not exist [ 126.035114][ T10] usb 3-1: unit 1 not found! [ 126.043378][ T10] usb 3-1: USB disconnect, device number 40 [ 126.053319][ T2547] can0 (unregistered): slcan off ttyS3. [ 126.061241][ T1830] udevd[1830]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.199434][ T315] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 126.284717][ T2562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.286066][ T339] usb 1-1: device descriptor read/64, error -71 [ 126.294553][ T2562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.372694][ T315] usb 2-1: Using ep0 maxpacket: 32 [ 126.379405][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.390723][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.401659][ T315] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 126.411314][ T315] usb 2-1: New USB device strings: Mfr=24, Product=0, SerialNumber=0 [ 126.419726][ T315] usb 2-1: Manufacturer: syz [ 126.429081][ T315] usb 2-1: config 0 descriptor?? [ 126.437783][ T339] usb usb1-port1: attempt power cycle [ 126.806122][ T339] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 126.829650][ T339] usb 1-1: device descriptor read/8, error -71 [ 126.973936][ T339] usb 1-1: device descriptor read/8, error -71 [ 127.250424][ T339] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 127.284036][ T339] usb 1-1: device descriptor read/8, error -71 [ 127.424938][ T339] usb 1-1: device descriptor read/8, error -71 [ 127.548321][ T339] usb usb1-port1: unable to enumerate USB device [ 127.561847][ T36] audit: type=1400 audit(1785826151.227:364): avc: denied { create } for pid=2590 comm="syz.2.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 127.637508][ T315] usbhid 2-1:0.0: can't add hid device: -71 [ 127.651391][ T315] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 127.661134][ T315] usb 2-1: USB disconnect, device number 39 [ 127.752849][ T36] audit: type=1326 audit(1785826151.411:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2601 comm="syz.1.794" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52bc79e019 code=0x0 [ 128.413513][ T36] audit: type=1400 audit(1785826152.020:366): avc: denied { read } for pid=2620 comm="syz.0.800" name="file0" dev="tmpfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 128.435861][ T36] audit: type=1400 audit(1785826152.020:367): avc: denied { open } for pid=2620 comm="syz.0.800" path="/206/file0" dev="tmpfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 128.669931][ T758] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 128.679689][ T2627] netlink: 26148 bytes leftover after parsing attributes in process `syz.1.802'. [ 128.689210][ T2627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'. [ 128.700487][ T368] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 128.707492][ T368] uvcvideo 4-1:4.147: Entity type for entity Output 251 was not initialized! [ 128.716706][ T368] usb 4-1: Failed to create links for entity 251 [ 128.723176][ T368] usb 4-1: Failed to register entities (-22). [ 128.731261][ T368] usb 4-1: USB disconnect, device number 41 [ 128.734937][ T315] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 128.877485][ T758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 128.896677][ T758] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 128.911405][ T758] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 128.911626][ T315] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 128.921092][ T758] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.934638][ T315] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice= 0.40 [ 128.949461][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.952945][ T758] usb 1-1: config 0 descriptor?? [ 128.973450][ T315] usb 3-1: Product: ю [ 128.976581][ T2622] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 128.977664][ T315] usb 3-1: Manufacturer: ࡓ [ 128.989353][ T315] usb 3-1: SerialNumber: Ї [ 129.092085][ T2647] syzkaller1: entered promiscuous mode [ 129.097684][ T2647] syzkaller1: entered allmulticast mode [ 129.203741][ T758] usbhid 1-1:0.0: can't add hid device: -71 [ 129.213749][ T758] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 129.220667][ T315] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 129.223964][ T758] usb 1-1: USB disconnect, device number 45 [ 129.233173][ T315] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 129.245829][ T2649] random: crng reseeded on system resumption [ 129.246288][ T36] audit: type=1400 audit(1785826152.786:368): avc: denied { write } for pid=2648 comm="syz.1.810" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 129.281144][ T36] audit: type=1400 audit(1785826152.814:369): avc: denied { ioctl } for pid=2648 comm="syz.1.810" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 129.283777][ T315] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 129.333916][ T315] usb 3-1: USB disconnect, device number 41 [ 129.336688][ T1830] udevd[1830]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 129.372043][ T36] audit: type=1400 audit(1785826152.897:370): avc: denied { mounton } for pid=2650 comm="syz.3.811" path=2F3135302FE91F7189591E9233614B dev="tmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 129.372077][ T2651] 9pnet_virtio: no channels available for device qY3aK [ 129.484069][ T36] audit: type=1400 audit(1785826153.008:371): avc: denied { read } for pid=2655 comm="syz.3.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.580199][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 129.742735][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 129.751647][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 129.763533][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.778988][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 129.793433][ T10] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.820286][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 129.830999][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.839430][ T10] usb 2-1: Product: syz [ 129.844127][ T10] usb 2-1: Manufacturer: syz [ 129.848765][ T10] usb 2-1: SerialNumber: syz [ 130.057827][ T2686] netlink: 228 bytes leftover after parsing attributes in process `syz.3.821'. [ 130.089785][ T10] usb 2-1: 0:2 : does not exist [ 130.095757][ T2686] kvm: pic: non byte write [ 130.105786][ T10] usb 2-1: USB disconnect, device number 40 [ 130.139975][ T1870] udevd[1870]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 130.205808][ T2702] Write-error on swap-device (8:0:801174) Aug 4 06:49:13 syzkaller kern.alert kernel: [ 130.205808][ T2702] Write-error [ 130.227656][ T2702] Write-error on swap-device (8:0:788086) on swap-device (8:0:801174) Aug 4 06:49:13 syzkaller kern.alert kernel: [ 130.227656][ T2702] Write-error on swap-device (8:0:788086) [ 130.253418][ T2702] Write-error on swap-device (8:0:809102) [ 130.262029][ T2702] Write-error on swap-device (8:0:809110) [ 130.268131][ T2702] Write-error on swap-device (8:0:809118) [ 130.274150][ T2702] Write-error on swap-device (8:0:809126) Aug 4 06:49:13 [ 130.281302][ T2702] Write-error on swap-device (8:0:809134) syzkaller kern.a[ 130.287758][ T2702] Write-error on swap-device (8:0:809142) lert kernel: [ [ 130.295978][ T2702] Write-error on swap-device (8:0:809150) 130.253418][ T2702] Write-error on swap-device (8:0:809102) Aug 4 06:49:13 syzkaller kern.aler[ 130.309137][ T2702] Write-error on swap-device (8:0:809158) t kernel: [ 130.262029][ T2702] Write-error on swap-device (8:0:809110) Aug 4 06:49:13 syzkaller kern.alert kernel: [ 130.268131][ T2702] Wr[ 130.327902][ T36] audit: type=1326 audit(1785826153.774:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2701 comm="syz.2.824" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f26f9e019 code=0x0 ite-error on swap-device (8:0:809118) Aug 4 06:49:13 syzkaller kern.alert kernel: [ 130.274150][ T2702] Write-error on swap-device (8:0:809126) Aug 4 06:49:13 syzkaller kern.alert kernel: [ 130.281302][ T2702] Write-error on swap-device (8:0:809134) Aug 4 06:49:13 syzkaller kern.alert kernel: [ 130.287758][ T2702] Write-error on swap-device (8:0:809142) Aug 4 06:49:13 syzkaller kern.alert kernel: [ 130.295978][ T2702] Write-error on swap-device (8:0:809150) Aug 4 06:49:13 syzkaller kern.alert kernel: [ 130.309137][ T2702] Write-error on swap-device (8:0:809158) [ 130.753086][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 130.753105][ T36] audit: type=1400 audit(1785826154.180:375): avc: denied { map } for pid=2746 comm="syz.3.835" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 130.773052][ T2747] rust_binder: 2746:2747 error while translating object: EBADF [ 130.783570][ T36] audit: type=1400 audit(1785826154.198:376): avc: denied { ioctl } for pid=2746 comm="syz.3.835" path="socket:[24155]" dev="sockfs" ino=24155 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 130.790795][ T2747] rust_binder: Failure in copy_transaction_data: EBADF [ 130.817144][ T36] audit: type=1400 audit(1785826154.198:377): avc: denied { call } for pid=2746 comm="syz.3.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 130.827013][ T2747] rust_binder: 2746:2747 transaction call to 2746:0 failed EBADF, code 0 size 72-24 [ 130.853435][ T36] audit: type=1400 audit(1785826154.198:378): avc: denied { transfer } for pid=2746 comm="syz.3.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 130.873229][ T36] audit: type=1326 audit(1785826154.272:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2746 comm="syz.3.835" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9dee79e019 code=0x0 [ 130.916363][ T758] rust_binder: 2746: undelivered TRANSACTION_ERROR: 29201 [ 131.067994][ T36] audit: type=1400 audit(1785826154.466:380): avc: denied { shutdown } for pid=2757 comm="syz.3.