last executing test programs: 7.02260458s ago: executing program 0 (id=1164): move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)={0x40e880, 0x1, 0xa}, 0x18) syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') (async) r1 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') execveat$binfmt(r0, r1, &(0x7f0000000340)={[&(0x7f0000000140)='\x00', &(0x7f0000000180)='+[*+\\(+\'\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='!\x00', &(0x7f0000000240)='\\]{)-.\'\x00', &(0x7f0000000280)=':@\x00', &(0x7f00000002c0)='[t\x00', &(0x7f0000000300)='\xf7\x00']}, &(0x7f00000004c0)={[&(0x7f00000003c0)='\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\\\x00', &(0x7f0000000480)='&*\x00']}, 0x100) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x10000, 0x0) close(r2) (async) close(r2) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000540)) (async) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000540)) accept4$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x0, 0x0, @private1}, &(0x7f00000005c0)=0x1c, 0x800) (async) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x0, 0x0, @private1}, &(0x7f00000005c0)=0x1c, 0x800) getsockopt$inet6_buf(r3, 0x29, 0x78, &(0x7f0000000600)=""/184, &(0x7f00000006c0)=0xb8) shutdown(r3, 0x0) (async) shutdown(r3, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000800)={0x5, 0x3d9, &(0x7f0000000700)="00480f0dd01e301990f2db06033de60d3ef0a8b5e5f6", &(0x7f0000000740)="6f1500f050c32b0ca43c56e60bf3eb9b4e2643d3b18bb78544ed3730c2ec1177b3a55376cc13342d0a1e92c05ab717c9e16374904370c2ed6430db22f41ff1ca77e39f81a5cfd769c7b7c0fb89a4a0d5e1ecfa2a72be121c21392ae2a236ba53c341a12a4601ae8eafa7c825665230c453d01c1634d83ace4285da7efe574c2522dda83e2e73c13d75608b814fef65082d28605de6b428498e39352766514affd186a77a4cd86544644752b03fbf366a5b93", 0x16, 0xb2}) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)=@newqdisc={0xe4, 0x24, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xa}, {0xffff}, {0xa, 0xd}}, [@q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x9}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x40}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) (async) r6 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) renameat2(r5, &(0x7f0000000a40)='./file0\x00', r0, &(0x7f0000000a80)='./file0\x00', 0x3) close_range(r4, r6, 0x2) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000ac0)) (async) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000ac0)) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000b00)) write$binfmt_elf64(r6, &(0x7f0000000b40)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x80, 0x40, 0x2, 0x1, 0x3, 0x3e, 0x80000001, 0x116, 0x40, 0x250, 0x10001, 0x2, 0x38, 0x1, 0x7, 0x3, 0x8}, [{0x3, 0x10000, 0x4, 0x2, 0x672, 0x800, 0x5, 0x4}], "bd0fd32075da88b0c51c8f30f45b5628a344f1389cd74bbd2ec39f29aa320f590ecce7ed3c4a77027ae1e03fe99f06fbbce8b908850d1edeb12e0895f5a3dc28df1bbe7fbe1b9b69aa1feebd3cc7d168f6f0f700884c46db596b8117de27f3ef782ad6c9c9fa61d0accd2a63c67dbb2480a24cf778ce371a652ff84459bd6cf2a53ccb4498a844011655a9d3ec7f55e2c7f8c3be23403f613f2bb5bf4c48837a2f5b21db5d4cc7bd7e869dfb28610cfb00b21316a3c0bada5d28233570", ['\x00', '\x00', '\x00']}, 0x435) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001300)={0x9c, 0x0, &(0x7f00000011c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f80)={@fd, @fda={0x66646185, 0xa, 0x0, 0x21}, @flat=@binder={0x73622a85, 0x110b, 0x3}}, &(0x7f0000001000)={0x0, 0x18, 0x38}}}, @increfs_done, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001100)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, &(0x7f0000001040)=""/162, 0xa2, 0x2, 0x2d}, @fda={0x66646185, 0x6, 0x0, 0x30}}, &(0x7f0000001180)={0x0, 0x18, 0x40}}}], 0x71, 0x0, &(0x7f0000001280)="c77cb32d5cf3d67ff9074b1428f1c1b54b25534be38aa1086452efb4409920e02f1914d9fb5316780750b04bdf979e8d5213a4b96936dddf4bcd69b0f36ffb10917b7d067c29287104c0b711fbb1b6a37eaae88f037f06bf156fbf67b676cb02f132fc1254ea5ba65c1e9706bf4b1e85db"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000013c0)={0xa, &(0x7f0000001340)=[{0x369d, 0x7, 0x7, 0x7ff}, {0x0, 0xfc, 0xc, 0xfc1}, {0x532, 0x4, 0x2, 0x1}, {0x5, 0xe0, 0xfc, 0xffffffff}, {0x7, 0x7, 0x3, 0x8cd8}, {0x8, 0x4e, 0x78, 0x3}, {0xbde2, 0xa9, 0xbd, 0x4}, {0x9, 0x5, 0x8, 0x8}, {0x5, 0x4, 0x9, 0x4b}, {0x9, 0x10, 0x40, 0x6}]}) sendmsg$nl_xfrm(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)=@newspdinfo={0x44, 0x24, 0x100, 0x70bd27, 0x25dfdbfb, 0x5, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000044}, 0x200000c0) (async) sendmsg$nl_xfrm(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)=@newspdinfo={0x44, 0x24, 0x100, 0x70bd27, 0x25dfdbfb, 0x5, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000044}, 0x200000c0) getsockopt$MRT(r5, 0x0, 0xce, &(0x7f0000001540), &(0x7f0000001580)=0x4) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000015c0)={'ip6_vti0\x00', 0x200}) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000015c0)={'ip6_vti0\x00', 0x200}) ioctl$FITHAW(r2, 0xc0045878) openat$tun(0xffffffffffffff9c, &(0x7f0000001600), 0x4100, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r5) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r5) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x20, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x47}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x80c0) 7.0223188s ago: executing program 0 (id=1165): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) syz_create_resource$binfmt(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x0, 0x40042, 0xfffffffffffffffe, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x1, 0x6, 0x3, 0x2, 0xffffffffffffff00, 0x744], 0x40000}) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = mmap$binder(&(0x7f0000c77000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0xc, 0x0, &(0x7f0000000540)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 6.386647835s ago: executing program 2 (id=1171): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d9000f32ba00e500000f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x59}], 0x46, 0x1, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000000) 6.313870447s ago: executing program 2 (id=1172): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800006b0002010300000000000000000200001028000a8008000140000000011c0002800600034000000000060003400001000006000340004600001c000a801800028014"], 0x58}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x801, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0xfffffffb, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x4400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x8, 0x9d27, 0x6, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x1, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x40202, 0x105) write$tcp_mem(r4, &(0x7f0000000500)={0xfffffffffffffffa, 0x20, 0x48001, 0x20, 0x3ff}, 0x48) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x40000000000) 6.138776771s ago: executing program 2 (id=1176): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000940)="2e1221b23bb601c494d3df173e75feff86dd9d90491c0024", 0x18}, {&(0x7f0000000440)="0400000002e877da000003467b5dc42de49830d7268a4a5734f37117f1218db9719b", 0x22}], 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) lseek(r5, 0x3, 0x6) bind$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f00000003c0)) 6.070529503s ago: executing program 0 (id=1177): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast2, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0xe7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffff01}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e22e0000002925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee000000000000000002000000", 0x57}], 0x1) 6.070345123s ago: executing program 2 (id=1178): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1601000000000040ac054382408b0b00000109022400010000002009040000fd03010000092100000001220100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0xa, @mcast2, 0xcbf}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x4309, 0x4) recvmmsg(r2, &(0x7f00000004c0), 0x800000000000142, 0x8160, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x4004480f, 0x0) 6.070047173s ago: executing program 0 (id=1179): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x8004480e, 0x0) 3.064069946s ago: executing program 2 (id=1192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000400)={r4, 0x0, r3, 0x0, 0x80000}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x4, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0xb0, 0x2, 0x6}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xb, 0xa0, 0xa0, 0x10, 0x7a}, 0x59, &(0x7f0000000280)={0x5, 0xf, 0x59, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x10, 0x4, 0x8, 0x1}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x3, 0xe100, 0x3, [0x18, 0x30, 0x0, 0x0, 0x3f00, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x3, 0x3, 0xe53, 0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xd, 0x1, 0x7, 0xf00, 0xfff, [0xff3fc0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xf6, 0xc3, 0x8}]}, 0x2, [{0x91, &(0x7f0000000300)=@string={0x91, 0x3, "27834f742befa8a87836e642074f4d851d0698280107c0a3bdf955ce216a93d82b6dbe3b8f74c38091590e8005c7bace69f5895469ada43fa329eda20f5d3b0ccf48b0a6a5afaea7eb01ed8c745cb71686f4cfc4f99fe97bc55bba609182dcfc18b9890b1621aacec7279997d978e1f33fe0a062b6e4ad21b883194bb0d8ae05d625a2975e4e1050ba1e6c4ee80c35"}}, {0xa1, &(0x7f0000000440)=@string={0xa1, 0x3, "520d2a6ea34066b268894adb554961e57f4b62a6217ed411990576e5db9d980fd926c9181d4f349cbb1fed8feac902e132ffaf070331d140de6791b78e0bde98fa81c0100f8b475a41e47f493bf72cb8e8ca9f03394da2148f9e6c4e380e3b5dbec1e984b3fb64e963ff1311d5d2403faf56e3b71315af8b576d2f200a94fa1dfa6efb5ef3d5f0ae3f3a849b059e9c6371c30847a829bef97ce5341af5a131"}}]}) syz_usb_control_io$printer(r6, &(0x7f0000000640)={0x14, &(0x7f0000000540)={0x0, 0x4, 0x7c, {0x7c, 0x31, "c02c9d8c2db7315ae620fd8fc52af5566b14ca26c932cbbc6c4aaffd0c02a49fea3841be2a72a9dad028633ad991577da7600ff1a831a23525b190800189e570c81e0fcea475451877673c25c5c5b83d92178452ff072f40020017e0daaf1c70ff117310317c9712e56f9217f32ad8fdfc9095b0e7ea7a9abc25"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, &(0x7f0000000840)={0x34, &(0x7f0000000680)={0x0, 0xb, 0x86, "64489ead927fb3d69c4f2aa94a0c62c7135dd312f78ce0a7d23a649229957531a957fb7a73e72c3b8c5152be44cd10daac0af38ac2d8e2a3bf6930b844637ebce47f3549f58a72878a446f52313f5c68deff1e76d93a7c5ad2f6e8996875b5d98c3b5f79777b28586a28c4400bbed7cf093a867ee2960331c05215becbc5623c659dad8ba9b4"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x6e}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000007c0)={0x20, 0x0, 0x20, {0x1e, "af74d30cbad0cd04a52ba5a6abdbffb78040cb4563018fa798cde6f26be1"}}, 0x0, &(0x7f0000000800)={0x20, 0x0, 0x1, 0x7}}) 3.025378357s ago: executing program 0 (id=1193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x0, 0x0, 0x4000}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000040)={0xe1, 0x0, 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r4, 0x4068aea3, &(0x7f0000000200)={0x80, 0x0, 0x9}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, &(0x7f0000000180)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000000, 0x8010, r1, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000013a000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./cfg/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r7, 0x4018aee2, 0x0) write(r6, &(0x7f0000000130)='0x0', 0x3) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x10000) 2.782749283s ago: executing program 0 (id=1194): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x804, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0xea60}, {0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000100)={0x20, 0x4, 0x41, {0x41, 0x11, "83efb930f0187ff0478fa22a61a50607b71ea9e43d359c810037f525cde38bf791407736dccfb66b4887ab4ca4584c73f9742e50be1261fdb32c5c6dbf3624"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001e00030e2bbd7400000000000a00000005000000000000001600010085951a710b54d4c53ad87f3a5fa9e200f78a0000"], 0x34}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x5) mount$cgroup(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000240), 0x2000, &(0x7f0000000300)={[{@name={'name', 0x3d, '\x00'}}], [{@dont_appraise}, {@obj_user={'obj_user', 0x3d, './binderfs/binder1\x00'}}, {@hash}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r7, r7, 0x0, 0x3) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788030c09103328", 0xffffffffffffffd7, 0x4, &(0x7f0000000140)={0x11, 0x86c6, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180)) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r9, 0x80104592, &(0x7f0000000180)={0x4, 0x9, &(0x7f0000000200)="9505b3e006ae9a4c3a"}) 1.924025074s ago: executing program 1 (id=1197): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x260640, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) close_range(r0, r0, 0x2) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0x152) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r3, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000240)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000243000/0x2000)=nil, 0x2000}, 0x2}) recvmmsg(r3, &(0x7f0000005340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004bc0)=""/51, 0x33}, 0x9}], 0x1, 0x2023, 