last executing test programs: 14.961143787s ago: executing program 0 (id=973): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) 14.936246448s ago: executing program 0 (id=974): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0xde) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@nfs_export_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 14.935782318s ago: executing program 0 (id=975): r0 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x730, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x1, 0xf, 0x10}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x18, {[@global=@item_4={0x3, 0x1, 0x2, "eebc3cc2"}, @global=@item_012={0x2, 0x1, 0x1, "c3d4"}, @main=@item_012={0x1, 0x0, 0xa, '>'}, @global=@item_012={0x0, 0x1, 0x9}, @local=@item_012={0x1, 0x2, 0xa, '?'}, @local=@item_4={0x3, 0x2, 0x7, "e6aaa59f"}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_4={0x3, 0x1, 0x5, "07af505f"}]}}, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000600)={0x24, &(0x7f0000000d00)=ANY=[@ANYBLOB="40060c"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000040)={0x20, 0x23, 0x4f, {0x4f, 0xd, "face7331c53b470e5f1309566b43b07c0a3cfe7a7ff29afb7813ffe5efd547fba9a35abc6465a9fed1034325085e9188d6144ae6bd243e89c0e4a9f357ac53604a9398e1197319dc685bc792ff"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, &(0x7f0000000140)={0x0, 0x22, 0x1a, {[@main=@item_4={0x3, 0x0, 0xc}, @main=@item_4={0x3, 0x0, 0x9, "cc90227d"}, @global=@item_012={0x2, 0x1, 0x7, "dc69"}, @local=@item_4={0x3, 0x2, 0x8, 'Z*]q'}, @global=@item_012={0x1, 0x1, 0x3, 'Q'}, @local=@item_4={0x3, 0x2, 0x7, "a3c65051"}, @global=@item_012={0x0, 0x1, 0xa}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x5, 0x1, {0x22, 0x144}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x40, 0xd, 0x6e, "dfba6695546e2c115deddf1adce8e87fb7bdeb7089a7366a515e6e2982998a997b4122cd88dbec8a7e5eb6b8fea5df77f02d76435aff5c0af4538eb0b7fa04b214df1de76657577ff7d92bcccefee5d4e793b901b81c6a31a22b13821e321b4a6b129acbeaf991f4bd0ee66438dd"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000300)={0x20, 0x1, 0x87, "48779b99a35f71eeeb2b73d3fbe352461408fb520fe5ed513d80289bd6b65bc03b8e5616b1802a14751bedc4bf1139b95f12001f60466267effbf3ccf9186174e737147f819a34f4036f7ed8acfe5076823c7420e6be8d50465c4a49db067489f65a13f7fb6af283b6da2190f769dd49e2b9aff55962d443547888827582123494e81423992f0b"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x7}}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101341) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000000)={0x1, 0x1}) 11.880054431s ago: executing program 0 (id=1004): add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) r0 = getpid() r1 = userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK'}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000200)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) munmap(&(0x7f000061c000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 11.765987077s ago: executing program 0 (id=1005): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x2000000, [{0x400000f1, 0x0, 0x800000000400006}]}) 11.727855399s ago: executing program 0 (id=1006): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000009, 0x10012, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0x9, 0x8) socket$inet6(0xa, 0x3, 0x7) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000800)={0x0, &(0x7f0000000540)=[@rdmsr={0x66, 0x18, {0xc0011037}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x3, 0x8}}, @in_dx={0x69, 0x20, {0xc13, 0x5}}, @code={0xa, 0x6f, {"dbe00f3266b806008ed00f20e035040000000f22e0460f0966baf80cb86e35b583ef66bafc0c66edc7442400a9000000c744240200000000c7442406000000000f0114240f00df0f201e66baf80cb81032f181ef66bafc0cb821000000ef"}}, @nested_amd_clgi={0x17f, 0x10}, @rdmsr={0x66, 0x18, {0x3a8}}, @nested_load_syzos={0x136, 0x70, {0x2, 0x2, [@in_dx={0x69, 0x20, {0x7257, 0x2}}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x7}]}}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xa6, 0x6, 0x10b6}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host_nat=0x6c0a, 0x5, 0x3ff, 0x8000000000000001}}, @cpuid={0x64, 0x18, {0x6, 0xb4b2}}, @set_irq_handler={0xc8, 0x20, {0xbb}}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x53, 0x0, 0x4, 0x2}}], 0x297}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000001040)={0x1, 0x0, [{0x3b, 0x0, 0x3}]}) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x0, 0x82}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x3000042, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc67, 0x20, 0x4003bfff, 0x802b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9, 0x200, 0x1, 0x26d, 0x0, r7}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0) r10 = openat$cgroup_ro(r8, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0xd) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60ab00, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f3, 0x0, 0x800000000400006}]}) 11.69639834s ago: executing program 32 (id=1006): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000009, 0x10012, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0x9, 0x8) socket$inet6(0xa, 0x3, 0x7) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000800)={0x0, &(0x7f0000000540)=[@rdmsr={0x66, 0x18, {0xc0011037}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x3, 0x8}}, @in_dx={0x69, 0x20, {0xc13, 0x5}}, @code={0xa, 0x6f, {"dbe00f3266b806008ed00f20e035040000000f22e0460f0966baf80cb86e35b583ef66bafc0c66edc7442400a9000000c744240200000000c7442406000000000f0114240f00df0f201e66baf80cb81032f181ef66bafc0cb821000000ef"}}, @nested_amd_clgi={0x17f, 0x10}, @rdmsr={0x66, 0x18, {0x3a8}}, @nested_load_syzos={0x136, 0x70, {0x2, 0x2, [@in_dx={0x69, 0x20, {0x7257, 0x2}}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x7}]}}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xa6, 0x6, 0x10b6}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host_nat=0x6c0a, 0x5, 0x3ff, 0x8000000000000001}}, @cpuid={0x64, 0x18, {0x6, 0xb4b2}}, @set_irq_handler={0xc8, 0x20, {0xbb}}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x53, 0x0, 0x4, 0x2}}], 0x297}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000001040)={0x1, 0x0, [{0x3b, 0x0, 0x3}]}) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x0, 0x82}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x3000042, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc67, 0x20, 0x4003bfff, 0x802b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9, 0x200, 0x1, 0x26d, 0x0, r7}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0) r10 = openat$cgroup_ro(r8, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0xd) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60ab00, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f3, 0x0, 0x800000000400006}]}) 3.145951342s ago: executing program 2 (id=1063): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x511402, 0xc2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.145444702s ago: executing program 2 (id=1064): r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="c74424000f000000c74424026a9e0000c7442406000000000f018414c1c1490fc7610dc442499e2bb9800000c00f3235004000000f30c7442402176c0000c7442406000000000fee1424240f682b430f785508b805000000b90e15900b0f01c1430f00d5c7442400654d0000c7442402f9ca00000f011424", 0x78}], 0x1, 0x0, &(0x7f0000000040)=[@cr4={0x1, 0x9e2}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 3.103008324s ago: executing program 2 (id=1065): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x103, 0x114683) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000c00)) 3.044025937s ago: executing program 2 (id=1066): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/kcm\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dc5b7e10ed62a407a3cfe7cd6124c211598c992f84b46f4e24ed30f2244006487a448d3e34c23ad8a0da73c2b4d72576bfd5ca55aa9", @ANYRES16=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46) (rerun: 64) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) sendto$packet(r1, &(0x7f00000003c0)="9897893fa0d15dc8fbb9794bb563725ce981b210fe4e705407e289b84a838f6da186f4bff48f708c47434218e9818090bc33701ea21114da66d8e56fba05c871ae2582da39d090407ce469e10e9d9059a83e8bc805740dc167ab6d9f3406b0791d2eb249e3439f6edc5ea37592886c5d9b16980d269c20b54a51955cdd29b0b1f4d44ee21da6e51418d2fd165d3fe67e74aa7eee995ca24ab2e7fafce42fcb5543fd15ebfc4403fa3096966fafc2bfbd7fc386f2de89ef44f205f1afc23f47e0d28a3d84fb1ceb3de50aa979d0ac204738e5ac2d9a58477fd4bc1f8b1ecb23a0d933b790e8face", 0xe7, 0x40010, &(0x7f00000004c0)={0x11, 0x15, 0x0, 0x1, 0x5}, 0x14) (async) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x5, 0xffffffffffffaae2, 0x394}}, 0x28) (async) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x50, 0x36, 0x100, 0x70bd2b, 0x25dfdbfc, {0xc0}, [@generic="a320bf803d5546667367ea82fe50fefd4a049a211a33572c3bff20fe193334cee84916dc3b768ab30b79059023fe3e4d7d8accacf4b099627e"]}, 0x50}}, 0x48018) 3.043910097s ago: executing program 2 (id=1067): add_key$fscrypt_v1(0x0, &(0x7f0000000400)={'fscrypt:', @desc1}, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f000000b01b4550182185f5"], 0x0}, 0x0) 2.878428054s ago: executing program 1 (id=1074): socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="c74424000f000000c74424026a9e0000c7442406000000000f018414c1c1490fc7610dc442499e2bb9800000c00f3235004000000f30c7442402176c0000c7442406000000000fee1424240f682b430f785508b805000000b90e15900b0f01c1430f00d5c7442400654d0000c7442402f9ca00000f011424", 0x78}], 0x1, 0x0, &(0x7f0000000040)=[@cr4={0x1, 0x9e2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.840803426s ago: executing program 1 (id=1075): r0 = add_key(0x0, 0x0, &(0x7f0000000100)="308201d43082017ba00302010202142eea648d7f17e62e", 0x17, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='8', 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x4}, 0x6) setsockopt$sock_int(r1, 0x1, 0x4c, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x3f918, 0x4) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x17) socket$nl_generic(0x10, 0x3, 0x10) 2.784114069s ago: executing program 1 (id=1076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000440)={0x65, 0x5, 0x23, 0x3, "cfa7ae"}, 0x23, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0003000000000002cc011100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff0000000000000000000000003c040000053500000a00020000000000000000000000000000000000ac1e0001000000000000000063f728e9497e7331000000000000000000000000000000000000000000000000000000006c0100000635000002000200000000000000000000000000000000000a010100000000000000000000000000fe8000000000000000000000000000bbff02000000000000000000000000000133020000000000000a000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000fc020000000000000000000000000000ff0000000335000000000200ffffffff00000000000000000000000000000000000000000000ffefe000000200000000000000000000000000000000ac141400000000000000000000000000000100000635000002000f00ff020000000000000000000000000001ffffffff000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000bb0000000000000000000000000a0010"], 0x27c}}, 0x0) ppoll(&(0x7f0000000900)=[{r0, 0x4026}, {r1, 0x5281}], 0x2, 0x0, 0x0, 0x0) 2.783955679s ago: executing program 1 (id=1077): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') poll(&(0x7f0000000040)=[{r0}, {r2, 0xa220}, {r0, 0x200}, {r2, 0x20}], 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) poll(&(0x7f0000000040)=[{r0}, {r2, 0xa220}, {r0, 0x200}, {r2, 0x20}], 0x4, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) (async) ioctl$TCFLSH(r1, 0x400455c8, 0x4) (async) 2.75573392s ago: executing program 4 (id=1078): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f2, 0x0, 0x800000000400006}]}) 2.737341801s ago: executing program 3 (id=1079): sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf009900ea0800005d0000002c0075800400060024000480200000801a000100913e022b4033f199bb9ad5dad663efd290a7d5a14a0700"/78], 0x54}}, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01df"], 0x14}, 0x1, 0x0, 0x0, 0x8030}, 0x50) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2d, 0x0, 0x8f, 0xd, 0x5f, @empty, @remote, 0x1, 0x7800, 0x10, 0x81}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='00:03', 0x5) write(r4, 0x0, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pnp/devices/00:03/resources\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r6, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r7 = socket$nl_generic(0x10, 0x3, 0x10) writev(r7, &(0x7f0000000200), 0x20) write(r5, &(0x7f00000003c0)='di', 0x2) 2.683630824s ago: executing program 4 (id=1080): add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (fail_nth: 3) 2.683129904s ago: executing program 3 (id=1081): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000100)='./bus\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) 2.682872054s ago: executing program 4 (id=1082): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc539, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150091a60906a101090182008c0508950129309102c0"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='@') mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/120, 0x78}], 0x1) pread64(r2, &(0x7f0000001440)=""/4096, 0x1f, 0x9) add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd0000050005"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_usb_connect$cdc_ecm(0x2, 0x157, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x145, 0x1, 0x1, 0x2, 0x60, 0x6, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x1, {{0xa, 0x24, 0x6, 0x0, 0x0, "0604d86325"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x435, 0x707, 0x4c}, [@ncm={0x6, 0x24, 0x1a, 0x4, 0x8}, @dmm={0x7, 0x24, 0x14, 0x5, 0x1}, @obex={0x5, 0x24, 0x15, 0x200}, @mdlm_detail={0xd8, 0x24, 0x13, 0x3, "f96fc46c4d58638dabf9d259af0d8a601089ee64f7325720ef251d946e6dab6b436c60dff903cf49d78d4f0d7780580d17b7bf596b135bb76c3456f343898bde29a532fcd6ee69aea05e59fd91083394d651ec0aa7b6e235e5259b0b1fe93a4501d551e1c418f0e8ccd7576ae06660faa5777da7f132f99a137cf5379e201f4a24f1db6a252254431696d00d13df6af9e13be3f238a2f218fd2865830d7ef19654bb69b5fa395a4d484671f6f0259d936b640e5f550db0aa89745a0825d25e87de163b51f754c22b201cfddc28a0e8d936fb99cf"}, @ncm={0x6, 0x24, 0x1a, 0x120b, 0x28}, @mbim={0xc, 0x24, 0x1b, 0x8b82, 0x80, 0x7, 0x4, 0x7, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x30, 0x0, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xf, 0xd, 0x50}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x1}}}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x0, 0x5, 0x0, 0x40, 0x3}, 0x52, &(0x7f0000000600)={0x5, 0xf, 0x52, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x4, 0xb9, 0x2, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x9, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "c41b09c1dcff0bdcfa8dba99ec2dc756"}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0xcd48, 0xf0f, 0x9, [0xc030, 0xffc0c0, 0x3f00, 0xc0c0, 0xc0, 0x6c7f752f04c0db30]}]}, 0x5, [{0xff, &(0x7f0000000680)=@string={0xff, 0x3, "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"}}, {0x62, &(0x7f0000000780)=@string={0x62, 0x3, "9794fcec9a746d268d603dc055363a620e09517940f33ec78afa2237ff39d4076b4abbe569a1488c104c3fd46951cc50968d116bf89ae728e6a35777f46c9e4aace5d1fd496d9c519805a08b7d82d6009c71729d6f5bf191104b93e491a2d6be"}}, {0x102, &(0x7f0000000800)=@string={0x102, 0x3, "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"}}, {0xd3, &(0x7f0000000940)=@string={0xd3, 0x3, "afbed56014bdb45c83738ff6cbece6d5af6c8acf72d9946ad034e3c0426874050dc0d26ed91cd485fdd8668a56c81e554385150b213af3e2958ad7d40a97fb1f0d46c935aa0b83b277aefbf7dff21836d32e64b457ee8a9d075eab16050354e6822b53f2f204e2fa3de96898d32141aa10eeb10f058376f7f3a366f6b5ef7047ffdad9d1b332b66eef58acd912ac2d9d8006ea65c8521b41487fe1bd04a66c1cf394ee37ee804093051dc25f3578fa10502bd0b3cfc14abb97560b6db2dd066045cab07763cfd6bb98cf79232c049c99e7"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x860}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 2.680204464s ago: executing program 3 (id=1083): socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.652995945s ago: executing program 3 (id=1084): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/config\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/183, 0xb7) 2.595989428s ago: executing program 3 (id=1085): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18010000", @ANYRES16=r2, @ANYBLOB="050004000000000000000f00000008000300", @ANYRES32, @ANYBLOB="2e000e0080000000ffffffffffff08021100000008021100000000000000000000000000640401003c0400010310000093000f000006020202020202dd851d06bea570893f43f6fff05128a866f670226a032e077dbcdd91ab50409cee120af3456fb15677a2f57b33935d001a5919bfb22c5e44c149db446a8b48d37325075c415a09fb88c6c06f9bc4f0097f8f1e2ad38d448df333faefcc958753f7387433725c4514d3d2fcbcb1a5b446c97c37e83ae60ec81b949f0944e0c6291146063918a37e0008000e"], 0x118}}, 0x0) fchdir(r0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x98) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r3) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101341) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000040)={0x1, 0x1}) 2.595893708s ago: executing program 3 (id=1086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000480)) r1 = syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x28) syz_usb_ep_write(r1, 0x82, 0x3, &(0x7f0000002340)='hel') 792.023033ms ago: executing program 1 (id=1087): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x3) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/220, 0xdc}], 0x1, 0x0, 0x0) 778.947533ms ago: executing program 1 (id=1088): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x6) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000ff"], 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000540)={[0x7]}, 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000d00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWSET={0x130, 0x9, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x100, 0x12, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xe}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1d3}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xc3}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}]}, @NFT_MSG_DELTABLE={0x108, 0x2, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xc8, 0x6, "5ed464910380e7e866b63c8b3527507966c14214d18d3f967bc812967e21e0c557ab22ff2a7b5171e8f2d4b8d9cfc417314c0fb626d87c41a97516d531acbeb4cbb3fc7154bb7d23b368ab859784ec20bed1074e6f6c6ad128ac8e4d8c48956b23c5b90fcbd299624d950470f2ea37874667f44796a2a41cae96f913e94f7abb2ad3708cbce016bdc692525a6c6743f66d957df33faf64942fab433400a56fdb67f6b4b34906236d6552fa65b3dae4099d490a19f08a5aededda3ca295b95665d53f185a"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x214, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @redir={{0xa}, @void}}, @NFTA_SET_EXPRESSIONS={0x1ac, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x90}]}}}, {0x11c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x10c, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0xfd, 0x3, "303ed4bbb3937ff62963a85b8b647cb3f0da9045ba14d6e583f98cd8ead501dc2756bb2f7037b896491d8c3e45533077fb1c806b12f044a65c631ea7a168574991fc436f56922414409d1e2699cdaf253aec0621fb87b6c73dac46244984f0c677d4f024001b6bbcbf17439edc1c80c1250e7e2865ab64eaf8325f9947b4987d89006d73674854dbb71638632b5b247dcb759139b41fc82b8089a91d2cc01349e3aeae0fb2624486699f3b934bb8c6a8251f61fbe45112d1809ad05e41fdc11c6dc387c1da2ab913a93964c4a89f5ebffaf27036054fcd3aa2592166e462bfbe269651b1bb6318320812de3baf9994968f25950d831df4ffb4"}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ID={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x1ec, 0x18, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xc4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x6c4}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0xffffffffffffffff) timerfd_create(0x1, 0x80800) 87.962226ms ago: executing program 4 (id=1089): r0 = syz_open_dev$loop(&(0x7f0000001800), 0x8, 0x0) ioctl$BLKFRAGET(r0, 0x1265, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000003d40)=""/4052, 0xfd4}, {&(0x7f0000000880)=""/212, 0xd4}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f00000009c0)=""/250, 0xfa}, {&(0x7f0000000500)=""/286, 0x11e}, {&(0x7f0000000140)=""/73, 0x49}, {&(0x7f00000001c0)=""/257, 0x101}, {&(0x7f0000000640)=""/152, 0x98}], 0x8}, 0x72}, {{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x1f74}, {{0x0, 0x0, 0x0}, 0xfffffff3}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xe4f}], 0x7, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x1, 0x3, 0x684, 0x6}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) read(r2, &(0x7f0000000040)=""/32, 0x20) r3 = syz_open_dev$loop(&(0x7f0000000bc0), 0x787bade5, 0x188b03) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000000)) 87.562246ms ago: executing program 4 (id=1090): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x13e) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x0, 0x2, 0xa000, 0x2000, &(0x7f00009ea000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x80881000, 0x0, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001280), 0x0, 0xd) read$msr(0xffffffffffffffff, 0x0, 0x0) r7 = getpid() getpriority(0x1, r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 49.676437ms ago: executing program 2 (id=1091): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone3(&(0x7f0000001880)={0x20000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00deb1", @ANYRES16=0x0, @ANYBLOB="02002bbd7000fcdbdf25010000000000000002410000001000137564703a73797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='decodes m'], 0xa) futex(&(0x7f0000000340), 0xb, 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f00000003c0)=0xfffffffd, 0x1) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0xd, 0x1, {0x22, 0x771}}}}, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ppoll(&(0x7f0000000900)=[{r4, 0x60}, {r0, 0xd280}], 0x2, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1092): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000100)='./bus\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) kernel console output (not intermixed with test programs): [ 53.960282][ T1291] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 53.960296][ T1291] ? usb_alloc_urb+0x5f/0x1f0 [ 53.960309][ T1291] ? usb_ifnum_to_if+0x285/0x300 [ 53.960323][ T1291] usb_alloc_urb+0x5f/0x1f0 [ 53.960336][ T1291] do_proc_bulk+0x68c/0xff0 [ 53.960352][ T1291] proc_bulk_compat+0x106/0x140 [ 53.960365][ T1291] usbdev_ioctl+0xf45/0x2120 [ 53.960381][ T1291] ? __cfi_usbdev_ioctl+0x10/0x10 [ 53.960394][ T1291] ? __fget_files+0x2bc/0x330 [ 53.960410][ T1291] ? bpf_lsm_file_ioctl+0xd/0x20 [ 53.960430][ T1291] ? security_file_ioctl+0x3e/0x110 [ 53.960443][ T1291] ? __cfi_usbdev_ioctl+0x10/0x10 [ 53.960455][ T1291] __se_sys_ioctl+0x123/0x1b0 [ 53.960470][ T1291] __x64_sys_ioctl+0x7f/0xa0 [ 53.960485][ T1291] x64_sys_call+0x1878/0x2ee0 [ 53.960497][ T1291] do_syscall_64+0x57/0xf0 [ 53.960509][ T1291] ? clear_bhb_loop+0x50/0xa0 [ 53.960525][ T1291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.960540][ T1291] RIP: 0033:0x7f79e499e159 [ 53.960555][ T1291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.960567][ T1291] RSP: 002b:00007f79e58fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.960583][ T1291] RAX: ffffffffffffffda RBX: 00007f79e4c25fa0 RCX: 00007f79e499e159 [ 53.960593][ T1291] RDX: 0000200000000040 RSI: 00000000c0105502 RDI: 0000000000000003 [ 53.960602][ T1291] RBP: 00007f79e58fa090 R08: 0000000000000000 R09: 0000000000000000 [ 53.960610][ T1291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.960618][ T1291] R13: 00007f79e4c26038 R14: 00007f79e4c25fa0 R15: 00007fffc10b9ff8 [ 53.960629][ T1291] [ 54.196814][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 54.204850][ T1238] usb usb8: usbfs: process 1238 (syz.0.349) did not claim interface 0 before use [ 54.214755][ T933] playstation 0003:054C:0DF2.000D: Failed to retrieve feature with reportID 32: -71 [ 54.224174][ T933] playstation 0003:054C:0DF2.000D: Failed to retrieve DualSense firmware info: -71 [ 54.233741][ T933] playstation 0003:054C:0DF2.000D: Failed to get firmware info from DualSense [ 54.242638][ T933] playstation 0003:054C:0DF2.000D: Failed to create dualsense. [ 54.250817][ T933] playstation 0003:054C:0DF2.000D: probe with driver playstation failed with error -71 [ 54.261622][ T933] usb 1-1: USB disconnect, device number 11 [ 54.276713][ T10] usb 4-1: device descriptor read/8, error -71 [ 54.287774][ T345] usb 2-1: Using ep0 maxpacket: 16 [ 54.294208][ T345] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 54.304349][ T345] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 54.313742][ T345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.323866][ T345] usb 2-1: Product: syz [ 54.328289][ T345] usb 2-1: Manufacturer: syz [ 54.332887][ T345] usb 2-1: SerialNumber: syz [ 54.341709][ T345] r8152-cfgselector 2-1: Unknown version 0x0000 [ 54.348143][ T345] r8152-cfgselector 2-1: config 0 descriptor?? [ 54.408798][ T10] usb 4-1: device descriptor read/8, error -71 [ 54.605622][ T345] r8152-cfgselector 2-1: Unknown version 0x0000 [ 54.612091][ T345] r8152-cfgselector 2-1: bad CDC descriptors [ 54.620923][ T345] r8152-cfgselector 2-1: USB disconnect, device number 15 [ 54.648828][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 54.668921][ T10] usb 4-1: device descriptor read/8, error -71 [ 54.744081][ T1299] usb usb8: usbfs: process 1299 (syz.0.363) did not claim interface 0 before use [ 54.762435][ T1301] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.775956][ T36] audit: type=1400 audit(1789992943.800:427): avc: denied { write } for pid=1296 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.838755][ T10] usb 4-1: device descriptor read/8, error -71 [ 54.903688][ T36] audit: type=1400 audit(1789992943.930:428): avc: denied { read write } for pid=1312 comm="syz.2.368" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 54.957795][ T10] usb usb4-port1: unable to enumerate USB device [ 54.966299][ T36] audit: type=1400 audit(1789992943.960:429): avc: denied { open } for pid=1312 comm="syz.2.368" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 55.233670][ T1322] usb usb8: usbfs: process 1322 (syz.1.372) did not claim interface 0 before use [ 55.412837][ T1333] usb usb8: usbfs: process 1333 (syz.3.376) did not claim interface 0 before use [ 55.432135][ T1333] FAULT_INJECTION: forcing a failure. [ 55.432135][ T1333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.458611][ T1333] CPU: 0 UID: 0 PID: 1333 Comm: syz.3.376 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 55.458635][ T1333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.458643][ T1333] Call Trace: [ 55.458648][ T1333] [ 55.458653][ T1333] __dump_stack+0x21/0x30 [ 55.458675][ T1333] dump_stack_lvl+0x140/0x1c0 [ 55.458693][ T1333] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.458710][ T1333] ? check_stack_object+0x138/0x150 [ 55.458725][ T1333] dump_stack+0x19/0x20 [ 55.458741][ T1333] should_fail_ex+0x3c2/0x510 [ 55.458756][ T1333] should_fail+0xf/0x20 [ 55.458770][ T1333] should_fail_usercopy+0x1e/0x30 [ 55.458786][ T1333] _copy_to_user+0x24/0xa0 [ 55.458811][ T1333] simple_read_from_buffer+0xed/0x160 [ 55.458829][ T1333] proc_fail_nth_read+0x1aa/0x220 [ 55.458847][ T1333] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 55.458865][ T1333] ? bpf_lsm_file_permission+0xd/0x20 [ 55.458881][ T1333] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 55.458899][ T1333] vfs_read+0x288/0xc70 [ 55.458912][ T1333] ? __cfi_vfs_read+0x10/0x10 [ 55.458925][ T1333] ? __kasan_check_write+0x18/0x20 [ 55.458938][ T1333] ? mutex_lock+0x97/0x1d0 [ 55.458953][ T1333] ? __cfi_mutex_lock+0x10/0x10 [ 55.458968][ T1333] ksys_read+0x145/0x260 [ 55.458981][ T1333] ? xfd_validate_state+0x68/0x140 [ 55.458998][ T1333] ? __cfi_ksys_read+0x10/0x10 [ 55.459011][ T1333] ? __kasan_check_write+0x18/0x20 [ 55.459023][ T1333] ? fpregs_restore_userregs+0x11c/0x260 [ 55.459039][ T1333] __x64_sys_read+0x7f/0x90 [ 55.459052][ T1333] x64_sys_call+0x2638/0x2ee0 [ 55.459064][ T1333] do_syscall_64+0x57/0xf0 [ 55.459076][ T1333] ? clear_bhb_loop+0x50/0xa0 [ 55.459091][ T1333] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.459106][ T1333] RIP: 0033:0x7f997bf5e98e [ 55.459118][ T1333] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 55.459130][ T1333] RSP: 002b:00007f997ce1bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.459145][ T1333] RAX: ffffffffffffffda RBX: 00007f997ce1c6c0 RCX: 00007f997bf5e98e [ 55.459156][ T1333] RDX: 000000000000000f RSI: 00007f997ce1c0a0 RDI: 0000000000000004 [ 55.459165][ T1333] RBP: 00007f997ce1c090 R08: 0000000000000000 R09: 0000000000000000 [ 55.459173][ T1333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.459181][ T1333] R13: 00007f997c226038 R14: 00007f997c225fa0 R15: 00007fff973aa9f8 [ 55.459192][ T1333] [ 55.740751][ T1337] FAULT_INJECTION: forcing a failure. [ 55.740751][ T1337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.753914][ T1337] CPU: 0 UID: 0 PID: 1337 Comm: syz.3.378 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 55.753939][ T1337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.753948][ T1337] Call Trace: [ 55.753954][ T1337] [ 55.753959][ T1337] __dump_stack+0x21/0x30 [ 55.753983][ T1337] dump_stack_lvl+0x140/0x1c0 [ 55.753999][ T1337] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.754016][ T1337] ? bpf_lsm_file_permission+0xd/0x20 [ 55.754032][ T1337] ? check_stack_object+0x10f/0x150 [ 55.754048][ T1337] dump_stack+0x19/0x20 [ 55.754064][ T1337] should_fail_ex+0x3c2/0x510 [ 55.754080][ T1337] should_fail+0xf/0x20 [ 55.754093][ T1337] should_fail_usercopy+0x1e/0x30 [ 55.754109][ T1337] _copy_from_user+0x20/0xa0 [ 55.754126][ T1337] __sys_bind+0x1d4/0x410 [ 55.754142][ T1337] ? __cfi___sys_bind+0x10/0x10 [ 55.754157][ T1337] ? __kasan_check_read+0x15/0x20 [ 55.754171][ T1337] __x64_sys_bind+0x7e/0x90 [ 55.754185][ T1337] x64_sys_call+0x1ffd/0x2ee0 [ 55.754196][ T1337] do_syscall_64+0x57/0xf0 [ 55.754208][ T1337] ? clear_bhb_loop+0x50/0xa0 [ 55.754224][ T1337] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.754239][ T1337] RIP: 0033:0x7f997bf9e159 [ 55.754252][ T1337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.754264][ T1337] RSP: 002b:00007f997ce1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 55.754280][ T1337] RAX: ffffffffffffffda RBX: 00007f997c225fa0 RCX: 00007f997bf9e159 [ 55.754290][ T1337] RDX: 000000000000000e RSI: 0000200000000000 RDI: 0000000000000004 [ 55.754299][ T1337] RBP: 00007f997ce1c090 R08: 0000000000000000 R09: 0000000000000000 [ 55.754308][ T1337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.754316][ T1337] R13: 00007f997c226038 R14: 00007f997c225fa0 R15: 00007fff973aa9f8 [ 55.754326][ T1337] [ 55.947067][ T345] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 56.227736][ T345] usb 2-1: device descriptor read/64, error -71 [ 56.459100][ T1355] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 56.477738][ T345] usb 2-1: device descriptor read/64, error -71 [ 56.508939][ T1355] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 56.690571][ T36] audit: type=1400 audit(1789992945.720:430): avc: denied { bind } for pid=1362 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.722021][ T345] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 56.801942][ T1367] usb usb8: usbfs: process 1367 (syz.0.389) did not claim interface 0 before use [ 56.824971][ T1367] FAULT_INJECTION: forcing a failure. [ 56.824971][ T1367] name failslab, interval 1, probability 0, space 0, times 0 [ 56.850779][ T1367] CPU: 0 UID: 0 PID: 1367 Comm: syz.0.389 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 56.850811][ T1367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.850819][ T1367] Call Trace: [ 56.850824][ T1367] [ 56.850829][ T1367] __dump_stack+0x21/0x30 [ 56.850850][ T1367] dump_stack_lvl+0x140/0x1c0 [ 56.850868][ T1367] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.850885][ T1367] dump_stack+0x19/0x20 [ 56.850901][ T1367] should_fail_ex+0x3c2/0x510 [ 56.850916][ T1367] ? usb_alloc_urb+0x5f/0x1f0 [ 56.850931][ T1367] should_failslab+0xac/0x100 [ 56.850947][ T1367] __kmalloc_noprof+0x69/0x510 [ 56.850961][ T1367] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 56.850974][ T1367] ? usb_alloc_urb+0x5f/0x1f0 [ 56.850987][ T1367] ? usb_ifnum_to_if+0x285/0x300 [ 56.851001][ T1367] usb_alloc_urb+0x5f/0x1f0 [ 56.851018][ T1367] do_proc_bulk+0x68c/0xff0 [ 56.851033][ T1367] proc_bulk_compat+0x106/0x140 [ 56.851046][ T1367] usbdev_ioctl+0xf45/0x2120 [ 56.851059][ T1367] ? __cfi_usbdev_ioctl+0x10/0x10 [ 56.851072][ T1367] ? __fget_files+0x2bc/0x330 [ 56.851088][ T1367] ? bpf_lsm_file_ioctl+0xd/0x20 [ 56.851104][ T1367] ? security_file_ioctl+0x3e/0x110 [ 56.851117][ T1367] ? __cfi_usbdev_ioctl+0x10/0x10 [ 56.851129][ T1367] __se_sys_ioctl+0x123/0x1b0 [ 56.851146][ T1367] __x64_sys_ioctl+0x7f/0xa0 [ 56.851160][ T1367] x64_sys_call+0x1878/0x2ee0 [ 56.851172][ T1367] do_syscall_64+0x57/0xf0 [ 56.851183][ T1367] ? clear_bhb_loop+0x50/0xa0 [ 56.851207][ T1367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.851222][ T1367] RIP: 0033:0x7f061339e159 [ 56.851235][ T1367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.851247][ T1367] RSP: 002b:00007f06141eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.851262][ T1367] RAX: ffffffffffffffda RBX: 00007f0613625fa0 RCX: 00007f061339e159 [ 56.851275][ T1367] RDX: 0000200000000040 RSI: 00000000c0105502 RDI: 0000000000000003 [ 56.851286][ T1367] RBP: 00007f06141eb090 R08: 0000000000000000 R09: 0000000000000000 [ 56.851295][ T1367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.851303][ T1367] R13: 00007f0613626038 R14: 00007f0613625fa0 R15: 00007ffd956ae888 [ 56.851314][ T1367] [ 57.087447][ T345] usb 2-1: device descriptor read/64, error -71 [ 57.110386][ T1372] ./dev/sda1: Can't lookup blockdev [ 57.205339][ T1382] usb usb8: usbfs: process 1382 (syz.2.394) did not claim interface 0 before use [ 57.247807][ T1390] netlink: 'syz.2.398': attribute type 5 has an invalid length. [ 57.264623][ T36] audit: type=1400 audit(1789992946.290:431): avc: denied { remount } for pid=1391 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.285917][ T1392] ======================================================= [ 57.285917][ T1392] WARNING: The mand mount option has been deprecated and [ 57.285917][ T1392] and is ignored by this kernel. Remove the mand [ 57.285917][ T1392] option from the mount to silence this warning. [ 57.285917][ T1392] ======================================================= [ 57.337522][ T1396] FAULT_INJECTION: forcing a failure. [ 57.337522][ T1396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.350684][ T345] usb 2-1: device descriptor read/64, error -71 [ 57.358781][ T1396] CPU: 0 UID: 0 PID: 1396 Comm: syz.2.400 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 57.358808][ T1396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.358815][ T1396] Call Trace: [ 57.358819][ T1396] [ 57.358824][ T1396] __dump_stack+0x21/0x30 [ 57.358845][ T1396] dump_stack_lvl+0x140/0x1c0 [ 57.358862][ T1396] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.358879][ T1396] ? check_stack_object+0x138/0x150 [ 57.358894][ T1396] dump_stack+0x19/0x20 [ 57.358909][ T1396] should_fail_ex+0x3c2/0x510 [ 57.358932][ T1396] should_fail+0xf/0x20 [ 57.358946][ T1396] should_fail_usercopy+0x1e/0x30 [ 57.358966][ T1396] _copy_to_user+0x24/0xa0 [ 57.358983][ T1396] simple_read_from_buffer+0xed/0x160 [ 57.359000][ T1396] proc_fail_nth_read+0x1aa/0x220 [ 57.359018][ T1396] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 57.359036][ T1396] ? __kasan_slab_alloc+0x73/0x90 [ 57.359051][ T1396] ? bpf_lsm_file_permission+0xd/0x20 [ 57.359067][ T1396] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 57.359083][ T1396] vfs_read+0x288/0xc70 [ 57.359096][ T1396] ? file_init_path+0x3b/0x590 [ 57.359112][ T1396] ? __cfi_vfs_read+0x10/0x10 [ 57.359125][ T1396] ? __kasan_check_write+0x18/0x20 [ 57.359137][ T1396] ? mutex_lock+0x97/0x1d0 [ 57.359152][ T1396] ? __cfi_mutex_lock+0x10/0x10 [ 57.359166][ T1396] ksys_read+0x145/0x260 [ 57.359179][ T1396] ? __cfi_ksys_read+0x10/0x10 [ 57.359197][ T1396] ? is_dma_buf_file+0x11/0x50 [ 57.359214][ T1396] ? fd_install+0x246/0x400 [ 57.359229][ T1396] ? __kasan_check_read+0x15/0x20 [ 57.359241][ T1396] __x64_sys_read+0x7f/0x90 [ 57.359255][ T1396] x64_sys_call+0x2638/0x2ee0 [ 57.359271][ T1396] do_syscall_64+0x57/0xf0 [ 57.359283][ T1396] ? clear_bhb_loop+0x50/0xa0 [ 57.359305][ T1396] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.359320][ T1396] RIP: 0033:0x7f79e495e98e [ 57.359332][ T1396] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 57.359343][ T1396] RSP: 002b:00007f79e58f9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.359358][ T1396] RAX: ffffffffffffffda RBX: 00007f79e58fa6c0 RCX: 00007f79e495e98e [ 57.359368][ T1396] RDX: 000000000000000f RSI: 00007f79e58fa0a0 RDI: 0000000000000003 [ 57.359376][ T1396] RBP: 00007f79e58fa090 R08: 0000000000000000 R09: 0000000000000000 [ 57.359384][ T1396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.359392][ T1396] R13: 00007f79e4c26038 R14: 00007f79e4c25fa0 R15: 00007fffc10b9ff8 [ 57.359403][ T1396] [ 57.620600][ T65] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 57.629125][ T345] usb usb2-port1: attempt power cycle [ 57.777758][ T65] usb 1-1: device descriptor read/64, error -71 [ 57.887864][ T933] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 57.967771][ T345] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 57.989012][ T345] usb 2-1: device descriptor read/8, error -71 [ 58.017965][ T65] usb 1-1: device descriptor read/64, error -71 [ 58.037797][ T933] usb 3-1: Using ep0 maxpacket: 16 [ 58.044602][ T933] usb 3-1: unable to get BOS descriptor or descriptor too short [ 58.053254][ T933] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 58.066109][ T933] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 58.075371][ T933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.083460][ T933] usb 3-1: Product: syz [ 58.087849][ T933] usb 3-1: Manufacturer: syz [ 58.092431][ T933] usb 3-1: SerialNumber: syz [ 58.118823][ T345] usb 2-1: device descriptor read/8, error -71 [ 58.225344][ T1404] FAULT_INJECTION: forcing a failure. [ 58.225344][ T1404] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 58.239174][ T1404] CPU: 0 UID: 0 PID: 1404 Comm: syz.3.403 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 58.239197][ T1404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.239205][ T1404] Call Trace: [ 58.239209][ T1404] [ 58.239214][ T1404] __dump_stack+0x21/0x30 [ 58.239243][ T1404] dump_stack_lvl+0x140/0x1c0 [ 58.239260][ T1404] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.239277][ T1404] ? avc_has_perm_noaudit+0x289/0x360 [ 58.239294][ T1404] dump_stack+0x19/0x20 [ 58.239310][ T1404] should_fail_ex+0x3c2/0x510 [ 58.239325][ T1404] should_fail_alloc_page+0xec/0x110 [ 58.239341][ T1404] __alloc_pages_noprof+0x1c0/0x7e0 [ 58.239359][ T1404] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 58.239376][ T1404] ? selinux_file_open+0x46c/0x630 [ 58.239391][ T1404] __pud_alloc+0xb0/0x8f0 [ 58.239406][ T1404] ? __cfi___pud_alloc+0x10/0x10 [ 58.239420][ T1404] ? is_bpf_text_address+0x17b/0x1a0 [ 58.239440][ T1404] handle_mm_fault+0x18ea/0x1ba0 [ 58.239456][ T1404] ? __cfi_handle_mm_fault+0x10/0x10 [ 58.239470][ T1404] ? find_vma+0xd3/0x120 [ 58.239483][ T1404] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 58.239499][ T1404] ? lock_mm_and_find_vma+0xb8/0x390 [ 58.239514][ T1404] do_user_addr_fault+0x4ee/0x1230 [ 58.239527][ T1404] exc_page_fault+0x58/0xc0 [ 58.239544][ T1404] asm_exc_page_fault+0x2b/0x30 [ 58.239558][ T1404] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 58.239577][ T1404] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 58.239588][ T1404] RSP: 0018:ffffc9000fe77d70 EFLAGS: 00050206 [ 58.239601][ T1404] RAX: 00007ffffffff001 RBX: 000000000000000e RCX: 000000000000000e [ 58.239611][ T1404] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc9000fe77de0 [ 58.239620][ T1404] RBP: ffffc9000fe77d90 R08: ffffc9000fe77ded R09: 1ffff92001fcefbd [ 58.239630][ T1404] R10: dffffc0000000000 R11: fffff52001fcefbe R12: ffffc9000fe77de0 [ 58.239639][ T1404] R13: 000000000000000e R14: ffffc9000fe77de0 R15: 0000200000000000 [ 58.239650][ T1404] ? _copy_from_user+0x6d/0xa0 [ 58.239668][ T1404] __sys_bind+0x1d4/0x410 [ 58.239682][ T1404] ? __cfi___sys_bind+0x10/0x10 [ 58.239697][ T1404] ? __kasan_check_read+0x15/0x20 [ 58.239710][ T1404] __x64_sys_bind+0x7e/0x90 [ 58.239732][ T1404] x64_sys_call+0x1ffd/0x2ee0 [ 58.239744][ T1404] do_syscall_64+0x57/0xf0 [ 58.239756][ T1404] ? clear_bhb_loop+0x50/0xa0 [ 58.239771][ T1404] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.239785][ T1404] RIP: 0033:0x7f997bf9e159 [ 58.239796][ T1404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.239807][ T1404] RSP: 002b:00007f997ce1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 58.239820][ T1404] RAX: ffffffffffffffda RBX: 00007f997c225fa0 RCX: 00007f997bf9e159 [ 58.239829][ T1404] RDX: 000000000000000e RSI: 0000200000000000 RDI: 0000000000000004 [ 58.239837][ T1404] RBP: 00007f997ce1c090 R08: 0000000000000000 R09: 0000000000000000 [ 58.239846][ T1404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.239853][ T1404] R13: 00007f997c226038 R14: 00007f997c225fa0 R15: 00007fff973aa9f8 [ 58.239864][ T1404] [ 58.589629][ T65] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 58.936130][ T933] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 58.949473][ T933] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 58.977125][ T345] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 59.118068][ T65] usb 1-1: device descriptor read/64, error -71 [ 59.267725][ T411] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 59.275546][ T933] usb 3-1: USB disconnect, device number 14 [ 59.357768][ T65] usb 1-1: device descriptor read/64, error -71 [ 59.428650][ T411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.439615][ T345] usb 2-1: device not accepting address 19, error -71 [ 59.446469][ T345] usb usb2-port1: unable to enumerate USB device [ 59.463007][ T411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.473142][ T65] usb usb1-port1: attempt power cycle [ 59.487723][ T411] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.510782][ T411] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 59.537864][ T411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.548822][ T411] usb 4-1: config 0 descriptor?? [ 59.596258][ T1422] FAULT_INJECTION: forcing a failure. [ 59.596258][ T1422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.609522][ T1422] CPU: 0 UID: 0 PID: 1422 Comm: syz.1.408 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 59.609544][ T1422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.609553][ T1422] Call Trace: [ 59.609558][ T1422] [ 59.609566][ T1422] __dump_stack+0x21/0x30 [ 59.609591][ T1422] dump_stack_lvl+0x140/0x1c0 [ 59.609607][ T1422] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.609628][ T1422] ? __kasan_check_write+0x18/0x20 [ 59.609641][ T1422] ? kvm_arch_vcpu_load+0x665/0x8d0 [ 59.609655][ T1422] dump_stack+0x19/0x20 [ 59.609671][ T1422] should_fail_ex+0x3c2/0x510 [ 59.609687][ T1422] should_fail+0xf/0x20 [ 59.609701][ T1422] should_fail_usercopy+0x1e/0x30 [ 59.609717][ T1422] _copy_from_user+0x20/0xa0 [ 59.609734][ T1422] kvm_arch_vcpu_ioctl+0x43b/0x3120 [ 59.609747][ T1422] ? avc_has_perm+0x155/0x240 [ 59.609763][ T1422] ? __cfi_avc_has_perm+0x10/0x10 [ 59.609777][ T1422] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 59.609791][ T1422] ? selinux_file_open+0x46c/0x630 [ 59.609804][ T1422] ? __cfi_selinux_file_open+0x10/0x10 [ 59.609820][ T1422] ? is_bpf_text_address+0x17b/0x1a0 [ 59.609846][ T1422] ? kernel_text_address+0xa9/0xe0 [ 59.609862][ T1422] ? __kernel_text_address+0x11/0x40 [ 59.609878][ T1422] ? __asan_set_shadow_00+0x12/0x20 [ 59.609895][ T1422] ? do_vfs_ioctl+0x1824/0x2010 [ 59.609911][ T1422] ? arch_stack_walk+0x10a/0x170 [ 59.609924][ T1422] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 59.609939][ T1422] ? _parse_integer_limit+0x195/0x1e0 [ 59.609954][ T1422] ? _parse_integer+0x2e/0x40 [ 59.609967][ T1422] ? kstrtoull+0x13b/0x1e0 [ 59.609981][ T1422] ? kstrtouint+0x78/0xf0 [ 59.609994][ T1422] ? ioctl_has_perm+0x1bc/0x500 [ 59.610007][ T1422] ? __asan_memcpy+0x5a/0x80 [ 59.610020][ T1422] ? ioctl_has_perm+0x408/0x500 [ 59.610033][ T1422] ? has_cap_mac_admin+0xd0/0xd0 [ 59.610046][ T1422] ? __kasan_check_write+0x18/0x20 [ 59.610058][ T1422] ? mutex_lock_killable+0x97/0x1d0 [ 59.610075][ T1422] ? __cfi_mutex_lock_killable+0x10/0x10 [ 59.610090][ T1422] ? proc_fail_nth_write+0x184/0x220 [ 59.610108][ T1422] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 59.610126][ T1422] kvm_vcpu_ioctl+0x7da/0x1000 [ 59.610139][ T1422] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 59.610151][ T1422] ? __cfi_vfs_write+0x10/0x10 [ 59.610165][ T1422] ? __kasan_check_write+0x18/0x20 [ 59.610177][ T1422] ? mutex_unlock+0x90/0x240 [ 59.610191][ T1422] ? __cfi_mutex_unlock+0x10/0x10 [ 59.610207][ T1422] ? __fget_files+0x2bc/0x330 [ 59.610221][ T1422] ? bpf_lsm_file_ioctl+0xd/0x20 [ 59.610237][ T1422] ? security_file_ioctl+0x3e/0x110 [ 59.610250][ T1422] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 59.610261][ T1422] __se_sys_ioctl+0x123/0x1b0 [ 59.610276][ T1422] __x64_sys_ioctl+0x7f/0xa0 [ 59.610291][ T1422] x64_sys_call+0x1878/0x2ee0 [ 59.610303][ T1422] do_syscall_64+0x57/0xf0 [ 59.610315][ T1422] ? clear_bhb_loop+0x50/0xa0 [ 59.610331][ T1422] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.610346][ T1422] RIP: 0033:0x7ffa1d99e159 [ 59.610358][ T1422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.610369][ T1422] RSP: 002b:00007ffa1e842028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.610385][ T1422] RAX: ffffffffffffffda RBX: 00007ffa1dc25fa0 RCX: 00007ffa1d99e159 [ 59.610395][ T1422] RDX: 0000200000000040 RSI: 000000004008ae89 RDI: 0000000000000005 [ 59.610404][ T1422] RBP: 00007ffa1e842090 R08: 0000000000000000 R09: 0000000000000000 [ 59.610412][ T1422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.610420][ T1422] R13: 00007ffa1dc26038 R14: 00007ffa1dc25fa0 R15: 00007ffe770864f8 [ 59.610431][ T1422] [ 60.000049][ T36] audit: type=1400 audit(1789992949.030:432): avc: denied { setopt } for pid=1423 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 60.037752][ T65] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 60.051236][ T1425] fuse: Bad value for 'fd' [ 60.058654][ T65] usb 1-1: device descriptor read/8, error -71 [ 60.188314][ T411] uclogic 0003:5543:0064.000E: unknown main item tag 0x1 [ 60.195459][ T411] uclogic 0003:5543:0064.000E: unbalanced collection at end of report description [ 60.204841][ T411] uclogic 0003:5543:0064.000E: parse failed [ 60.210777][ T411] uclogic 0003:5543:0064.000E: probe with driver uclogic failed with error -22 [ 60.224948][ T65] usb 1-1: device descriptor read/8, error -71 [ 60.263275][ T1445] usb usb8: usbfs: process 1445 (syz.1.418) did not claim interface 0 before use [ 60.272584][ T1445] FAULT_INJECTION: forcing a failure. [ 60.272584][ T1445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.286067][ T1445] CPU: 0 UID: 0 PID: 1445 Comm: syz.1.418 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 60.286089][ T1445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.286097][ T1445] Call Trace: [ 60.286101][ T1445] [ 60.286106][ T1445] __dump_stack+0x21/0x30 [ 60.286129][ T1445] dump_stack_lvl+0x140/0x1c0 [ 60.286147][ T1445] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.286164][ T1445] ? vsnprintf+0x7b4/0x1ad0 [ 60.286182][ T1445] ? check_stack_object+0x10f/0x150 [ 60.286196][ T1445] dump_stack+0x19/0x20 [ 60.286213][ T1445] should_fail_ex+0x3c2/0x510 [ 60.286228][ T1445] should_fail+0xf/0x20 [ 60.286242][ T1445] should_fail_usercopy+0x1e/0x30 [ 60.286257][ T1445] _copy_from_user+0x20/0xa0 [ 60.286275][ T1445] kstrtouint_from_user+0xde/0x170 [ 60.286290][ T1445] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 60.286304][ T1445] ? selinux_file_permission+0x318/0xb60 [ 60.286319][ T1445] ? __cfi_selinux_file_permission+0x10/0x10 [ 60.286333][ T1445] proc_fail_nth_write+0x8f/0x220 [ 60.286351][ T1445] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 60.286369][ T1445] ? bpf_lsm_file_permission+0xd/0x20 [ 60.286386][ T1445] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 60.286403][ T1445] vfs_write+0x3c1/0xfd0 [ 60.286417][ T1445] ? __cfi_vfs_write+0x10/0x10 [ 60.286430][ T1445] ? __kasan_check_write+0x18/0x20 [ 60.286443][ T1445] ? mutex_lock+0x97/0x1d0 [ 60.286457][ T1445] ? __cfi_mutex_lock+0x10/0x10 [ 60.286472][ T1445] ksys_write+0x145/0x260 [ 60.286485][ T1445] ? xfd_validate_state+0x68/0x140 [ 60.286502][ T1445] ? __cfi_ksys_write+0x10/0x10 [ 60.286516][ T1445] ? __kasan_check_read+0x15/0x20 [ 60.286528][ T1445] __x64_sys_write+0x7f/0x90 [ 60.286542][ T1445] x64_sys_call+0x271c/0x2ee0 [ 60.286554][ T1445] do_syscall_64+0x57/0xf0 [ 60.286566][ T1445] ? clear_bhb_loop+0x50/0xa0 [ 60.286582][ T1445] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.286597][ T1445] RIP: 0033:0x7ffa1d95e98e [ 60.286609][ T1445] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.286621][ T1445] RSP: 002b:00007ffa1e841fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 60.286636][ T1445] RAX: ffffffffffffffda RBX: 00007ffa1e8426c0 RCX: 00007ffa1d95e98e [ 60.286646][ T1445] RDX: 0000000000000001 RSI: 00007ffa1e8420a0 RDI: 0000000000000004 [ 60.286655][ T1445] RBP: 00007ffa1e842090 R08: 0000000000000000 R09: 0000000000000000 [ 60.286663][ T1445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.286671][ T1445] R13: 00007ffa1dc26038 R14: 00007ffa1dc25fa0 R15: 00007ffe770864f8 [ 60.286682][ T1445] [ 60.547921][ T36] audit: type=1400 audit(1789992949.270:433): avc: denied { ioctl } for pid=1442 comm="syz.1.417" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 60.659495][ T36] audit: type=1400 audit(1789992949.690:434): avc: denied { sqpoll } for pid=1416 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 60.688536][ T345] usb 4-1: USB disconnect, device number 20 [ 60.716023][ T1454] ./dev/sda1: Can't lookup blockdev [ 60.743918][ T36] audit: type=1400 audit(1789992949.770:435): avc: denied { append } for pid=1455 comm="syz.1.422" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 60.769375][ T1456] No source specified [ 60.794242][ T36] audit: type=1400 audit(1789992949.820:436): avc: denied { write } for pid=1457 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 60.862849][ T1464] 9pnet: Unknown protocol version 9 [ 60.960670][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 61.034223][ T36] audit: type=1400 audit(1789992950.060:437): avc: denied { write } for pid=1474 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.053721][ T65] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 61.064134][ T36] audit: type=1400 audit(1789992950.090:438): avc: denied { bind } for pid=1474 comm="syz.1.431" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.084633][ T36] audit: type=1400 audit(1789992950.090:439): avc: denied { name_bind } for pid=1474 comm="syz.1.431" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 61.105435][ T36] audit: type=1400 audit(1789992950.090:440): avc: denied { node_bind } for pid=1474 comm="syz.1.431" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 61.126066][ T65] usb 1-1: device descriptor read/8, error -71 [ 61.132387][ T9] usb 3-1: device descriptor read/64, error -71 [ 61.139529][ T36] audit: type=1400 audit(1789992950.090:441): avc: denied { ioctl } for pid=1474 comm="syz.1.431" path="socket:[12940]" dev="sockfs" ino=12940 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.268630][ T65] usb 1-1: device descriptor read/8, error -71 [ 61.377828][ T65] usb usb1-port1: unable to enumerate USB device [ 61.386214][ T9] usb 3-1: device descriptor read/64, error -71 [ 61.637721][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 61.777723][ T9] usb 3-1: device descriptor read/64, error -71 [ 61.894769][ T1488] FAULT_INJECTION: forcing a failure. [ 61.894769][ T1488] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 61.922280][ T1488] CPU: 0 UID: 0 PID: 1488 Comm: syz.1.435 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 61.922309][ T1488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.922317][ T1488] Call Trace: [ 61.922322][ T1488] [ 61.922327][ T1488] __dump_stack+0x21/0x30 [ 61.922350][ T1488] dump_stack_lvl+0x140/0x1c0 [ 61.922367][ T1488] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.922384][ T1488] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 61.922404][ T1488] dump_stack+0x19/0x20 [ 61.922419][ T1488] should_fail_ex+0x3c2/0x510 [ 61.922435][ T1488] should_fail_alloc_page+0xec/0x110 [ 61.922451][ T1488] __alloc_pages_noprof+0x1c0/0x7e0 [ 61.922468][ T1488] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 61.922486][ T1488] ? selinux_file_open+0x46c/0x630 [ 61.922501][ T1488] ? __kasan_check_write+0x18/0x20 [ 61.922515][ T1488] __pmd_alloc+0xb0/0x9a0 [ 61.922530][ T1488] ? __cfi___pmd_alloc+0x10/0x10 [ 61.922545][ T1488] ? is_bpf_text_address+0x17b/0x1a0 [ 61.922567][ T1488] handle_mm_fault+0xd23/0x1ba0 [ 61.922584][ T1488] ? __cfi_handle_mm_fault+0x10/0x10 [ 61.922598][ T1488] ? find_vma+0xd3/0x120 [ 61.922612][ T1488] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 61.922630][ T1488] ? lock_mm_and_find_vma+0xb8/0x390 [ 61.922645][ T1488] do_user_addr_fault+0x4ee/0x1230 [ 61.922659][ T1488] exc_page_fault+0x58/0xc0 [ 61.922675][ T1488] asm_exc_page_fault+0x2b/0x30 [ 61.922689][ T1488] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 61.922707][ T1488] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 61.922719][ T1488] RSP: 0018:ffffc9000ee5fd70 EFLAGS: 00050206 [ 61.922736][ T1488] RAX: 00007ffffffff001 RBX: 000000000000000e RCX: 000000000000000e [ 61.922746][ T1488] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc9000ee5fde0 [ 61.922756][ T1488] RBP: ffffc9000ee5fd90 R08: ffffc9000ee5fded R09: 1ffff92001dcbfbd [ 61.922766][ T1488] R10: dffffc0000000000 R11: fffff52001dcbfbe R12: ffffc9000ee5fde0 [ 61.922775][ T1488] R13: 000000000000000e R14: ffffc9000ee5fde0 R15: 0000200000000000 [ 61.922786][ T1488] ? _copy_from_user+0x6d/0xa0 [ 61.922811][ T1488] __sys_bind+0x1d4/0x410 [ 61.922827][ T1488] ? __cfi___sys_bind+0x10/0x10 [ 61.922842][ T1488] ? __kasan_check_read+0x15/0x20 [ 61.922855][ T1488] __x64_sys_bind+0x7e/0x90 [ 61.922869][ T1488] x64_sys_call+0x1ffd/0x2ee0 [ 61.922881][ T1488] do_syscall_64+0x57/0xf0 [ 61.922893][ T1488] ? clear_bhb_loop+0x50/0xa0 [ 61.922908][ T1488] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.922923][ T1488] RIP: 0033:0x7ffa1d99e159 [ 61.922933][ T1488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.922944][ T1488] RSP: 002b:00007ffa1e842028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 61.922957][ T1488] RAX: ffffffffffffffda RBX: 00007ffa1dc25fa0 RCX: 00007ffa1d99e159 [ 61.922967][ T1488] RDX: 000000000000000e RSI: 0000200000000000 RDI: 0000000000000004 [ 61.922981][ T1488] RBP: 00007ffa1e842090 R08: 0000000000000000 R09: 0000000000000000 [ 61.922989][ T1488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.922997][ T1488] R13: 00007ffa1dc26038 R14: 00007ffa1dc25fa0 R15: 00007ffe770864f8 [ 61.923007][ T1488] [ 62.276745][ T1492] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 62.358977][ T9] usb 3-1: device descriptor read/64, error -71 [ 62.425522][ T1506] netlink: 'syz.1.444': attribute type 2 has an invalid length. [ 62.467803][ T9] usb usb3-port1: attempt power cycle [ 62.553840][ T1518] netlink: 'syz.3.449': attribute type 12 has an invalid length. [ 62.840232][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 62.868756][ T9] usb 3-1: device descriptor read/8, error -71 [ 62.890555][ T345] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 63.003236][ T9] usb 3-1: device descriptor read/8, error -71 [ 63.048907][ T345] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 63.060153][ T345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.070679][ T345] usb 2-1: config 0 descriptor?? [ 63.200904][ T1541] capability: warning: `syz.0.458' uses 32-bit capabilities (legacy support in use) [ 63.247721][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 63.269187][ T9] usb 3-1: device descriptor read/8, error -71 [ 63.283669][ T345] usb 2-1: Cannot read MAC address [ 63.289612][ T1544] usb usb8: usbfs: process 1544 (syz.0.459) did not claim interface 0 before use [ 63.299424][ T345] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 63.320602][ T345] usb 2-1: USB disconnect, device number 20 [ 63.428777][ T9] usb 3-1: device descriptor read/8, error -71 [ 63.437817][ T411] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 63.537834][ T9] usb usb3-port1: unable to enumerate USB device [ 63.577864][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 63.587930][ T411] usb 4-1: Using ep0 maxpacket: 16 [ 63.594361][ T411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.605678][ T411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 63.616786][ T411] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 63.629880][ T411] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 63.639108][ T411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.647632][ T411] usb 4-1: config 0 descriptor?? [ 63.707756][ T10] usb 1-1: device descriptor read/64, error -71 [ 63.947745][ T10] usb 1-1: device descriptor read/64, error -71 [ 63.992051][ T1574] fuseblk: Bad value for 'source' [ 63.997437][ T1574] ./dev/sda1: Can't lookup blockdev [ 64.025687][ T1576] ./dev/sda1: Can't lookup blockdev [ 64.187719][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 64.267769][ T345] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 64.318463][ T10] usb 1-1: device descriptor read/64, error -71 [ 64.398119][ T345] usb 2-1: device descriptor read/64, error -71 [ 64.458629][ T411] usbhid 4-1:0.0: can't add hid device: -71 [ 64.464602][ T411] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 64.476392][ T411] usb 4-1: USB disconnect, device number 21 [ 64.557845][ T10] usb 1-1: device descriptor read/64, error -71 [ 64.637747][ T345] usb 2-1: device descriptor read/64, error -71 [ 64.667866][ T10] usb usb1-port1: attempt power cycle [ 64.684156][ T1578] FAULT_INJECTION: forcing a failure. [ 64.684156][ T1578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.697768][ T1578] CPU: 0 UID: 0 PID: 1578 Comm: syz.2.472 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 64.697791][ T1578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.697799][ T1578] Call Trace: [ 64.697804][ T1578] [ 64.697809][ T1578] __dump_stack+0x21/0x30 [ 64.697832][ T1578] dump_stack_lvl+0x140/0x1c0 [ 64.697849][ T1578] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.697866][ T1578] ? vsnprintf+0x7b4/0x1ad0 [ 64.697884][ T1578] ? check_stack_object+0x10f/0x150 [ 64.697898][ T1578] dump_stack+0x19/0x20 [ 64.697914][ T1578] should_fail_ex+0x3c2/0x510 [ 64.697929][ T1578] should_fail+0xf/0x20 [ 64.697943][ T1578] should_fail_usercopy+0x1e/0x30 [ 64.697959][ T1578] _copy_from_user+0x20/0xa0 [ 64.697976][ T1578] kstrtouint_from_user+0xde/0x170 [ 64.697991][ T1578] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 64.698006][ T1578] ? selinux_file_permission+0x318/0xb60 [ 64.698020][ T1578] ? __cfi_selinux_file_permission+0x10/0x10 [ 64.698034][ T1578] proc_fail_nth_write+0x8f/0x220 [ 64.698052][ T1578] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 64.698070][ T1578] ? bpf_lsm_file_permission+0xd/0x20 [ 64.698086][ T1578] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 64.698104][ T1578] vfs_write+0x3c1/0xfd0 [ 64.698117][ T1578] ? __cfi_vfs_write+0x10/0x10 [ 64.698130][ T1578] ? __kasan_check_write+0x18/0x20 [ 64.698143][ T1578] ? mutex_lock+0x97/0x1d0 [ 64.698157][ T1578] ? __cfi_mutex_lock+0x10/0x10 [ 64.698173][ T1578] ksys_write+0x145/0x260 [ 64.698186][ T1578] ? __cfi_ksys_write+0x10/0x10 [ 64.698200][ T1578] ? __kasan_check_read+0x15/0x20 [ 64.698212][ T1578] __x64_sys_write+0x7f/0x90 [ 64.698226][ T1578] x64_sys_call+0x271c/0x2ee0 [ 64.698237][ T1578] do_syscall_64+0x57/0xf0 [ 64.698249][ T1578] ? clear_bhb_loop+0x50/0xa0 [ 64.698265][ T1578] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.698280][ T1578] RIP: 0033:0x7f79e495e98e [ 64.698291][ T1578] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 64.698303][ T1578] RSP: 002b:00007f79e58f9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.698318][ T1578] RAX: ffffffffffffffda RBX: 00007f79e58fa6c0 RCX: 00007f79e495e98e [ 64.698328][ T1578] RDX: 0000000000000001 RSI: 00007f79e58fa0a0 RDI: 0000000000000003 [ 64.698336][ T1578] RBP: 00007f79e58fa090 R08: 0000000000000000 R09: 0000000000000000 [ 64.698344][ T1578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.698352][ T1578] R13: 00007f79e4c26038 R14: 00007f79e4c25fa0 R15: 00007fffc10b9ff8 [ 64.698363][ T1578] [ 65.087966][ T345] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 65.196435][ T1586] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 65.208252][ T1586] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 65.222403][ T411] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 65.230092][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 65.237909][ T345] usb 2-1: device descriptor read/64, error -71 [ 65.244493][ T1586] overlayfs: overlapping lowerdir path [ 65.268910][ T10] usb 1-1: device descriptor read/8, error -71 [ 65.276321][ T1589] FAULT_INJECTION: forcing a failure. [ 65.276321][ T1589] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 65.289764][ T1589] CPU: 0 UID: 0 PID: 1589 Comm: syz.3.477 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 65.289818][ T1589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.289826][ T1589] Call Trace: [ 65.289830][ T1589] [ 65.289836][ T1589] __dump_stack+0x21/0x30 [ 65.289859][ T1589] dump_stack_lvl+0x140/0x1c0 [ 65.289877][ T1589] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.289894][ T1589] ? _raw_spin_trylock+0xb5/0x140 [ 65.289906][ T1589] ? __cfi__raw_spin_trylock+0x10/0x10 [ 65.289919][ T1589] dump_stack+0x19/0x20 [ 65.289936][ T1589] should_fail_ex+0x3c2/0x510 [ 65.289951][ T1589] should_fail_alloc_page+0xec/0x110 [ 65.289967][ T1589] __alloc_pages_noprof+0x1c0/0x7e0 [ 65.289985][ T1589] ? __kasan_slab_alloc+0x73/0x90 [ 65.290000][ T1589] ? inode_init_always_gfp+0x756/0x9e0 [ 65.290016][ T1589] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 65.290033][ T1589] ? proc_pident_instantiate+0x6d/0x2c0 [ 65.290049][ T1589] ? do_sys_openat2+0x134/0x1d0 [ 65.290067][ T1589] ? __x64_sys_openat+0x13a/0x170 [ 65.290085][ T1589] pte_alloc_one+0x92/0x530 [ 65.290099][ T1589] ? __cfi_pte_alloc_one+0x10/0x10 [ 65.290112][ T1589] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 65.290129][ T1589] ? static_key_count+0x45/0x70 [ 65.290145][ T1589] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 65.290158][ T1589] ? avc_has_perm+0x155/0x240 [ 65.290173][ T1589] __pte_alloc+0x79/0x440 [ 65.290185][ T1589] ? __cfi___pte_alloc+0x10/0x10 [ 65.290198][ T1589] ? __alloc_pages_noprof+0x35a/0x7e0 [ 65.290215][ T1589] do_pte_missing+0x2b1a/0x4440 [ 65.290231][ T1589] ? __kasan_check_write+0x18/0x20 [ 65.290244][ T1589] ? _raw_spin_lock+0x92/0x120 [ 65.290255][ T1589] ? __cfi__raw_spin_lock+0x10/0x10 [ 65.290267][ T1589] ? pte_marker_clear+0x1b0/0x1b0 [ 65.290286][ T1589] ? __pmd_alloc+0x5a6/0x9a0 [ 65.290301][ T1589] ? __cfi___pmd_alloc+0x10/0x10 [ 65.290316][ T1589] ? is_bpf_text_address+0x17b/0x1a0 [ 65.290336][ T1589] handle_mm_fault+0x1189/0x1ba0 [ 65.290352][ T1589] ? __cfi_handle_mm_fault+0x10/0x10 [ 65.290367][ T1589] ? find_vma+0xd3/0x120 [ 65.290380][ T1589] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 65.290396][ T1589] ? lock_mm_and_find_vma+0xb8/0x390 [ 65.290411][ T1589] do_user_addr_fault+0x4ee/0x1230 [ 65.290424][ T1589] exc_page_fault+0x58/0xc0 [ 65.290439][ T1589] asm_exc_page_fault+0x2b/0x30 [ 65.290454][ T1589] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 65.290472][ T1589] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 65.290484][ T1589] RSP: 0018:ffffc9000e837d70 EFLAGS: 00050206 [ 65.290497][ T1589] RAX: 00007ffffffff001 RBX: 000000000000000e RCX: 000000000000000e [ 65.290507][ T1589] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc9000e837de0 [ 65.290517][ T1589] RBP: ffffc9000e837d90 R08: ffffc9000e837ded R09: 1ffff92001d06fbd [ 65.290527][ T1589] R10: dffffc0000000000 R11: fffff52001d06fbe R12: ffffc9000e837de0 [ 65.290537][ T1589] R13: 000000000000000e R14: ffffc9000e837de0 R15: 0000200000000000 [ 65.290548][ T1589] ? _copy_from_user+0x6d/0xa0 [ 65.290565][ T1589] __sys_bind+0x1d4/0x410 [ 65.290580][ T1589] ? __cfi___sys_bind+0x10/0x10 [ 65.290596][ T1589] ? __kasan_check_read+0x15/0x20 [ 65.290608][ T1589] __x64_sys_bind+0x7e/0x90 [ 65.290623][ T1589] x64_sys_call+0x1ffd/0x2ee0 [ 65.290635][ T1589] do_syscall_64+0x57/0xf0 [ 65.290647][ T1589] ? clear_bhb_loop+0x50/0xa0 [ 65.290662][ T1589] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.290677][ T1589] RIP: 0033:0x7f997bf9e159 [ 65.290688][ T1589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.290700][ T1589] RSP: 002b:00007f997ce1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 65.290714][ T1589] RAX: ffffffffffffffda RBX: 00007f997c225fa0 RCX: 00007f997bf9e159 [ 65.290724][ T1589] RDX: 000000000000000e RSI: 0000200000000000 RDI: 0000000000000004 [ 65.290732][ T1589] RBP: 00007f997ce1c090 R08: 0000000000000000 R09: 0000000000000000 [ 65.290740][ T1589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.290748][ T1589] R13: 00007f997c226038 R14: 00007f997c225fa0 R15: 00007fff973aa9f8 [ 65.290759][ T1589] [ 65.741713][ T10] usb 1-1: device descriptor read/8, error -71 [ 65.817807][ T411] usb 3-1: Using ep0 maxpacket: 16 [ 65.824127][ T411] usb 3-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config [ 65.834507][ T411] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 65.843465][ T411] usb 3-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 65.852664][ T411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.863597][ T411] usb 3-1: config 0 descriptor?? [ 65.868968][ T345] usb 2-1: device descriptor read/64, error -71 [ 65.977827][ T345] usb usb2-port1: attempt power cycle [ 65.987840][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 65.997716][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 66.008927][ T10] usb 1-1: device descriptor read/8, error -71 [ 66.138807][ T10] usb 1-1: device descriptor read/8, error -71 [ 66.148920][ T9] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.159969][ T9] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.172920][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 66.179647][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 66.188948][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.199835][ T9] usb 4-1: config 0 descriptor?? [ 66.247840][ T10] usb usb1-port1: unable to enumerate USB device [ 66.317760][ T345] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 66.338716][ T345] usb 2-1: device descriptor read/8, error -71 [ 66.468668][ T345] usb 2-1: device descriptor read/8, error -71 [ 66.607481][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 66.614267][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 66.625024][ T9] usb 4-1: USB disconnect, device number 22 [ 66.707832][ T345] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 66.729807][ T345] usb 2-1: device descriptor read/8, error -71 [ 66.747779][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 66.774045][ T1600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.474'. [ 66.858944][ T345] usb 2-1: device descriptor read/8, error -71 [ 66.898921][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.909956][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.920033][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.933077][ T10] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 66.942215][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.952903][ T10] usb 1-1: config 0 descriptor?? [ 66.967817][ T345] usb usb2-port1: unable to enumerate USB device [ 67.046151][ T1602] kvm_intel: kvm [1601]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 67.135559][ T1606] FAULT_INJECTION: forcing a failure. [ 67.135559][ T1606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.170148][ T1606] CPU: 0 UID: 0 PID: 1606 Comm: syz.1.483 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 67.170173][ T1606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.170181][ T1606] Call Trace: [ 67.170185][ T1606] [ 67.170193][ T1606] __dump_stack+0x21/0x30 [ 67.170226][ T1606] dump_stack_lvl+0x140/0x1c0 [ 67.170246][ T1606] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.170263][ T1606] ? check_stack_object+0x81/0x150 [ 67.170277][ T1606] ? __virt_addr_valid+0x2a1/0x370 [ 67.170293][ T1606] dump_stack+0x19/0x20 [ 67.170309][ T1606] should_fail_ex+0x3c2/0x510 [ 67.170324][ T1606] should_fail+0xf/0x20 [ 67.170338][ T1606] should_fail_usercopy+0x1e/0x30 [ 67.170353][ T1606] _copy_from_user+0x20/0xa0 [ 67.170370][ T1606] memdup_user+0x81/0x170 [ 67.170382][ T1606] ? kvm_arch_vcpu_ioctl+0x1361/0x3120 [ 67.170395][ T1606] kvm_arch_vcpu_ioctl+0x19bc/0x3120 [ 67.170408][ T1606] ? avc_has_perm+0x155/0x240 [ 67.170423][ T1606] ? __cfi_avc_has_perm+0x10/0x10 [ 67.170438][ T1606] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 67.170451][ T1606] ? selinux_file_open+0x46c/0x630 [ 67.170465][ T1606] ? __cfi_selinux_file_open+0x10/0x10 [ 67.170480][ T1606] ? is_bpf_text_address+0x17b/0x1a0 [ 67.170498][ T1606] ? kernel_text_address+0xa9/0xe0 [ 67.170515][ T1606] ? __kernel_text_address+0x11/0x40 [ 67.170531][ T1606] ? __asan_set_shadow_00+0x12/0x20 [ 67.170548][ T1606] ? do_vfs_ioctl+0x1824/0x2010 [ 67.170564][ T1606] ? arch_stack_walk+0x10a/0x170 [ 67.170577][ T1606] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 67.170592][ T1606] ? _parse_integer_limit+0x195/0x1e0 [ 67.170606][ T1606] ? _parse_integer+0x2e/0x40 [ 67.170620][ T1606] ? kstrtoull+0x13b/0x1e0 [ 67.170633][ T1606] ? kstrtouint+0x78/0xf0 [ 67.170646][ T1606] ? ioctl_has_perm+0x1bc/0x500 [ 67.170660][ T1606] ? __asan_memcpy+0x5a/0x80 [ 67.170673][ T1606] ? ioctl_has_perm+0x408/0x500 [ 67.170686][ T1606] ? has_cap_mac_admin+0xd0/0xd0 [ 67.170699][ T1606] ? __kasan_check_write+0x18/0x20 [ 67.170712][ T1606] ? mutex_lock_killable+0x97/0x1d0 [ 67.170727][ T1606] ? __cfi_mutex_lock_killable+0x10/0x10 [ 67.170750][ T1606] ? proc_fail_nth_write+0x184/0x220 [ 67.170768][ T1606] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 67.170786][ T1606] kvm_vcpu_ioctl+0x7da/0x1000 [ 67.170799][ T1606] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 67.170811][ T1606] ? __cfi_vfs_write+0x10/0x10 [ 67.170826][ T1606] ? __kasan_check_write+0x18/0x20 [ 67.170845][ T1606] ? mutex_unlock+0x90/0x240 [ 67.170859][ T1606] ? __cfi_mutex_unlock+0x10/0x10 [ 67.170874][ T1606] ? __fget_files+0x2bc/0x330 [ 67.170889][ T1606] ? bpf_lsm_file_ioctl+0xd/0x20 [ 67.170905][ T1606] ? security_file_ioctl+0x3e/0x110 [ 67.170917][ T1606] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 67.170929][ T1606] __se_sys_ioctl+0x123/0x1b0 [ 67.170944][ T1606] __x64_sys_ioctl+0x7f/0xa0 [ 67.170959][ T1606] x64_sys_call+0x1878/0x2ee0 [ 67.170971][ T1606] do_syscall_64+0x57/0xf0 [ 67.170983][ T1606] ? clear_bhb_loop+0x50/0xa0 [ 67.170999][ T1606] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.171014][ T1606] RIP: 0033:0x7ffa1d99e159 [ 67.171026][ T1606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.171038][ T1606] RSP: 002b:00007ffa1e842028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.171054][ T1606] RAX: ffffffffffffffda RBX: 00007ffa1dc25fa0 RCX: 00007ffa1d99e159 [ 67.171064][ T1606] RDX: 0000200000000040 RSI: 000000004008ae89 RDI: 0000000000000005 [ 67.171073][ T1606] RBP: 00007ffa1e842090 R08: 0000000000000000 R09: 0000000000000000 [ 67.171082][ T1606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.171090][ T1606] R13: 00007ffa1dc26038 R14: 00007ffa1dc25fa0 R15: 00007ffe770864f8 [ 67.171101][ T1606] [ 67.553891][ T10] uclogic 0003:5543:0064.000F: unknown main item tag 0x1 [ 67.561019][ T10] uclogic 0003:5543:0064.000F: unbalanced collection at end of report description [ 67.570329][ T10] uclogic 0003:5543:0064.000F: parse failed [ 67.576234][ T10] uclogic 0003:5543:0064.000F: probe with driver uclogic failed with error -22 [ 67.799386][ T10] usb 1-1: USB disconnect, device number 20 [ 67.887803][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 67.980998][ T10] usb 3-1: USB disconnect, device number 19 [ 68.013617][ T1622] ./dev/sda1: Can't lookup blockdev [ 68.018925][ T9] usb 2-1: device descriptor read/64, error -71 [ 68.122116][ T1625] usb usb8: usbfs: process 1625 (syz.3.491) did not claim interface 0 before use [ 68.267764][ T9] usb 2-1: device descriptor read/64, error -71 [ 68.327737][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 68.467737][ T10] usb 3-1: device descriptor read/64, error -71 [ 68.507738][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 68.577749][ T411] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 68.637731][ T9] usb 2-1: device descriptor read/64, error -71 [ 68.707726][ T10] usb 3-1: device descriptor read/64, error -71 [ 68.727778][ T411] usb 1-1: Using ep0 maxpacket: 8 [ 68.734195][ T411] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 65, changing to 7 [ 68.745421][ T411] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 68.756747][ T411] usb 1-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 68.766133][ T411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.774270][ T411] usb 1-1: Product: syz [ 68.778614][ T411] usb 1-1: Manufacturer: syz [ 68.783371][ T411] usb 1-1: SerialNumber: syz [ 68.878476][ T9] usb 2-1: device descriptor read/64, error -71 [ 68.924317][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 68.924331][ T36] audit: type=1400 audit(1789992957.950:449): avc: denied { mounton } for pid=1628 comm="syz.3.493" path="/112/file0" dev="tmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 68.953931][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 68.987852][ T9] usb usb2-port1: attempt power cycle [ 68.995940][ T36] audit: type=1400 audit(1789992958.020:450): avc: denied { nlmsg_read } for pid=1626 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.025572][ T411] usb 1-1: USB disconnect, device number 21 [ 69.034616][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.087783][ T10] usb 3-1: device descriptor read/64, error -71 [ 69.327809][ T10] usb 3-1: device descriptor read/64, error -71 [ 69.347798][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 69.368802][ T9] usb 2-1: device descriptor read/8, error -71 [ 69.437868][ T10] usb usb3-port1: attempt power cycle [ 69.502759][ T9] usb 2-1: device descriptor read/8, error -71 [ 69.514499][ T36] audit: type=1400 audit(1789992958.540:451): avc: denied { read } for pid=1631 comm="syz.0.494" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 69.539375][ T1632] futex_wake_op: syz.0.494 tries to shift op by 144; fix this program [ 69.547600][ T1632] futex_wake_op: syz.0.494 tries to shift op by 144; fix this program [ 69.557267][ T36] audit: type=1400 audit(1789992958.570:452): avc: denied { open } for pid=1631 comm="syz.0.494" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 69.616822][ T36] audit: type=1400 audit(1789992958.640:453): avc: denied { ioctl } for pid=1631 comm="syz.0.494" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 69.767744][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 69.777871][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 69.788876][ T9] usb 2-1: device descriptor read/8, error -71 [ 69.798985][ T10] usb 3-1: device descriptor read/8, error -71 [ 69.919575][ T9] usb 2-1: device descriptor read/8, error -71 [ 69.928838][ T10] usb 3-1: device descriptor read/8, error -71 [ 70.027851][ T9] usb usb2-port1: unable to enumerate USB device [ 70.167757][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 70.188880][ T10] usb 3-1: device descriptor read/8, error -71 [ 70.319000][ T10] usb 3-1: device descriptor read/8, error -71 [ 70.427887][ T10] usb usb3-port1: unable to enumerate USB device [ 70.597772][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 70.727774][ T9] usb 1-1: device descriptor read/64, error -71 [ 70.967732][ T9] usb 1-1: device descriptor read/64, error -71 [ 71.057768][ T411] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 71.207752][ T411] usb 2-1: Using ep0 maxpacket: 16 [ 71.212924][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 71.221823][ T411] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 71.230300][ T411] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 71.237594][ T411] usb 2-1: config 0 has no interface number 0 [ 71.245126][ T411] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 71.254520][ T411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.262713][ T411] usb 2-1: Product: syz [ 71.266942][ T411] usb 2-1: Manufacturer: syz [ 71.271674][ T411] usb 2-1: SerialNumber: syz [ 71.277995][ T411] usb 2-1: config 0 descriptor?? [ 71.284206][ T411] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 71.290907][ T411] usb 2-1: No valid video chain found. [ 71.347767][ T9] usb 1-1: device descriptor read/64, error -71 [ 71.493102][ T36] audit: type=1400 audit(1789992960.520:454): avc: denied { ioctl } for pid=1636 comm="syz.1.496" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.518306][ T1637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.526834][ T1637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.537983][ T411] usb 2-1: USB disconnect, device number 29 [ 71.587756][ T9] usb 1-1: device descriptor read/64, error -71 [ 71.648864][ T1646] e1000 0000:00:01.0: can't ioremap BAR 0: [??? 0x00000000 flags 0x0] [ 71.657281][ T1646] e1000 0000:00:01.0: probe with driver e1000 failed with error -5 [ 71.671855][ T1646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 71.697912][ T9] usb usb1-port1: attempt power cycle [ 72.037780][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 72.060223][ T9] usb 1-1: device descriptor read/8, error -71 [ 72.189123][ T9] usb 1-1: device descriptor read/8, error -71 [ 72.347788][ T411] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 72.377736][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 72.417776][ T65] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 72.427845][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 72.448881][ T9] usb 1-1: device descriptor read/8, error -71 [ 72.477767][ T411] usb 2-1: device descriptor read/64, error -71 [ 72.527804][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 72.534037][ T10] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.545198][ T10] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 72.558291][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 72.565020][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 72.574267][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.583195][ T9] usb 1-1: device descriptor read/8, error -71 [ 72.589596][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.600132][ T10] usb 4-1: config 0 descriptor?? [ 72.609538][ T65] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.622632][ T65] usb 3-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 72.631975][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.707867][ T9] usb usb1-port1: unable to enumerate USB device [ 72.737769][ T411] usb 2-1: device descriptor read/64, error -71 [ 72.809056][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 72.815015][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 72.829316][ T10] usb 4-1: USB disconnect, device number 23 [ 72.977766][ T411] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 73.044787][ T1648] raw-gadget.3 gadget.2: fail, usb_ep_set_halt returned -11 [ 73.052891][ T10] usb 3-1: USB disconnect, device number 24 [ 73.107755][ T411] usb 2-1: device descriptor read/64, error -71 [ 73.347742][ T411] usb 2-1: device descriptor read/64, error -71 [ 73.382600][ T1659] kvm: kvm [1658]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 73.392561][ T1662] ./dev/sda1: Can't lookup blockdev [ 73.457846][ T411] usb usb2-port1: attempt power cycle [ 73.573466][ T36] audit: type=1400 audit(1789992962.600:455): avc: denied { bind } for pid=1667 comm="syz.2.509" laddr=fe80::685b:c9ff:feed:a4ed lport=255 faddr=ff01::1 fport=243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.608921][ T1671] futex_wake_op: syz.2.510 tries to shift op by 144; fix this program [ 73.617208][ T1671] futex_wake_op: syz.2.510 tries to shift op by 144; fix this program [ 73.629006][ T36] audit: type=1400 audit(1789992962.600:456): avc: denied { name_bind } for pid=1667 comm="syz.2.509" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 73.650004][ T36] audit: type=1400 audit(1789992962.600:457): avc: denied { node_bind } for pid=1667 comm="syz.2.509" saddr=fe80::bb src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 73.797768][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 73.807846][ T411] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 73.828977][ T411] usb 2-1: device descriptor read/8, error -71 [ 73.927773][ T10] usb 1-1: device descriptor read/64, error -71 [ 73.958712][ T411] usb 2-1: device descriptor read/8, error -71 [ 74.167728][ T10] usb 1-1: device descriptor read/64, error -71 [ 74.197735][ T411] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 74.218892][ T411] usb 2-1: device descriptor read/8, error -71 [ 74.348900][ T411] usb 2-1: device descriptor read/8, error -71 [ 74.387856][ T65] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 74.407749][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 74.458693][ T411] usb usb2-port1: unable to enumerate USB device [ 74.525300][ T1678] overlay: filesystem on ./file0 not supported as upperdir [ 74.537730][ T10] usb 1-1: device descriptor read/64, error -71 [ 74.544124][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 74.555168][ T65] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 74.574433][ T65] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 74.584524][ T65] usb 4-1: config 0 has no interface number 0 [ 74.596475][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 74.609496][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.618298][ T65] usb 4-1: Product: syz [ 74.622469][ T65] usb 4-1: Manufacturer: syz [ 74.627062][ T65] usb 4-1: SerialNumber: syz [ 74.632385][ T65] usb 4-1: config 0 descriptor?? [ 74.640096][ T65] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 74.646560][ T65] usb 4-1: No valid video chain found. [ 74.787749][ T10] usb 1-1: device descriptor read/64, error -71 [ 74.847936][ T1674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.857243][ T1674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.867577][ T65] usb 4-1: USB disconnect, device number 24 [ 74.897863][ T10] usb usb1-port1: attempt power cycle [ 75.068800][ T1683] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.080153][ T36] audit: type=1326 audit(1789992964.110:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1682 comm="syz.2.515" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e499e159 code=0x50000 [ 75.107752][ T36] audit: type=1326 audit(1789992964.110:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1682 comm="syz.2.515" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e499e159 code=0x50000 [ 75.153683][ T36] audit: type=1326 audit(1789992964.110:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1682 comm="syz.2.515" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e499e159 code=0x50000 [ 75.205728][ T36] audit: type=1326 audit(1789992964.110:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1682 comm="syz.2.515" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e499e159 code=0x50000 [ 75.247747][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 75.265051][ T36] audit: type=1326 audit(1789992964.110:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1682 comm="syz.2.515" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e499e159 code=0x50000 [ 75.307796][ T10] usb 1-1: device descriptor read/8, error -71 [ 75.341693][ T36] audit: type=1326 audit(1789992964.110:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1682 comm="syz.2.515" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e499e159 code=0x50000 [ 75.438606][ T10] usb 1-1: device descriptor read/8, error -71 [ 75.455033][ T36] audit: type=1326 audit(1789992964.130:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1682 comm="syz.2.515" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e499e159 code=0x50000 [ 75.506832][ T1702] usb usb8: usbfs: process 1702 (syz.1.522) did not claim interface 0 before use [ 75.536245][ T36] audit: type=1326 audit(1789992964.130:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1682 comm="syz.2.515" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e499e159 code=0x50000 [ 75.623759][ T36] audit: type=1326 audit(1789992964.130:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1682 comm="syz.2.515" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e499e159 code=0x50000 [ 75.674838][ T36] audit: type=1326 audit(1789992964.130:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1682 comm="syz.2.515" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e499e159 code=0x50000 [ 75.708454][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 75.738607][ T10] usb 1-1: device descriptor read/8, error -71 [ 75.857701][ T411] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 75.868609][ T10] usb 1-1: device descriptor read/8, error -71 [ 75.977837][ T10] usb usb1-port1: unable to enumerate USB device [ 75.997728][ T411] usb 2-1: device descriptor read/64, error -71 [ 76.019849][ T1711] input: syz0 as /devices/virtual/input/input8 [ 76.237768][ T411] usb 2-1: device descriptor read/64, error -71 [ 76.337762][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 76.412442][ T1727] rust_binder: 1726:1727 transaction call to 0:0 failed EINVAL, code 0 size 0-0 [ 76.422225][ T65] rust_binder: 1726: undelivered TRANSACTION_ERROR: 29201 [ 76.477991][ T411] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 76.489147][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 76.497648][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 35, changing to 7 [ 76.513486][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 76.522742][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.530938][ T10] usb 4-1: Product: syz [ 76.535198][ T10] usb 4-1: Manufacturer: syz [ 76.539957][ T10] usb 4-1: SerialNumber: syz [ 76.607721][ T345] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 76.615376][ T411] usb 2-1: device descriptor read/64, error -71 [ 76.767722][ T345] usb 3-1: Using ep0 maxpacket: 16 [ 76.773881][ T345] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 76.782248][ T345] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 76.789621][ T345] usb 3-1: config 0 has no interface number 0 [ 76.797032][ T345] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 76.806454][ T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.814569][ T345] usb 3-1: Product: syz [ 76.818922][ T345] usb 3-1: Manufacturer: syz [ 76.823588][ T345] usb 3-1: SerialNumber: syz [ 76.832209][ T345] usb 3-1: config 0 descriptor?? [ 76.839225][ T345] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 76.845609][ T345] usb 3-1: No valid video chain found. [ 76.857733][ T411] usb 2-1: device descriptor read/64, error -71 [ 76.967799][ T411] usb usb2-port1: attempt power cycle [ 77.048315][ T1721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.059722][ T1721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.069489][ T345] usb 3-1: USB disconnect, device number 25 [ 77.271181][ T10] usb 4-1: USB disconnect, device number 25 [ 77.301608][ T1742] ./dev/sda1: Can't lookup blockdev [ 77.308604][ T411] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 77.328989][ T411] usb 2-1: device descriptor read/8, error -71 [ 77.458966][ T411] usb 2-1: device descriptor read/8, error -71 [ 77.530195][ T1746] FAULT_INJECTION: forcing a failure. [ 77.530195][ T1746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.543369][ T1746] CPU: 0 UID: 0 PID: 1746 Comm: syz.0.540 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 77.543393][ T1746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.543400][ T1746] Call Trace: [ 77.543405][ T1746] [ 77.543411][ T1746] __dump_stack+0x21/0x30 [ 77.543434][ T1746] dump_stack_lvl+0x140/0x1c0 [ 77.543451][ T1746] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.543468][ T1746] ? check_stack_object+0x138/0x150 [ 77.543483][ T1746] dump_stack+0x19/0x20 [ 77.543498][ T1746] should_fail_ex+0x3c2/0x510 [ 77.543514][ T1746] should_fail+0xf/0x20 [ 77.543528][ T1746] should_fail_usercopy+0x1e/0x30 [ 77.543543][ T1746] _copy_to_user+0x24/0xa0 [ 77.543568][ T1746] simple_read_from_buffer+0xed/0x160 [ 77.543587][ T1746] proc_fail_nth_read+0x1aa/0x220 [ 77.543604][ T1746] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 77.543622][ T1746] ? bpf_lsm_file_permission+0xd/0x20 [ 77.543638][ T1746] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 77.543654][ T1746] vfs_read+0x288/0xc70 [ 77.543668][ T1746] ? __cfi_vfs_read+0x10/0x10 [ 77.543681][ T1746] ? __kasan_check_write+0x18/0x20 [ 77.543694][ T1746] ? mutex_lock+0x97/0x1d0 [ 77.543709][ T1746] ? __cfi_mutex_lock+0x10/0x10 [ 77.543724][ T1746] ksys_read+0x145/0x260 [ 77.543737][ T1746] ? __cfi_ksys_read+0x10/0x10 [ 77.543750][ T1746] ? __kasan_check_write+0x18/0x20 [ 77.543762][ T1746] ? fput+0x1a4/0x230 [ 77.543778][ T1746] ? __kasan_check_read+0x15/0x20 [ 77.543790][ T1746] __x64_sys_read+0x7f/0x90 [ 77.543804][ T1746] x64_sys_call+0x2638/0x2ee0 [ 77.543816][ T1746] do_syscall_64+0x57/0xf0 [ 77.543828][ T1746] ? clear_bhb_loop+0x50/0xa0 [ 77.543843][ T1746] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.543859][ T1746] RIP: 0033:0x7f061335e98e [ 77.543871][ T1746] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 77.543882][ T1746] RSP: 002b:00007f06141eafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.543897][ T1746] RAX: ffffffffffffffda RBX: 00007f06141eb6c0 RCX: 00007f061335e98e [ 77.543907][ T1746] RDX: 000000000000000f RSI: 00007f06141eb0a0 RDI: 0000000000000006 [ 77.543916][ T1746] RBP: 00007f06141eb090 R08: 0000000000000000 R09: 0000000000000000 [ 77.543924][ T1746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.543933][ T1746] R13: 00007f0613626038 R14: 00007f0613625fa0 R15: 00007ffd956ae888 [ 77.543943][ T1746] [ 77.813484][ T1750] tipc: Started in