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.128500][ T2762] rust_binder: 2761:2762 no such ref 2 [ 131.137499][ T2762] rust_binder: 2761:2762 no such ref 0 [ 131.143030][ T2762] rust_binder: 2761:2762 got transaction to invalid handle 1 [ 131.150582][ T2762] rust_binder: 2761:2762 transaction async to 0:0 failed ENOENT, code 0 size 88-24 [ 131.151460][ T339] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 131.259957][ T315] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 131.260324][ T758] rust_binder: 2761: undelivered TRANSACTION_ERROR: 29201 [ 131.324918][ T339] usb 1-1: device descriptor read/64, error -71 [ 131.346510][ T368] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 131.423583][ T315] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 131.434710][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 131.445515][ T315] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 131.458577][ T315] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 131.467722][ T315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.476360][ T315] usb 2-1: config 0 descriptor?? [ 131.481636][ T2756] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 131.519880][ T368] usb 4-1: Using ep0 maxpacket: 8 [ 131.526029][ T368] usb 4-1: no configurations [ 131.530866][ T368] usb 4-1: can't read configurations, error -22 [ 131.563250][ T758] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 131.584944][ T339] usb 1-1: device descriptor read/64, error -71 [ 131.671620][ T368] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 131.725783][ T758] usb 3-1: Using ep0 maxpacket: 16 [ 131.732397][ T758] usb 3-1: unable to get BOS descriptor or descriptor too short [ 131.740836][ T758] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 131.751089][ T758] usb 3-1: config 5 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.764467][ T758] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 131.773641][ T758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.782015][ T758] usb 3-1: Product: syz [ 131.786199][ T758] usb 3-1: Manufacturer: syz [ 131.790935][ T758] usb 3-1: SerialNumber: syz [ 131.845001][ T368] usb 4-1: Using ep0 maxpacket: 8 [ 131.851023][ T368] usb 4-1: no configurations [ 131.855983][ T339] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 131.863556][ T368] usb 4-1: can't read configurations, error -22 [ 131.870035][ T368] usb usb4-port1: attempt power cycle [ 131.924069][ T315] belkin 0003:050D:3201.000C: unknown main item tag 0x2 [ 131.931362][ T315] belkin 0003:050D:3201.000C: unknown main item tag 0x0 [ 131.938406][ T315] belkin 0003:050D:3201.000C: unknown main item tag 0x0 [ 131.945444][ T315] belkin 0003:050D:3201.000C: unknown main item tag 0x0 [ 131.952581][ T315] belkin 0003:050D:3201.000C: unknown main item tag 0x0 [ 131.959612][ T315] belkin 0003:050D:3201.000C: unknown main item tag 0x0 [ 131.966858][ T315] belkin 0003:050D:3201.000C: unknown main item tag 0x0 [ 131.973840][ T315] belkin 0003:050D:3201.000C: unknown main item tag 0x0 [ 131.980973][ T315] belkin 0003:050D:3201.000C: unknown main item tag 0x0 [ 131.988007][ T315] belkin 0003:050D:3201.000C: unknown main item tag 0x0 [ 131.994973][ T315] belkin 0003:050D:3201.000C: unknown main item tag 0x0 [ 132.003468][ T315] belkin 0003:050D:3201.000C: hiddev96,hidraw0: USB HID v0.01 Device [HID 050d:3201] on usb-dummy_hcd.1-1/input0 [ 132.011473][ T2771] udevd[2771]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 132.025262][ T339] usb 1-1: device descriptor read/64, error -71 [ 132.032445][ T758] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 132.041094][ T758] snd-usb-audio 3-1:5.0: probe with driver snd-usb-audio failed with error -22 [ 132.142209][ T2774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.151294][ T2774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.166547][ T315] usb 2-1: USB disconnect, device number 41 [ 132.227514][ T2777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 132.246168][ T368] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 132.254258][ T758] usb 3-1: 2:1 : can't get High Capability descriptor [ 132.278820][ T368] usb 4-1: Using ep0 maxpacket: 8 [ 132.287407][ T368] usb 4-1: no configurations [ 132.297876][ T368] usb 4-1: can't read configurations, error -22 [ 132.310990][ T339] usb 1-1: device descriptor read/64, error -71 [ 132.441115][ T368] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 132.441211][ T339] usb usb1-port1: attempt power cycle [ 132.473826][ T368] usb 4-1: Using ep0 maxpacket: 8 [ 132.479241][ T368] usb 4-1: no configurations [ 132.483943][ T368] usb 4-1: can't read configurations, error -22 [ 132.490603][ T368] usb usb4-port1: unable to enumerate USB device [ 132.820262][ T339] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 132.853802][ T339] usb 1-1: device descriptor read/8, error -71 [ 132.994813][ T339] usb 1-1: device descriptor read/8, error -71 [ 133.199670][ T2784] FAULT_INJECTION: forcing a failure. [ 133.199670][ T2784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.213417][ T2784] CPU: 1 UID: 0 PID: 2784 Comm: syz.1.847 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 133.213448][ T2784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.213456][ T2784] Call Trace: [ 133.213462][ T2784] [ 133.213468][ T2784] __dump_stack+0x21/0x30 [ 133.213489][ T2784] dump_stack_lvl+0x140/0x1c0 [ 133.213504][ T2784] ? __cfi_dump_stack_lvl+0x10/0x10 [ 133.213520][ T2784] ? do_vfs_ioctl+0x182d/0x2010 [ 133.213534][ T2784] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 133.213548][ T2784] dump_stack+0x19/0x20 [ 133.213593][ T2784] should_fail_ex+0x3c2/0x510 [ 133.213606][ T2784] should_fail+0xf/0x20 [ 133.213618][ T2784] should_fail_usercopy+0x1e/0x30 [ 133.213631][ T2784] _copy_from_user+0x20/0xa0 [ 133.213646][ T2784] kvm_vm_ioctl+0x5b0/0xc40 [ 133.213662][ T2784] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 133.213677][ T2784] ? ioctl_has_perm+0x1bc/0x500 [ 133.213688][ T2784] ? __asan_memcpy+0x5a/0x80 [ 133.213700][ T2784] ? ioctl_has_perm+0x408/0x500 [ 133.213711][ T2784] ? has_cap_mac_admin+0xd0/0xd0 [ 133.213723][ T2784] ? proc_fail_nth_write+0x184/0x220 [ 133.213739][ T2784] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 133.213755][ T2784] ? vfs_write+0xbcf/0xfd0 [ 133.213767][ T2784] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 133.213779][ T2784] ? __cfi_vfs_write+0x10/0x10 [ 133.213790][ T2784] ? __kasan_check_write+0x18/0x20 [ 133.213802][ T2784] ? mutex_unlock+0x90/0x240 [ 133.213817][ T2784] ? __cfi_mutex_unlock+0x10/0x10 [ 133.213832][ T2784] ? bpf_lsm_file_ioctl+0xd/0x20 [ 133.213847][ T2784] ? security_file_ioctl+0x3e/0x110 [ 133.213862][ T2784] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 133.213877][ T2784] __se_sys_ioctl+0x132/0x1b0 [ 133.213891][ T2784] __x64_sys_ioctl+0x7f/0xa0 [ 133.213904][ T2784] x64_sys_call+0x1878/0x2ee0 [ 133.213915][ T2784] do_syscall_64+0x57/0xf0 [ 133.213928][ T2784] ? clear_bhb_loop+0x50/0xa0 [ 133.213943][ T2784] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 133.213958][ T2784] RIP: 0033:0x7f52bc79e019 [ 133.213970][ T2784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.213981][ T2784] RSP: 002b:00007f52bd68b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.213996][ T2784] RAX: ffffffffffffffda RBX: 00007f52bca25fa0 RCX: 00007f52bc79e019 [ 133.214005][ T2784] RDX: 0000200000000480 RSI: 00000000c018aec0 RDI: 0000000000000004 [ 133.214014][ T2784] RBP: 00007f52bd68b090 R08: 0000000000000000 R09: 0000000000000000 [ 133.214022][ T2784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.214030][ T2784] R13: 00007f52bca26038 R14: 00007f52bca25fa0 R15: 00007ffc682bee98 [ 133.214040][ T2784] [ 133.500083][ T339] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 133.526248][ T339] usb 1-1: device descriptor read/8, error -71 [ 133.533698][ T36] audit: type=1400 audit(1785826156.736:381): avc: denied { read } for pid=2785 comm="syz.1.848" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 133.556553][ T36] audit: type=1400 audit(1785826156.736:382): avc: denied { open } for pid=2785 comm="syz.1.848" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 133.598471][ T2790] syzkaller1: entered promiscuous mode [ 133.604091][ T2790] syzkaller1: entered allmulticast mode [ 133.663314][ T2794] input: syz1 as /devices/virtual/input/input111 [ 133.672510][ T339] usb 1-1: device descriptor read/8, error -71 [ 133.689218][ T2796] FAULT_INJECTION: forcing a failure. [ 133.689218][ T2796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.702454][ T2796] CPU: 0 UID: 0 PID: 2796 Comm: syz.1.853 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 133.702495][ T2796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.702507][ T2796] Call Trace: [ 133.702515][ T2796] [ 133.702523][ T2796] __dump_stack+0x21/0x30 [ 133.702555][ T2796] dump_stack_lvl+0x140/0x1c0 [ 133.702579][ T2796] ? __cfi_dump_stack_lvl+0x10/0x10 [ 133.702594][ T2796] ? check_stack_object+0x138/0x150 [ 133.702608][ T2796] dump_stack+0x19/0x20 [ 133.702622][ T2796] should_fail_ex+0x3c2/0x510 [ 133.702635][ T2796] should_fail+0xf/0x20 [ 133.702646][ T2796] should_fail_usercopy+0x1e/0x30 [ 133.702659][ T2796] _copy_to_user+0x24/0xa0 [ 133.702675][ T2796] simple_read_from_buffer+0xed/0x160 [ 133.702691][ T2796] proc_fail_nth_read+0x1aa/0x220 [ 133.702707][ T2796] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 133.702722][ T2796] ? bpf_lsm_file_permission+0xd/0x20 [ 133.702737][ T2796] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 133.702752][ T2796] vfs_read+0x28b/0xc70 [ 133.702764][ T2796] ? __cfi_vfs_read+0x10/0x10 [ 133.702775][ T2796] ? __kasan_check_write+0x18/0x20 [ 133.702787][ T2796] ? mutex_lock+0x97/0x1d0 [ 133.702802][ T2796] ? __cfi_mutex_lock+0x10/0x10 [ 133.702817][ T2796] ksys_read+0x145/0x260 [ 133.702828][ T2796] ? __fget_files+0x2bc/0x330 [ 133.702841][ T2796] ? __cfi_ksys_read+0x10/0x10 [ 133.702853][ T2796] ? __kasan_check_write+0x18/0x20 [ 133.702864][ T2796] ? __kasan_check_read+0x15/0x20 [ 133.702876][ T2796] __x64_sys_read+0x7f/0x90 [ 133.702887][ T2796] x64_sys_call+0x2638/0x2ee0 [ 133.702898][ T2796] do_syscall_64+0x57/0xf0 [ 133.702911][ T2796] ? clear_bhb_loop+0x50/0xa0 [ 133.702926][ T2796] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 133.702940][ T2796] RIP: 0033:0x7f52bc75e84e [ 133.702959][ T2796] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 133.702970][ T2796] RSP: 002b:00007f52bd68afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 133.702985][ T2796] RAX: ffffffffffffffda RBX: 00007f52bd68b6c0 RCX: 00007f52bc75e84e [ 133.702995][ T2796] RDX: 000000000000000f RSI: 00007f52bd68b0a0 RDI: 0000000000000003 [ 133.703003][ T2796] RBP: 00007f52bd68b090 R08: 0000000000000000 R09: 0000000000000000 [ 133.703011][ T2796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.703019][ T2796] R13: 00007f52bca26038 R14: 00007f52bca25fa0 R15: 00007ffc682bee98 [ 133.703029][ T2796] [ 133.795635][ T339] usb usb1-port1: unable to enumerate USB device [ 134.107391][ T2813] syzkaller1: entered promiscuous mode [ 134.112991][ T2813] syzkaller1: entered allmulticast mode [ 134.143583][ T36] audit: type=1400 audit(1785826157.308:383): avc: denied { read } for pid=2814 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 134.201673][ T2820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.860'. [ 134.241365][ T36] audit: type=1400 audit(1785826157.400:384): avc: denied { bind } for pid=2823 comm="syz.1.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.262130][ T2824] netlink: 32 bytes leftover after parsing attributes in process `syz.1.864'. [ 134.532396][ T339] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 134.559123][ T315] usb 3-1: USB disconnect, device number 42 [ 134.694938][ T339] usb 2-1: Using ep0 maxpacket: 16 [ 134.701212][ T339] usb 2-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 134.711611][ T339] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.720805][ T339] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 134.729880][ T339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.738584][ T339] usb 2-1: config 0 descriptor?? [ 134.922548][ T315] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 135.085045][ T315] usb 3-1: Using ep0 maxpacket: 32 [ 135.096670][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.108134][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.119208][ T315] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 135.128398][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.142136][ T315] usb 3-1: config 0 descriptor?? [ 135.155914][ T315] hub 3-1:0.0: USB hub found [ 135.197776][ T2848] syzkaller1: entered promiscuous mode [ 135.203566][ T2848] syzkaller1: entered allmulticast mode [ 135.334378][ T2853] input: syz1 as /devices/virtual/input/input112 [ 135.378140][ T315] hub 3-1:0.0: 1 port detected [ 135.575187][ T2873] syzkaller1: entered promiscuous mode [ 135.580880][ T2873] syzkaller1: entered allmulticast mode [ 135.935126][ T2885] input: syz1 as /devices/virtual/input/input113 [ 136.251437][ T9] usb 3-1: USB disconnect, device number 43 [ 136.264041][ T2891] syzkaller0: refused to change device tx_queue_len [ 136.478238][ T2900] vlan1: entered promiscuous mode [ 136.483461][ T2900] vlan1: entered allmulticast mode [ 136.488655][ T2900] veth0_vlan: entered allmulticast mode [ 136.587111][ T2902] syzkaller1: entered promiscuous mode [ 136.592691][ T2902] syzkaller1: entered allmulticast mode [ 137.089754][ T368] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 137.152418][ T2912] netlink: 'syz.3.895': attribute type 16 has an invalid length. [ 137.160517][ T2912] netlink: 'syz.3.895': attribute type 2 has an invalid length. [ 137.168421][ T2912] netlink: 64110 bytes leftover after parsing attributes in process `syz.3.895'. [ 137.192568][ T2915] rust_binder: 2914:2915 error while translating object: EINVAL [ 137.200477][ T2915] rust_binder: Failure in copy_transaction_data: EINVAL [ 137.200508][ T2915] rust_binder: 2914:2915 transaction call to 2914:0 failed EINVAL, code 0 size 120-24 [ 137.230651][ T368] usb 3-1: device descriptor read/64, error -71 [ 137.263623][ T566] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 137.281338][ T2917] tipc: Enabling of bearer rejected, failed to enable media [ 137.404032][ T566] usb 1-1: device descriptor read/64, error -71 [ 137.490741][ T368] usb 3-1: device descriptor read/64, error -71 [ 137.502572][ T315] usb 2-1: USB disconnect, device number 42 [ 137.527148][ T2923] __end_swap_bio_write: 18 callbacks suppressed [ 137.527169][ T2923] Write-error on swap-device (8:0:788350) Aug 4 06:49:20 syzkaller kern.alert kernel: [ 137.527169][ T2923] Write-error on swap-device (8:0:788350) [ 137.596329][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 137.596348][ T36] audit: type=1400 audit(1785826160.483:387): avc: denied { setopt } for pid=2922 comm="syz.1.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.599070][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 137.602908][ T36] audit: type=1400 audit(1785826160.483:388): avc: denied { read } for pid=2922 comm="syz.1.900" name="sub_compatible_id" dev="configfs" ino=26389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 137.653798][ T36] audit: type=1400 audit(1785826160.483:389): avc: denied { open } for pid=2922 comm="syz.1.900" path="/232/config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/sub_compatible_id" dev="configfs" ino=26389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 137.683323][ T566] usb 1-1: device descriptor read/64, error -71 [ 137.783326][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 137.790056][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 137.798005][ T9] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 137.807023][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 137.814609][ T9] usb 4-1: can't read configurations, error -61 [ 137.815782][ T368] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 137.945881][ T566] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 137.956673][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 137.967582][ T368] usb 3-1: device descriptor read/64, error -71 [ 138.097559][ T566] usb 1-1: device descriptor read/64, error -71 [ 138.119201][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 138.126041][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 138.133800][ T9] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 138.142718][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 138.150925][ T9] usb 4-1: can't read configurations, error -61 [ 138.157814][ T9] usb usb4-port1: attempt power cycle [ 138.249241][ T368] usb 3-1: device descriptor read/64, error -71 [ 138.357612][ T566] usb 1-1: device descriptor read/64, error -71 [ 138.368730][ T368] usb usb3-port1: attempt power cycle [ 138.438731][ T2926] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 138.492161][ T566] usb usb1-port1: attempt power cycle [ 138.531025][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 138.553007][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 138.559491][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 138.567254][ T9] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 138.576311][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 138.583955][ T9] usb 4-1: can't read configurations, error -61 [ 138.726047][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 138.748058][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 138.754803][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 138.758578][ T368] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 138.762558][ T9] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 138.779102][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 138.786766][ T9] usb 4-1: can't read configurations, error -61 [ 138.793295][ T9] usb usb4-port1: unable to enumerate USB device [ 138.802980][ T368] usb 3-1: device descriptor read/8, error -71 [ 138.866924][ T566] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 138.889793][ T566] usb 1-1: device descriptor read/8, error -71 [ 138.943898][ T368] usb 3-1: device descriptor read/8, error -71 [ 139.030523][ T566] usb 1-1: device descriptor read/8, error -71 [ 139.203530][ T368] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 139.225713][ T368] usb 3-1: device descriptor read/8, error -71 [ 139.289530][ T566] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 139.312459][ T566] usb 1-1: device descriptor read/8, error -71 [ 139.366409][ T368] usb 3-1: device descriptor read/8, error -71 [ 139.434195][ T2933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.442896][ T2933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.453168][ T566] usb 1-1: device descriptor read/8, error -71 [ 139.484670][ T368] usb usb3-port1: unable to