0x0) close(r2) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1.862764755s ago: executing program 1 (id=1198): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800006b0002010300000000000000000200001028000a8008000140000000011c0002800600034000000000060003400001000006000340004600001c000a801800028014"], 0x58}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x801, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0xfffffffb, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x4400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x8, 0x9d27, 0x6, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x1, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee01) keyctl$chown(0x4, r0, 0xee00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x2, 0x1000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x11, 0x0, 0x1000}]}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x40202, 0x105) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1.718925879s ago: executing program 1 (id=1199): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16bcc0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff4) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000c80)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="010027bd7000000000000100000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e4c0008804800008015800100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c200004000a004e21000000060000000000000000000000000600000100000000140002c2910077673200"/146], 0x98}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001d80)='\x00\x000\x10\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91') 1.704132179s ago: executing program 1 (id=1200): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x738, 0x1709, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8f, "", [{{0x9, 0x4, 0x0, 0xb7, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0xfd, 0x1, {0x22, 0x2b}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xd, 0xc1, 0xf9}}}}}]}}]}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) write$tun(r0, &(0x7f0000000040)={@void, @val={0x9bc6d90f757e8b09, 0x5, 0x20, 0x10, 0x14, 0x6}, @ipv4=@dccp={{0x7, 0x4, 0x1, 0x8, 0x2c, 0x68, 0x0, 0x4b, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010101, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x3, 0xed}]}}, {{0x4e23, 0x4e24, 0x4, 0x1, 0x5, 0x0, 0x0, 0x8, 0x1, "56b371", 0x2, "5d8acc"}}}}, 0x36) 1.142685712s ago: executing program 3 (id=1201): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800006b0002010300000000000000000200001028000a8008000140000000011c0002800600034000000000060003400001000006000340004600001c000a801800028014"], 0x58}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x801, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0xfffffffb, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x4400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x8, 0x9d27, 0x6, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x1, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) keyctl$chown(0x4, 0x0, 0xee01, 0xee01) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x11, 0x0, 0x1000}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x40202, 0x105) write$tcp_mem(r4, &(0x7f0000000500)={0xfffffffffffffffa, 0x20, 0x48001, 0x20, 0x3ff}, 0x48) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 495.320768ms ago: executing program 1 (id=1202): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4", 0x1}], 0x1}}], 0x1, 0x4000000) r2 = syz_io_uring_complete(0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/clients\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x4, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r6, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x7f8) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='-}\x00', 0x0, r3) write(r1, &(0x7f0000001f00)="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", 0x504) r8 = socket(0x2, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x1, 0x8}) setsockopt$inet_icmp_ICMP_FILTER(r8, 0x1, 0x1, &(0x7f0000000000)={0x80000000}, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x267, @empty, 0x20001}, 0xfffffffffffffea1) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0xd809839e65f39dea}, "50a76c25e19150c2", "0100", "af95ddae", "567e207ac3fa5496"}, 0x28) 394.005801ms ago: executing program 1 (id=1203): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1601000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x4805, 0x0) r2 = eventfd2(0x80005, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4010) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="2c0000001a000100000000000000000002200000000000000000000008000160e00000010800030001000000", 0x2c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="6764355a1836f0f30f107f4e0f205999b9a20a0000b842350000ba000000000f300f22c3deeef2a78fe978c7fb66ba2100ed", 0x32}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) write$eventfd(r2, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) read(r2, &(0x7f0000000480)=""/82, 0x52) socket$packet(0x11, 0x3e976dd521dbc75c, 0x300) 247.164444ms ago: executing program 3 (id=1204): r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030025642564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x6}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000240)="09000000e70014000000d97bfbf788a83baa88a8000088a8ffff8100009988a8", 0x20, 0x200000c4, &(0x7f0000000100)={0x11, 0x3, r4, 0x1, 0xc, 0x6, @broadcast}, 0x14) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}]}]}, 0x84}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000140)=[{&(0x7f00000003c0)="c61c010ba000", 0x6}], 0x1, 0xa) socket$inet6(0xa, 0x80003, 0xff) close(r6) 180.184196ms ago: executing program 3 (id=1205): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230, 0x0, r3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 179.628216ms ago: executing program 3 (id=1206): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_getres(0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x5460, 0x0) r3 = dup(r0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000080)={0x2, 0x0, [{0x4, 0x0, 0x2, 0x400, 0x12, 0x0, 0x2}, {0x80000007, 0x8, 0x6, 0x1, 0x0, 0x5, 0x8}]}) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0f79c00f01fa36660fe32803ff66b9800000c00f326635010000000f300f7868c8440f20c0663505000000440f22c0367cad360f5b50fd66f4", 0x39}], 0x1, 0x42, 0x0, 0x0) mprotect(&(0x7f0000674000/0x1000)=nil, 0x1000, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000100)={0x0, 0x7, 0x401}) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x4}, 0xc) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000180)=@arm64) 66.303239ms ago: executing program 3 (id=1207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001d000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000100000f30460f01cb0f01c366b8f1000f00d066baf80cb8c51f998eef66bafc0cec66b82f018ee866baf80cb8e1a6708def66bafc0cec66baf80cb85b26548aef66bafc0cb000ee3e0f01ca66b8a5008ee8", 0x5b}], 0x1, 0x11, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), 0x800006, &(0x7f00000001c0)={[{@name={'name', 0x3d, '#{@(-,\xbf(+%'}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='dummy_hcd.0', 0xb) write$FUSE_INTERRUPT(r3, &(0x7f0000000300)={0x30, 0xffffffffffffffda}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r6, &(0x7f00000006c0)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000040)="f697079a161cfb7702311e2e97ba11f900"/27, 0x1b}, {&(0x7f0000000180)="567303007e0a4e9542a2", 0xa}], 0x3, 0x4, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x23) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r8) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f000001d000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000100000f30460f01cb0f01c366b8f1000f00d066baf80cb8c51f998eef66bafc0cec66b82f018ee866baf80cb8e1a6708def66bafc0cec66baf80cb85b26548aef66bafc0cb000ee3e0f01ca66b8a5008ee8", 0x5b}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 8.61553ms ago: executing program 3 (id=1208): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800006b0002010300000000000000000200001028000a8008000140000000011c0002800600034000000000060003400001000006000340004600001c000a801800028014"], 0x58}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x801, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0xfffffffb, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x4400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x8, 0x9d27, 0x6, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x1, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee01) keyctl$chown(0x4, r0, 0xee00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x2, 0x1000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x11, 0x0, 0x1000}]}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x40202, 0x105) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 0s ago: executing program 2 (id=1209): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4604040b00010000000000000003003e0003000d009c0200100000000040000000000000006102000000000000000000002d8f38000100feff0200070003000000010000f80a00000000000000ffffff7f00000000ff0100000000000010"], 0x78) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cf", 0x2, 0x1) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) close(r0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x7, 0x1, 0xe, "a6ff40000000000000005917f73400"}) r3 = syz_open_pts(r2, 0x200) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)=0xaf) ptrace$peekuser(0x3, r1, 0x380) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) kernel console output (not intermixed with test programs): high-speed USB device number 35 using dummy_hcd [ 119.799995][ T310] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 119.912719][ T2796] overlay: Unknown parameter '/file0' [ 119.931050][ T954] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 119.936584][ T2798] netlink: 92 bytes leftover after parsing attributes in process `syz.0.758'. [ 119.950069][ T954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.962572][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 119.967774][ T36] audit: type=1400 audit(1787599336.270:861): avc: denied { execute } for pid=2797 comm="syz.0.758" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.000483][ T954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.020238][ T954] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 120.033880][ T310] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.045061][ T310] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.055078][ T954] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 120.065686][ T954] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 120.073847][ T310] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.087123][ T954] usb 2-1: Manufacturer: syz [ 120.092533][ T954] usb 2-1: config 0 descriptor?? [ 120.097887][ T310] usb 4-1: config 0 interface 0 has no altsetting 0 [ 120.104652][ T310] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 120.115030][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.124205][ T310] usb 4-1: config 0 descriptor?? [ 120.339700][ T310] usbhid 4-1:0.0: can't add hid device: -71 [ 120.345797][ T310] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 120.355188][ T310] usb 4-1: USB disconnect, device number 28 [ 120.362732][ T2805] tipc: Started in network mode [ 120.369382][ T2805] tipc: Node identity ac14142f, cluster identity 4711 [ 120.376462][ T2805] tipc: Enabling of bearer rejected, failed to enable media [ 120.517664][ T954] appleir 0003:05AC:8243.001B: unknown main item tag 0x0 [ 120.527450][ T954] appleir 0003:05AC:8243.001B: No inputs registered, leaving [ 120.536770][ T954] appleir 0003:05AC:8243.001B: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 120.718515][ T954] usb 2-1: USB disconnect, device number 35 [ 121.109994][ T372] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 121.283177][ T372] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 121.300043][ T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.311000][ T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.321015][ T372] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 121.340114][ T372] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 121.350258][ T372] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 121.360004][ T372] usb 4-1: Manufacturer: syz [ 121.370268][ T372] usb 4-1: config 0 descriptor?? [ 121.780122][ T310] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 121.932587][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 121.964318][ T310] usb 2-1: not running at top speed; connect to a high speed hub [ 121.974123][ T310] usb 2-1: config 1 has an invalid interface number: 219 but max is 0 [ 121.988427][ T310] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 122.035548][ T310] usb 2-1: config 1 has no interface number 0 [ 122.051018][ T310] usb 2-1: config 1 interface 219 altsetting 15 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 122.081139][ T310] usb 2-1: config 1 interface 219 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 122.090279][ T372] appleir 0003:05AC:8243.001C: unknown main item tag 0x0 [ 122.094385][ T954] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 122.099778][ T372] appleir 0003:05AC:8243.001C: No inputs registered, leaving [ 122.114826][ T310] usb 2-1: config 1 interface 219 altsetting 15 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 122.120966][ T372] appleir 0003:05AC:8243.001C: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 122.128731][ T310] usb 2-1: config 1 interface 219 altsetting 15 has a duplicate endpoint with address 0x2, skipping [ 122.145369][ T372] usb 4-1: USB disconnect, device number 29 [ 122.164650][ T310] usb 2-1: config 1 interface 219 altsetting 15 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 122.178824][ T310] usb 2-1: config 1 interface 219 has no altsetting 0 [ 122.187693][ T310] usb 2-1: New USB device found, idVendor=05e3, idProduct=0701, bcdDevice=de.1e [ 122.197483][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.205665][ T310] usb 2-1: Product: syz [ 122.212747][ T310] usb 2-1: Manufacturer: 䀁 [ 122.217480][ T310] usb 2-1: SerialNumber: syz [ 122.226376][ T2848] fido_id[2848]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 122.250022][ T954] usb 3-1: device descriptor read/64, error -71 [ 122.431851][ T36] audit: type=1400 audit(1787599338.750:862): avc: denied { create } for pid=2833 comm="syz.1.