network mode [ 77.818397][ T1750] tipc: Node identity 0010000000000000002, cluster identity 4711 [ 77.916250][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 77.935037][ T1762] FAULT_INJECTION: forcing a failure. [ 77.935037][ T1762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.948214][ T1762] CPU: 0 UID: 0 PID: 1762 Comm: syz.2.547 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 77.948237][ T1762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.948245][ T1762] Call Trace: [ 77.948250][ T1762] [ 77.948255][ T1762] __dump_stack+0x21/0x30 [ 77.948278][ T1762] dump_stack_lvl+0x140/0x1c0 [ 77.948295][ T1762] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.948312][ T1762] ? check_stack_object+0x138/0x150 [ 77.948331][ T1762] dump_stack+0x19/0x20 [ 77.948347][ T1762] should_fail_ex+0x3c2/0x510 [ 77.948362][ T1762] should_fail+0xf/0x20 [ 77.948376][ T1762] should_fail_usercopy+0x1e/0x30 [ 77.948392][ T1762] _copy_to_user+0x24/0xa0 [ 77.948409][ T1762] simple_read_from_buffer+0xed/0x160 [ 77.948427][ T1762] proc_fail_nth_read+0x1aa/0x220 [ 77.948445][ T1762] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 77.948463][ T1762] ? bpf_lsm_file_permission+0xd/0x20 [ 77.948479][ T1762] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 77.948496][ T1762] vfs_read+0x288/0xc70 [ 77.948509][ T1762] ? __cfi_vfs_read+0x10/0x10 [ 77.948522][ T1762] ? __kasan_slab_free+0x6a/0x80 [ 77.948536][ T1762] ? putname+0x113/0x150 [ 77.948551][ T1762] ? putname+0x113/0x150 [ 77.948564][ T1762] ? __kasan_check_read+0x15/0x20 [ 77.948577][ T1762] ksys_read+0x145/0x260 [ 77.948590][ T1762] ? __cfi_ksys_read+0x10/0x10 [ 77.948604][ T1762] ? __kasan_check_read+0x15/0x20 [ 77.948616][ T1762] __x64_sys_read+0x7f/0x90 [ 77.948630][ T1762] x64_sys_call+0x2638/0x2ee0 [ 77.948642][ T1762] do_syscall_64+0x57/0xf0 [ 77.948654][ T1762] ? clear_bhb_loop+0x50/0xa0 [ 77.948686][ T1762] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.948701][ T1762] RIP: 0033:0x7f79e495e98e [ 77.948713][ T1762] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 77.948724][ T1762] RSP: 002b:00007f79e58f9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.948740][ T1762] RAX: ffffffffffffffda RBX: 00007f79e58fa6c0 RCX: 00007f79e495e98e [ 77.948750][ T1762] RDX: 000000000000000f RSI: 00007f79e58fa0a0 RDI: 0000000000000004 [ 77.948759][ T1762] RBP: 00007f79e58fa090 R08: 0000000000000000 R09: 0000000000000000 [ 77.948767][ T1762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.948775][ T1762] R13: 00007f79e4c26038 R14: 00007f79e4c25fa0 R15: 00007fffc10b9ff8 [ 77.948786][ T1762] [ 78.199705][ T411] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 78.229479][ T411] usb 2-1: device descriptor read/8, error -71 [ 78.248167][ T1770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.550'. [ 78.337782][ T10] usb 4-1: device descriptor read/64, error -71 [ 78.358903][ T411] usb 2-1: device descriptor read/8, error -71 [ 78.467863][ T411] usb usb2-port1: unable to enumerate USB device [ 78.547788][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 78.577766][ T10] usb 4-1: device descriptor read/64, error -71 [ 78.677031][ T1784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 78.701539][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 78.709987][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.745996][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.779297][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 78.814933][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.823039][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 78.832108][ T1796] FAULT_INJECTION: forcing a failure. [ 78.832108][ T1796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.850177][ T9] usb 3-1: config 0 descriptor?? [ 78.859694][ T1796] CPU: 0 UID: 0 PID: 1796 Comm: syz.1.561 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 78.859727][ T1796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.859734][ T1796] Call Trace: [ 78.859738][ T1796] [ 78.859743][ T1796] __dump_stack+0x21/0x30 [ 78.859765][ T1796] dump_stack_lvl+0x140/0x1c0 [ 78.859782][ T1796] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.859799][ T1796] ? check_stack_object+0x138/0x150 [ 78.859815][ T1796] dump_stack+0x19/0x20 [ 78.859831][ T1796] should_fail_ex+0x3c2/0x510 [ 78.859848][ T1796] should_fail+0xf/0x20 [ 78.859862][ T1796] should_fail_usercopy+0x1e/0x30 [ 78.859877][ T1796] _copy_to_user+0x24/0xa0 [ 78.859894][ T1796] simple_read_from_buffer+0xed/0x160 [ 78.859912][ T1796] proc_fail_nth_read+0x1aa/0x220 [ 78.859930][ T1796] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 78.859948][ T1796] ? bpf_lsm_file_permission+0xd/0x20 [ 78.859964][ T1796] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 78.859982][ T1796] vfs_read+0x288/0xc70 [ 78.859995][ T1796] ? __cfi_vfs_read+0x10/0x10 [ 78.860008][ T1796] ? __kasan_check_write+0x18/0x20 [ 78.860020][ T1796] ? mutex_lock+0x97/0x1d0 [ 78.860035][ T1796] ? __cfi_mutex_lock+0x10/0x10 [ 78.860051][ T1796] ksys_read+0x145/0x260 [ 78.860064][ T1796] ? __cfi_ksys_read+0x10/0x10 [ 78.860076][ T1796] ? __kasan_check_write+0x18/0x20 [ 78.860089][ T1796] ? fput+0x1a4/0x230 [ 78.860105][ T1796] ? __kasan_check_read+0x15/0x20 [ 78.860117][ T1796] __x64_sys_read+0x7f/0x90 [ 78.860130][ T1796] x64_sys_call+0x2638/0x2ee0 [ 78.860142][ T1796] do_syscall_64+0x57/0xf0 [ 78.860154][ T1796] ? clear_bhb_loop+0x50/0xa0 [ 78.860169][ T1796] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.860184][ T1796] RIP: 0033:0x7ffa1d95e98e [ 78.860196][ T1796] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 78.860207][ T1796] RSP: 002b:00007ffa1e841fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.860222][ T1796] RAX: ffffffffffffffda RBX: 00007ffa1e8426c0 RCX: 00007ffa1d95e98e [ 78.860232][ T1796] RDX: 000000000000000f RSI: 00007ffa1e8420a0 RDI: 0000000000000006 [ 78.860240][ T1796] RBP: 00007ffa1e842090 R08: 0000000000000000 R09: 0000000000000000 [ 78.860248][ T1796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.860256][ T1796] R13: 00007ffa1dc26038 R14: 00007ffa1dc25fa0 R15: 00007ffe770864f8 [ 78.860267][ T1796] [ 78.861362][ T9] hub 3-1:0.0: USB hub found [ 79.117388][ T9] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 79.167717][ T10] usb 4-1: device descriptor read/64, error -71 [ 79.237720][ T411] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 79.321043][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 79.327092][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 79.348604][ T9] usb 3-1: USB disconnect, device number 26 [ 79.387755][ T345] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 79.396644][ T411] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.407132][ T411] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 79.416153][ T10] usb 4-1: device descriptor read/64, error -71 [ 79.425688][ T411] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.435020][ T411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.445829][ T411] usb 1-1: config 0 descriptor?? [ 79.537807][ T10] usb usb4-port1: attempt power cycle [ 79.544339][ T345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.555543][ T345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.565465][ T345] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.578493][ T345] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 79.587539][ T345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.598403][ T345] usb 2-1: config 0 descriptor?? [ 79.877783][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 79.899604][ T10] usb 4-1: device descriptor read/8, error -71 [ 80.006647][ T345] uclogic 0003:5543:0064.0010: unknown main item tag 0x1 [ 80.013913][ T345] uclogic 0003:5543:0064.0010: unbalanced collection at end of report description [ 80.023361][ T345] uclogic 0003:5543:0064.0010: parse failed [ 80.029583][ T345] uclogic 0003:5543:0064.0010: probe with driver uclogic failed with error -22 [ 80.039105][ T10] usb 4-1: device descriptor read/8, error -71 [ 80.252209][ T9] usb 2-1: USB disconnect, device number 38 [ 80.287770][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 80.310588][ T10] usb 4-1: device descriptor read/8, error -71 [ 80.458346][ T10] usb 4-1: device descriptor read/8, error -71 [ 80.567811][ T10] usb usb4-port1: unable to enumerate USB device [ 80.727846][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 80.857766][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 80.879397][ T9] usb 3-1: config 1 has an invalid interface number: 7 but max is 2 [ 80.887592][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.899592][ T9] usb 3-1: config 1 has no interface number 2 [ 80.905826][ T9] usb 3-1: too many endpoints for config 1 interface 7 altsetting 1: 255, using maximum allowed: 30 [ 80.916822][ T9] usb 3-1: config 1 interface 7 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 80.926668][ T9] usb 3-1: config 1 interface 7 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 80.940122][ T9] usb 3-1: config 1 interface 7 has no altsetting 0 [ 80.948154][ T9] usb 3-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 80.957318][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.965620][ T9] usb 3-1: Product: syz [ 80.970121][ T9] usb 3-1: Manufacturer: syz [ 80.974761][ T9] usb 3-1: SerialNumber: syz [ 81.018737][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.028904][ T411] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 81.036654][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 81.045993][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 81.055230][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.069280][ T10] usb 4-1: 0:1 : does not exist [ 81.186617][ T1820] overlay: Unknown parameter 'ÿÿ ' [ 81.192033][ T411] usb 2-1: Using ep0 maxpacket: 16 [ 81.201307][ T411] usb 2-1: too many configurations: 112, using maximum allowed: 8 [ 81.213981][ T9] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 81.229439][ T9] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -71 [ 81.239371][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 81.249648][ T411] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 81.258913][ T411] usb 2-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 81.270835][ T9] usb 3-1: USB disconnect, device number 27 [ 81.284106][ T411] usb 2-1: Product: syz [ 81.292878][ T10] usb 4-1: USB disconnect, device number 30 [ 81.299030][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 81.316690][ T411] usb 2-1: Manufacturer: syz [ 81.325811][ T411] r8152-cfgselector 2-1: Unknown version 0x0000 [ 81.334851][ T411] r8152-cfgselector 2-1: config 0 descriptor?? [ 81.546715][ T36] kauditd_printk_skb: 71 callbacks suppressed [ 81.546743][ T36] audit: type=1400 audit(1789992970.570:539): avc: denied { write } for pid=1821 comm="syz.1.571" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.590008][ T36] audit: type=1400 audit(1789992970.600:540): avc: denied { open } for pid=1821 comm="syz.1.571" path="/148/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.614809][ T36] audit: type=1400 audit(1789992970.600:541): avc: denied { ioctl } for pid=1821 comm="syz.1.571" path="/148/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.841248][ T1831] ./dev/sda1: Can't lookup blockdev [ 81.852226][ T10] usb 1-1: USB disconnect, device number 30 [ 82.108122][ T411] r8152-cfgselector 2-1: bad CDC descriptors [ 82.114292][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 82.147224][ T411] r8152-cfgselector 2-1: USB disconnect, device number 39 [ 82.191289][ T1879] usb usb8: usbfs: process 1879 (syz.1.579) did not claim interface 0 before use [ 82.255941][ T1881] netlink: 36 bytes leftover after parsing attributes in process `syz.1.580'. [ 82.287755][ T9] usb 3-1: device descriptor read/64, error -71 [ 82.537779][ T9] usb 3-1: device descriptor read/64, error -71 [ 82.557774][ T10] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 82.709089][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 82.717453][ T10] usb 2-1: config 3 has an invalid interface number: 67 but max is 0 [ 82.725973][ T10] usb 2-1: config 3 has no interface number 0 [ 82.732419][ T10] usb 2-1: config 3 interface 67 has no altsetting 0 [ 82.741277][ T10] usb 2-1: string descriptor 0 read error: -22 [ 82.747492][ T10] usb 2-1: New USB device found, idVendor=13d3, idProduct=5103, bcdDevice=c8.28 [ 82.756927][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.767479][ T10] uvcvideo 2-1:3.67: Found multiple Units with ID 1 [ 82.778428][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 82.786104][ T10] usb 2-1: Found UVC 0.00 device (13d3:5103) [ 82.793312][ T10] usb 2-1: No valid video chain found. [ 82.927749][ T9] usb 3-1: device descriptor read/64, error -71 [ 82.957112][ T1896] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc01 [ 82.972404][ T10] usb 2-1: USB disconnect, device number 40 [ 83.062354][ T36] audit: type=1400 audit(1789992972.090:542): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.177742][ T9] usb 3-1: device descriptor read/64, error -71 [ 83.190334][ T36] audit: type=1400 audit(1789992972.220:543): avc: denied { execstack } for pid=1904 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 83.287902][ T9] usb usb3-port1: attempt power cycle [ 83.627710][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 83.658632][ T9] usb 3-1: device descriptor read/8, error -71 [ 83.788610][ T9] usb 3-1: device descriptor read/8, error -71 [ 83.886374][ T1931] TCP: TCP_TX_DELAY enabled [ 83.891336][ T1931] MTRR 1 not used [ 83.910359][ T36] audit: type=1400 audit(1789992972.940:544): avc: denied { setopt } for pid=1933 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.930554][ T1934] tipc: Started in network mode [ 83.935498][ T1934] tipc: Node identity 2000004, cluster identity 4711 [ 83.948190][ T1934] tipc: Node number set to 33554436 [ 84.015614][ T1943] input: syz0 as /devices/virtual/input/input9 [ 84.037751][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 84.079426][ T9] usb 3-1: device descriptor read/8, error -71 [ 84.208871][ T9] usb 3-1: device descriptor read/8, error -71 [ 84.297777][ T411] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 84.317863][ T9] usb usb3-port1: unable to enumerate USB device [ 84.449044][ T411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.460118][ T411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.470062][ T411] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.483773][ T411] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 84.493083][ T411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.501222][ T410] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 84.509397][ T411] usb 4-1: config 0 descriptor?? [ 84.658881][ T1945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.668825][ T1945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.678892][ T1945] kvm: kvm [1944]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 84.687877][ T1945] kvm: kvm [1944]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 84.720600][ T1945] futex_wake_op: syz.1.606 tries to shift op by -1; fix this program [ 84.732845][ T410] usb 2-1: unable to get BOS descriptor or descriptor too short [ 84.745562][ T410] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 84.754525][ T410] usb 2-1: can't read configurations, error -71 [ 84.907324][ T36] audit: type=1400 audit(1789992973.930:545): avc: denied { ioctl } for pid=1957 comm="syz.0.611" path="socket:[19633]" dev="sockfs" ino=19633 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.946715][ T411] uclogic 0003:5543:0064.0011: unknown main item tag 0x1 [ 84.962806][ T411] uclogic 0003:5543:0064.0011: unbalanced collection at end of report description [ 84.975298][ T411] uclogic 0003:5543:0064.0011: parse failed [ 84.981365][ T411] uclogic 0003:5543:0064.0011: probe with driver uclogic failed with error -22 [ 85.189874][ T411] usb 4-1: USB disconnect, device number 31 [ 85.237775][ T345] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 85.321258][ T1969] ./dev/sda1: Can't lookup blockdev [ 85.387744][ T345] usb 3-1: Using ep0 maxpacket: 32 [ 85.394083][ T345] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 85.402743][ T345] usb 3-1: config 0 has no interface number 0 [ 85.410350][ T345] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 85.419579][ T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.427554][ T345] usb 3-1: Product: syz [ 85.431914][ T345] usb 3-1: Manufacturer: syz [ 85.436516][ T345] usb 3-1: SerialNumber: syz [ 85.444631][ T345] usb 3-1: config 0 descriptor?? [ 85.451596][ T345] smsc95xx v2.0.0 [ 85.537881][ T1973] usb usb8: usbfs: process 1973 (syz.0.618) did not claim interface 0 before use [ 85.735025][ T1980] netlink: 'syz.3.621': attribute type 27 has an invalid length. [ 85.798261][ T410] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 85.937907][ T410] usb 2-1: device descriptor read/64, error -71 [ 86.053413][ T345] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 86.071261][ T345] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 86.090918][ T345] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 86.112764][ T345] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 86.134551][ T345] usb 3-1: USB disconnect, device number 32 [ 86.178360][ T410] usb 2-1: device descriptor read/64, error -71 [ 86.287865][ T410] usb usb2-port1: attempt power cycle [ 86.627754][ T410] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 86.648801][ T410] usb 2-1: device descriptor read/8, error -71 [ 86.778844][ T410] usb 2-1: device descriptor read/8, error -71 [ 86.817791][ T345] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 86.977771][ T345] usb 3-1: Using ep0 maxpacket: 8 [ 86.984029][ T345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 86.996220][ T345] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 87.009287][ T345] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 87.018462][ T345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.027788][ T410] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 87.036740][ T345] usb 3-1: config 0 descriptor?? [ 87.058717][ T410] usb 2-1: device descriptor read/8, error -71 [ 87.157750][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 87.188723][ T410] usb 2-1: device descriptor read/8, error -71 [ 87.297889][ T410] usb usb2-port1: unable to enumerate USB device [ 87.308895][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.319985][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.329912][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.342891][ T9] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 87.352171][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.363662][ T9] usb 4-1: config 0 descriptor?? [ 87.446419][ T345] kone 0003:1E7D:2CED.0012: unknown main item tag 0x0 [ 87.453686][ T345] kone 0003:1E7D:2CED.0012: unknown main item tag 0x0 [ 87.460858][ T345] kone 0003:1E7D:2CED.0012: item fetching failed at offset 6/8 [ 87.468978][ T345] kone 0003:1E7D:2CED.0012: parse failed [ 87.474707][ T345] kone 0003:1E7D:2CED.0012: probe with driver kone failed with error -22 [ 87.652384][ T345] usb 3-1: USB disconnect, device number 33 [ 87.821838][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 87.828929][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 87.839627][ T9] usb 4-1: USB disconnect, device number 32 [ 88.368916][ T2018] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 88.484615][ T2036] ./dev/sda1: Can't lookup blockdev [ 88.489920][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 88.627939][ T9] usb 3-1: device descriptor read/64, error -71 [ 88.687941][ T410] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 88.737773][ T345] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 88.817746][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 88.825534][ T410] usb 2-1: device descriptor read/64, error -71 [ 88.867769][ T9] usb 3-1: device descriptor read/64, error -71 [ 88.874221][ T345] usb 4-1: device descriptor read/64, error -71 [ 88.977776][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 88.984036][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 88.995712][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 89.008953][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 89.018157][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.026854][ T10] usb 1-1: config 0 descriptor?? [ 89.067738][ T410] usb 2-1: device descriptor read/64, error -71 [ 89.117762][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 89.147708][ T345] usb 4-1: device descriptor read/64, error -71 [ 89.247735][ T9] usb 3-1: device descriptor read/64, error -71 [ 89.307719][ T410] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 89.387701][ T345] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 89.437747][ T410] usb 2-1: device descriptor read/64, error -71 [ 89.444595][ T10] kone 0003:1E7D:2CED.0013: unknown main item tag 0x0 [ 89.457770][ T10] kone 0003:1E7D:2CED.