enumerate USB device [ 139.571369][ T566] usb usb1-port1: unable to enumerate USB device [ 139.690528][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 139.855676][ T9] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 139.865096][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.873114][ T9] usb 2-1: Product: syz [ 139.877362][ T9] usb 2-1: Manufacturer: 멥쵍ⵝ⩨ஊ縋㎛辏愛㐜뺙譐̍ᦄ襵㞺凾蛙쐢뷹큩⌹荃ፎᆲ싂뗲깈퓲㲕虙鵅쥲巓軗셙搆빩暮︦㙅缛祘䒷湖픶ඒ㠬췡襰澍⍨Ӫт诬ۮ棗☧嫝维⅀∠᜔᳑놗렙ﳦ㣜䟱ǵ䐖䊒뒺ᄉ즥띍큊ಕቋ亘㎷읕Ꞇ㔥Іㅾ萋 [ 139.906897][ T9] usb 2-1: SerialNumber: syz [ 140.149407][ T2937] mmap: syz.2.904 (2937) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.156005][ T2933] Write-error on swap-device (8:0:788358) [ 140.168369][ T2933] Write-error on swap-device (8:0:788366) [ 140.174228][ T2933] Write-error on swap-device (8:0:788374) Aug 4 06:49:22 [ 140.180766][ T2933] Write-error on swap-device (8:0:788382) syzkaller kern.a[ 140.188051][ T2933] Write-error on swap-device (8:0:788390) lert kernel: [ [ 140.195341][ T2933] Write-error on swap-device (8:0:788398) 140.156005][ T29[ 140.202427][ T2933] Write-error on swap-device (8:0:788406) 33] Write-error [ 140.202514][ T2933] Write-error on swap-device (8:0:788414) on swap-device ([ 140.217244][ T2933] Write-error on swap-device (8:0:788422) 8:0:788358) Aug 4 06:49:22 syzkaller kern.alert kernel: [ 140.168369][ T2933] Write-error on swap-device (8:0:788366) Aug 4 06:49:22 syzkaller kern.alert kernel: [ 140.174228][ T2933] Write-error on swap-device (8:0:788374) Aug 4 06:49:22 syzkaller kern.alert kernel: [ 140.180766][ T2933] Write-error on swap-device (8:0:788382) Aug 4 06:49:22 syzkaller kern.alert kernel: [ 140.188051][ T2933] Write-error on swap-device (8:0:788390) Aug 4 06:49:22 syzkaller kern.alert kernel: [ 140.195341][ T2933] Write-error on swap-device (8:0:788398) Aug 4 06:49:22 syzkaller kern.alert kernel: [ 140.202427][ T2933] Write-error on swap-device (8:0:788406) Aug 4 06:49:22 syzkaller kern.alert kernel: [ 140.202514][ T2933] Write-error on swap-device (8:0:788414) Aug 4 06:49:22 syzkaller kern.alert kernel: [ 140.217244][ T2933] Write-error on swap-device (8:0:788422) [ 140.546556][ T368] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 140.722462][ T368] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 140.741579][ T368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.741720][ T315] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 140.749779][ T368] usb 3-1: Product: syz [ 140.749803][ T368] usb 3-1: Manufacturer: syz [ 140.749819][ T368] usb 3-1: SerialNumber: syz [ 140.926948][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 140.937203][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 36, changing to 7 [ 140.948621][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 18095, setting to 1024 [ 140.961810][ T315] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 140.971218][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.979419][ T315] usb 1-1: Product: syz [ 140.985453][ T368] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 140.987570][ T315] usb 1-1: Manufacturer: syz [ 140.999529][ T315] usb 1-1: SerialNumber: syz [ 141.009603][ T315] usb 1-1: config 0 descriptor?? [ 141.011863][ T368] usb 3-1: USB disconnect, device number 48 [ 141.021267][ T315] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 39, bLength 9, bSynchAddress 24 [ 141.034294][ T1870] udevd[1870]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 141.045093][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 141.218385][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 141.225220][ T10] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 141.236564][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 141.247035][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 141.257272][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41845, setting to 1024 [ 141.269372][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 141.284087][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 141.299583][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.308755][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 141.317229][ T10] usb 4-1: SerialNumber: syz [ 141.322844][ T2954] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 141.331307][ T10] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 141.551519][ T10] usb 4-1: USB disconnect, device number 50 [ 141.803554][ T368] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 141.967270][ T368] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.977799][ T368] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.988350][ T368] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 141.997510][ T368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.005760][ T368] usb 3-1: Product: syz [ 142.010002][ T368] usb 3-1: Manufacturer: syz [ 142.014711][ T368] usb 3-1: SerialNumber: syz [ 142.239661][ T2958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.248466][ T2958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.432058][ T1868] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 142.594637][ T1868] usb 4-1: Using ep0 maxpacket: 8 [ 142.600774][ T1868] usb 4-1: config 1 has an invalid interface number: 33 but max is 2 [ 142.609169][ T1868] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 142.618171][ T1868] usb 4-1: config 1 has no interface number 3 [ 142.624339][ T1868] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.635343][ T1868] usb 4-1: config 1 interface 1 has no altsetting 0 [ 142.643412][ T1868] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 142.652691][ T1868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.661172][ T1868] usb 4-1: Product: syz [ 142.665358][ T1868] usb 4-1: Manufacturer: syz [ 142.669985][ T1868] usb 4-1: SerialNumber: syz [ 142.948448][ T2977] block device autoloading is deprecated and will be removed. [ 142.968731][ T2981] syzkaller1: entered promiscuous mode [ 142.974358][ T2981] syzkaller1: entered allmulticast mode [ 143.671235][ T339] rust_binder: 2946: undelivered death notification, 0000000000000000 [ 143.677494][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 143.690333][ T315] usb 1-1: USB disconnect, device number 54 [ 143.700970][ T368] usb 3-1: unit 4 not found! [ 143.701235][ T9] usb 2-1: USB disconnect, device number 43 [ 143.731038][ T368] usb 3-1: USB disconnect, device number 49 [ 143.732943][ T1868] usb 4-1: selecting invalid altsetting 0 [ 143.753364][ T1868] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 143.762106][ T1868] usb 4-1: 1:1 : sample bitwidth 177 in over sample bytes 2 [ 143.770100][ T1868] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 143.776370][ T1868] usb 4-1: selecting invalid altsetting 0 [ 143.785281][ T1868] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 143.798819][ T1868] usb 4-1: USB disconnect, device number 51 [ 143.824300][ T1828] udevd[1828]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.844469][ T2998] netlink: 'syz.0.923': attribute type 5 has an invalid length. [ 143.853052][ T2998] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.923'. [ 143.908561][ T3015] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.909002][ T3014] rust_binder: 3013:3014 error while translating object: EPERM [ 143.923269][ T3014] rust_binder: Failure in copy_transaction_data: EPERM [ 143.923294][ T3014] rust_binder: 3013:3014 transaction call to 3013:0 failed EPERM, code 0 size 80-24 [ 143.941516][ T10] rust_binder: 3013: undelivered TRANSACTION_ERROR: 29201 [ 144.003785][ T36] audit: type=1400 audit(1785826166.407:390): avc: denied { getopt } for pid=3020 comm="syz.2.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 144.122652][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 144.133377][ T1868] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 144.263472][ T9] usb 2-1: device descriptor read/64, error -71 [ 144.295933][ T10] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 144.303878][ T315] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 144.313036][ T1868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 144.324175][ T1868] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 144.337531][ T1868] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 144.346787][ T1868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.355756][ T1868] usb 4-1: config 0 descriptor?? [ 144.361515][ T2987] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.447699][ T315] usb 1-1: device descriptor read/64, error -71 [ 144.470029][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 144.478732][ T10] usb 3-1: config 0 has an invalid interface number: 62 but max is 0 [ 144.486907][ T10] usb 3-1: config 0 has no interface number 0 [ 144.493138][ T10] usb 3-1: config 0 interface 62 has no altsetting 0 [ 144.501399][ T10] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1ab5, bcdDevice= 2.00 [ 144.510734][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.518782][ T10] usb 3-1: Product: syz [ 144.523134][ T10] usb 3-1: Manufacturer: syz [ 144.527954][ T9] usb 2-1: device descriptor read/64, error -71 [ 144.534303][ T10] usb 3-1: SerialNumber: syz [ 144.539615][ T10] usb 3-1: config 0 descriptor?? [ 144.707730][ T315] usb 1-1: device descriptor read/64, error -71 [ 144.766127][ T10] usb-storage 3-1:0.62: USB Mass Storage device detected [ 144.774192][ T10] usb-storage 3-1:0.62: Quirks match for vid 1b1c pid 1ab5: 100000 [ 144.805247][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 144.818446][ T10] usb 3-1: USB disconnect, device number 50 [ 