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 122.438772][ T310] usb-storage 2-1:1.219: USB Mass Storage device detected [ 122.459239][ T2834] netlink: 'syz.1.771': attribute type 19 has an invalid length. [ 122.469435][ T310] usb-storage 2-1:1.219: Quirks match for vid 05e3 pid 0701: 420 [ 122.490032][ T954] usb 3-1: device descriptor read/64, error -71 [ 122.513230][ T310] usb 2-1: USB disconnect, device number 36 [ 122.540000][ T45] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 122.560790][ T2857] netlink: 'syz.3.778': attribute type 30 has an invalid length. [ 122.701377][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 122.712472][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.723784][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.733866][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 122.746999][ T954] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 122.755784][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 122.765268][ T45] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 122.773932][ T45] usb 1-1: Manufacturer: syz [ 122.781468][ T45] usb 1-1: config 0 descriptor?? [ 122.900132][ T954] usb 3-1: device descriptor read/64, error -71 [ 123.160029][ T954] usb 3-1: device descriptor read/64, error -71 [ 123.193549][ T45] appleir 0003:05AC:8243.001D: unknown main item tag 0x0 [ 123.209003][ T45] appleir 0003:05AC:8243.001D: No inputs registered, leaving [ 123.227355][ T45] appleir 0003:05AC:8243.001D: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 123.290164][ T954] usb usb3-port1: attempt power cycle [ 123.452275][ T45] usb 1-1: USB disconnect, device number 30 [ 123.649985][ T954] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 123.678981][ T954] usb 3-1: device descriptor read/8, error -71 [ 123.831269][ T954] usb 3-1: device descriptor read/8, error -71 [ 124.081949][ T954] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 124.101110][ T954] usb 3-1: device descriptor read/8, error -71 [ 124.231075][ T954] usb 3-1: device descriptor read/8, error -71 [ 124.310016][ T45] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 124.329988][ T310] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 124.340177][ T954] usb usb3-port1: unable to enumerate USB device [ 124.461200][ T45] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.474219][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 124.481036][ T45] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 124.490167][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.499188][ T45] usb 1-1: config 0 descriptor?? [ 124.504245][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 124.512366][ T310] usb 2-1: not running at top speed; connect to a high speed hub [ 124.522486][ T310] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 4 [ 124.535747][ T310] usb 2-1: language id specifier not provided by device, defaulting to English [ 124.545872][ T310] usb 2-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40 [ 124.554980][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.563027][ T310] usb 2-1: Product: syz [ 124.567194][ T310] usb 2-1: Manufacturer: 鴪ꋾ犪䍌甩㪖Ᶎ䑕炗ꃗ㯑ꚕ䄝隇텝⽺䰸㰚힇阚电둰₶헒ⷡ셌孾種⺗⟗轈헴ꄦ큠㷽ꮓኍ㞪噞ഐ㏯쨀行袡ᒏ檧鐞澁ﮱ쏑݇䱮괙ᮋ汖ႋँ錎㜇䊠⑱ຐꨣ衟ꁭ悝粈赤㶯춎敧 [ 124.591547][ T310] usb 2-1: SerialNumber: syz [ 124.807578][ T310] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 124.814658][ T310] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 124.825239][ T310] usb 2-1: USB disconnect, device number 37 [ 124.841137][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 124.916024][ T45] input: HID 28bd:0933 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0933.001E/input/input20 [ 124.937911][ T45] uclogic 0003:28BD:0933.001E: input,hidraw0: USB HID v10.01 Mouse [HID 28bd:0933] on usb-dummy_hcd.0-1/input0 [ 125.037364][ T36] audit: type=1400 audit(1787599341.350:863): avc: denied { append } for pid=2919 comm="syz.2.801" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.115478][ T310] usb 1-1: USB disconnect, device number 31 [ 125.220021][ T362] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 125.370036][ T362] usb 4-1: Using ep0 maxpacket: 8 [ 125.377945][ T362] usb 4-1: New USB device found, idVendor=0499, idProduct=1015, bcdDevice= 0.40 [ 125.387288][ T362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.395424][ T362] usb 4-1: Product: syz [ 125.399959][ T362] usb 4-1: Manufacturer: syz [ 125.404651][ T362] usb 4-1: SerialNumber: syz [ 125.616127][ T362] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 125.626010][ T362] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 125.637779][ T362] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 125.649980][ T362] usb 4-1: USB disconnect, device number 30 [ 125.659961][ T36] audit: type=1400 audit(1787599341.970:864): avc: denied { mounton } for pid=2940 comm="syz.0.809" path="/198/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 125.686661][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.168286][ T2970] overlayfs: missing 'lowerdir' [ 126.297918][ T2978] incfs: Options parsing error. -22 [ 126.303351][ T45] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 126.319766][ T2978] incfs: mount failed -22 [ 126.333589][ T2978] raw_sendmsg: syz.1.823 forgot to set AF_INET. Fix it! [ 126.461028][ T45] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.489981][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.496627][ T45] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 126.520219][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.535799][ T45] usb 3-1: config 0 descriptor?? [ 126.613490][ T2986] netlink: 68 bytes leftover after parsing attributes in process `syz.1.827'. [ 126.633572][ T2986] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.938720][ T3005] input: syz1 as /devices/virtual/input/input21 [ 126.952702][ T45] input: HID 28bd:0933 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0933.001F/input/input22 [ 127.010127][ T45] uclogic 0003:28BD:0933.001F: input,hidraw0: USB HID v10.01 Mouse [HID 28bd:0933] on usb-dummy_hcd.2-1/input0 [ 127.187694][ T45] usb 3-1: USB disconnect, device number 35 [ 127.410060][ T362] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 127.579957][ T362] usb 2-1: Using ep0 maxpacket: 32 [ 127.590687][ T362] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.598706][ T362] usb 2-1: config 0 has no interface number 0 [ 127.619964][ T362] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.639967][ T362] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.649739][ T362] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 127.679992][ T362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.693690][ T362] usb 2-1: config 0 descriptor?? [ 128.300682][ T3012] rust_binder: 3011:3012 no such ref 1 [ 128.315705][ T362] uclogic 0003:28BD:0094.0020: failed retrieving string descriptor #100: -71 [ 128.333828][ T362] uclogic 0003:28BD:0094.0020: failed retrieving pen parameters: -71 [ 128.342695][ T362] uclogic 0003:28BD:0094.0020: pen probing failed: -71 [ 128.349642][ T362] uclogic 0003:28BD:0094.0020: failed probing parameters: -71 [ 128.358470][ T362] uclogic 0003:28BD:0094.0020: probe with driver uclogic failed with error -71 [ 128.369307][ T362] usb 2-1: USB disconnect, device number 38 [ 128.689988][ T3063] futex_wake_op: syz.0.855 tries to shift op by 144; fix this program [ 128.714794][ T3063] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 128.714949][ T3063] rust_binder: 3062: undelivered TRANSACTION_ERROR: 29189 [ 128.730953][ T3063] syz.0.855 (3063): /proc/3062/oom_adj is deprecated, please use /proc/3062/oom_score_adj instead. [ 128.790025][ T362] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 129.070005][ T310] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 129.100189][ T3072] fuse: Unknown parameter 'FL9taF&fidSyY*C$ȋ/i>U%' [ 129.109771][ T36] audit: type=1400 audit(1787599345.420:865): avc: denied { mounton } for pid=3071 comm="syz.1.857" path="/220/file0" dev="tmpfs" ino=1178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.151565][ T362] usb 2-1: unable to get BOS descriptor or descriptor too short [ 129.169566][ T36] audit: type=1400 audit(1787599345.470:866): avc: denied { execute } for pid=3071 comm="syz.1.857" name="file0" dev="tmpfs" ino=1178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.200727][ T362] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 129.208371][ T362] usb 2-1: can't read configurations, error -71 [ 129.250492][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.266721][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.277643][ T310] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 129.286810][ T310] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 129.295439][ T310] usb 1-1: Manufacturer: syz [ 129.316182][ T310] usb 1-1: config 0 descriptor?? [ 129.453005][ T3088] overlayfs: missing 'workdir' [ 129.720004][ T372] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 129.869977][ T372] usb 3-1: Using ep0 maxpacket: 8 [ 129.877644][ T372] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.886791][ T372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.894887][ T372] usb 3-1: Product: syz [ 129.899242][ T372] usb 3-1: Manufacturer: syz [ 129.903885][ T372] usb 3-1: SerialNumber: syz [ 130.040005][ T362] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 130.148277][ T3066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.156931][ T3066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.165670][ T310] uclogic 0003:256C:006D.0021: failed retrieving string descriptor #200: -71 [ 130.174542][ T310] uclogic 0003:256C:006D.0021: failed retrieving pen parameters: -71 [ 130.182661][ T310] uclogic 0003:256C:006D.0021: failed probing pen v2 parameters: -71 [ 130.190822][ T310] uclogic 0003:256C:006D.0021: failed probing parameters: -71 [ 130.191745][ T362] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 130.198394][ T310] uclogic 0003:256C:006D.0021: probe with driver uclogic failed with error -71 [ 130.206245][ T362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 130.218256][ T310] usb 1-1: USB disconnect, device number 32 [ 130.228940][ T362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 130.242748][ T362] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.251936][ T362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.260047][ T362] usb 2-1: Product: syz [ 130.264276][ T362] usb 2-1: Manufacturer: syz [ 130.268913][ T362] usb 2-1: SerialNumber: syz [ 130.274371][ T362] usb 2-1: config 0 descriptor?? [ 130.280524][ T362] usb 2-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 130.488458][ T362] usb 2-1: USB disconnect, device number 40 [ 130.497870][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 130.583672][ T3110] overlayfs: missing 'workdir' [ 130.714109][ T372] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 130.720737][ T372] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 130.744354][ T372] cdc_ncm 3-1:1.0: bind() failure [ 130.750515][ T372] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 130.757469][ T372] cdc_ncm 3-1:1.1: bind() failure [ 130.765167][ T372] usb 3-1: USB disconnect, device number 36 [ 130.919989][ T310] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 131.069973][ T310] usb 1-1: Invalid ep0 maxpacket: 64 [ 131.210003][ T310] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 131.359966][ T310] usb 1-1: Invalid ep0 maxpacket: 64 [ 131.370218][ T45] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 131.380017][ T310] usb usb1-port1: attempt power cycle [ 131.541626][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.551626][ T45] usb 2-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 131.561503][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.569552][ T45] usb 2-1: Product: syz [ 131.574200][ T45] usb 2-1: Manufacturer: syz [ 131.578821][ T45] usb 2-1: SerialNumber: syz [ 131.729982][ T310] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 131.750320][ T310] usb 1-1: Invalid ep0 maxpacket: 64 [ 131.788513][ T45] usb 2-1: MIDIStreaming interface descriptor not found [ 131.798345][ T45] usb 2-1: USB disconnect, device number 41 [ 131.809754][ T401] udevd[401]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 131.880001][ T310] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 131.900423][ T310] usb 1-1: Invalid ep0 maxpacket: 64 [ 131.905861][ T310] usb usb1-port1: unable to enumerate USB device [ 132.380032][ T372] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 132.530256][ T372] usb 3-1: Using ep0 maxpacket: 32 [ 132.536603][ T372] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 132.547911][ T372] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.560837][ T372] usb 3-1: config 0 interface 0 has no altsetting 0 [ 132.567459][ T372] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 132.570079][ T45] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 132.576520][ T372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.592613][ T372] usb 3-1: config 0 descriptor?? [ 132.660003][ T362] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 132.729974][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 132.736904][ T45] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 132.748227][ T45] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.758011][ T45] usb 2-1: config 1 interface 0 has no altsetting 0 [ 132.766214][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.40 [ 132.775321][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.783357][ T45] usb 2-1: Product: 쿍篳⒴❩쎁嗿孤ȼ푻뿝蝕쁒装뇺ᬚ劐⼛ᒍ喨̓ꉫ눬ꤙ뙺ŷ㪨鮖傃၊聠凲뚐㚇訞邲嵗浴虈葌鱿壜ⶄ৆泝뿶疙攦胹녳ጸ栃ꘋ幍ﯚꅜ藠 [ 132.803251][ T45] usb 2-1: Manufacturer: й [ 132.807341][ T3142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.807932][ T45] usb 2-1: SerialNumber: 圑懥葯⛏阀㎒◂䰛蘥쇆駮蝷⭃韣벶8᷉뷚繕滸꽝酜脂毶㫽挫綠꯰ﱇ輗ꌸ焬臃䓶ⷳɅ윆⽯Ⳛ辻蒑갬飿婧끚Ă彃Ｆ軏ज賌쓅벒⼍ꤤ [ 132.823712][ T3142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.845626][ T362] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 132.856825][ T362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.867848][ T362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.877672][ T362] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 132.891436][ T362] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 132.900514][ T362] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 132.908854][ T362] usb 4-1: Manufacturer: syz [ 132.914796][ T362] usb 4-1: config 0 descriptor?? [ 133.161652][ T372] pyra 0003:1E7D:2C24.0022: invalid report_count 46351 [ 133.168623][ T372] pyra 0003:1E7D:2C24.0022: item 0 2 1 9 parsing failed [ 133.175805][ T372] pyra 0003:1E7D:2C24.0022: parse failed [ 133.181558][ T372] pyra 0003:1E7D:2C24.0022: probe with driver pyra failed with error -22 [ 133.257061][ T45] usbhid 2-1:1.0: can't add hid device: -71 [ 133.263079][ T45] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 133.272417][ T45] usb 2-1: USB disconnect, device number 42 [ 133.323927][ T362] usbhid 4-1:0.0: can't add hid device: -71 [ 133.330051][ T362] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 133.338602][ T362] usb 4-1: USB disconnect, device number 31 [ 134.119979][ T45] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 134.210011][ T954] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 134.281193][ T45] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 134.293730][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.304225][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 134.319058][ T45] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 134.328405][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.336626][ T45] usb 2-1: Product: syz [ 134.341163][ T45] usb 2-1: Manufacturer: syz [ 134.345913][ T45] usb 2-1: SerialNumber: syz [ 134.352009][ T45] usb 2-1: config 0 descriptor?? [ 134.361091][ T954] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 134.372223][ T45] usb-storage 2-1:0.0: USB Mass Storage device detected [ 134.379270][ T954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.390739][ T954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.391610][ T45] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 134.409826][ T954] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 134.424044][ T954] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 134.433401][ T954] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 134.441691][ T954] usb 4-1: Manufacturer: syz [ 134.461086][ T954] usb 4-1: config 0 descriptor?? [ 134.561518][ T3162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.573089][ T3162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.582952][ T45] usb 2-1: USB disconnect, device number 43 [ 134.836797][ T36] audit: type=1400 audit(1787599351.150:867): avc: denied { bind } for pid=3179 comm="syz.0.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.856382][ T36] audit: type=1400 audit(1787599351.170:868): avc: denied { ioctl } for pid=3179 comm="syz.0.900" path="socket:[48532]" dev="sockfs" ino=48532 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.882335][ T954] appleir 0003:05AC:8243.0023: unknown main item tag 0x0 [ 134.889628][ T954] appleir 0003:05AC:8243.0023: No inputs registered, leaving [ 134.898764][ T954] appleir 0003:05AC:8243.0023: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 134.904782][ T3180] kvm: kvm [3179]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 135.082720][ T362] usb 4-1: USB disconnect, device number 32 [ 135.158998][ T954] usb 3-1: USB disconnect, device number 37 [ 135.180082][ T372] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 135.319980][ T372] usb 1-1: device descriptor read/64, error -71 [ 135.489979][ T954] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 135.570687][ T372] usb 1-1: device descriptor read/64, error -71 [ 135.661223][ T954] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 135.673166][ T954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.684466][ T954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.704492][ T954] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 135.718609][ T954] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 135.727967][ T954] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 135.737294][ T954] usb 3-1: Manufacturer: syz [ 135.743603][ T954] usb 3-1: config 0 descriptor?? [ 135.810029][ T372] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 135.960010][ T372] usb 1-1: device descriptor read/64, error -71 [ 136.119984][ T45] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 136.154314][ T954] usbhid 3-1:0.0: can't add hid device: -71 [ 136.162328][ T954] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 136.174193][ T954] usb 3-1: USB disconnect, device number 38 [ 136.200041][ T372] usb 1-1: device descriptor read/64, error -71 [ 136.270997][ T45] usb 4-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.283991][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 136.290666][ T45] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 136.299846][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.311075][ T372] usb usb1-port1: attempt power cycle [ 136.317331][ T45] usb 4-1: config 0 descriptor?? [ 136.649985][ T372] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 136.671521][ T372] usb 1-1: device descriptor read/8, error -71 [ 136.735462][ T45] input: HID 28bd:0933 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0933.0024/input/input23 [ 136.757267][ T45] uclogic 0003:28BD:0933.0024: input,hidraw0: USB HID v10.01 Mouse [HID 28bd:0933] on usb-dummy_hcd.3-1/input0 [ 136.790007][ T954] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 136.803955][ T372] usb 1-1: device descriptor read/8, error -71 [ 136.932604][ T3198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.941228][ T3198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.950131][ T954] usb 2-1: Using ep0 maxpacket: 32 [ 136.952492][ T362] usb 4-1: USB disconnect, device number 33 [ 136.957098][ T954] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.973171][ T954] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 136.982342][ T954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.990406][ T954] usb 2-1: Product: syz [ 136.994700][ T954] usb 2-1: Manufacturer: syz [ 136.999338][ T954] usb 2-1: SerialNumber: syz [ 137.004714][ T954] usb 2-1: config 0 descriptor?? [ 137.010586][ T954] usb 2-1: bad CDC descriptors [ 137.015554][ T954] usb 2-1: unsupported MDLM descriptors [ 137.050000][ T372] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 137.071080][ T372] usb 1-1: device descriptor read/8, error -71 [ 137.201351][ T372] usb 1-1: device descriptor read/8, error -71 [ 137.211539][ T362] usb 2-1: USB disconnect, device number 44 [ 137.310106][ T372] usb usb1-port1: unable to enumerate USB device [ 137.528438][ T3245] tc_dump_action: action bad kind [ 137.790005][ T954] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 137.830002][ T45] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 137.913832][ T3262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.922566][ T3262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.945474][ T954] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 137.956599][ T954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.967701][ T954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.977786][ T954] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 137.992069][ T954] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 138.001324][ T954] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 138.009421][ T954] usb 3-1: Manufacturer: syz [ 138.014112][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 138.020962][ T45] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 138.029765][ T954] usb 3-1: config 0 descriptor?? [ 138.034951][ T45] usb 4-1: config 0 has no interface number 0 [ 138.044992][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 138.054232][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.062316][ T45] usb 4-1: Product: syz [ 138.066550][ T45] usb 4-1: Manufacturer: syz [ 138.071351][ T45] usb 4-1: SerialNumber: syz [ 138.079212][ T45] usb 4-1: config 0 descriptor?? [ 138.086796][ T45] smsc95xx v2.0.0 [ 138.239989][ T564] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 138.389979][ T564] usb 1-1: Using ep0 maxpacket: 8 [ 138.396314][ T564] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.406526][ T310] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 138.414166][ T564] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.424700][ T564] usb 1-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 138.433783][ T564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.441813][ T564] usb 1-1: Product: syz [ 138.446012][ T564] usb 1-1: Manufacturer: syz [ 138.451339][ T564] usb 1-1: SerialNumber: syz [ 138.456550][ T954] usbhid 3-1:0.0: can't add hid device: -71 [ 138.462684][ T954] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 138.474470][ T954] usb 3-1: USB disconnect, device number 39 [ 138.571114][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 138.580946][ T310] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 138.590735][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 138.600536][ T310] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 138.611768][ T310] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 138.620942][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.628976][ T310] usb 2-1: Product: syz [ 138.633216][ T310] usb 2-1: Manufacturer: syz [ 138.637853][ T310] usb 2-1: SerialNumber: syz [ 138.643336][ T310] usb 2-1: config 0 descriptor?? [ 138.649396][ T310] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 138.675304][ T564] usb 1-1: unit 6 not found! [ 138.682337][ T564] usb 1-1: USB disconnect, device number 41 [ 138.692756][ T36] audit: type=1400 audit(1787599355.010:869): avc: denied { map } for pid=3251 comm="syz.3.927" path="socket:[49469]" dev="sockfs" ino=49469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.708421][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 138.728936][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 138.743712][ T36] audit: type=1400 audit(1787599355.030:870): avc: denied { load_policy } for pid=3251 comm="syz.3.927" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 138.763876][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 138.773507][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 138.784383][ T45] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 138.798412][ T45] usb 4-1: USB disconnect, device number 34 [ 138.891658][ T310] ums-isd200 2-1:0.0: probe with driver ums-isd200 failed with error -22 [ 139.054248][ T45] usb 2-1: USB disconnect, device number 45 [ 139.660008][ T45] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 139.819948][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 139.826810][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 139.836151][ T45] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 139.844514][ T45] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 139.853432][ T45] usb 4-1: config 4 has no interface number 0 [ 139.861133][ T45] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 139.870409][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.882269][ T45] usb 4-1: Product: syz [ 139.887511][ T45] usb 4-1: Manufacturer: syz [ 139.893039][ T45] usb 4-1: SerialNumber: syz [ 140.060977][ T310] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 140.102661][ T36] audit: type=1400 audit(1787599356.420:871): avc: denied { view } for pid=3284 