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.0-1/input0 [ 89.487774][ T9] usb 3-1: device descriptor read/64, error -71 [ 89.527769][ T345] usb 4-1: device descriptor read/64, error -71 [ 89.598538][ T9] usb usb3-port1: attempt power cycle [ 89.637700][ T10] usb 1-1: USB disconnect, device number 31 [ 89.678586][ T410] usb 2-1: device descriptor read/64, error -71 [ 89.767886][ T345] usb 4-1: device descriptor read/64, error -71 [ 89.787864][ T410] usb usb2-port1: attempt power cycle [ 89.877893][ T345] usb usb4-port1: attempt power cycle [ 89.937743][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 89.958895][ T9] usb 3-1: device descriptor read/8, error -71 [ 90.088977][ T9] usb 3-1: device descriptor read/8, error -71 [ 90.127779][ T410] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 90.151247][ T410] usb 2-1: device descriptor read/8, error -71 [ 90.178881][ T36] audit: type=1400 audit(1789992979.210:546): avc: denied { connect } for pid=2044 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.212584][ T36] audit: type=1400 audit(1789992979.230:547): avc: denied { setopt } for pid=2044 comm="syz.0.648" laddr=172.20.20.10 lport=3 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.247276][ T345] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 90.278610][ T345] usb 4-1: device descriptor read/8, error -71 [ 90.288663][ T410] usb 2-1: device descriptor read/8, error -71 [ 90.327727][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 90.358656][ T9] usb 3-1: device descriptor read/8, error -71 [ 90.408830][ T345] usb 4-1: device descriptor read/8, error -71 [ 90.489590][ T9] usb 3-1: device descriptor read/8, error -71 [ 90.527727][ T410] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 90.548783][ T410] usb 2-1: device descriptor read/8, error -71 [ 90.597841][ T9] usb usb3-port1: unable to enumerate USB device [ 90.647793][ T345] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 90.668916][ T345] usb 4-1: device descriptor read/8, error -71 [ 90.678785][ T410] usb 2-1: device descriptor read/8, error -71 [ 90.787820][ T410] usb usb2-port1: unable to enumerate USB device [ 90.799037][ T345] usb 4-1: device descriptor read/8, error -71 [ 90.907831][ T345] usb usb4-port1: unable to enumerate USB device [ 91.311163][ T2063] FAULT_INJECTION: forcing a failure. [ 91.311163][ T2063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.324471][ T2063] CPU: 0 UID: 0 PID: 2063 Comm: syz.2.656 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 91.324494][ T2063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.324502][ T2063] Call Trace: [ 91.324506][ T2063] [ 91.324510][ T2063] __dump_stack+0x21/0x30 [ 91.324540][ T2063] dump_stack_lvl+0x140/0x1c0 [ 91.324557][ T2063] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.324574][ T2063] ? check_stack_object+0x138/0x150 [ 91.324589][ T2063] dump_stack+0x19/0x20 [ 91.324605][ T2063] should_fail_ex+0x3c2/0x510 [ 91.324620][ T2063] should_fail+0xf/0x20 [ 91.324633][ T2063] should_fail_usercopy+0x1e/0x30 [ 91.324649][ T2063] _copy_to_user+0x24/0xa0 [ 91.324666][ T2063] simple_read_from_buffer+0xed/0x160 [ 91.324684][ T2063] proc_fail_nth_read+0x1aa/0x220 [ 91.324702][ T2063] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 91.324719][ T2063] ? bpf_lsm_file_permission+0xd/0x20 [ 91.324736][ T2063] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 91.324754][ T2063] vfs_read+0x288/0xc70 [ 91.324767][ T2063] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 91.324781][ T2063] ? __cfi_vfs_read+0x10/0x10 [ 91.324793][ T2063] ? __kasan_check_write+0x18/0x20 [ 91.324807][ T2063] ? mutex_lock+0x97/0x1d0 [ 91.324821][ T2063] ? __cfi_mutex_lock+0x10/0x10 [ 91.324837][ T2063] ksys_read+0x145/0x260 [ 91.324850][ T2063] ? __cfi_ksys_read+0x10/0x10 [ 91.324862][ T2063] ? __kasan_check_write+0x18/0x20 [ 91.324874][ T2063] ? fput+0x1a4/0x230 [ 91.324890][ T2063] ? __kasan_check_read+0x15/0x20 [ 91.324903][ T2063] __x64_sys_read+0x7f/0x90 [ 91.324915][ T2063] x64_sys_call+0x2638/0x2ee0 [ 91.324927][ T2063] do_syscall_64+0x57/0xf0 [ 91.324939][ T2063] ? clear_bhb_loop+0x50/0xa0 [ 91.324955][ T2063] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.324969][ T2063] RIP: 0033:0x7f79e495e98e [ 91.324981][ T2063] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 91.324993][ T2063] RSP: 002b:00007f79e58f9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 91.325008][ T2063] RAX: ffffffffffffffda RBX: 00007f79e58fa6c0 RCX: 00007f79e495e98e [ 91.325018][ T2063] RDX: 000000000000000f RSI: 00007f79e58fa0a0 RDI: 0000000000000004 [ 91.325027][ T2063] RBP: 00007f79e58fa090 R08: 0000000000000000 R09: 0000000000000000 [ 91.325035][ T2063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.325043][ T2063] R13: 00007f79e4c26038 R14: 00007f79e4c25fa0 R15: 00007fffc10b9ff8 [ 91.325054][ T2063] [ 91.597840][ T36] audit: type=1400 audit(1789992980.620:548): avc: denied { setopt } for pid=2065 comm="syz.1.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.888052][ T36] audit: type=1400 audit(1789992980.920:549): avc: denied { ioctl } for pid=2077 comm="syz.2.663" path="socket:[20977]" dev="sockfs" ino=20977 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.287774][ T410] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 92.447716][ T410] usb 2-1: Using ep0 maxpacket: 8 [ 92.453981][ T410] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 92.462627][ T410] usb 2-1: config 179 has no interface number 0 [ 92.469151][ T410] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 92.480584][ T410] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 92.492018][ T410] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 92.503314][ T410] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 92.514886][ T410] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 92.528276][ T410] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 92.537330][ T410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.545413][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 92.553923][ T2085] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.707775][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 92.714010][ T10] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 92.722845][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.735018][ T10] usb 3-1: config 1 has no interface number 0 [ 92.741361][ T10] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 92.754646][ T10] usb 3-1: config 1 interface 105 has no altsetting 0 [ 92.762994][ T10] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 92.775506][ T10] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 92.783881][ T10] usb 3-1: Product: syz [ 92.788290][ T10] usb 3-1: Manufacturer: syz [ 92.792922][ T10] usb 3-1: SerialNumber: syz [ 92.977299][ T2085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.986732][ T2085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.994991][ T410] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 93.003532][ T10] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 93.158727][ T410] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 93.167065][ T410] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.177637][ T410] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 93.186825][ T410] usb 4-1: config 1 has no interface number 0 [ 93.193142][ T410] usb 4-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.212877][ T410] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.222643][ T410] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.230925][ T410] usb 4-1: Product: syz [ 93.235207][ T410] usb 4-1: Manufacturer: syz [ 93.240148][ T410] usb 4-1: SerialNumber: syz [ 93.250562][ T410] cdc_wdm 4-1:1.128: skipping garbage [ 93.256079][ T410] cdc_wdm 4-1:1.128: probe with driver cdc_wdm failed with error -22 [ 93.439349][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 93.447907][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 93.456498][ T410] usb 2-1: USB disconnect, device number 49 [ 93.466793][ T2101] rust_binder: 2100:2101 transaction call to 0:0 failed EINVAL, code 0 size 0-0 [ 93.501775][ T2101] netlink: 'syz.3.673': attribute type 4 has an invalid length. [ 93.509927][ T2101] netlink: 'syz.3.673': attribute type 30 has an invalid length. [ 93.527321][ T2101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'. [ 93.579553][ T10] usb 4-1: USB disconnect, device number 37 [ 93.589664][ T9] rust_binder: 2100: undelivered TRANSACTION_ERROR: 29201 [ 94.257368][ T2141] 9pnet_fd: Insufficient options for proto=fd [ 94.348433][ T36] audit: type=1400 audit(1789992983.380:550): avc: denied { ioctl } for pid=2148 comm="syz.3.695" path="cgroup:[4026532403]" dev="nsfs" ino=4026532403 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 94.397760][ T410] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 94.426202][ T36] audit: type=1400 audit(1789992983.450:551): avc: denied { write } for pid=2155 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.558707][ T410] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.576345][ T410] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 94.593931][ T2164] fuse: Bad value for 'fd' [ 94.613898][ T410] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.634395][ T410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.661433][ T410] usb 2-1: config 0 descriptor?? [ 94.677510][ T410] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 94.762030][ T2178] overlayfs: failed to resolve './bus': -2 [ 94.795321][ T2182] fuse: Bad value for 'fd' [ 95.137790][ T410] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 95.288888][ T410] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.302961][ T10] usb 3-1: USB disconnect, device number 38 [ 95.311086][ T410] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.334745][ T410] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 95.346419][ T2197] overlayfs: failed to resolve './bus': -2 [ 95.352306][ T410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 95.366425][ T410] usb 4-1: SerialNumber: syz [ 95.374912][ T2199] loop2: detected capacity change from 0 to 7 [ 95.405948][ T2201] fuse: Bad value for 'fd' [ 95.572272][ T2216] overlayfs: failed to resolve './bus': -2 [ 95.585241][ T410] usb 4-1: 0:2 : does not exist [ 95.601230][ T410] usb 4-1: USB disconnect, device number 38 [ 95.721923][ T36] audit: type=1400 audit(1789992984.750:552): avc: denied { search } for pid=2222 comm="syz.2.727" name="/" dev="configfs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.768833][ T36] audit: type=1400 audit(1789992984.770:553): avc: denied { write } for pid=2222 comm="syz.2.727" name="usb_gadget" dev="configfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.827707][ T36] audit: type=1400 audit(1789992984.770:554): avc: denied { add_name } for pid=2222 comm="syz.2.727" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.848613][ T36] audit: type=1400 audit(1789992984.770:555): avc: denied { write } for pid=2222 comm="syz.2.727" name="max_segment_size" dev="configfs" ino=22826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 95.897135][ T36] audit: type=1400 audit(1789992984.770:556): avc: denied { open } for pid=2222 comm="syz.2.727" path="/195/mnt/usb_gadget/g1/functions/ncm.usb0/max_segment_size" dev="configfs" ino=22826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 96.167734][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 96.317709][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 96.323910][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 96.336548][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 96.362941][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 96.381701][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.400179][ T10] usb 3-1: config 0 descriptor?? [ 96.512702][ T2254] usb usb8: usbfs: process 2254 (syz.3.742) did not claim interface 0 before use [ 96.743634][ T36] audit: type=1400 audit(1789992985.770:557): avc: denied { setattr } for pid=2272 comm="syz.3.751" name="/" dev="incremental-fs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.814746][ T10] kone 0003:1E7D:2CED.0014: unknown main item tag 0x0 [ 96.834765][ T10] kone 0003:1E7D:2CED.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 97.015687][ T10] usb 3-1: USB disconnect, device number 39 [ 97.168236][ T410] usb 2-1: USB disconnect, device number 50 [ 97.627705][ T410] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 97.789068][ T410] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.799484][ T410] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 97.812706][ T65] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 97.820893][ T410] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.830425][ T410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.839510][ T410] usb 2-1: config 0 descriptor?? [ 97.849417][ T410] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 97.907913][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 97.989007][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.000332][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.010480][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.023771][ T65] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.033085][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.043670][ T65] usb 3-1: config 0 descriptor?? [ 98.057702][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 98.064134][ T10] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 98.072620][ T10] usb 1-1: config 0 has no interface number 0 [ 98.079716][ T10] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 98.091250][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 98.100516][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.108632][ T10] usb 1-1: Product: syz [ 98.112958][ T10] usb 1-1: Manufacturer: syz [ 98.117630][ T10] usb 1-1: SerialNumber: syz [ 98.125857][ T10] usb 1-1: config 0 descriptor?? [ 98.131260][ T2312] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 98.339191][ T2313] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 98.347410][ T10] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 98.357857][ T10] asix 1-1:0.188: probe with driver asix failed with error -32 [ 98.454362][ T65] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 98.467212][ T65] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 99.223054][ T65] usb 3-1: USB disconnect, device number 40 [ 99.601718][ T2320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.610494][ T2321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.620772][ T2320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.628694][ T2321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.399019][ T65] usb 2-1: USB disconnect, device number 51 [ 100.478690][ T36] audit: type=1400 audit(1789992989.510:558): avc: denied { setattr } for pid=2363 comm="syz.2.787" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 100.503498][ T2362] netlink: 'syz.1.788': attribute type 12 has an invalid length. [ 100.511635][ T2364] usb usb8: usbfs: process 2364 (syz.2.787) did not claim interface 0 before use [ 100.680479][ T65] usb 1-1: USB disconnect, device number 32 [ 100.843903][ T36] audit: type=1326 audit(1789992989.870:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2382 comm="syz.1.795" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa1d99e159 code=0x0 [ 101.077747][ T65] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 101.228743][ T65] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.239053][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 101.252359][ T65] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.261656][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.271978][ T65] usb 1-1: config 0 descriptor?? [ 101.279582][ T65] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 101.717745][ T65] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 101.867725][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 101.874080][ T65] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 101.882674][ T65] usb 3-1: config 179 has no interface number 0 [ 101.889194][ T65] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 101.900436][ T65] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 101.911866][ T410] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 101.919566][ T65] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 101.931204][ T65] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 101.942985][ T65] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 101.956784][ T65] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 101.965963][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.974848][ T2394] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 102.089740][ T410] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 102.099764][ T410] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 102.109885][ T410] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 102.121163][ T410] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 102.131254][ T410] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 102.140552][ T410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.150078][ T2396] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 102.157397][ T2396] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 102.169965][ T410] pl2303 2-1:1.0: pl2303 converter detected [ 102.277911][ T410] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8484]: -110 [ 102.286144][ T410] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0404]: -32 [ 102.294613][ T410] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 102.302820][ T410] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8383]: -32 [ 102.311125][ T410] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 102.319350][ T410] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0404]: -32 [ 102.327722][ T410] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 102.336786][ T410] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8383]: -32 [ 102.345022][ T410] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0000]: -32 [ 102.353564][ T410] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0001]: -32 [ 102.362119][ T410] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0002]: -32 [ 102.376714][ T410] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 102.394548][ T410] usb 2-1: USB disconnect, device number 52 [ 102.403739][ T2394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.413048][ T410] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 102.421327][ T2394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.430237][ T410] pl2303 2-1:1.0: device disconnected [ 102.871383][ T410] usb 3-1: USB disconnect, device number 41 [ 102.877377][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 102.877402][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 103.010091][ T2406] usb usb8: usbfs: process 2406 (syz.1.804) did not claim interface 0 before use [ 103.094327][ T2419] FAULT_INJECTION: forcing a failure. [ 103.094327][ T2419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.117650][ T2419] CPU: 0 UID: 0 PID: 2419 Comm: syz.3.808 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 103.117679][ T2419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.117688][ T2419] Call Trace: [ 103.117693][ T2419] [ 103.117698][ T2419] __dump_stack+0x21/0x30 [ 103.117721][ T2419] dump_stack_lvl+0x140/0x1c0 [ 103.117739][ T2419] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.117756][ T2419] ? check_stack_object+0x10f/0x150 [ 103.117772][ T2419] dump_stack+0x19/0x20 [ 103.117788][ T2419] should_fail_ex+0x3c2/0x510 [ 103.117805][ T2419] should_fail+0xf/0x20 [ 103.117819][ T2419] should_fail_usercopy+0x1e/0x30 [ 103.117835][ T2419] _copy_from_user+0x20/0xa0 [ 103.117854][ T2419] do_sys_poll+0x2b6/0x1210 [ 103.117873][ T2419] ? poll_select_finish+0x600/0x600 [ 103.117891][ T2419] ? is_bpf_text_address+0x17b/0x1a0 [ 103.117910][ T2419] ? kernel_text_address+0xa9/0xe0 [ 103.117933][ T2419] ? __kasan_check_write+0x18/0x20 [ 103.117947][ T2419] ? proc_fail_nth_write+0x184/0x220 [ 103.117965][ T2419] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 103.117985][ T2419] ? set_user_sigmask+0xce/0x1c0 [ 103.118003][ T2419] ? __cfi_set_user_sigmask+0x10/0x10 [ 103.118020][ T2419] ? mutex_unlock+0x90/0x240 [ 103.118035][ T2419] ? __cfi_mutex_unlock+0x10/0x10 [ 103.118051][ T2419] __se_sys_ppoll+0x20a/0x2b0 [ 103.118068][ T2419] ? fput+0x1a4/0x230 [ 103.118084][ T2419] ? __x64_sys_ppoll+0xf0/0xf0 [ 103.118101][ T2419] ? __cfi_ksys_write+0x10/0x10 [ 103.118115][ T2419] __x64_sys_ppoll+0xc3/0xf0 [ 103.118132][ T2419] x64_sys_call+0xd20/0x2ee0 [ 103.118145][ T2419] do_syscall_64+0x57/0xf0 [ 103.118157][ T2419] ? clear_bhb_loop+0x50/0xa0 [ 103.118172][ T2419] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.118188][ T2419] RIP: 0033:0x7f997bf9e159 [ 103.118200][ T2419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.118212][ T2419] RSP: 002b:00007f997ce1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 103.118228][ T2419] RAX: ffffffffffffffda RBX: 00007f997c225fa0 RCX: 00007f997bf9e159 [ 103.118238][ T2419] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000900 [ 103.118247][ T2419] RBP: 00007f997ce1c090 R08: 0000000000000000 R09: 0000000000000000 [ 103.118256][ T2419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.118265][ T2419] R13: 00007f997c226038 R14: 00007f997c225fa0 R15: 00007fff973aa9f8 [ 103.118276][ T2419] [ 103.652070][ T2438] input: syz1 as /devices/virtual/input/input11 [ 103.664992][ T36] audit: type=1400 audit(1789992992.690:560): avc: denied { append } for pid=2436 comm="syz.1.818" name="event3" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.765716][ T2450] FAULT_INJECTION: forcing a failure. [ 103.765716][ T2450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.782856][ T65] usb 1-1: USB disconnect, device number 33 [ 103.839489][ T2450] CPU: 0 UID: 0 PID: 2450 Comm: syz.1.823 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 103.839515][ T2450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.839523][ T2450] Call Trace: [ 103.839528][ T2450] [ 103.839533][ T2450] __dump_stack+0x21/0x30 [ 103.839556][ T2450] dump_stack_lvl+0x140/0x1c0 [ 103.839573][ T2450] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.839591][ T2450] ? __kasan_check_write+0x18/0x20 [ 103.839605][ T2450] ? kvm_arch_vcpu_load+0x665/0x8d0 [ 103.839619][ T2450] dump_stack+0x19/0x20 [ 103.839635][ T2450] should_fail_ex+0x3c2/0x510 [ 103.839651][ T2450] should_fail+0xf/0x20 [ 103.839665][ T2450] should_fail_usercopy+0x1e/0x30 [ 103.839681][ T2450] _copy_from_user+0x20/0xa0 [ 103.839699][ T2450] kvm_arch_vcpu_ioctl+0x43b/0x3120 [ 103.839712][ T2450] ? avc_has_perm+0x155/0x240 [ 103.839728][ T2450] ? __cfi_avc_has_perm+0x10/0x10 [ 103.839743][ T2450] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 103.839757][ T2450] ? selinux_file_open+0x46c/0x630 [ 103.839772][ T2450] ? __cfi_selinux_file_open+0x10/0x10 [ 103.839787][ T2450] ? is_bpf_text_address+0x17b/0x1a0 [ 103.839860][ T2450] ? kernel_text_address+0xa9/0xe0 [ 103.839877][ T2450] ? __kernel_text_address+0x11/0x40 [ 103.839894][ T2450] ? __asan_set_shadow_00+0x12/0x20 [ 103.839911][ T2450] ? do_vfs_ioctl+0x1824/0x2010 [ 103.839927][ T2450] ? arch_stack_walk+0x10a/0x170 [ 103.839940][ T2450] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 103.839956][ T2450] ? _parse_integer_limit+0x195/0x1e0 [ 103.839971][ T2450] ? _parse_integer+0x2e/0x40 [ 103.839984][ T2450] ? kstrtoull+0x13b/0x1e0 [ 103.839998][ T2450] ? kstrtouint+0x78/0xf0 [ 103.840012][ T2450] ? ioctl_has_perm+0x1bc/0x500 [ 103.840025][ T2450] ? __asan_memcpy+0x5a/0x80 [ 103.840038][ T2450] ? ioctl_has_perm+0x408/0x500 [ 103.840051][ T2450] ? has_cap_mac_admin+0xd0/0xd0 [ 103.840064][ T2450] ? __kasan_check_write+0x18/0x20 [ 103.840077][ T2450] ? mutex_lock_killable+0x97/0x1d0 [ 103.840094][ T2450] ? __cfi_mutex_lock_killable+0x10/0x10 [ 103.840109][ T2450] ? proc_fail_nth_write+0x184/0x220 [ 103.840127][ T2450] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 103.840146][ T2450] kvm_vcpu_ioctl+0x7da/0x1000 [ 103.840159][ T2450] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 103.840172][ T2450] ? __cfi_vfs_write+0x10/0x10 [ 103.840186][ T2450] ? __kasan_check_write+0x18/0x20 [ 103.840199][ T2450] ? mutex_unlock+0x90/0x240 [ 103.840213][ T2450] ? __cfi_mutex_unlock+0x10/0x10 [ 103.840229][ T2450] ? __fget_files+0x2bc/0x330 [ 103.840245][ T2450] ? bpf_lsm_file_ioctl+0xd/0x20 [ 103.840261][ T2450] ? security_file_ioctl+0x3e/0x110 [ 103.840273][ T2450] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 103.840286][ T2450] __se_sys_ioctl+0x123/0x1b0 [ 103.840301][ T2450] __x64_sys_ioctl+0x7f/0xa0 [ 103.840317][ T2450] x64_sys_call+0x1878/0x2ee0 [ 103.840337][ T2450] do_syscall_64+0x57/0xf0 [ 103.840349][ T2450] ? clear_bhb_loop+0x50/0xa0 [ 103.840365][ T2450] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.840380][ T2450] RIP: 0033:0x7ffa1d99e159 [ 103.840393][ T2450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.840405][ T2450] RSP: 002b:00007ffa1e842028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.840421][ T2450] RAX: ffffffffffffffda RBX: 00007ffa1dc25fa0 RCX: 00007ffa1d99e159 [ 103.840432][ T2450] RDX: 0000200000000040 RSI: 000000004008ae89 RDI: 0000000000000005 [ 103.840442][ T2450] RBP: 00007ffa1e842090 R08: 0000000000000000 R09: 0000000000000000 [ 103.840451][ T2450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.840459][ T2450] R13: 00007ffa1dc26038 R14: 00007ffa1dc25fa0 R15: 00007ffe770864f8 [ 103.840470][ T2450] [ 104.532928][ T2486] usb usb8: usbfs: process 2486 (syz.3.838) did not claim interface 0 before use [ 104.557751][ T65] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 104.647733][ T410] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 104.687728][ T65] usb 1-1: device descriptor read/64, error -71 [ 104.807725][ T410] usb 3-1: Using ep0 maxpacket: 8 [ 104.818848][ T410] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 104.827219][ T410] usb 3-1: config 179 has no interface number 0 [ 104.839449][ T410] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 104.862560][ T410] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 104.879288][ T410] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 104.892178][ T410] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 104.915882][ T410] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 104.945248][ T410] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 104.954399][ T65] usb 1-1: device descriptor read/64, error -71 [ 104.978849][ T410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.000422][ T2469] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 105.197700][ T65] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 105.367461][ T65] usb 1-1: device descriptor read/64, error -71 [ 105.382263][ T36] audit: type=1400 audit(1789992994.410:561): avc: denied { remount } for pid=2532 comm="syz.3.858" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.417805][ T2469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.432167][ T2469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.516960][ T2541] usb usb8: usbfs: process 2541 (syz.1.861) did not claim interface 0 before use [ 105.617727][ T65] usb 1-1: device descriptor read/64, error -71 [ 105.637364][ T2550] overlayfs: failed to resolve './file1': -2 [ 105.737818][ T65] usb usb1-port1: attempt power cycle [ 105.801599][ T2561] tmpfs: Cannot disable swap on remount [ 105.808841][ T2561] fuse: Bad value for 'fd' [ 105.844726][ T36] audit: type=1400 audit(1789992994.870:562): avc: denied { execute } for pid=2564 comm="syz.1.872" name="file0" dev="tmpfs" ino=1330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.867020][ T2565] process 'syz.1.872' launched './file0' with NULL argv: empty string added [ 105.898328][ T36] audit: type=1400 audit(1789992994.910:563): avc: denied { execute_no_trans } for pid=2564 comm="syz.1.872" path="/238/file0" dev="tmpfs" ino=1330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.932402][ T345] usb 3-1: USB disconnect, device number 42 [ 105.938374][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 105.938396][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 105.985034][ T2565] usb usb8: usbfs: process 2565 (syz.1.872) did not claim interface 0 before use [ 106.041700][ T2571] overlayfs: failed to resolve './file1': -2 [ 106.089211][ T65] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 106.138844][ T65] usb 1-1: device descriptor read/8, error -71 [ 106.265570][ T2586] FAULT_INJECTION: forcing a failure. [ 106.265570][ T2586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.288595][ T65] usb 1-1: device descriptor read/8, error -71 [ 106.309508][ T2586] CPU: 0 UID: 0 PID: 2586 Comm: syz.3.881 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 106.309534][ T2586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.309543][ T2586] Call Trace: [ 106.309547][ T2586] [ 106.309553][ T2586] __dump_stack+0x21/0x30 [ 106.309575][ T2586] dump_stack_lvl+0x140/0x1c0 [ 106.309592][ T2586] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.309611][ T2586] ? check_stack_object+0x138/0x150 [ 106.309626][ T2586] dump_stack+0x19/0x20 [ 106.309642][ T2586] should_fail_ex+0x3c2/0x510 [ 106.309658][ T2586] should_fail+0xf/0x20 [ 106.309672][ T2586] should_fail_usercopy+0x1e/0x30 [ 106.309688][ T2586] _copy_to_user+0x24/0xa0 [ 106.309706][ T2586] simple_read_from_buffer+0xed/0x160 [ 106.309724][ T2586] proc_fail_nth_read+0x1aa/0x220 [ 106.309743][ T2586] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 106.309761][ T2586] ? bpf_lsm_file_permission+0xd/0x20 [ 106.309779][ T2586] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 106.309796][ T2586] vfs_read+0x288/0xc70 [ 106.309809][ T2586] ? poll_select_finish+0x179/0x600 [ 106.309828][ T2586] ? pollwake+0x220/0x220 [ 106.309870][ T2586] ? __cfi_vfs_read+0x10/0x10 [ 106.309883][ T2586] ? __kasan_check_write+0x18/0x20 [ 106.309896][ T2586] ? mutex_lock+0x97/0x1d0 [ 106.309911][ T2586] ? __cfi_mutex_lock+0x10/0x10 [ 106.309927][ T2586] ksys_read+0x145/0x260 [ 106.309940][ T2586] ? __cfi_ksys_read+0x10/0x10 [ 106.309960][ T2586] ? __kasan_check_read+0x15/0x20 [ 106.309973][ T2586] __x64_sys_read+0x7f/0x90 [ 106.309986][ T2586] x64_sys_call+0x2638/0x2ee0 [ 106.309999][ T2586] do_syscall_64+0x57/0xf0 [ 106.310011][ T2586] ? clear_bhb_loop+0x50/0xa0 [ 106.310027][ T2586] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.310042][ T2586] RIP: 0033:0x7f997bf5e98e [ 106.310054][ T2586] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.310067][ T2586] RSP: 002b:00007f997ce1bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.310083][ T2586] RAX: ffffffffffffffda RBX: 00007f997ce1c6c0 RCX: 00007f997bf5e98e [ 106.310093][ T2586] RDX: 000000000000000f RSI: 00007f997ce1c0a0 RDI: 0000000000000005 [ 106.310109][ T2586] RBP: 00007f997ce1c090 R08: 0000000000000000 R09: 0000000000000000 [ 106.310118][ T2586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.310127][ T2586] R13: 00007f997c226038 R14: 00007f997c225fa0 R15: 00007fff973aa9f8 [ 106.310138][ T2586] [ 106.315641][ T36] audit: type=1400 audit(1789992995.340:564): avc: denied { setopt } for pid=2589 comm="syz.1.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.588150][ T2592] overlayfs: failed to resolve './file1': -2 [ 106.631236][ T2597] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2597 comm=syz.1.883 [ 106.644280][ T2597] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2597 comm=syz.1.883 [ 106.658150][ T2597] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2597 comm=syz.1.883 [ 106.717707][ T65] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 106.732550][ T36] audit: type=1400 audit(1789992995.760:565): avc: denied { mount } for pid=2601 comm="syz.3.887" name="/" dev="pstore" ino=2102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 106.767838][ T65] usb 1-1: device descriptor read/8, error -71 [ 106.862955][ T36] audit: type=1400 audit(1789992995.890:566): avc: denied { watch } for pid=2604 comm="syz.0.889" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 106.910726][ T65] usb 1-1: device descriptor read/8, error -71 [ 107.011076][ T36] audit: type=1400 audit(1789992996.040:567): avc: denied { read } for pid=2613 comm="syz.2.893" path="socket:[26668]" dev="sockfs" ino=26668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.042202][ T65] usb usb1-port1: unable to enumerate USB device ^}@‘Æ] *$%(*^:.[} devtmpfs[ 107.417828][ T410] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 107.567911][ T65] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 107.587475][ T410] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.606571][ T410] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.634385][ T410] usb 2-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 107.662253][ T410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.690053][ T410] usb 2-1: Product: syz [ 107.707723][ T410] usb 2-1: Manufacturer: syz [ 107.712400][ T410] usb 2-1: SerialNumber: syz [ 107.734107][ T410] usb-storage 2-1:1.0: USB Mass Storage device detected [ 107.748745][ T65] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.760182][ T65] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.795383][ T65] usb 3-1: config 0 interface 0 has no altsetting 0 [ 107.811243][ T65] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 107.832043][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.851372][ T65] usb 3-1: config 0 descriptor?? [ 107.957716][ T410] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 107.996742][ T2622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.015537][ T2622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.042748][ T2622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.062723][ T2622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.101381][ T9] usb 2-1: USB disconnect, device number 53 [ 108.128952][ T410] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.136983][ T410] usb 1-1: not running at top speed; connect to a high speed hub [ 108.147427][ T410] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.167769][ T410] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.188508][ T410] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.207718][ T410] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.228100][ T410] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.247714][ T410] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.278524][ T410] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.297707][ T410] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.317792][ T65] hid-picolcd 0003:04D8:F002.0016: No report with id 0xf3 found [ 108.328352][ T410] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config ^}@‘Æ] *$%(*^:.[} devtmpfs[ 108.347964][ T65] hid-picolcd 0003:04D8:F002.0016: No report with id 0xf4 found [ 108.362663][ T410] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.390293][ T2649] netlink: 'syz.3.907': attribute type 4 has an invalid length. [ 108.398192][ T2649] netlink: 'syz.3.907': attribute type 2 has an invalid length. [ 108.406422][ T410] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.418426][ T2649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.907'. [ 108.427531][ T410] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.440803][ T2649] usb usb8: usbfs: process 2649 (syz.3.907) did not claim interface 0 before use [ 108.451456][ T410] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 108.464126][ T410] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.491513][ T410] usb 1-1: Product: syz [ 108.504200][ T410] usb 1-1: Manufacturer: syz [ 108.514542][ T410] usb 1-1: SerialNumber: syz [ 108.740693][ T410] usb 1-1: MIDIStreaming interface descriptor not found [ 108.764806][ T410] usb 1-1: USB disconnect, device number 38 [ 108.866313][ T2676] input: syz1 as /devices/virtual/input/input12 ^}@‘Æ] *$%(*^:.[} devtmpfs[ 109.304333][ T2687] usb usb8: usbfs: process 2687 (syz.0.923) did not claim interface 0 before use [ 109.317709][ T36] audit: type=1400 audit(1789992998.330:568): avc: denied { listen } for pid=2686 comm="syz.0.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.388823][ T2689] fuse: Bad value for 'fd' [ 109.397729][ T36] audit: type=1400 audit(1789992998.330:569): avc: denied { accept } for pid=2686 comm="syz.0.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.417812][ T2691] FAULT_INJECTION: forcing a failure. [ 109.417812][ T2691] name failslab, interval 1, probability 0, space 0, times 0 [ 109.455480][ T2691] CPU: 0 UID: 0 PID: 2691 Comm: syz.1.925 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 109.455506][ T2691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.455515][ T2691] Call Trace: [ 109.455521][ T2691] [ 109.455526][ T2691] __dump_stack+0x21/0x30 [ 109.455553][ T2691] dump_stack_lvl+0x140/0x1c0 [ 109.455571][ T2691] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.455590][ T2691] ? kasan_save_alloc_info+0x3a/0x50 [ 109.455604][ T2691] ? __kasan_kmalloc+0x96/0xb0 [ 109.455621][ T2691] dump_stack+0x19/0x20 [ 109.455639][ T2691] should_fail_ex+0x3c2/0x510 [ 109.455655][ T2691] should_failslab+0xac/0x100 [ 109.455672][ T2691] __kmalloc_cache_noprof+0x41/0x470 [ 109.455686][ T2691] ? __se_sys_fsopen+0x14d/0x390 [ 109.455706][ T2691] __se_sys_fsopen+0x14d/0x390 [ 109.455724][ T2691] __x64_sys_fsopen+0x5f/0x80 [ 109.455742][ T2691] x64_sys_call+0x2d40/0x2ee0 [ 109.455755][ T2691] do_syscall_64+0x57/0xf0 [ 109.455768][ T2691] ? clear_bhb_loop+0x50/0xa0 [ 109.455785][ T2691] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.455800][ T2691] RIP: 0033:0x7ffa1d99e159 [ 109.455813][ T2691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.455825][ T2691] RSP: 002b:00007ffa1e842028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 109.455841][ T2691] RAX: ffffffffffffffda RBX: 00007ffa1dc25fa0 RCX: 00007ffa1d99e159 [ 109.455852][ T2691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 109.455861][ T2691] RBP: 00007ffa1da3506b R08: 0000000000000000 R09: 0000000000000000 [ 109.455870][ T2691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.455878][ T2691] R13: 00007ffa1dc26038 R14: 00007ffa1dc25fa0 R15: 00007ffe770864f8 [ 109.455889][ T2691] [ 109.723608][ T2706] FAULT_INJECTION: forcing a failure. [ 109.723608][ T2706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.736723][ T2706] CPU: 0 UID: 0 PID: 2706 Comm: syz.3.932 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 109.736746][ T2706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.736754][ T2706] Call Trace: [ 109.736759][ T2706] [ 109.736764][ T2706] __dump_stack+0x21/0x30 [ 109.736788][ T2706] dump_stack_lvl+0x140/0x1c0 [ 109.736805][ T2706] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.736823][ T2706] ? check_stack_object+0x138/0x150 [ 109.736841][ T2706] dump_stack+0x19/0x20 [ 109.736858][ T2706] should_fail_ex+0x3c2/0x510 [ 109.736874][ T2706] should_fail+0xf/0x20 [ 109.736888][ T2706] should_fail_usercopy+0x1e/0x30 [ 109.736903][ T2706] _copy_to_user+0x24/0xa0 [ 109.736921][ T2706] simple_read_from_buffer+0xed/0x160 [ 109.736940][ T2706] proc_fail_nth_read+0x1aa/0x220 [ 109.736957][ T2706] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 109.736976][ T2706] ? bpf_lsm_file_permission+0xd/0x20 [ 109.736992][ T2706] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 109.737010][ T2706] vfs_read+0x288/0xc70 [ 109.737024][ T2706] ? __cfi_vfs_read+0x10/0x10 [ 109.737037][ T2706] ? __kasan_check_write+0x18/0x20 [ 109.737050][ T2706] ? mutex_lock+0x97/0x1d0 [ 109.737065][ T2706] ? __cfi_mutex_lock+0x10/0x10 [ 109.737080][ T2706] ksys_read+0x145/0x260 [ 109.737094][ T2706] ? __cfi_ksys_read+0x10/0x10 [ 109.737107][ T2706] ? __kasan_check_read+0x15/0x20 [ 109.737120][ T2706] __x64_sys_read+0x7f/0x90 [ 109.737134][ T2706] x64_sys_call+0x2638/0x2ee0 [ 109.737146][ T2706] do_syscall_64+0x57/0xf0 [ 109.737159][ T2706] ? clear_bhb_loop+0x50/0xa0 [ 109.737175][ T2706] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.737190][ T2706] RIP: 0033:0x7f997bf5e98e [ 109.737202][ T2706] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.737213][ T2706] RSP: 002b:00007f997ce1bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.737230][ T2706] RAX: ffffffffffffffda RBX: 00007f997ce1c6c0 RCX: 00007f997bf5e98e [ 109.737240][ T2706] RDX: 000000000000000f RSI: 00007f997ce1c0a0 RDI: 0000000000000004 [ 109.737249][ T2706] RBP: 00007f997ce1c090 R08: 0000000000000000 R09: 0000000000000000 [ 109.737258][ T2706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.737266][ T2706] R13: 00007f997c226038 R14: 00007f997c225fa0 R15: 00007fff973aa9f8 [ 109.737278][ T2706] [ 110.027709][ T65] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 110.097704][ T410] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 110.107467][ T2710] fuse: Bad value for 'fd' [ 110.135126][ T2712] fuse: Invalid rootmode [ 110.165241][ T2714] FAULT_INJECTION: forcing a failure. [ 110.165241][ T2714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.178461][ T65] usb 2-1: Using ep0 maxpacket: 8 [ 110.184107][ T2714] CPU: 0 UID: 0 PID: 2714 Comm: syz.3.936 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 110.184133][ T2714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.184143][ T2714] Call Trace: [ 110.184147][ T2714] [ 110.184153][ T2714] __dump_stack+0x21/0x30 [ 110.184175][ T2714] dump_stack_lvl+0x140/0x1c0 [ 110.184196][ T2714] ? __cfi_dump_stack_lvl+0x10/0x10 [ 110.184214][ T2714] ? __kasan_check_write+0x18/0x20 [ 110.184229][ T2714] ? kvm_arch_vcpu_load+0x665/0x8d0 [ 110.184251][ T2714] dump_stack+0x19/0x20 [ 110.184268][ T2714] should_fail_ex+0x3c2/0x510 [ 110.184284][ T2714] should_fail+0xf/0x20 [ 110.184298][ T2714] should_fail_usercopy+0x1e/0x30 [ 110.184314][ T2714] _copy_from_user+0x20/0xa0 [ 110.184332][ T2714] kvm_arch_vcpu_ioctl+0x43b/0x3120 [ 110.184370][ T2714] ? avc_has_perm+0x155/0x240 [ 110.184386][ T2714] ? __cfi_avc_has_perm+0x10/0x10 [ 110.184402][ T2714] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 110.184416][ T2714] ? selinux_file_open+0x46c/0x630 [ 110.184438][ T2714] ? __cfi_selinux_file_open+0x10/0x10 [ 110.184454][ T2714] ? is_bpf_text_address+0x17b/0x1a0 [ 110.184473][ T2714] ? kernel_text_address+0xa9/0xe0 [ 110.184489][ T2714] ? __kernel_text_address+0x11/0x40 [ 110.184506][ T2714] ? __asan_set_shadow_00+0x12/0x20 [ 110.184523][ T2714] ? do_vfs_ioctl+0x1824/0x2010 [ 110.184539][ T2714] ? arch_stack_walk+0x10a/0x170 [ 110.184553][ T2714] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 110.184569][ T2714] ? _parse_integer_limit+0x195/0x1e0 [ 110.184596][ T2714] ? _parse_integer+0x2e/0x40 [ 110.184614][ T2714] ? kstrtoull+0x13b/0x1e0 [ 110.184628][ T2714] ? kstrtouint+0x78/0xf0 [ 110.184642][ T2714] ? ioctl_has_perm+0x1bc/0x500 [ 110.184656][ T2714] ? __asan_memcpy+0x5a/0x80 [ 110.184669][ T2714] ? ioctl_has_perm+0x408/0x500 [ 110.184682][ T2714] ? has_cap_mac_admin+0xd0/0xd0 [ 110.184695][ T2714] ? __kasan_check_write+0x18/0x20 [ 110.184708][ T2714] ? mutex_lock_killable+0x97/0x1d0 [ 110.184725][ T2714] ? __cfi_mutex_lock_killable+0x10/0x10 [ 110.184742][ T2714] ? proc_fail_nth_write+0x184/0x220 [ 110.184763][ T2714] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 110.184782][ T2714] kvm_vcpu_ioctl+0x7da/0x1000 [ 110.184795][ T2714] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 110.184808][ T2714] ? __cfi_vfs_write+0x10/0x10 [ 110.184822][ T2714] ? __kasan_check_write+0x18/0x20 [ 110.184835][ T2714] ? mutex_unlock+0x90/0x240 [ 110.184850][ T2714] ? __cfi_mutex_unlock+0x10/0x10 [ 110.184866][ T2714] ? __fget_files+0x2bc/0x330 [ 110.184882][ T2714] ? bpf_lsm_file_ioctl+0xd/0x20 [ 110.184898][ T2714] ? security_file_ioctl+0x3e/0x110 [ 110.184912][ T2714] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 110.184925][ T2714] __se_sys_ioctl+0x123/0x1b0 [ 110.184941][ T2714] __x64_sys_ioctl+0x7f/0xa0 [ 110.184956][ T2714] x64_sys_call+0x1878/0x2ee0 [ 110.184969][ T2714] do_syscall_64+0x57/0xf0 [ 110.184981][ T2714] ? clear_bhb_loop+0x50/0xa0 [ 110.184998][ T2714] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.185014][ T2714] RIP: 0033:0x7f997bf9e159 [ 110.185027][ T2714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.185039][ T2714] RSP: 002b:00007f997ce1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.185055][ T2714] RAX: ffffffffffffffda RBX: 00007f997c225fa0 RCX: 00007f997bf9e159 [ 110.185065][ T2714] RDX: 0000200000000040 RSI: 000000004008ae89 RDI: 0000000000000005 [ 110.185075][ T2714] RBP: 00007f997ce1c090 R08: 0000000000000000 R09: 0000000000000000 [ 110.185084][ T2714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.185093][ T2714] R13: 00007f997c226038 R14: 00007f997c225fa0 R15: 00007fff973aa9f8 [ 110.185104][ T2714] [ 110.187346][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 110.584542][ T410] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 110.611701][ T9] usb 3-1: USB disconnect, device number 43 [ 110.629673][ T410] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.639281][ T410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.671745][ T410] usb 1-1: config 0 descriptor?? [ 110.681002][ T410] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 110.689848][ T65] usb 2-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 110.699210][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.707972][ T36] audit: type=1400 audit(1789992999.740:570): avc: denied { read } for pid=2715 comm="syz.3.937" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 110.735495][ T65] usb 2-1: Product: syz [ 110.749965][ T65] usb 2-1: Manufacturer: syz [ 110.754627][ T36] audit: type=1400 audit(1789992999.740:571): avc: denied { open } for pid=2715 comm="syz.3.937" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 110.778008][ T65] usb 2-1: SerialNumber: syz [ 110.784372][ T2722] overlayfs: failed to resolve 'lower2': -2 [ 110.791703][ T2722] overlayfs: failed to resolve 'lower2': -2 [ 111.001974][ T65] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 111.009398][ T65] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 111.028943][ T65] usb 2-1: USB disconnect, device number 54 [ 111.657783][ T2732] fuse: Bad value for 'fd' [ 111.706273][ T2738] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 111.753499][ T2742] FAULT_INJECTION: forcing a failure. [ 111.753499][ T2742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.776686][ T2744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'. [ 111.785600][ T65] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 111.794132][ T2742] CPU: 0 UID: 0 PID: 2742 Comm: syz.1.948 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 111.794155][ T2742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.794164][ T2742] Call Trace: [ 111.794168][ T2742] [ 111.794174][ T2742] __dump_stack+0x21/0x30 [ 111.794197][ T2742] dump_stack_lvl+0x140/0x1c0 [ 111.794214][ T2742] ? __cfi_dump_stack_lvl+0x10/0x10 [ 111.794232][ T2742] ? check_stack_object+0x81/0x150 [ 111.794246][ T2742] ? __virt_addr_valid+0x2a1/0x370 [ 111.794262][ T2742] dump_stack+0x19/0x20 [ 