144.825466][ T2987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.834020][ T2987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.845575][ T36] audit: type=1400 audit(1785826167.182:391): avc: denied { mounton } for pid=2986 comm="syz.3.920" path="/194/file0" dev="tmpfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.908909][ T1868] waltop 0003:172F:0501.000D: hidraw0: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.3-1/input0 [ 144.912802][ T3031] udevd[3031]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 144.946165][ T9] usb 2-1: device descriptor read/64, error -71 [ 144.967768][ T315] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 145.108649][ T315] usb 1-1: device descriptor read/64, error -71 [ 145.133819][ T10] usb 4-1: USB disconnect, device number 52 [ 145.368710][ T315] usb 1-1: device descriptor read/64, error -71 [ 145.488003][ T315] usb usb1-port1: attempt power cycle [ 145.574644][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 145.609563][ T3060] __end_swap_bio_write: 24032 callbacks suppressed [ 145.609581][ T3060] Write-error on swap-device (8:0:934142) Aug 4 06:49:27 syzkaller kern.alert kernel: [ 145.609581][ T3060] Write-error on swap-device (8:0:934142) [ 145.726328][ T10] usb 3-1: device descriptor read/64, error -71 [ 145.856366][ T315] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 145.879186][ T315] usb 1-1: device descriptor read/8, error -71 [ 145.986423][ T10] usb 3-1: device descriptor read/64, error -71 [ 146.019956][ T315] usb 1-1: device descriptor read/8, error -71 [ 146.246474][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 146.278974][ T315] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 146.301838][ T315] usb 1-1: device descriptor read/8, error -71 [ 146.387362][ T10] usb 3-1: device descriptor read/64, error -71 [ 146.442655][ T315] usb 1-1: device descriptor read/8, error -71 [ 146.560820][ T315] usb usb1-port1: unable to enumerate USB device [ 146.647440][ T10] usb 3-1: device descriptor read/64, error -71 [ 146.766762][ T10] usb usb3-port1: attempt power cycle [ 147.135101][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 147.157726][ T10] usb 3-1: device descriptor read/8, error -71 [ 147.298758][ T10] usb 3-1: device descriptor read/8, error -71 [ 147.557678][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 147.580667][ T10] usb 3-1: device descriptor read/8, error -71 [ 147.721396][ T10] usb 3-1: device descriptor read/8, error -71 [ 147.839587][ T10] usb usb3-port1: unable to enumerate USB device [ 153.833282][ T3072] 9pnet_fd: Insufficient options for proto=fd [ 153.841610][ T3068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3068 comm=syz.3.949 [ 153.855608][ T3066] FAULT_INJECTION: forcing a failure. [ 153.855608][ T3066] name failslab, interval 1, probability 0, space 0, times 0 [ 153.868631][ T3066] CPU: 0 UID: 0 PID: 3066 Comm: syz.1.947 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 153.868666][ T3066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.868680][ T3066] Call Trace: [ 153.868686][ T3066] [ 153.868694][ T3066] __dump_stack+0x21/0x30 [ 153.868725][ T3066] dump_stack_lvl+0x140/0x1c0 [ 153.868749][ T3066] ? __cfi_dump_stack_lvl+0x10/0x10 [ 153.868775][ T3066] dump_stack+0x19/0x20 [ 153.868800][ T3066] should_fail_ex+0x3c2/0x510 [ 153.868823][ T3066] should_failslab+0xac/0x100 [ 153.868848][ T3066] kmem_cache_alloc_noprof+0x42/0x410 [ 153.868868][ T3066] ? vm_area_dup+0x3f/0x560 [ 153.868891][ T3066] vm_area_dup+0x3f/0x560 [ 153.868912][ T3066] ? __split_vma+0x1b8/0xc10 [ 153.868933][ T3066] __split_vma+0x1ce/0xc10 [ 153.868952][ T3066] ? avc_has_perm_noaudit+0x26b/0x360 [ 153.868977][ T3066] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 153.869001][ T3066] ? __cfi_avc_has_perm+0x10/0x10 [ 153.869024][ T3066] vma_modify+0x364/0x1540 [ 153.869048][ T3066] vma_modify_flags+0x182/0x1c0 [ 153.869071][ T3066] mprotect_fixup+0x432/0x8d0 [ 153.869097][ T3066] ? __cfi_selinux_file_mprotect+0x10/0x10 [ 153.869118][ T3066] ? __cfi_mprotect_fixup+0x10/0x10 [ 153.869144][ T3066] ? bpf_lsm_file_mprotect+0xd/0x20 [ 153.869171][ T3066] do_mprotect_pkey+0xa85/0xe50 [ 153.869199][ T3066] ? prot_none_test+0x30/0x30 [ 153.869224][ T3066] ? mutex_unlock+0x90/0x240 [ 153.869263][ T3066] ? fput+0x1a4/0x230 [ 153.869289][ T3066] ? __cfi_ksys_write+0x10/0x10 [ 153.869311][ T3066] ? __kasan_check_read+0x15/0x20 [ 153.869331][ T3066] __x64_sys_mprotect+0x84/0xa0 [ 153.869355][ T3066] x64_sys_call+0x2590/0x2ee0 [ 153.869373][ T3066] do_syscall_64+0x57/0xf0 [ 153.869394][ T3066] ? clear_bhb_loop+0x50/0xa0 [ 153.869421][ T3066] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 153.869444][ T3066] RIP: 0033:0x7f52bc79e019 [ 153.869462][ T3066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.869480][ T3066] RSP: 002b:00007f52bd68b028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 153.869513][ T3066] RAX: ffffffffffffffda RBX: 00007f52bca25fa0 RCX: 00007f52bc79e019 [ 153.869529][ T3066] RDX: 0000000000000004 RSI: 0000000000001000 RDI: 0000200000ffc000 [ 153.869544][ T3066] RBP: 00007f52bd68b090 R08: 0000000000000000 R09: 0000000000000000 [ 153.869558][ T3066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.869572][ T3066] R13: 00007f52bca26038 R14: 00007f52bca25fa0 R15: 00007ffc682bee98 [ 153.869590][ T3066] [ 154.417026][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 154.438707][ T758] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 154.485976][ T3108] netlink: 'syz.2.957': attribute type 5 has an invalid length. [ 154.568772][ T9] usb 1-1: device descriptor read/64, error -71 [ 154.602474][ T758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 154.613815][ T758] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 154.626699][ T758] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 154.635779][ T758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.644705][ T758] usb 2-1: config 0 descriptor?? [ 154.650411][ T3098] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 154.715536][ T3120] Write-error on swap-device (8:0:934158) [ 154.721465][ T3120] Write-error on swap-device (8:0:934166) [ 154.727283][ T3120] Write-error on swap-device (8:0:934174) [ 154.733142][ T3120] Write-error on swap-device (8:0:934182) [ 154.738973][ T3120] Write-error on swap-device (8:0:934190) Aug 4 06:49:36 [ 154.744838][ T3120] Write-error on swap-device (8:0:934198) syzkaller kern.a[ 154.752050][ T3120] Write-error on swap-device (8:0:934206) lert kernel: [ [ 154.759233][ T3120] Write-error on swap-device (8:0:934214) 154.715536][ T31[ 154.766436][ T3120] Write-error on swap-device (8:0:934222) 20] Write-error [ 154.766633][ T315] usb 4-1: new high-speed USB device number 53 using dummy_hcd on swap-device ([ 154.773526][ T3120] Write-error on swap-device (8:0:934230) 8:0:934158) Aug 4 06:49:36 syzkaller kern.alert kernel: [ 154.721465][ T3120] Write-error on swap-device (8:0:934166) Aug 4 06:49:36 syzkaller kern.alert kernel: [ 154.727283][ T3120] Write-error on swap-device (8:0:934174) Aug 4 06:49:36 syzkaller kern.alert kernel: [ 154.733142][ T3120] Write-error on swap-device (8:0:934182) Aug 4 06:49:36 syzkaller kern.alert kernel: [ 154.738973][ T3120] Write-error on swap-device (8:0:934190) Aug 4 06:49:36 syzkaller kern.alert kernel: [ 154.744838][ T3120] Write-error on swap-device (8:0:934198) Aug 4 06:49:36 syzkaller kern.alert kernel: [ 154.752050][ T3120] Write-error on swap-device (8:0:934206) Aug 4 06:49:36 syzkaller kern.ale[ 154.850510][ T9] usb 1-1: device descriptor read/64, error -71 rt kernel: [ 154.759233][ T3120] Write-error on swap-device (8:0:934214) Aug 4 06:49:36 syzkaller kern.alert kernel: [ 154.766436][ T3120] Write-error on swap-device (8:0:934222) Aug 4 06:49:36 syzkaller kern.alert kernel: [ 154.773526][ T3120] Write-error on swap-device (8:0:934230) [ 154.948026][ T315] usb 4-1: Using ep0 maxpacket: 16 [ 154.954448][ T315] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 154.965462][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 154.976941][ T315] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 154.990550][ T315] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 154.999833][ T315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.009141][ T315] usb 4-1: config 0 descriptor?? [ 155.095124][ T3098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.103749][ T3098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.121442][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 155.180970][ T758] usbhid 2-1:0.0: can't add hid device: -71 [ 155.192269][ T758] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 155.203082][ T758] usb 2-1: USB disconnect, device number 46 [ 155.205693][ T3123] FAULT_INJECTION: forcing a failure. [ 155.205693][ T3123] name failslab, interval 1, probability 0, space 0, times 0 [ 155.222339][ T3123] CPU: 0 UID: 0 PID: 3123 Comm: syz.1.963 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 155.222372][ T3123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.222386][ T3123] Call Trace: [ 155.222394][ T3123] [ 155.222402][ T3123] __dump_stack+0x21/0x30 [ 155.222439][ T3123] dump_stack_lvl+0x140/0x1c0 [ 155.222465][ T3123] ? __cfi_dump_stack_lvl+0x10/0x10 [ 155.222494][ T3123] ? kasan_save_track+0x4f/0x80 [ 155.222518][ T3123] ? kasan_save_alloc_info+0x3a/0x50 [ 155.222547][ T3123] dump_stack+0x19/0x20 [ 155.222573][ T3123] should_fail_ex+0x3c2/0x510 [ 155.222596][ T3123] should_failslab+0xac/0x100 [ 155.222619][ T3123] kmem_cache_alloc_noprof+0x42/0x410 [ 155.222639][ T3123] ? mas_wr_store_type+0x13f3/0x1b40 [ 155.222668][ T3123] ? mas_alloc_nodes+0x254/0x9d0 [ 155.222688][ T3123] mas_alloc_nodes+0x254/0x9d0 [ 155.222706][ T3123] mas_preallocate+0x79b/0xc90 [ 155.222733][ T3123] ? __cfi_mas_preallocate+0x10/0x10 [ 155.222759][ T3123] ? __kasan_check_read+0x15/0x20 [ 155.222785][ T3123] ? anon_vma_name+0x51/0xa0 [ 155.222817][ T3123] ? vm_area_dup+0x415/0x560 [ 155.222843][ T3123] __split_vma+0x449/0xc10 [ 155.222862][ T3123] ? avc_has_perm_noaudit+0x26b/0x360 [ 155.222886][ T3123] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 155.222907][ T3123] ? __cfi_avc_has_perm+0x10/0x10 [ 155.222928][ T3123] vma_modify+0x364/0x1540 [ 155.222959][ T3123] vma_modify_flags+0x182/0x1c0 [ 155.222981][ T3123] mprotect_fixup+0x432/0x8d0 [ 155.223003][ T3123] ? __cfi_selinux_file_mprotect+0x10/0x10 [ 155.223023][ T3123] ? __cfi_mprotect_fixup+0x10/0x10 [ 155.223048][ T3123] ? bpf_lsm_file_mprotect+0xd/0x20 [ 155.223073][ T3123] do_mprotect_pkey+0xa85/0xe50 [ 155.223100][ T3123] ? prot_none_test+0x30/0x30 [ 155.223126][ T3123] ? mutex_unlock+0x90/0x240 [ 155.223155][ T3123] ? fput+0x1a4/0x230 [ 155.223180][ T3123] ? __cfi_ksys_write+0x10/0x10 [ 155.223201][ T3123] ? __kasan_check_read+0x15/0x20 [ 155.223219][ T3123] __x64_sys_mprotect+0x84/0xa0 [ 155.223241][ T3123] x64_sys_call+0x2590/0x2ee0 [ 155.223260][ T3123] do_syscall_64+0x57/0xf0 [ 155.223280][ T3123] ? clear_bhb_loop+0x50/0xa0 [ 155.223308][ T3123] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 155.223332][ T3123] RIP: 0033:0x7f52bc79e019 [ 155.223349][ T3123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.223367][ T3123] RSP: 002b:00007f52bd68b028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 155.223391][ T3123] RAX: ffffffffffffffda RBX: 00007f52bca25fa0 RCX: 00007f52bc79e019 [ 155.223407][ T3123] RDX: 0000000000000004 RSI: 0000000000001000 RDI: 0000200000ffc000 [ 155.223421][ T3123] RBP: 00007f52bd68b090 R08: 0000000000000000 R09: 0000000000000000 [ 155.223434][ T3123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.223447][ T3123] R13: 00007f52bca26038 R14: 00007f52bca25fa0 R15: 00007ffc682bee98 [ 155.223465][ T3123] [ 155.531613][ T9] usb 1-1: device descriptor read/64, error -71 [ 155.538257][ T3119] overlayfs: statfs failed on './file0' [ 155.558666][ T36] audit: type=1400 audit(1785826177.066:392): avc: denied { create } for pid=3124 comm="syz.2.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 155.632295][ T36] audit: type=1400 audit(1785826177.140:393): avc: denied { cmd } for pid=3128 comm="iou-wrk-3129" path="socket:[27358]" dev="sockfs" ino=27358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 155.756152][ T315] magicmouse 0003:05AC:0324.000E: unknown main item tag 0x0 [ 155.763802][ T315] magicmouse 0003:05AC:0324.000E: unknown main item tag 0x0 [ 155.771157][ T315] magicmouse 0003:05AC:0324.000E: unknown main item tag 0x0 [ 155.778625][ T315] magicmouse 0003:05AC:0324.000E: unknown main item tag 0x0 [ 155.785993][ T315] magicmouse 0003:05AC:0324.000E: unknown main item tag 0x0 [ 155.793435][ T315] magicmouse 0003:05AC:0324.000E: unknown main item tag 0x0 [ 155.800942][ T315] magicmouse 0003:05AC:0324.000E: unknown main item tag 0x0 [ 155.808537][ T315] magicmouse 0003:05AC:0324.000E: unknown main item tag 0x0 [ 155.817089][ T315] magicmouse 0003:05AC:0324.000E: hidraw0: USB HID v10.00 Device [HID 05ac:0324] on usb-dummy_hcd.3-1/input0 [ 155.824287][ T3142] udevd[3142]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 155.830193][ T9] usb 1-1: device descriptor read/64, error -71 [ 155.955923][ T9] usb usb1-port1: attempt power cycle [ 155.991440][ T315] usb 4-1: USB disconnect, device number 53 [ 156.021969][ T3156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.030572][ T3156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.280923][ T368] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 156.324336][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 156.347120][ T9] usb 1-1: device descriptor read/8, error -71 [ 156.444643][ T368] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 156.455832][ T368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 88, setting to 64 [ 156.466731][ T368] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 156.479842][ T368] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 156.488920][ T368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.497796][ T368] usb 3-1: config 0 descriptor?? [ 156.499845][ T9] usb 1-1: device descriptor read/8, error -71 [ 156.503096][ T3157] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 156.757719][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 156.791262][ T9] usb 1-1: device descriptor read/8, error -71 [ 156.932200][ T9] usb 1-1: device descriptor read/8, error -71 [ 157.021450][ T368] usbhid 3-1:0.0: can't add hid device: -71 [ 157.027728][ T368] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 157.039253][ T368] usb 3-1: USB disconnect, device number 55 [ 157.050349][ T9] usb usb1-port1: unable to enumerate USB device [ 157.431988][ T3180] syzkaller1: entered promiscuous mode [ 157.437844][ T3180] syzkaller1: entered allmulticast mode [ 157.540830][ T36] audit: type=1400 audit(1785826178.893:394): avc: denied { append } for pid=3183 comm="syz.0.977" name="pfkey" dev="proc" ino=4026532610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 157.594944][ T36] audit: type=1400 audit(1785826178.930:395): avc: denied { mount } for pid=3185 comm="syz.3.978" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 157.852162][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 157.852162][ T368] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 157.965818][ T3203] tipc: Started in network mode [ 157.970860][ T3203] tipc: Node identity 01000001, cluster identity 4369 [ 158.025549][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 158.026703][ T368] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.032639][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 158.040989][ T368] usb 4-1: config 0 has no interfaces? [ 158.049313][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.40 [ 158.053184][ T368] usb 4-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 158.062393][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.071565][ T368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.079452][ T9] usb 1-1: Product: syz [ 158.091743][ T9] usb 1-1: Manufacturer: syz [ 158.091987][ T368] usb 4-1: config 0 descriptor?? [ 158.096537][ T9] usb 1-1: SerialNumber: syz [ 158.131332][ T3203] tipc: New replicast peer: 127.0.0.1 [ 158.136949][ T566] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 158.139303][ T3203] tipc: Enabled bearer , priority 10 [ 158.151353][ T3204] tipc: Enabling of bearer rejected, already enabled [ 158.275011][ T566] usb 2-1: device descriptor read/64, error -71 [ 158.331941][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 158.333322][ T368] usb 4-1: USB disconnect, device number 54 [ 158.337955][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 158.359315][ T9] usb 1-1: USB disconnect, device number 63 [ 158.534863][ T566] usb 2-1: device descriptor read/64, error -71 [ 158.752675][ T3208] syzkaller1: entered promiscuous mode [ 158.758447][ T3208] syzkaller1: entered allmulticast mode [ 158.794955][ T566] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 158.919618][ T36] audit: type=1400 audit(1785826180.166:396): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 158.935852][ T566] usb 2-1: device descriptor read/64, error -71 [ 159.115586][ T3234] FAULT_INJECTION: forcing a failure. [ 159.115586][ T3234] name failslab, interval 1, probability 0, space 0, times 0 [ 159.134501][ T3234] CPU: 0 UID: 0 PID: 3234 Comm: syz.3.994 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 159.134538][ T3234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.134551][ T3234] Call Trace: [ 159.134559][ T3234] [ 159.134567][ T3234] __dump_stack+0x21/0x30 [ 159.134600][ T3234] dump_stack_lvl+0x140/0x1c0 [ 159.134628][ T3234] ? __cfi_dump_stack_lvl+0x10/0x10 [ 159.134657][ T3234] ? __cfi_mas_store_prealloc+0x10/0x10 [ 159.134687][ T3234] dump_stack+0x19/0x20 [ 159.134712][ T3234] should_fail_ex+0x3c2/0x510 [ 159.134735][ T3234] should_failslab+0xac/0x100 [ 159.134760][ T3234] kmem_cache_alloc_noprof+0x42/0x410 [ 159.134782][ T3234] ? vm_area_dup+0x3f/0x560 [ 159.134805][ T3234] vm_area_dup+0x3f/0x560 [ 159.134825][ T3234] ? __split_vma+0x1b8/0xc10 [ 159.134847][ T3234] __split_vma+0x1ce/0xc10 [ 159.134867][ T3234] ? avc_has_perm_noaudit+0x26b/0x360 [ 159.134892][ T3234] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 159.134915][ T3234] ? __cfi_avc_has_perm+0x10/0x10 [ 159.134937][ T3234] vma_modify+0x60c/0x1540 [ 159.134961][ T3234] vma_modify_flags+0x182/0x1c0 [ 159.134984][ T3234] mprotect_fixup+0x432/0x8d0 [ 159.135009][ T3234] ? __cfi_selinux_file_mprotect+0x10/0x10 [ 159.135030][ T3234] ? __cfi_mprotect_fixup+0x10/0x10 [ 159.135055][ T3234] ? bpf_lsm_file_mprotect+0xd/0x20 [ 159.135081][ T3234] do_mprotect_pkey+0xa85/0xe50 [ 159.135109][ T3234] ? prot_none_test+0x30/0x30 [ 159.135134][ T3234] ? mutex_unlock+0x90/0x240 [ 159.135162][ T3234] ? fput+0x1a4/0x230 [ 159.135188][ T3234] ? __cfi_ksys_write+0x10/0x10 [ 159.135209][ T3234] ? __kasan_check_read+0x15/0x20 [ 159.135229][ T3234] __x64_sys_mprotect+0x84/0xa0 [ 159.135253][ T3234] x64_sys_call+0x2590/0x2ee0 [ 159.135281][ T3234] do_syscall_64+0x57/0xf0 [ 159.135303][ T3234] ? clear_bhb_loop+0x50/0xa0 [ 159.135338][ T3234] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 159.135362][ T3234] RIP: 0033:0x7f9dee79e019 [ 159.135380][ T3234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.135397][ T3234] RSP: 002b:00007f9def737028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 159.135421][ T3234] RAX: ffffffffffffffda RBX: 00007f9deea25fa0 RCX: 00007f9dee79e019 [ 159.135437][ T3234] RDX: 0000000000000004 RSI: 0000000000001000 RDI: 0000200000ffc000 [ 159.135452][ T3234] RBP: 00007f9def737090 R08: 0000000000000000 R09: 0000000000000000 [ 159.135466][ T3234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.135480][ T3234] R13: 00007f9deea26038 R14: 00007f9deea25fa0 R15: 00007fff18532358 [ 159.135499][ T3234] [ 159.206691][ T566] usb 2-1: device descriptor read/64, error -71 [ 159.282543][ T9] tipc: Node number set to 16777217 [ 159.507958][ T3260] syzkaller1: entered promiscuous mode [ 159.514014][ T3260] syzkaller1: entered allmulticast mode [ 159.531981][ T566] usb usb2-port1: attempt power cycle [ 159.635676][ T3266] kvm: kvm [3265]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 159.651454][ T3266] kvm: kvm [3265]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 159.855660][ T3278] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 159.855861][ T36] audit: type=1400 audit(1785826181.025:397): avc: denied { remount } for pid=3275 comm="syz.2.1004" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 159.911077][ T566] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 159.933882][ T566] usb 2-1: device descriptor read/8, error -71 [ 160.079409][ T36] audit: type=1400 audit(1785826181.237:398): avc: denied { read } for pid=3281 comm="syz.0.1005" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 160.103959][ T3285] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 160.107668][ T36] audit: type=1400 audit(1785826181.237:399): avc: denied { open } for pid=3281 comm="syz.0.1005" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 160.112041][ T3285] audit: out of memory in audit_log_start [ 160.135905][ T566] usb 2-1: device descriptor read/8, error -71 [ 160.322835][ T3292] syzkaller1: entered promiscuous mode [ 160.328439][ T3292] syzkaller1: entered allmulticast mode [ 160.398715][ T566] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 160.443127][ T566] usb 2-1: device descriptor read/8, error -71 [ 160.594961][ T566] usb 2-1: device descriptor read/8, error -71 [ 160.723944][ T566] usb usb2-port1: unable to enumerate USB device [ 161.003628][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 161.003649][ T36] audit: type=1400 audit(1785826182.086:422): avc: denied { name_bind } for pid=3303 comm="syz.0.1014" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 161.032193][ T36] audit: type=1400 audit(1785826182.086:423): avc: denied { node_bind } for pid=3303 comm="syz.0.1014" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 161.053881][ T566] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 161.061875][ T36] audit: type=1400 audit(1785826182.104:424): avc: denied { write } for pid=3303 comm="syz.0.1014" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 161.085490][ T3306] __end_swap_bio_write: 954 callbacks suppressed [ 161.085513][ T3306] Write-error on swap-device (8:0:935790) Aug 4 06:49:42 [ 161.098706][ T3306] Write-error on swap-device (8:0:935798) syzkaller kern.alert kernel: [ 161.085513][ T3306] Write-error on swap-device (8:0:935790) Aug 4 06:49:42 syzkaller kern.alert kernel: [ 161.098706][ T3306] Write-error on swap-device (8:0:935798) [ 161.150262][ T36] audit: type=1400 audit(1785826182.224:425): avc: denied { read } for pid=3307 comm="syz.1.1015" dev="nsfs" ino=4026532304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 161.172261][ T36] audit: type=1400 audit(1785826182.243:426): avc: denied { open } for pid=3307 comm="syz.1.1015" path="net:[4026532304]" dev="nsfs" ino=4026532304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 161.196926][ T36] audit: type=1400 audit(1785826182.243:427): avc: denied { create } for pid=3307 comm="syz.1.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.217921][ T36] audit: type=1400 audit(1785826182.270:428): avc: denied { setopt } for pid=3307 comm="syz.1.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.240279][ T36] audit: type=1400 audit(1785826182.289:429): avc: denied { create } for pid=3307 comm="syz.1.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.259917][ T566] usb 4-1: Using ep0 maxpacket: 32 [ 161.281418][ T36] audit: type=1400 audit(1785826182.307:430): avc: denied { getopt } for pid=3307 comm="syz.1.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.311965][ T566] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.320209][ T36] audit: type=1400 audit(1785826182.307:431): avc: denied { read write } for pid=3307 comm="syz.1.1015" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 161.323736][ T566] usb 4-1: New USB device found, idVendor=0e41, idProduct=4242, bcdDevice= 0.40 [ 161.358194][ T566] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.366886][ T566] usb 4-1: Product: syz [ 161.371549][ T566] usb 4-1: Manufacturer: syz [ 161.376711][ T566] usb 4-1: SerialNumber: syz [ 161.514320][ T3315] Write-error on swap-device (8:0:934126) [ 161.520434][ T3315] Write-error on swap-device (8:0:934134) Aug 4 06:49:42 [ 161.527271][ T3315] Write-error on swap-device (8:0:788358) syzkaller kern.a[ 161.534301][ T3315] Write-error on swap-device (8:0:788366) lert kernel: [ [ 161.542122][ T3315] Write-error on swap-device (8:0:788374) 161.514320][ T33[ 161.549158][ T3315] Write-error on swap-device (8:0:788382) 15] Write-error [ 161.555575][ T3315] Write-error on swap-device (8:0:788390) on swap-device ([ 161.563743][ T3315] Write-error on swap-device (8:0:788398) 8:0:934126) Aug 4 06:49:42 syzkaller kern.alert kernel: [ 161.520434][ T3315] Write-error on swap-device (8:0:934134) Aug 4 06:49:42 syzkaller kern.alert kernel: [ 161.527271][ T3315] Write-error on swap-device (8:0:788358) Aug 4 06:49:42 syzkaller kern.alert kernel: [ 161.534301][ T3315] Write-error on swap-device (8:0:788366) Aug 4 06:49:42 syzkaller kern.alert kernel: [ 161.542122][ T3315] Write-error on swap-device (8:0:788374) Aug 4 06:49:42 syzkaller kern.alert kernel: [ 161.549158][ T3315] Write-error on swap-device [ 161.616519][ T566] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found (8:0:788382) Aug 4 06:49:42 syzkaller kern.alert kernel: [ 161.555575][ T3315] Write-error on swap-device (8:0:788390) Aug 4 06:49:42 syzka[ 161.636294][ T566] usb-storage 4-1:1.2: USB Mass Storage device detected ller kern.alert kernel: [ 161.563743][ T3315] Write-error on swap-device (8:0:788398) [ 161.734143][ T566] usb 4-1: USB disconnect, device number 55 [ 162.123429][ T3327] tipc: Started in network mode [ 162.128487][ T3327] tipc: Node identity 72d0fc1ff0a4, cluster identity 4711 [ 162.135861][ T3327] tipc: Enabled bearer , priority 0 [ 162.381443][ T3331] fuse: Bad value for 'fd' [ 162.393892][ T9] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 162.401225][ T3333] FAULT_INJECTION: forcing a failure. [ 162.401225][ T3333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.414718][ T3333] CPU: 0 UID: 0 PID: 3333 Comm: syz.1.1025 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 162.414750][ T3333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.414763][ T3333] Call Trace: [ 162.414770][ T3333] [ 162.414786][ T3333] __dump_stack+0x21/0x30 [ 162.414820][ T3333] dump_stack_lvl+0x140/0x1c0 [ 162.414847][ T3333] ? __cfi_dump_stack_lvl+0x10/0x10 [ 162.414875][ T3333] ? do_vfs_ioctl+0x182d/0x2010 [ 162.414899][ T3333] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 162.414923][ T3333] dump_stack+0x19/0x20 [ 162.414947][ T3333] should_fail_ex+0x3c2/0x510 [ 162.414964][ T3333] should_fail+0xf/0x20 [ 162.414976][ T3333] should_fail_usercopy+0x1e/0x30 [ 162.414989][ T3333] _copy_from_user+0x20/0xa0 [ 162.415004][ T3333] kvm_vm_ioctl+0x5b0/0xc40 [ 162.415020][ T3333] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 162.415036][ T3333] ? ioctl_has_perm+0x1bc/0x500 [ 162.415048][ T3333] ? __asan_memcpy+0x5a/0x80 [ 162.415060][ T3333] ? ioctl_has_perm+0x408/0x500 [ 162.415071][ T3333] ? has_cap_mac_admin+0xd0/0xd0 [ 162.415082][ T3333] ? proc_fail_nth_write+0x184/0x220 [ 162.415098][ T3333] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 162.415114][ T3333] ? vfs_write+0xbcf/0xfd0 [ 162.415126][ T3333] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 162.415138][ T3333] ? __cfi_vfs_write+0x10/0x10 [ 162.415149][ T3333] ? __kasan_check_write+0x18/0x20 [ 162.415162][ T3333] ? mutex_unlock+0x90/0x240 [ 162.415177][ T3333] ? __cfi_mutex_unlock+0x10/0x10 [ 162.415193][ T3333] ? bpf_lsm_file_ioctl+0xd/0x20 [ 162.415207][ T3333] ? security_file_ioctl+0x3e/0x110 [ 162.415223][ T3333] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 162.415237][ T3333] __se_sys_ioctl+0x132/0x1b0 [ 162.415251][ T3333] __x64_sys_ioctl+0x7f/0xa0 [ 162.415268][ T3333] x64_sys_call+0x1878/0x2ee0 [ 162.415282][ T3333] do_syscall_64+0x57/0xf0 [ 162.415295][ T3333] ? clear_bhb_loop+0x50/0xa0 [ 162.415310][ T3333] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 162.415328][ T3333] RIP: 0033:0x7f52bc79e019 [ 162.415340][ T3333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.415351][ T3333] RSP: 002b:00007f52bd68b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.415366][ T3333] RAX: ffffffffffffffda RBX: 00007f52bca25fa0 RCX: 00007f52bc79e019 [ 162.415375][ T3333] RDX: 