111.794278][ T2742] should_fail_ex+0x3c2/0x510 [ 111.794295][ T2742] should_fail+0xf/0x20 [ 111.794308][ T2742] should_fail_usercopy+0x1e/0x30 [ 111.794324][ T2742] _copy_from_user+0x20/0xa0 [ 111.794354][ T2742] memdup_user+0x81/0x170 [ 111.794367][ T2742] ? kvm_arch_vcpu_ioctl+0x1361/0x3120 [ 111.794380][ T2742] kvm_arch_vcpu_ioctl+0x19bc/0x3120 [ 111.794394][ T2742] ? avc_has_perm+0x155/0x240 [ 111.794409][ T2742] ? __cfi_avc_has_perm+0x10/0x10 [ 111.794424][ T2742] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 111.794438][ T2742] ? selinux_file_open+0x46c/0x630 [ 111.794452][ T2742] ? __cfi_selinux_file_open+0x10/0x10 [ 111.794468][ T2742] ? is_bpf_text_address+0x17b/0x1a0 [ 111.794488][ T2742] ? kernel_text_address+0xa9/0xe0 [ 111.794507][ T2742] ? __kernel_text_address+0x11/0x40 [ 111.794523][ T2742] ? __asan_set_shadow_00+0x12/0x20 [ 111.794541][ T2742] ? do_vfs_ioctl+0x1824/0x2010 [ 111.794557][ T2742] ? arch_stack_walk+0x10a/0x170 [ 111.794571][ T2742] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 111.794586][ T2742] ? _parse_integer_limit+0x195/0x1e0 [ 111.794601][ T2742] ? _parse_integer+0x2e/0x40 [ 111.794614][ T2742] ? kstrtoull+0x13b/0x1e0 [ 111.794628][ T2742] ? kstrtouint+0x78/0xf0 [ 111.794642][ T2742] ? ioctl_has_perm+0x1bc/0x500 [ 111.794655][ T2742] ? __asan_memcpy+0x5a/0x80 [ 111.794668][ T2742] ? ioctl_has_perm+0x408/0x500 [ 111.794681][ T2742] ? has_cap_mac_admin+0xd0/0xd0 [ 111.794695][ T2742] ? __kasan_check_write+0x18/0x20 [ 111.794708][ T2742] ? mutex_lock_killable+0x97/0x1d0 [ 111.794724][ T2742] ? __cfi_mutex_lock_killable+0x10/0x10 [ 111.794739][ T2742] ? proc_fail_nth_write+0x184/0x220 [ 111.794757][ T2742] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 111.794777][ T2742] kvm_vcpu_ioctl+0x7da/0x1000 [ 111.794790][ T2742] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 111.794803][ T2742] ? __cfi_vfs_write+0x10/0x10 [ 111.794817][ T2742] ? __kasan_check_write+0x18/0x20 [ 111.794830][ T2742] ? mutex_unlock+0x90/0x240 [ 111.794847][ T2742] ? __cfi_mutex_unlock+0x10/0x10 [ 111.794863][ T2742] ? __fget_files+0x2bc/0x330 [ 111.794879][ T2742] ? bpf_lsm_file_ioctl+0xd/0x20 [ 111.794895][ T2742] ? security_file_ioctl+0x3e/0x110 [ 111.794907][ T2742] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 111.794919][ T2742] __se_sys_ioctl+0x123/0x1b0 [ 111.794935][ T2742] __x64_sys_ioctl+0x7f/0xa0 [ 111.794950][ T2742] x64_sys_call+0x1878/0x2ee0 [ 111.794963][ T2742] do_syscall_64+0x57/0xf0 [ 111.794975][ T2742] ? clear_bhb_loop+0x50/0xa0 [ 111.794991][ T2742] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 111.795006][ T2742] RIP: 0033:0x7ffa1d99e159 [ 111.795018][ T2742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.795030][ T2742] RSP: 002b:00007ffa1e842028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.795046][ T2742] RAX: ffffffffffffffda RBX: 00007ffa1dc25fa0 RCX: 00007ffa1d99e159 [ 111.795061][ T2742] RDX: 0000200000000040 RSI: 000000004008ae89 RDI: 0000000000000005 [ 111.795070][ T2742] RBP: 00007ffa1e842090 R08: 0000000000000000 R09: 0000000000000000 [ 111.795079][ T2742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.795088][ T2742] R13: 00007ffa1dc26038 R14: 00007ffa1dc25fa0 R15: 00007ffe770864f8 [ 111.795099][ T2742] [ 112.307701][ T65] usb 3-1: device descriptor read/64, error -71 [ 112.446537][ T2764] usb usb8: usbfs: process 2764 (syz.1.959) did not claim interface 0 before use [ 112.569433][ T65] usb 3-1: device descriptor read/64, error -71 [ 112.597712][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 112.671819][ T410] usb 1-1: USB disconnect, device number 39 [ 112.749248][ T9] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.767831][ T345] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 112.779852][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.803144][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.817712][ T65] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 112.835500][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 112.849929][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.868099][ T2756] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 112.936308][ T36] audit: type=1400 audit(1789993001.960:572): avc: denied { name_bind } for pid=2789 comm="syz.0.970" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 112.960640][ T345] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.970392][ T65] usb 3-1: device descriptor read/64, error -71 [ 112.977693][ T345] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 112.988787][ T345] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 112.997955][ T345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.005960][ T345] usb 2-1: Product: syz [ 113.010489][ T345] usb 2-1: Manufacturer: syz [ 113.015123][ T345] usb 2-1: SerialNumber: syz [ 113.207701][ T65] usb 3-1: device descriptor read/64, error -71 [ 113.317843][ T65] usb usb3-port1: attempt power cycle [ 113.529719][ T2802] overlayfs: missing 'workdir' [ 113.657734][ T65] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 113.678719][ T65] usb 3-1: device descriptor read/8, error -71 [ 113.777714][ T345] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 113.808623][ T65] usb 3-1: device descriptor read/8, error -71 [ 113.927716][ T345] usb 1-1: Invalid ep0 maxpacket: 64 [ 114.047736][ T65] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 114.057824][ T345] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 114.068725][ T65] usb 3-1: device descriptor read/8, error -71 [ 114.198748][ T65] usb 3-1: device descriptor read/8, error -71 [ 114.207841][ T345] usb 1-1: Invalid ep0 maxpacket: 64 [ 114.213398][ T345] usb usb1-port1: attempt power cycle [ 114.307794][ T65] usb usb3-port1: unable to enumerate USB device [ 114.560433][ T345] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 114.588068][ T345] usb 1-1: Invalid ep0 maxpacket: 64 [ 114.717788][ T345] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 114.738132][ T345] usb 1-1: Invalid ep0 maxpacket: 64 [ 114.743558][ T345] usb usb1-port1: unable to enumerate USB device [ 114.787944][ T9] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 114.798647][ T9] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input13 [ 114.823908][ T9] usb 4-1: USB disconnect, device number 40 [ 114.823940][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 115.297324][ T2819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.308335][ T2819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.527930][ T9] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 115.573605][ T65] usb 2-1: USB disconnect, device number 55 [ 115.647248][ T36] audit: type=1400 audit(1789993004.670:573): avc: denied { shutdown } for pid=2826 comm="syz.1.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.678528][ T9] usb 4-1: device descriptor read/64, error -71 [ 115.937697][ T9] usb 4-1: device descriptor read/64, error -71 [ 115.985131][ T2851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.989'. [ 116.001376][ T36] audit: type=1400 audit(1789993005.030:574): avc: denied { mounton } for pid=2852 comm="syz.2.993" path="/245/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 116.187702][ T9] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 116.327696][ T9] usb 4-1: device descriptor read/64, error -71 [ 116.387706][ T345] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 116.539105][ T345] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 116.558252][ T345] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.573069][ T9] usb 4-1: device descriptor read/64, error -71 [ 116.586746][ T345] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 116.607150][ T345] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 116.634864][ T345] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.645509][ T345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 116.657827][ T411] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 116.669979][ T345] usb 2-1: SerialNumber: syz [ 116.687757][ T9] usb usb4-port1: attempt power cycle [ 116.819152][ T411] usb 3-1: unable to get BOS descriptor or descriptor too short [ 116.827930][ T411] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.843044][ T411] usb 3-1: string descriptor 0 read error: -22 [ 116.849553][ T411] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 116.865859][ T36] audit: type=1400 audit(1789993005.890:575): avc: denied { mounton } for pid=2894 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 116.897746][ T411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.935578][ T2894] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.942978][ T2894] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.950303][ T2894] bridge_slave_0: entered allmulticast mode [ 116.957413][ T2894] bridge_slave_0: entered promiscuous mode [ 116.964860][ T2894] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.972489][ T2894] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.979805][ T2894] bridge_slave_1: entered allmulticast mode [ 116.986149][ T2894] bridge_slave_1: entered promiscuous mode [ 117.030669][ T2894] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.038086][ T2894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.045344][ T2894] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.052397][ T2894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.059937][ T9] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 117.082917][ T1265] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.090643][ T1265] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.099219][ T9] usb 4-1: device descriptor read/8, error -71 [ 117.109026][ T1265] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.116106][ T1265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.124594][ T1265] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.131680][ T1265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.155448][ T2894] veth0_vlan: entered promiscuous mode [ 117.170556][ T2894] veth1_macvtap: entered promiscuous mode [ 117.228703][ T9] usb 4-1: device descriptor read/8, error -71 [ 117.266383][ T36] audit: type=1400 audit(1789993006.290:576): avc: denied { read } for pid=2905 comm="syz.4.1010" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 117.294470][ T36] audit: type=1400 audit(1789993006.320:577): avc: denied { open } for pid=2905 comm="syz.4.1010" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 117.325352][ T2889] x86/PAT: syz.2.1003:2889 freeing invalid memtype [mem 0xfe1d3000-0xfe1d3fff] [ 117.334848][ T2889] x86/PAT: syz.2.1003:2889 freeing invalid memtype [mem 0xfe054000-0xfe054fff] [ 117.467953][ T9] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 117.488716][ T9] usb 4-1: device descriptor read/8, error -71 [ 117.527823][ T65] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.545836][ T411] usb 3-1: 1:1: cannot get freq at ep 0x1 [ 117.566562][ T411] usb 3-1: USB disconnect, device number 48 [ 117.619074][ T9] usb 4-1: device descriptor read/8, error -71 [ 117.677937][ T65] usb 5-1: Using ep0 maxpacket: 32 [ 117.684166][ T65] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.696019][ T65] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 117.705657][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.714155][ T65] usb 5-1: Product: syz [ 117.718737][ T65] usb 5-1: Manufacturer: syz [ 117.723377][ T65] usb 5-1: SerialNumber: syz [ 117.728611][ T9] usb usb4-port1: unable to enumerate USB device [ 117.735780][ T65] usb 5-1: config 0 descriptor?? [ 117.946522][ T2906] input: syz0 as /devices/virtual/input/input14 [ 117.957530][ T36] audit: type=1400 audit(1789993006.980:578): avc: denied { append } for pid=2905 comm="syz.4.1010" name="event3" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.985016][ T65] usb 5-1: bad CDC descriptors [ 117.990286][ T65] usb 5-1: unsupported MDLM descriptors [ 118.082313][ T2888] x86/PAT: syz.2.1003:2888 freeing invalid memtype [mem 0xfe055000-0xfe1d2fff] [ 118.091634][ T2888] x86/PAT: syz.2.1003:2888 freeing invalid memtype [mem 0xfe053000-0xfe053fff] [ 118.184909][ T36] audit: type=1400 audit(1789993007.210:579): avc: denied { ioctl } for pid=2905 comm="syz.4.1010" path="/3/mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject" dev="tracefs" ino=19680823 ioctlcmd=0xaa02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 118.217730][ T65] usb 5-1: USB disconnect, device number 2 [ 118.487911][ T1801] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 118.507765][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 118.638916][ T1801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.650006][ T1801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.659803][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 118.665816][ T1801] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 118.675124][ T1801] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 118.683350][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 118.691864][ T1801] usb 3-1: Manufacturer: syz [ 118.696544][ T9] usb 4-1: config 179 has no interface number 0 [ 118.703942][ T1801] usb 3-1: config 0 descriptor?? [ 118.710675][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 118.740413][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 118.764137][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 118.790635][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 118.812227][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 118.825893][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 118.835193][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.846688][ T2913] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.047752][ T65] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.150523][ T345] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 119.182626][ T345] usb 2-1: USB disconnect, device number 56 [ 119.189809][ T65] usb 5-1: device descriptor read/64, error -71 [ 119.198695][ T2926] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1017'. [ 119.213217][ T2926] usb usb8: usbfs: process 2926 (syz.1.1017) did not claim interface 0 before use [ 119.259996][ T2913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.287555][ T2913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.417749][ T2938] FAULT_INJECTION: forcing a failure. [ 119.417749][ T2938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.431027][ T2938] CPU: 0 UID: 0 PID: 2938 Comm: syz.1.1023 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 119.431051][ T2938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.431060][ T2938] Call Trace: [ 119.431064][ T2938] [ 119.431070][ T2938] __dump_stack+0x21/0x30 [ 119.431094][ T2938] dump_stack_lvl+0x140/0x1c0 [ 119.431111][ T2938] ? __cfi_dump_stack_lvl+0x10/0x10 [ 119.431129][ T2938] ? check_stack_object+0x81/0x150 [ 119.431147][ T2938] ? __virt_addr_valid+0x2a1/0x370 [ 119.431177][ T2938] dump_stack+0x19/0x20 [ 119.431193][ T2938] should_fail_ex+0x3c2/0x510 [ 119.431209][ T2938] should_fail+0xf/0x20 [ 119.431223][ T2938] should_fail_usercopy+0x1e/0x30 [ 119.431239][ T2938] _copy_from_user+0x20/0xa0 [ 119.431258][ T2938] memdup_user+0x81/0x170 [ 119.431270][ T2938] ? kvm_arch_vcpu_ioctl+0x1361/0x3120 [ 119.431286][ T2938] kvm_arch_vcpu_ioctl+0x19bc/0x3120 [ 119.431299][ T2938] ? avc_has_perm+0x155/0x240 [ 119.431315][ T2938] ? __cfi_avc_has_perm+0x10/0x10 [ 119.431330][ T2938] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 119.431344][ T2938] ? selinux_file_open+0x46c/0x630 [ 119.431364][ T2938] ? __cfi_selinux_file_open+0x10/0x10 [ 119.431381][ T2938] ? is_bpf_text_address+0x17b/0x1a0 [ 119.431400][ T2938] ? kernel_text_address+0xa9/0xe0 [ 119.431417][ T2938] ? __kernel_text_address+0x11/0x40 [ 119.431433][ T2938] ? __asan_set_shadow_00+0x12/0x20 [ 119.431451][ T2938] ? do_vfs_ioctl+0x1824/0x2010 [ 119.431467][ T2938] ? arch_stack_walk+0x10a/0x170 [ 119.431480][ T2938] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 119.431495][ T2938] ? _parse_integer_limit+0x195/0x1e0 [ 119.431510][ T2938] ? _parse_integer+0x2e/0x40 [ 119.431524][ T2938] ? kstrtoull+0x13b/0x1e0 [ 119.431537][ T2938] ? kstrtouint+0x78/0xf0 [ 119.431551][ T2938] ? ioctl_has_perm+0x1bc/0x500 [ 119.431564][ T2938] ? __asan_memcpy+0x5a/0x80 [ 119.431577][ T2938] ? ioctl_has_perm+0x408/0x500 [ 119.431590][ T2938] ? has_cap_mac_admin+0xd0/0xd0 [ 119.431604][ T2938] ? __kasan_check_write+0x18/0x20 [ 119.431617][ T2938] ? mutex_lock_killable+0x97/0x1d0 [ 119.431633][ T2938] ? __cfi_mutex_lock_killable+0x10/0x10 [ 119.431649][ T2938] ? proc_fail_nth_write+0x184/0x220 [ 119.431667][ T2938] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 119.431685][ T2938] kvm_vcpu_ioctl+0x7da/0x1000 [ 119.431699][ T2938] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 119.431712][ T2938] ? __cfi_vfs_write+0x10/0x10 [ 119.431725][ T2938] ? __kasan_check_write+0x18/0x20 [ 119.431738][ T2938] ? mutex_unlock+0x90/0x240 [ 119.431752][ T2938] ? __cfi_mutex_unlock+0x10/0x10 [ 119.431768][ T2938] ? __fget_files+0x2bc/0x330 [ 119.431783][ T2938] ? bpf_lsm_file_ioctl+0xd/0x20 [ 119.431799][ T2938] ? security_file_ioctl+0x3e/0x110 [ 119.431812][ T2938] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 119.431824][ T2938] __se_sys_ioctl+0x123/0x1b0 [ 119.431840][ T2938] __x64_sys_ioctl+0x7f/0xa0 [ 119.431855][ T2938] x64_sys_call+0x1878/0x2ee0 [ 119.431867][ T2938] do_syscall_64+0x57/0xf0 [ 119.431880][ T2938] ? clear_bhb_loop+0x50/0xa0 [ 119.431896][ T2938] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 119.431911][ T2938] RIP: 0033:0x7ffa1d99e159 [ 119.431923][ T2938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.431935][ T2938] RSP: 002b:00007ffa1e842028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.431950][ T2938] RAX: ffffffffffffffda RBX: 00007ffa1dc25fa0 RCX: 00007ffa1d99e159 [ 119.431961][ T2938] RDX: 0000200000000040 RSI: 000000004008ae89 RDI: 0000000000000005 [ 119.431970][ T2938] RBP: 00007ffa1e842090 R08: 0000000000000000 R09: 0000000000000000 [ 119.431982][ T2938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.431991][ T2938] R13: 00007ffa1dc26038 R14: 00007ffa1dc25fa0 R15: 00007ffe770864f8 [ 119.432003][ T2938] [ 119.810567][ T65] usb 5-1: device descriptor read/64, error -71 [ 120.047853][ T65] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.099502][ T2943] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 120.151179][ T411] usb 4-1: USB disconnect, device number 45 [ 120.151219][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 120.151239][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 120.187698][ T65] usb 5-1: device descriptor read/64, error -71 [ 120.427707][ T65] usb 5-1: device descriptor read/64, error -71 [ 120.537800][ T65] usb usb5-port1: attempt power cycle [ 120.671390][ T2948] fuse: Bad value for 'fd' [ 120.704090][ T36] audit: type=1400 audit(1789993009.730:580): avc: denied { wake_alarm } for pid=2949 comm="syz.3.1027" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.882328][ T65] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 120.925725][ T65] usb 5-1: device descriptor read/8, error -71 [ 121.003594][ T36] audit: type=1400 audit(1789993010.030:581): avc: denied { getopt } for pid=2962 comm="syz.1.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.068644][ T65] usb 5-1: device descriptor read/8, error -71 [ 121.307692][ T65] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 121.328657][ T65] usb 5-1: device descriptor read/8, error -71 [ 121.458706][ T65] usb 5-1: device descriptor read/8, error -71 [ 121.567829][ T65] usb usb5-port1: unable to enumerate USB device [ 121.585878][ T2968] overlayfs: overlapping lowerdir path [ 121.827699][ T65] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 121.861747][ T1801] uclogic 0003:256C:006D.0017: v1 frame probing failed: -71 [ 121.869095][ T1801] uclogic 0003:256C:006D.0017: failed probing parameters: -71 [ 121.876657][ T1801] uclogic 0003:256C:006D.0017: probe with driver uclogic failed with error -71 [ 121.907060][ T1801] usb 3-1: USB disconnect, device number 49 [ 121.927959][ T2972] usb usb8: usbfs: process 2972 (syz.2.1036) did not claim interface 0 before use [ 121.983590][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 121.998376][ T65] usb 2-1: not running at top speed; connect to a high speed hub [ 122.020626][ T65] usb 2-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 122.029810][ T345] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 122.040730][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.050146][ T65] usb 2-1: Product: syz [ 122.054386][ T65] usb 2-1: Manufacturer: syz [ 122.076900][ T65] usb 2-1: SerialNumber: syz [ 122.208156][ T345] usb 4-1: Using ep0 maxpacket: 8 [ 122.214241][ T2986] usb usb8: usbfs: process 2986 (syz.2.1041) did not claim interface 0 before use [ 122.224873][ T345] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 122.237273][ T345] usb 4-1: config 179 has no interface number 0 [ 122.253682][ T345] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 122.278632][ T345] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 122.312546][ T65] usb 2-1: MIDIStreaming interface descriptor not found [ 122.329453][ T345] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 122.359337][ T65] usb 2-1: USB disconnect, device number 57 [ 122.381034][ T345] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 122.395470][ T2994] netlink: 'syz.4.1044': attribute type 27 has an invalid length. [ 122.410941][ T345] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 122.424444][ T345] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 122.433631][ T345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.445379][ T2970] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 122.627706][ T1801] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 122.757697][ T1801] usb 3-1: device descriptor read/64, error -71 [ 122.858924][ T2970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.867509][ T2970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.017694][ T1801] usb 3-1: device descriptor read/64, error -71 [ 123.127807][ T345] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 123.257753][ T1801] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 123.280064][ T345] usb 2-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 123.304893][ T345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.317400][ T3003] printk: legacy console [ttyS0] disabled [ 123.326405][ T411] usb 4-1: USB disconnect, device number 46 [ 123.326444][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 123.326464][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 123.351540][ T345] usb 2-1: Product: syz [ 123.355808][ T345] usb 2-1: Manufacturer: syz syzkaller