0000200000000480 RSI: 00000000c018aec0 RDI: 0000000000000004 [ 162.415384][ T3333] RBP: 00007f52bd68b090 R08: 0000000000000000 R09: 0000000000000000 [ 162.415392][ T3333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.415399][ T3333] R13: 00007f52bca26038 R14: 00007f52bca25fa0 R15: 00007ffc682bee98 [ 162.415409][ T3333] [ 162.696042][ T566] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 162.793529][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 162.801085][ T9] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 162.810369][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.818406][ T9] usb 1-1: Product: syz [ 162.822580][ T9] usb 1-1: Manufacturer: syz [ 162.827206][ T9] usb 1-1: SerialNumber: syz [ 162.881577][ T566] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.891912][ T566] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 162.906545][ T566] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 162.915630][ T566] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.924078][ T566] usb 4-1: Product: syz [ 162.928260][ T566] usb 4-1: Manufacturer: syz [ 162.932864][ T566] usb 4-1: SerialNumber: syz [ 162.940826][ T566] usb-storage 4-1:1.0: USB Mass Storage device detected [ 162.948732][ T566] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 162.957149][ T566] scsi host1: usb-storage 4-1:1.0 [ 163.021103][ T758] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 163.056252][ T3342] tipc: Disabling bearer [ 163.094250][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 163.104698][ T9] usb 1-1: USB disconnect, device number 64 [ 163.161964][ T758] usb 2-1: device descriptor read/64, error -71 [ 163.235742][ T1868] usb 4-1: USB disconnect, device number 56 [ 163.374444][ T3361] syzkaller1: entered promiscuous mode [ 163.379996][ T3361] syzkaller1: entered allmulticast mode [ 163.432873][ T758] usb 2-1: device descriptor read/64, error -71 [ 163.551921][ T3365] loop7: detected capacity change from 0 to 7 [ 163.703776][ T758] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 163.844696][ T758] usb 2-1: device descriptor read/64, error -71 [ 164.083099][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 164.104718][ T758] usb 2-1: device descriptor read/64, error -71 [ 164.140936][ T3389] FAULT_INJECTION: forcing a failure. [ 164.140936][ T3389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.154192][ T3389] CPU: 0 UID: 0 PID: 3389 Comm: syz.0.1046 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 164.154215][ T3389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.154222][ T3389] Call Trace: [ 164.154227][ T3389] [ 164.154232][ T3389] __dump_stack+0x21/0x30 [ 164.154253][ T3389] dump_stack_lvl+0x140/0x1c0 [ 164.154268][ T3389] ? __cfi_dump_stack_lvl+0x10/0x10 [ 164.154284][ T3389] ? check_stack_object+0x138/0x150 [ 164.154297][ T3389] dump_stack+0x19/0x20 [ 164.154311][ T3389] should_fail_ex+0x3c2/0x510 [ 164.154328][ T3389] should_fail+0xf/0x20 [ 164.154340][ T3389] should_fail_usercopy+0x1e/0x30 [ 164.154353][ T3389] _copy_to_user+0x24/0xa0 [ 164.154368][ T3389] simple_read_from_buffer+0xed/0x160 [ 164.154384][ T3389] proc_fail_nth_read+0x1aa/0x220 [ 164.154399][ T3389] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 164.154414][ T3389] ? bpf_lsm_file_permission+0xd/0x20 [ 164.154429][ T3389] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 164.154444][ T3389] vfs_read+0x28b/0xc70 [ 164.154455][ T3389] ? do_mprotect_pkey+0xbf0/0xe50 [ 164.154471][ T3389] ? __cfi_vfs_read+0x10/0x10 [ 164.154482][ T3389] ? __kasan_check_write+0x18/0x20 [ 164.154494][ T3389] ? mutex_lock+0x97/0x1d0 [ 164.154509][ T3389] ? __cfi_mutex_lock+0x10/0x10 [ 164.154524][ T3389] ksys_read+0x145/0x260 [ 164.154536][ T3389] ? __cfi_ksys_read+0x10/0x10 [ 164.154547][ T3389] ? __kasan_check_read+0x15/0x20 [ 164.154559][ T3389] __x64_sys_read+0x7f/0x90 [ 164.154579][ T3389] x64_sys_call+0x2638/0x2ee0 [ 164.154590][ T3389] do_syscall_64+0x57/0xf0 [ 164.154603][ T3389] ? clear_bhb_loop+0x50/0xa0 [ 164.154618][ T3389] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 164.154632][ T3389] RIP: 0033:0x7fb21795e84e [ 164.154644][ T3389] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.154654][ T3389] RSP: 002b:00007fb218788fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.154669][ T3389] RAX: ffffffffffffffda RBX: 00007fb2187896c0 RCX: 00007fb21795e84e [ 164.154678][ T3389] RDX: 000000000000000f RSI: 00007fb2187890a0 RDI: 0000000000000005 [ 164.154686][ T3389] RBP: 00007fb218789090 R08: 0000000000000000 R09: 0000000000000000 [ 164.154695][ T3389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.154702][ T3389] R13: 00007fb217c26038 R14: 00007fb217c25fa0 R15: 00007ffebf7defd8 [ 164.154712][ T3389] [ 164.224088][ T758] usb usb2-port1: attempt power cycle [ 164.322542][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.415814][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.427604][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 164.436794][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 164.444846][ T9] usb 4-1: SerialNumber: syz [ 164.670953][ T3383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.680069][ T3383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.696349][ T9] usb 4-1: 0:2 : does not exist [ 164.702567][ T9] usb 4-1: unit 5 not found! [ 164.711629][ T758] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 164.712741][ T9] usb 4-1: USB disconnect, device number 57 [ 164.728701][ T3410] FAULT_INJECTION: forcing a failure. [ 164.728701][ T3410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.742544][ T3410] CPU: 1 UID: 0 PID: 3410 Comm: syz.3.1053 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 164.742577][ T3410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.742589][ T3410] Call Trace: [ 164.742595][ T3410] [ 164.742603][ T3410] __dump_stack+0x21/0x30 [ 164.742634][ T3410] dump_stack_lvl+0x140/0x1c0 [ 164.742660][ T3410] ? __cfi_dump_stack_lvl+0x10/0x10 [ 164.742686][ T3410] ? check_stack_object+0x138/0x150 [ 164.742709][ T3410] dump_stack+0x19/0x20 [ 164.742734][ T3410] should_fail_ex+0x3c2/0x510 [ 164.742754][ T3410] should_fail+0xf/0x20 [ 164.742806][ T3410] should_fail_usercopy+0x1e/0x30 [ 164.742829][ T3410] _copy_to_user+0x24/0xa0 [ 164.742853][ T3410] simple_read_from_buffer+0xed/0x160 [ 164.742879][ T3410] proc_fail_nth_read+0x1aa/0x220 [ 164.742905][ T3410] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 164.742929][ T3410] ? bpf_lsm_file_permission+0xd/0x20 [ 164.742952][ T3410] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 164.742977][ T3410] vfs_read+0x28b/0xc70 [ 164.742996][ T3410] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 164.743017][ T3410] ? __cfi_vfs_read+0x10/0x10 [ 164.743035][ T3410] ? __kasan_check_write+0x18/0x20 [ 164.743055][ T3410] ? mutex_lock+0x97/0x1d0 [ 164.743080][ T3410] ? __cfi_mutex_lock+0x10/0x10 [ 164.743107][ T3410] ksys_read+0x145/0x260 [ 164.743125][ T3410] ? __cfi_ksys_read+0x10/0x10 [ 164.743145][ T3410] ? __kasan_check_read+0x15/0x20 [ 164.743165][ T3410] __x64_sys_read+0x7f/0x90 [ 164.743184][ T3410] x64_sys_call+0x2638/0x2ee0 [ 164.743204][ T3410] do_syscall_64+0x57/0xf0 [ 164.743226][ T3410] ? clear_bhb_loop+0x50/0xa0 [ 164.743253][ T3410] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 164.743275][ T3410] RIP: 0033:0x7f9dee75e84e [ 164.743294][ T3410] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.743311][ T3410] RSP: 002b:00007f9def736fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.743335][ T3410] RAX: ffffffffffffffda RBX: 00007f9def7376c0 RCX: 00007f9dee75e84e [ 164.743351][ T3410] RDX: 000000000000000f RSI: 00007f9def7370a0 RDI: 0000000000000005 [ 164.743364][ T3410] RBP: 00007f9def737090 R08: 0000000000000000 R09: 0000000000000000 [ 164.743376][ T3410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.743392][ T3410] R13: 00007f9deea26038 R14: 00007f9deea25fa0 R15: 00007fff18532358 [ 164.743409][ T3410] [ 164.988862][ T758] usb 2-1: device descriptor read/8, error -71 [ 164.991071][ T3099] udevd[3099]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory SYZFAIL: SIGBUS pc-offset:0xfffffffffffe340d pc:0x7f4daca70123 addr:0x7f4da81ffffc code=2 (errno 11: Resource temporarily unavailable) [ 165.123351][ T566] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 165.135237][ T758] usb 2-1: device descriptor read/8, error -71 [ 165.264538][ T566] usb 1-1: device descriptor read/64, error -71 [ 165.464592][ T3250] bridge_slave_1: left allmulticast mode [ 165.470336][ T3250] bridge_slave_1: left promiscuous mode [ 165.475936][ T3250] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.483633][ T3250] bridge_slave_0: left allmulticast mode [ 165.489363][ T3250] bridge_slave_0: left promiscuous mode [ 165.495170][ T3250] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.698729][ T3250] tipc: Left network mode [ 165.703779][ T3250] veth1_macvtap: left promiscuous mode [ 166.046750][ T3250] tipc: Disabling bearer [ 166.052147][ T3250] tipc: Left network mode [ 166.056863][ T3250] tipc: Disabling bearer [ 166.062188][ T3250] tipc: Left network mode [ 166.068055][ T3250] veth1_macvtap: left promiscuous mode [ 166.073922][ T3250] veth0_vlan: left promiscuous mode [ 166.079593][ T3250] veth1_macvtap: left promiscuous mode [ 166.085101][ T3250] veth0_vlan: left promiscuous mode [ 166.544653][ T3250] tipc: Disabling bearer [ 166.549963][ T3250] tipc: Left network mode [ 166.555246][ T3250] veth1_macvtap: left promiscuous mode [ 166.560796][ T3250] veth0_vlan: left promiscuous mode