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 140.113607][ T45] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 140.127992][ T45] usb 4-1: No valid video chain found. [ 140.136031][ T45] usb 4-1: USB disconnect, device number 35 [ 140.221902][ T310] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 140.233174][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.244229][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.254020][ T310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 140.267869][ T310] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 140.276961][ T310] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 140.285092][ T310] usb 2-1: Manufacturer: syz [ 140.290367][ T310] usb 2-1: config 0 descriptor?? [ 140.459983][ T362] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 140.609964][ T362] usb 1-1: Using ep0 maxpacket: 32 [ 140.619999][ T362] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.633936][ T362] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.649824][ T362] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 140.658982][ T362] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 140.667468][ T362] usb 1-1: Product: syz [ 140.671712][ T362] usb 1-1: Manufacturer: syz [ 140.679412][ T362] hub 1-1:4.0: USB hub found [ 140.698615][ T310] usbhid 2-1:0.0: can't add hid device: -71 [ 140.705014][ T310] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 140.715223][ T310] usb 2-1: USB disconnect, device number 46 [ 140.811515][ T36] audit: type=1400 audit(1787599357.130:872): avc: denied { mounton } for pid=3309 comm="syz.3.949" path="/syzcgroup/cpu/syz3/memory.limit_in_bytes" dev="cgroup" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 140.879412][ T362] hub 1-1:4.0: 4 ports detected [ 140.884502][ T362] hub 1-1:4.0: insufficient power available to use all downstream ports [ 141.120008][ T372] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 141.271126][ T372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 141.290019][ T372] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 141.299805][ T372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 141.309599][ T372] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 141.320993][ T372] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 141.332763][ T372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.340832][ T372] usb 3-1: Product: syz [ 141.345092][ T372] usb 3-1: Manufacturer: syz [ 141.349734][ T372] usb 3-1: SerialNumber: syz [ 141.355284][ T372] usb 3-1: config 0 descriptor?? [ 141.370490][ T372] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 141.503112][ T362] usb 1-1: USB disconnect, device number 42 [ 141.633587][ T372] ums-isd200 3-1:0.0: probe with driver ums-isd200 failed with error -22 [ 141.815734][ T310] usb 3-1: USB disconnect, device number 40 [ 142.431852][ T3347] FAULT_INJECTION: forcing a failure. [ 142.431852][ T3347] name failslab, interval 1, probability 0, space 0, times 0 [ 142.444632][ T3347] CPU: 1 UID: 0 PID: 3347 Comm: syz.1.961 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 142.444709][ T3347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.444723][ T3347] Call Trace: [ 142.444732][ T3347] [ 142.444742][ T3347] __dump_stack+0x21/0x30 [ 142.444779][ T3347] dump_stack_lvl+0x140/0x1c0 [ 142.444811][ T3347] ? __cfi_dump_stack_lvl+0x10/0x10 [ 142.444844][ T3347] dump_stack+0x19/0x20 [ 142.444874][ T3347] should_fail_ex+0x3c2/0x510 [ 142.444902][ T3347] should_failslab+0xac/0x100 [ 142.444930][ T3347] kmem_cache_alloc_node_noprof+0x45/0x420 [ 142.444956][ T3347] ? dup_task_struct+0xc1/0xd80 [ 142.444983][ T3347] ? kasan_save_alloc_info+0x3a/0x50 [ 142.445004][ T3347] ? __kasan_kmalloc+0x96/0xb0 [ 142.445031][ T3347] ? __kmalloc_cache_noprof+0x23c/0x470 [ 142.445058][ T3347] dup_task_struct+0xc1/0xd80 [ 142.445086][ T3347] ? __kasan_check_write+0x18/0x20 [ 142.445109][ T3347] ? _raw_spin_lock_irq+0x93/0x120 [ 142.445139][ T3347] ? copy_process+0x3350/0x3350 [ 142.445167][ T3347] ? __kasan_check_write+0x18/0x20 [ 142.445190][ T3347] copy_process+0x57c/0x3350 [ 142.445220][ T3347] ? kasan_save_alloc_info+0x3a/0x50 [ 142.445240][ T3347] ? __cfi_copy_process+0x10/0x10 [ 142.445273][ T3347] ? __kmalloc_cache_noprof+0x23c/0x470 [ 142.445290][ T3347] ? __kasan_check_write+0x18/0x20 [ 142.445306][ T3347] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 142.445325][ T3347] vhost_task_create+0x1f7/0x3f0 [ 142.445342][ T3347] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 142.445362][ T3347] ? __cfi_vhost_task_create+0x10/0x10 [ 142.445379][ T3347] ? __cfi_vhost_task_fn+0x10/0x10 [ 142.445395][ T3347] ? __kasan_check_write+0x18/0x20 [ 142.445410][ T3347] ? mutex_lock+0x97/0x1d0 [ 142.445424][ T3347] ? __cfi_mutex_lock+0x10/0x10 [ 142.445439][ T3347] ? kernel_text_address+0xa9/0xe0 [ 142.445461][ T3347] kvm_mmu_post_init_vm+0x161/0x300 [ 142.445484][ T3347] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 142.445505][ T3347] ? _parse_integer_limit+0x195/0x1e0 [ 142.445523][ T3347] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 142.445544][ T3347] ? kstrtoull+0x13b/0x1e0 [ 142.445560][ T3347] ? kstrtouint+0x78/0xf0 [ 142.445576][ T3347] ? ioctl_has_perm+0x1bc/0x500 [ 142.445592][ T3347] ? __asan_memcpy+0x5a/0x80 [ 142.445608][ T3347] ? ioctl_has_perm+0x408/0x500 [ 142.445626][ T3347] ? has_cap_mac_admin+0xd0/0xd0 [ 142.445641][ T3347] ? __kasan_check_write+0x18/0x20 [ 142.445657][ T3347] ? mutex_lock_killable+0x97/0x1d0 [ 142.445682][ T3347] ? __cfi_mutex_lock_killable+0x10/0x10 [ 142.445698][ T3347] ? proc_fail_nth_write+0x184/0x220 [ 142.445723][ T3347] kvm_vcpu_ioctl+0xa43/0x1000 [ 142.445739][ T3347] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 142.445754][ T3347] ? __cfi_vfs_write+0x10/0x10 [ 142.445770][ T3347] ? __kasan_check_write+0x18/0x20 [ 142.445785][ T3347] ? mutex_unlock+0x90/0x240 [ 142.445800][ T3347] ? __cfi_mutex_unlock+0x10/0x10 [ 142.445818][ T3347] ? bpf_lsm_file_ioctl+0xd/0x20 [ 142.445838][ T3347] ? security_file_ioctl+0x3e/0x110 [ 142.445853][ T3347] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 142.445867][ T3347] __se_sys_ioctl+0x135/0x1b0 [ 142.445886][ T3347] __x64_sys_ioctl+0x7f/0xa0 [ 142.445905][ T3347] x64_sys_call+0x1878/0x2ee0 [ 142.445919][ T3347] do_syscall_64+0x57/0xf0 [ 142.445940][ T3347] ? clear_bhb_loop+0x50/0xa0 [ 142.445956][ T3347] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 142.445982][ T3347] RIP: 0033:0x7f992519e0d9 [ 142.445995][ T3347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.446008][ T3347] RSP: 002b:00007f9923be3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.446026][ T3347] RAX: ffffffffffffffda RBX: 00007f9925425fa0 RCX: 00007f992519e0d9 [ 142.446038][ T3347] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 142.446048][ T3347] RBP: 00007f9923be3090 R08: 0000000000000000 R09: 0000000000000000 [ 142.446058][ T3347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.446068][ T3347] R13: 00007f9925426038 R14: 00007f9925425fa0 R15: 00007ffc0e3e0508 [ 142.446083][ T3347] [ 142.980000][ T362] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 143.130734][ T362] usb 3-1: not running at top speed; connect to a high speed hub [ 143.139420][ T362] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.149862][ T362] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 143.188115][ T362] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 143.210532][ T362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.239029][ T362] uvcvideo 3-1:1.0: Found multiple Units with ID 1 [ 143.260775][ T3362] FAULT_INJECTION: forcing a failure. [ 143.260775][ T3362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.288397][ T3362] CPU: 0 UID: 0 PID: 3362 Comm: syz.0.966 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 143.288439][ T3362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.288456][ T3362] Call Trace: [ 143.288471][ T3362] [ 143.288482][ T3362] __dump_stack+0x21/0x30 [ 143.288530][ T3362] dump_stack_lvl+0x140/0x1c0 [ 143.288569][ T3362] ? __cfi_dump_stack_lvl+0x10/0x10 [ 143.288609][ T3362] ? __kasan_check_write+0x18/0x20 [ 143.288640][ T3362] ? kvm_arch_vcpu_load+0x665/0x8d0 [ 143.288670][ T3362] dump_stack+0x19/0x20 [ 143.288709][ T3362] should_fail_ex+0x3c2/0x510 [ 143.288743][ T3362] should_fail+0xf/0x20 [ 143.288774][ T3362] should_fail_usercopy+0x1e/0x30 [ 143.288810][ T3362] _copy_from_user+0x20/0xa0 [ 143.288848][ T3362] kvm_arch_vcpu_ioctl+0x43b/0x3120 [ 143.288880][ T3362] ? avc_has_perm+0x155/0x240 [ 143.288915][ T3362] ? __cfi_avc_has_perm+0x10/0x10 [ 143.288948][ T3362] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 143.288982][ T3362] ? selinux_file_open+0x46c/0x630 [ 143.289010][ T3362] ? __cfi_selinux_file_open+0x10/0x10 [ 143.289047][ T3362] ? is_bpf_text_address+0x17b/0x1a0 [ 143.289096][ T3362] ? kernel_text_address+0xa9/0xe0 [ 143.289135][ T3362] ? __kernel_text_address+0x11/0x40 [ 143.289170][ T3362] ? __asan_set_shadow_00+0x12/0x20 [ 143.289212][ T3362] ? do_vfs_ioctl+0x182d/0x2010 [ 143.289247][ T3362] ? arch_stack_walk+0x10a/0x170 [ 143.289275][ T3362] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 143.289313][ T3362] ? _parse_integer_limit+0x195/0x1e0 [ 143.289342][ T3362] ? _parse_integer+0x2e/0x40 [ 143.289373][ T3362] ? kstrtoull+0x13b/0x1e0 [ 143.289403][ T3362] ? kstrtouint+0x78/0xf0 [ 143.289433][ T3362] ? ioctl_has_perm+0x1bc/0x500 [ 143.289463][ T3362] ? __asan_memcpy+0x5a/0x80 [ 143.289491][ T3362] ? ioctl_has_perm+0x408/0x500 [ 143.289520][ T3362] ? has_cap_mac_admin+0xd0/0xd0 [ 143.289546][ T3362] ? __kasan_check_write+0x18/0x20 [ 143.289575][ T3362] ? mutex_lock_killable+0x97/0x1d0 [ 143.289604][ T3362] ? __cfi_mutex_lock_killable+0x10/0x10 [ 143.289635][ T3362] ? proc_fail_nth_write+0x184/0x220 [ 143.289675][ T3362] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 143.289718][ T3362] kvm_vcpu_ioctl+0x7da/0x1000 [ 143.289748][ T3362] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 143.289775][ T3362] ? __cfi_vfs_write+0x10/0x10 [ 143.289808][ T3362] ? __kasan_check_write+0x18/0x20 [ 143.289832][ T3362] ? mutex_unlock+0x90/0x240 [ 143.289863][ T3362] ? __cfi_mutex_unlock+0x10/0x10 [ 143.289890][ T3362] ? bpf_lsm_file_ioctl+0xd/0x20 [ 143.289926][ T3362] ? security_file_ioctl+0x3e/0x110 [ 143.289951][ T3362] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 143.289979][ T3362] __se_sys_ioctl+0x135/0x1b0 [ 143.290014][ T3362] __x64_sys_ioctl+0x7f/0xa0 [ 143.290050][ T3362] x64_sys_call+0x1878/0x2ee0 [ 143.290075][ T3362] do_syscall_64+0x57/0xf0 [ 143.290119][ T3362] ? clear_bhb_loop+0x50/0xa0 [ 143.290149][ T3362] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 143.290190][ T3362] RIP: 0033:0x7f958e19e0d9 [ 143.290216][ T3362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.290239][ T3362] RSP: 002b:00007f958ef81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.290270][ T3362] RAX: ffffffffffffffda RBX: 00007f958e425fa0 RCX: 00007f958e19e0d9 [ 143.290291][ T3362] RDX: 0000200000000300 RSI: 000000004008ae89 RDI: 0000000000000005 [ 143.290314][ T3362] RBP: 00007f958ef81090 R08: 0000000000000000 R09: 0000000000000000 [ 143.290332][ T3362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.290349][ T3362] R13: 00007f958e426038 R14: 00007f958e425fa0 R15: 00007ffdda74f1b8 [ 143.290376][ T3362] [ 143.683446][ T362] usb 3-1: string descriptor 0 read error: -71 [ 143.689698][ T362] uvcvideo 3-1:1.0: Found Unit with invalid ID 0 [ 143.696128][ T362] usb 3-1: Found UVC 71.01 device (0000:0000) [ 143.703165][ T362] usb 3-1: No streaming interface found for terminal 2. [ 143.711827][ T362] usb 3-1: USB disconnect, device number 41 [ 143.808862][ T36] audit: type=1400 audit(1787599360.120:873): avc: denied { append } for pid=3363 comm="syz.0.967" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 144.039970][ T31] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 144.064191][ T36] audit: type=1326 audit(1787599360.380:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3374 comm="syz.1.971" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f992519e0d9 code=0x0 [ 144.230367][ T31] usb 1-1: no configurations [ 144.235022][ T31] usb 1-1: can't read configurations, error -22 [ 144.379982][ T31] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 144.399973][ T564] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 144.448198][ T3392] FAULT_INJECTION: forcing a failure. [ 144.448198][ T3392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.461565][ T3392] CPU: 1 UID: 0 PID: 3392 Comm: syz.3.977 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 144.461600][ T3392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.461616][ T3392] Call Trace: [ 144.461623][ T3392] [ 144.461633][ T3392] __dump_stack+0x21/0x30 [ 144.461670][ T3392] dump_stack_lvl+0x140/0x1c0 [ 144.461702][ T3392] ? __cfi_dump_stack_lvl+0x10/0x10 [ 144.461737][ T3392] dump_stack+0x19/0x20 [ 144.461768][ T3392] should_fail_ex+0x3c2/0x510 [ 144.461795][ T3392] should_fail+0xf/0x20 [ 144.461821][ T3392] should_fail_usercopy+0x1e/0x30 [ 144.461849][ T3392] strncpy_from_user+0x29/0x280 [ 144.461877][ T3392] path_setxattr+0x142/0x5a0 [ 144.461905][ T3392] ? simple_xattrs_free+0x180/0x180 [ 144.461937][ T3392] ? __cfi_ksys_write+0x10/0x10 [ 144.461964][ T3392] __x64_sys_setxattr+0xc9/0xe0 [ 144.461988][ T3392] x64_sys_call+0x2d94/0x2ee0 [ 144.462010][ T3392] do_syscall_64+0x57/0xf0 [ 144.462040][ T3392] ? clear_bhb_loop+0x50/0xa0 [ 144.462064][ T3392] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 144.462103][ T3392] RIP: 0033:0x7fb2c359e0d9 [ 144.462122][ T3392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.462150][ T3392] RSP: 002b:00007fb2c4480028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 144.462169][ T3392] RAX: ffffffffffffffda RBX: 00007fb2c3825fa0 RCX: 00007fb2c359e0d9 [ 144.462182][ T3392] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000180 [ 144.462194][ T3392] RBP: 00007fb2c4480090 R08: 0000000000000000 R09: 0000000000000000 [ 144.462205][ T3392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.462215][ T3392] R13: 00007fb2c3826038 R14: 00007fb2c3825fa0 R15: 00007ffeec2f84f8 [ 144.462230][ T3392] [ 144.487164][ T36] audit: type=1400 audit(1787599360.790:875): avc: denied { execute_no_trans } for pid=3393 comm="syz.3.978" path="/242/file1" dev="tmpfs" ino=1322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.540854][ T31] usb 1-1: no configurations [ 144.677594][ T31] usb 1-1: can't read configurations, error -22 [ 144.684049][ T31] usb usb1-port1: attempt power cycle [ 144.700769][ T564] usb 2-1: not running at top speed; connect to a high speed hub [ 144.709505][ T564] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 144.721056][ T564] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x89 has invalid maxpacket 23597, setting to 64 [ 144.732107][ T564] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 144.740047][ T362] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 144.742682][ T564] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.760368][ T564] usb 2-1: Found UVC 1.00 device (046d:0825) [ 144.902796][ T362] usb 4-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 144.911956][ T362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.920216][ T362] usb 4-1: Product: syz [ 144.929755][ T362] usb 4-1: Manufacturer: syz [ 144.935705][ T362] usb 4-1: SerialNumber: syz [ 145.020034][ T31] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 145.040756][ T31] usb 1-1: no configurations [ 145.045399][ T31] usb 1-1: can't read configurations, error -22 [ 145.146400][ T362] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 145.156684][ T362] usb 4-1: USB disconnect, device number 36 [ 145.179970][ T31] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 145.200660][ T31] usb 1-1: no configurations [ 145.205306][ T31] usb 1-1: can't read configurations, error -22 [ 145.211706][ T31] usb usb1-port1: unable to enumerate USB device [ 145.280031][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 145.410080][ T9] usb 3-1: device descriptor read/64, error -71 [ 145.649981][ T9] usb 3-1: device descriptor read/64, error -71 [ 145.889968][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 145.909977][ T362] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 146.020007][ T9] usb 3-1: device descriptor read/64, error -71 [ 146.059961][ T362] usb 4-1: Using ep0 maxpacket: 16 [ 146.066253][ T362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.077199][ T362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.087108][ T362] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 146.096196][ T362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.105273][ T362] usb 4-1: config 0 descriptor?? [ 146.269992][ T9] usb 3-1: device descriptor read/64, error -71 [ 146.380124][ T9] usb usb3-port1: attempt power cycle [ 146.513094][ T36] audit: type=1400 audit(1787599362.830:876): avc: denied { read } for pid=3408 comm="syz.3.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.653727][ T362] wacom 0003:056A:0084.0025: item fetching failed at offset 10/11 [ 146.662008][ T362] wacom 0003:056A:0084.0025: parse failed [ 146.667850][ T362] wacom 0003:056A:0084.0025: probe with driver wacom failed with error -22 [ 146.729982][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 146.760987][ T9] usb 3-1: device descriptor read/8, error -71 [ 146.891173][ T9] usb 3-1: device descriptor read/8, error -71 [ 147.090947][ T564] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 147.112258][ T564] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 147.121416][ T564] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 147.135920][ T564] usb 2-1: USB disconnect, device number 47 [ 147.140091][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 147.181064][ T9] usb 3-1: device descriptor read/8, error -71 [ 147.310992][ T9] usb 3-1: device descriptor read/8, error -71 [ 147.430051][ T9] usb usb3-port1: unable to enumerate USB device [ 147.649970][ T362] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 147.810021][ T362] usb 2-1: Using ep0 maxpacket: 32 [ 147.820882][ T362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.839974][ T362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.849790][ T362] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 147.862880][ T362] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 147.872150][ T362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.881327][ T362] usb 2-1: config 0 descriptor?? [ 147.890860][ T564] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 148.051074][ T564] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 148.062414][ T564] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.073824][ T564] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.084194][ T564] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 148.098797][ T564] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 148.108182][ T564] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 148.116717][ T564] usb 1-1: Manufacturer: syz [ 148.126638][ T564] usb 1-1: config 0 descriptor?? [ 148.153773][ T3438] overlayfs: failed to resolve './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 148.199546][ T3441] syzkaller1: left promiscuous mode [ 148.296563][ T3441] syzkaller1: left allmulticast mode [ 148.303133][ T362] hid (null): report_id 60606 is invalid [ 148.329250][ T362] hid (null): global environment stack underflow [ 148.339241][ T362] hid (null): unknown global tag 0xd [ 148.346583][ T362] hid (null): unknown global tag 0xc [ 148.354976][ T362] hid (null): report_id 0 is invalid [ 148.380256][ T362] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0026/input/input24 [ 148.406189][ T36] audit: type=1400 audit(1787599364.720:877): avc: denied { read } for pid=3442 comm="syz.2.995" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 148.427792][ T362] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0026/input/input25 [ 148.441980][ T362] kye 0003:0458:5011.0026: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 148.454749][ T36] audit: type=1400 audit(1787599364.720:878): avc: denied { watch watch_reads } for pid=3442 comm="syz.2.995" path="/245/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 148.509856][ T438] usb 2-1: USB disconnect, device number 48 [ 148.537748][ T564] usbhid 1-1:0.0: can't add hid device: -71 [ 148.543970][ T564] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 148.554512][ T564] usb 1-1: USB disconnect, device number 47 [ 148.731011][ T564] usb 4-1: USB disconnect, device number 37 [ 149.067163][ T3467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1003'. [ 149.091387][ T3469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1000'. [ 149.300087][ T564] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 149.350062][ T362] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 149.409993][ T438] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 149.429995][ T564] usb 2-1: device descriptor read/64, error -71 [ 149.499976][ T362] usb 1-1: Using ep0 maxpacket: 8 [ 149.499978][ T45] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 149.514235][ T362] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.524376][ T362] usb 1-1: config 0 has no interfaces? [ 149.531300][ T362] usb 1-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 149.540170][ T438] usb 3-1: device descriptor read/64, error -71 [ 149.540435][ T362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.554627][ T362] usb 1-1: Product: syz [ 149.558825][ T362] usb 1-1: Manufacturer: syz [ 149.563483][ T362] usb 1-1: SerialNumber: syz [ 149.568649][ T362] usb 1-1: config 0 descriptor?? [ 149.649989][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 149.656623][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 149.663364][ T45] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 149.672502][ T564] usb 2-1: device descriptor read/64, error -71 [ 149.678772][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.687596][ T45] usb 4-1: config 0 descriptor?? [ 149.790256][ T438] usb 3-1: device descriptor read/64, error -71 [ 149.919966][ T564] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 150.029986][ T438] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 150.049991][ T564] usb 2-1: device descriptor read/64, error -71 [ 150.095213][ T45] pantherlord 0003:0810:0001.0027: unknown global tag 0xc [ 150.102551][ T45] pantherlord 0003:0810:0001.0027: item 0 0 1 12 parsing failed [ 150.110542][ T45] pantherlord 0003:0810:0001.0027: parse failed [ 150.116844][ T45] pantherlord 0003:0810:0001.0027: probe with driver pantherlord failed with error -22 [ 150.170030][ T438] usb 3-1: device descriptor read/64, error -71 [ 150.289992][ T564] usb 2-1: device descriptor read/64, error -71 [ 150.400188][ T564] usb usb2-port1: attempt power cycle [ 150.409979][ T438] usb 3-1: device descriptor read/64, error -71 [ 150.420806][ T45] usb 4-1: USB disconnect, device number 38 [ 150.520120][ T438] usb usb3-port1: attempt power cycle [ 150.740019][ T564] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 150.761086][ T564] usb 2-1: device descriptor read/8, error -71 [ 150.860017][ T438] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 150.881125][ T438] usb 3-1: device descriptor read/8, error -71 [ 150.891074][ T564] usb 2-1: device descriptor read/8, error -71 [ 150.941962][ T362] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 150.959732][ T362] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 151.011102][ T438] usb 3-1: device descriptor read/8, error -71 [ 151.129987][ T564] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 151.151169][ T564] usb 2-1: device descriptor read/8, error -71 [ 151.250131][ T438] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 151.260004][ T362] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 151.271041][ T438] usb 3-1: device descriptor read/8, error -71 [ 151.280972][ T564] usb 2-1: device descriptor read/8, error -71 [ 151.390072][ T564] usb usb2-port1: unable to enumerate USB device [ 151.401167][ T438] usb 3-1: device descriptor read/8, error -71 [ 151.411225][ T362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.422206][ T362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.432633][ T362] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 151.441705][ T362] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 151.449812][ T362] usb 4-1: Manufacturer: syz [ 151.455100][ T362] usb 4-1: config 0 descriptor?? [ 151.510033][ T438] usb usb3-port1: unable to enumerate USB device [ 152.095695][ T36] audit: type=1400 audit(1787599368.410:879): avc: denied { append } for pid=3491 comm="syz.1.1010" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 152.123288][ T10] usb 1-1: USB disconnect, device number 48 [ 152.141979][ T3495] netlink: 'syz.0.1011': attribute type 17 has an invalid length. [ 152.470130][ T362] uclogic 0003:256C:006D.0029: failed retrieving string descriptor #100: -71 [ 152.480509][ T362] uclogic 0003:256C:006D.0029: failed retrieving pen parameters: -71 [ 152.488713][ T362] uclogic 0003:256C:006D.0029: failed probing pen v1 parameters: -71 [ 152.509980][ T362] uclogic 0003:256C:006D.0029: failed probing parameters: -71 [ 152.517522][ T362] uclogic 0003:256C:006D.0029: probe with driver uclogic failed with error -71 [ 152.531683][ T362] usb 4-1: USB disconnect, device number 39 [ 152.860122][ T3504] rust_binder: Error in use_page_slow: ESRCH [ 152.860156][ T3504] rust_binder: use_range failure ESRCH [ 152.866321][ T3504] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 152.872081][ T3504] rust_binder: Failure in copy_transaction_data: ESRCH [ 152.880338][ T3504] rust_binder: 3503:3504 transaction call to 3503:0 failed ESRCH, code 0 size 80-24 [ 152.897558][ T438] rust_binder: 3503: undelivered TRANSACTION_ERROR: 29201 [ 153.049979][ T362] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 153.209973][ T362] usb 3-1: Using ep0 maxpacket: 16 [ 153.216318][ T362] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 153.227273][ T362] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 153.240362][ T362] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 153.249453][ T362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.259134][ T362] usb 3-1: config 0 descriptor?? [ 153.269982][ T438] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 153.419965][ T438] usb 2-1: Using ep0 maxpacket: 8 [ 153.426273][ T438] usb 2-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 153.437253][ T438] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.448274][ T438] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 153.461289][ T438] usb 2-1: config 0 interface 0 has no altsetting 0 [ 153.467930][ T438] usb 2-1: New USB device found, idVendor=18d1, idProduct=5050, bcdDevice= 0.00 [ 153.478716][ T438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.487779][ T438] usb 2-1: config 0 descriptor?? [ 153.696380][ T438] usbhid 2-1:0.0: can't add hid device: -71 [ 153.702604][ T438] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 153.711381][ T438] usb 2-1: USB disconnect, device number 53 [ 153.741747][ T362] usbhid 3-1:0.0: can't add hid device: -71 [ 153.747820][ T362] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 153.756600][ T362] usb 3-1: USB disconnect, device number 50 [ 153.882321][ T36] audit: type=1400 audit(1787599370.200:880): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 154.470091][ T3567] program syz.1.1035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.859990][ T438] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 154.963357][ T564] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 155.021196][ T438] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.032374][ T438] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.043726][ T438] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 155.053091][ T438] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 155.061311][ T438] usb 2-1: Manufacturer: syz [ 155.073700][ T438] usb 2-1: config 0 descriptor?? [ 155.124020][ T564] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 155.132459][ T564] usb 1-1: config 0 has no interface number 0 [ 155.140130][ T564] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 155.149551][ T564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.157755][ T564] usb 1-1: Product: syz [ 155.162480][ T564] usb 1-1: Manufacturer: syz [ 155.167221][ T564] usb 1-1: SerialNumber: syz [ 155.174216][ T564] usb 1-1: config 0 descriptor?? [ 155.450003][ T31] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 155.579992][ T31] usb 4-1: device descriptor read/64, error -71 [ 155.786718][ T3618] tmpfs: Unknown parameter '00000000000000000000000' [ 155.794283][ T564] asix 1-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 155.804717][ T564] asix 1-1:0.251: probe with driver asix failed with error -524 [ 155.820000][ T31] usb 4-1: device descriptor read/64, error -71 [ 155.884960][ T438] uclogic 0003:256C:006D.002A: failed retrieving string descriptor #200: -71 [ 155.894155][ T438] uclogic 0003:256C:006D.002A: failed retrieving pen parameters: -71 [ 155.902322][ T438] uclogic 0003:256C:006D.002A: failed probing pen v2 parameters: -71 [ 155.910529][ T438] uclogic 0003:256C:006D.002A: failed probing parameters: -71 [ 155.918031][ T438] uclogic 0003:256C:006D.002A: probe with driver uclogic failed with error -71 [ 155.928210][ T438] usb 2-1: USB disconnect, device number 54 [ 156.030009][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 156.059998][ T31] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 156.179988][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 156.186202][ T10] usb 3-1: config 32 has an invalid interface number: 64 but max is 0 [ 156.194467][ T10] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 156.200040][ T31] usb 4-1: device descriptor read/64, error -71 [ 156.204699][ T10] usb 3-1: config 32 has no interface number 0 [ 156.217150][ T10] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 156.226230][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.437322][ T3618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1053'. [ 156.460196][ T31] usb 4-1: device descriptor read/64, error -71 [ 156.535871][ T438] usb 3-1: USB disconnect, device number 51 [ 156.590185][ T31] usb usb4-port1: attempt power cycle [ 156.939979][ T31] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 156.961182][ T31] usb 4-1: device descriptor read/8, error -71 [ 157.102538][ T31] usb 4-1: device descriptor read/8, error -71 [ 157.182196][ T36] audit: type=1400 audit(1787599373.500:881): avc: denied { ioctl } for pid=3626 comm="syz.2.1056" path="socket:[56050]" dev="sockfs" ino=56050 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.369988][ T31] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 157.391009][ T31] usb 4-1: device descriptor read/8, error -71 [ 157.522726][ T31] usb 4-1: device descriptor read/8, error -71 [ 157.630128][ T31] usb usb4-port1: unable to enumerate USB device [ 157.729512][ T954] usb 1-1: USB disconnect, device number 49 [ 158.084124][ T3676] FAULT_INJECTION: forcing a failure. [ 158.084124][ T3676] name failslab, interval 1, probability 0, space 0, times 0 [ 158.096857][ T3676] CPU: 1 UID: 0 PID: 3676 Comm: syz.0.1075 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 158.096893][ T3676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.096907][ T3676] Call Trace: [ 158.096915][ T3676] [ 158.096924][ T3676] __dump_stack+0x21/0x30 [ 158.096961][ T3676] dump_stack_lvl+0x140/0x1c0 [ 158.097000][ T3676] ? __cfi_dump_stack_lvl+0x10/0x10 [ 158.097035][ T3676] dump_stack+0x19/0x20 [ 158.097065][ T3676] should_fail_ex+0x3c2/0x510 [ 158.097093][ T3676] should_failslab+0xac/0x100 [ 158.097122][ T3676] __kmalloc_cache_node_noprof+0x46/0x430 [ 158.097148][ T3676] ? __get_vm_area_node+0x150/0x390 [ 158.097180][ T3676] ? kasan_save_alloc_info+0x3a/0x50 [ 158.097201][ T3676] ? __kasan_slab_alloc+0x73/0x90 [ 158.097229][ T3676] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 158.097255][ T3676] __get_vm_area_node+0x150/0x390 [ 158.097289][ T3676] __vmalloc_node_range_noprof+0x340/0x1300 [ 158.097335][ T3676] ? copy_process+0x57c/0x3350 [ 158.097365][ T3676] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 158.097415][ T3676] ? kasan_save_alloc_info+0x3a/0x50 [ 158.097436][ T3676] ? __kasan_slab_alloc+0x73/0x90 [ 158.097463][ T3676] ? arch_dup_task_struct+0x5b/0xe0 [ 158.097497][ T3676] ? __asan_memcpy+0x5a/0x80 [ 158.097521][ T3676] dup_task_struct+0x5d6/0xd80 [ 158.097550][ T3676] ? copy_process+0x57c/0x3350 [ 158.097578][ T3676] ? _raw_spin_lock_irq+0x93/0x120 [ 158.097609][ T3676] ? copy_process+0x3350/0x3350 [ 158.097637][ T3676] ? __kasan_check_write+0x18/0x20 [ 158.097661][ T3676] copy_process+0x57c/0x3350 [ 158.097692][ T3676] ? kasan_save_alloc_info+0x3a/0x50 [ 158.097714][ T3676] ? __cfi_copy_process+0x10/0x10 [ 158.097742][ T3676] ? __kmalloc_cache_noprof+0x23c/0x470 [ 158.097769][ T3676] ? __kasan_check_write+0x18/0x20 [ 158.097793][ T3676] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 158.097821][ T3676] vhost_task_create+0x1f7/0x3f0 [ 158.097845][ T3676] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 158.097875][ T3676] ? __cfi_vhost_task_create+0x10/0x10 [ 158.097900][ T3676] ? __cfi_vhost_task_fn+0x10/0x10 [ 158.097929][ T3676] ? __kasan_check_write+0x18/0x20 [ 158.097951][ T3676] ? mutex_lock+0x97/0x1d0 [ 158.097972][ T3676] ? __cfi_mutex_lock+0x10/0x10 [ 158.098002][ T3676] ? kernel_text_address+0xa9/0xe0 [ 158.098034][ T3676] kvm_mmu_post_init_vm+0x161/0x300 [ 158.098068][ T3676] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 158.098098][ T3676] ? _parse_integer_limit+0x195/0x1e0 [ 158.098123][ T3676] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 158.098154][ T3676] ? kstrtoull+0x13b/0x1e0 [ 158.098178][ T3676] ? kstrtouint+0x78/0xf0 [ 158.098202][ T3676] ? ioctl_has_perm+0x1bc/0x500 [ 158.098226][ T3676] ? __asan_memcpy+0x5a/0x80 [ 158.098250][ T3676] ? ioctl_has_perm+0x408/0x500 [ 158.098274][ T3676] ? has_cap_mac_admin+0xd0/0xd0 [ 158.098298][ T3676] ? __kasan_check_write+0x18/0x20 [ 158.098321][ T3676] ? mutex_lock_killable+0x97/0x1d0 [ 158.098346][ T3676] ? __cfi_mutex_lock_killable+0x10/0x10 [ 158.098370][ T3676] ? proc_fail_nth_write+0x184/0x220 [ 158.098406][ T3676] kvm_vcpu_ioctl+0xa43/0x1000 [ 158.098430][ T3676] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 158.098453][ T3676] ? __cfi_vfs_write+0x10/0x10 [ 158.098477][ T3676] ? __kasan_check_write+0x18/0x20 [ 158.098500][ T3676] ? mutex_unlock+0x90/0x240 [ 158.098523][ T3676] ? __cfi_mutex_unlock+0x10/0x10 [ 158.098549][ T3676] ? bpf_lsm_file_ioctl+0xd/0x20 [ 158.098579][ T3676] ? security_file_ioctl+0x3e/0x110 [ 158.098601][ T3676] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 158.098624][ T3676] __se_sys_ioctl+0x135/0x1b0 [ 158.098653][ T3676] __x64_sys_ioctl+0x7f/0xa0 [ 158.098681][ T3676] x64_sys_call+0x1878/0x2ee0 [ 158.098704][ T3676] do_syscall_64+0x57/0xf0 [ 158.098734][ T3676] ? clear_bhb_loop+0x50/0xa0 [ 158.098758][ T3676] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 158.098794][ T3676] RIP: 0033:0x7f958e19e0d9 [ 158.098814][ T3676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.098834][ T3676] RSP: 002b:00007f958ef81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.098859][ T3676] RAX: ffffffffffffffda RBX: 00007f958e425fa0 RCX: 00007f958e19e0d9 [ 158.098877][ T3676] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 158.098892][ T3676] RBP: 00007f958ef81090 R08: 0000000000000000 R09: 0000000000000000 [ 158.098908][ T3676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.098923][ T3676] R13: 00007f958e426038 R14: 00007f958e425fa0 R15: 00007ffdda74f1b8 [ 158.098944][ T3676] [ 158.099033][ T3676] syz.0.1075: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 158.561864][ T3676] CPU: 1 UID: 0 PID: 3676 Comm: syz.0.1075 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 158.561900][ T3676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.561915][ T3676] Call Trace: [ 158.561923][ T3676] [ 158.561932][ T3676] __dump_stack+0x21/0x30 [ 158.561968][ T3676] dump_stack_lvl+0x140/0x1c0 [ 158.562001][ T3676] ? __cfi_dump_stack_lvl+0x10/0x10 [ 158.562036][ T3676] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 158.562067][ T3676] dump_stack+0x19/0x20 [ 158.562107][ T3676] warn_alloc+0x1e7/0x2c0 [ 158.562135][ T3676] ? __kasan_kmalloc+0x28/0xb0 [ 158.562162][ T3676] ? __cfi_warn_alloc+0x10/0x10 [ 158.562190][ T3676] ? __get_vm_area_node+0x150/0x390 [ 158.562220][ T3676] ? kasan_save_alloc_info+0x3a/0x50 [ 158.562242][ T3676] ? __get_vm_area_node+0x382/0x390 [ 158.562274][ T3676] __vmalloc_node_range_noprof+0x365/0x1300 [ 158.562313][ T3676] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 158.562345][ T3676] ? kasan_save_alloc_info+0x3a/0x50 [ 158.562380][ T3676] ? __kasan_slab_alloc+0x73/0x90 [ 158.562405][ T3676] ? arch_dup_task_struct+0x5b/0xe0 [ 158.562434][ T3676] ? __asan_memcpy+0x5a/0x80 [ 158.562454][ T3676] dup_task_struct+0x5d6/0xd80 [ 158.562496][ T3676] ? copy_process+0x57c/0x3350 [ 158.562524][ T3676] ? _raw_spin_lock_irq+0x93/0x120 [ 158.562555][ T3676] ? copy_process+0x3350/0x3350 [ 158.562583][ T3676] ? __kasan_check_write+0x18/0x20 [ 158.562608][ T3676] copy_process+0x57c/0x3350 [ 158.562649][ T3676] ? kasan_save_alloc_info+0x3a/0x50 [ 158.562669][ T3676] ? __cfi_copy_process+0x10/0x10 [ 158.562695][ T3676] ? __kmalloc_cache_noprof+0x23c/0x470 [ 158.562719][ T3676] ? __kasan_check_write+0x18/0x20 [ 158.562740][ T3676] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 158.562766][ T3676] vhost_task_create+0x1f7/0x3f0 [ 158.562789][ T3676] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 158.562815][ T3676] ? __cfi_vhost_task_create+0x10/0x10 [ 158.562838][ T3676] ? __cfi_vhost_task_fn+0x10/0x10 [ 158.562859][ T3676] ? __kasan_check_write+0x18/0x20 [ 158.562883][ T3676] ? mutex_lock+0x97/0x1d0 [ 158.562912][ T3676] ? __cfi_mutex_lock+0x10/0x10 [ 158.562936][ T3676] ? kernel_text_address+0xa9/0xe0 [ 158.562976][ T3676] kvm_mmu_post_init_vm+0x161/0x300 [ 158.563009][ T3676] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 158.563041][ T3676] ? _parse_integer_limit+0x195/0x1e0 [ 158.563072][ T3676] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 158.563109][ T3676] ? kstrtoull+0x13b/0x1e0 [ 158.563139][ T3676] ? kstrtouint+0x78/0xf0 [ 158.563167][ T3676] ? ioctl_has_perm+0x1bc/0x500 [ 158.563196][ T3676] ? __asan_memcpy+0x5a/0x80 [ 158.563224][ T3676] ? ioctl_has_perm+0x408/0x500 [ 158.563253][ T3676] ? has_cap_mac_admin+0xd0/0xd0 [ 158.563281][ T3676] ? __kasan_check_write+0x18/0x20 [ 158.563309][ T3676] ? mutex_lock_killable+0x97/0x1d0 [ 158.563339][ T3676] ? __cfi_mutex_lock_killable+0x10/0x10 [ 158.563379][ T3676] ? proc_fail_nth_write+0x184/0x220 [ 158.563420][ T3676] kvm_vcpu_ioctl+0xa43/0x1000 [ 158.563451][ T3676] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 158.563478][ T3676] ? __cfi_vfs_write+0x10/0x10 [ 158.563509][ T3676] ? __kasan_check_write+0x18/0x20 [ 158.563542][ T3676] ? mutex_unlock+0x90/0x240 [ 158.563571][ T3676] ? __cfi_mutex_unlock+0x10/0x10 [ 158.563600][ T3676] ? bpf_lsm_file_ioctl+0xd/0x20 [ 158.563635][ T3676] ? security_file_ioctl+0x3e/0x110 [ 158.563680][ T3676] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 158.563715][ T3676] __se_sys_ioctl+0x135/0x1b0 [ 158.563750][ T3676] __x64_sys_ioctl+0x7f/0xa0 [ 158.563804][ T3676] x64_sys_call+0x1878/0x2ee0 [ 158.563835][ T3676] do_syscall_64+0x57/0xf0 [ 158.563874][ T3676] ? clear_bhb_loop+0x50/0xa0 [ 158.563905][ T3676] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 158.563942][ T3676] RIP: 0033:0x7f958e19e0d9 [ 158.563962][ T3676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.563983][ T3676] RSP: 002b:00007f958ef81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.564009][ T3676] RAX: ffffffffffffffda RBX: 00007f958e425fa0 RCX: 00007f958e19e0d9 [ 158.564028][ T3676] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 158.564045][ T3676] RBP: 00007f958ef81090 R08: 0000000000000000 R09: 0000000000000000 [ 158.564062][ T3676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.564079][ T3676] R13: 00007f958e426038 R14: 00007f958e425fa0 R15: 00007ffdda74f1b8 [ 158.564102][ T3676] [ 158.564112][ T3676] Mem-Info: [ 158.910031][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 158.930082][ T3676] active_anon:8080 inactive_anon:81 isolated_anon:0 [ 158.930082][ T3676] active_file:18231 inactive_file:2388 isolated_file:0 [ 158.930082][ T3676] unevictable:0 dirty:237 writeback:4 [ 158.930082][ T3676] slab_reclaimable:6237 slab_unreclaimable:71156 [ 158.930082][ T3676] mapped:25138 shmem:164 pagetables:1308 [ 158.930082][ T3676] sec_pagetables:0 bounce:0 [ 158.930082][ T3676] kernel_misc_reclaimable:0 [ 158.930082][ T3676] free:1522005 free_pcp:2921 free_cma:0 [ 159.055224][ T3676] Node 0 active_anon:32328kB inactive_anon:324kB active_file:72924kB inactive_file:9552kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100508kB dirty:948kB writeback:16kB shmem:656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5004kB pagetables:5296kB sec_pagetables:24kB all_unreclaimable? no [ 159.090728][ T3676] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963388kB mlocked:0kB bounce:0kB free_pcp:5224kB local_pcp:5224kB free_cma:0kB [ 159.120795][ T3676] lowmem_reserve[]: 0 3921 3921 [ 159.125713][ T3676] Normal free:3134100kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32300kB inactive_anon:324kB active_file:72924kB inactive_file:9552kB unevictable:0kB writepending:948kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:4920kB local_pcp:4548kB free_cma:0kB [ 159.159407][ T3676] lowmem_reserve[]: 0 0 0 [ 159.163884][ T3676] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 159.179695][ T3676] Normal: 195*4kB (UME) 649*8kB (UME) 577*16kB (UM) 377*32kB (UME) 300*64kB (UM) 74*128kB (UME) 38*256kB (UME) 12*512kB (UME) 5*1024kB (UME) 9*2048kB (UME) 742*4096kB (UM) = 3134596kB [ 159.183890][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 159.198351][ T3676] 20850 total pagecache pages [ 159.207902][ T3676] 70 pages in swap cache [ 159.212274][ T3676] Free swap = 123632kB [ 159.216569][ T3676] Total swap = 124996kB [ 159.220779][ T3676] 2097051 pages RAM [ 159.224736][ T3676] 0 pages HighMem/MovableOnly [ 159.229444][ T3676] 352238 pages reserved [ 159.233677][ T3676] 0 pages cma reserved [ 159.240470][ T10] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.240503][ T3676] Memory allocations: [ 159.240521][ T3676] 0 B 0 init/main.c:1477 func:do_initcalls [ 159.264042][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 159.265040][ T3676] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 159.280662][ T3676] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 159.282106][ T10] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 159.288315][ T3676] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 159.288338][ T3676] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 159.297812][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.305929][ T3676] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 159.330121][ T3676] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 159.338928][ T3676] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 159.347860][ T3676] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 159.359156][ T10] usb 4-1: config 0 descriptor?? [ 159.365354][ T3676] 0 B 0 init/initramfs.c:101 func:find_link [ 159.676182][ T3720] FAULT_INJECTION: forcing a failure. [ 159.676182][ T3720] name failslab, interval 1, probability 0, space 0, times 0 [ 159.688939][ T3720] CPU: 1 UID: 0 PID: 3720 Comm: syz.1.1091 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 159.688972][ T3720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.688988][ T3720] Call Trace: [ 159.688997][ T3720] [ 159.689005][ T3720] __dump_stack+0x21/0x30 [ 159.689043][ T3720] dump_stack_lvl+0x140/0x1c0 [ 159.689077][ T3720] ? __cfi_dump_stack_lvl+0x10/0x10 [ 159.689109][ T3720] dump_stack+0x19/0x20 [ 159.689137][ T3720] should_fail_ex+0x3c2/0x510 [ 159.689164][ T3720] should_failslab+0xac/0x100 [ 159.689195][ T3720] kmem_cache_alloc_noprof+0x42/0x410 [ 159.689219][ T3720] ? getname_flags+0xcc/0x6b0 [ 159.689244][ T3720] ? __kasan_check_write+0x18/0x20 [ 159.689276][ T3720] getname_flags+0xcc/0x6b0 [ 159.689302][ T3720] user_path_at+0x2b/0x60 [ 159.689333][ T3720] path_setxattr+0x250/0x5a0 [ 159.689360][ T3720] ? simple_xattrs_free+0x180/0x180 [ 159.689390][ T3720] ? __cfi_ksys_write+0x10/0x10 [ 159.689416][ T3720] __x64_sys_setxattr+0xc9/0xe0 [ 159.689438][ T3720] x64_sys_call+0x2d94/0x2ee0 [ 159.689462][ T3720] do_syscall_64+0x57/0xf0 [ 159.689492][ T3720] ? clear_bhb_loop+0x50/0xa0 [ 159.689515][ T3720] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 159.689549][ T3720] RIP: 0033:0x7f992519e0d9 [ 159.689567][ T3720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.689588][ T3720] RSP: 002b:00007f9923be3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 159.689616][ T3720] RAX: ffffffffffffffda RBX: 00007f9925425fa0 RCX: 00007f992519e0d9 [ 159.689634][ T3720] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000180 [ 159.689649][ T3720] RBP: 00007f9923be3090 R08: 0000000000000000 R09: 0000000000000000 [ 159.689665][ T3720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.689680][ T3720] R13: 00007f9925426038 R14: 00007f9925425fa0 R15: 00007ffc0e3e0508 [ 159.689700][ T3720] [ 159.889554][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 159.897414][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 159.907502][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 159.929974][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 159.937786][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 159.945548][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 159.959885][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 159.972461][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 159.980443][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 159.988142][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 159.997592][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 160.005405][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 160.013278][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 160.021539][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 160.031885][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 160.039629][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 160.047382][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 160.055150][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 160.062887][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 160.071261][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 160.078948][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 160.090899][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 160.098075][ T3690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.098598][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 160.114906][ T3690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.124456][ T3690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.124972][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 160.135300][ T3690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.144732][ T9] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.159941][ T9] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.169779][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 160.189979][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 160.197772][ T10] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 160.209953][ T9] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.223389][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 160.231068][ T10] hid-multitouch 0003:0EEF:72C4.002B: hidraw0: USB HID v10.04 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 160.244601][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 160.256046][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.266132][ T10] usb 4-1: USB disconnect, device number 44 [ 160.281448][ T9] usb 1-1: config 0 descriptor?? [ 160.306829][ T3739] fido_id[3739]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 160.700860][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 160.709701][ T3707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.736485][ T3707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.869986][ T10] usb 2-1: device descriptor read/64, error -71 [ 160.909988][ T31] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 160.946411][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 160.960017][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 160.979124][ T9] usb 1-1: USB disconnect, device number 50 [ 161.049954][ T31] usb 3-1: device descriptor read/64, error -71 [ 161.119953][ T10] usb 2-1: device descriptor read/64, error -71 [ 161.309987][ T31] usb 3-1: device descriptor read/64, error -71 [ 161.369220][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 161.481900][ T36] audit: type=1400 audit(1787599377.800:882): avc: denied { shutdown } for pid=3757 comm="syz.0.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.500094][ T10] usb 2-1: device descriptor read/64, error -71 [ 161.570291][ T31] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 161.709969][ T31] usb 3-1: device descriptor read/64, error -71 [ 161.739991][ T10] usb 2-1: device descriptor read/64, error -71 [ 161.850202][ T10] usb usb2-port1: attempt power cycle [ 161.959981][ T31] usb 3-1: device descriptor read/64, error -71 [ 162.070096][ T31] usb usb3-port1: attempt power cycle [ 162.160001][ T564] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 162.199999][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 162.231024][ T10] usb 2-1: device descriptor read/8, error -71 [ 162.319947][ T564] usb 1-1: Using ep0 maxpacket: 16 [ 162.326473][ T564] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 162.334978][ T564] usb 1-1: config 0 has no interface number 0 [ 162.341347][ T564] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 162.351852][ T564] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 162.362925][ T10] usb 2-1: device descriptor read/8, error -71 [ 162.363904][ T564] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 162.378529][ T564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.386716][ T564] usb 1-1: Product: syz [ 162.391184][ T564] usb 1-1: Manufacturer: syz [ 162.395897][ T564] usb 1-1: SerialNumber: syz [ 162.403018][ T564] usb 1-1: config 0 descriptor?? [ 162.409198][ T3777] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 162.416730][ T31] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 162.424377][ T3777] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 162.451048][ T31] usb 3-1: device descriptor read/8, error -71 [ 162.583662][ T31] usb 3-1: device descriptor read/8, error -71 [ 162.619955][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 162.641778][ T3777] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 162.655954][ T564] asix 1-1:0.34: probe with driver asix failed with error -71 [ 162.657015][ T10] usb 2-1: device descriptor read/8, error -71 [ 162.675619][ T564] usb 1-1: USB disconnect, device number 51 [ 162.802709][ T10] usb 2-1: device descriptor read/8, error -71 [ 162.829954][ T31] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 162.860998][ T31] usb 3-1: device descriptor read/8, error -71 [ 162.920811][ T10] usb usb2-port1: unable to enumerate USB device [ 162.991000][ T31] usb 3-1: device descriptor read/8, error -71 [ 163.100094][ T31] usb usb3-port1: unable to enumerate USB device [ 163.593137][ T3790] FAULT_INJECTION: forcing a failure. [ 163.593137][ T3790] name failslab, interval 1, probability 0, space 0, times 0 [ 163.605853][ T3790] CPU: 0 UID: 0 PID: 3790 Comm: syz.1.1114 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 163.605887][ T3790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.605902][ T3790] Call Trace: [ 163.605910][ T3790] [ 163.605919][ T3790] __dump_stack+0x21/0x30 [ 163.605955][ T3790] dump_stack_lvl+0x140/0x1c0 [ 163.605987][ T3790] ? __cfi_dump_stack_lvl+0x10/0x10 [ 163.606020][ T3790] ? avc_has_perm+0x155/0x240 [ 163.606056][ T3790] ? __cfi_avc_has_perm+0x10/0x10 [ 163.606084][ T3790] dump_stack+0x19/0x20 [ 163.606114][ T3790] should_fail_ex+0x3c2/0x510 [ 163.606141][ T3790] should_failslab+0xac/0x100 [ 163.606171][ T3790] __kmalloc_cache_noprof+0x41/0x470 [ 163.606197][ T3790] ? vhost_task_create+0x12c/0x3f0 [ 163.606224][ T3790] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 163.606252][ T3790] vhost_task_create+0x12c/0x3f0 [ 163.606276][ T3790] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 163.606306][ T3790] ? __cfi_vhost_task_create+0x10/0x10 [ 163.606332][ T3790] ? __cfi_vhost_task_fn+0x10/0x10 [ 163.606357][ T3790] ? __kasan_check_write+0x18/0x20 [ 163.606381][ T3790] ? mutex_lock+0x97/0x1d0 [ 163.606404][ T3790] ? __cfi_mutex_lock+0x10/0x10 [ 163.606427][ T3790] ? kernel_text_address+0xa9/0xe0 [ 163.606461][ T3790] kvm_mmu_post_init_vm+0x161/0x300 [ 163.606495][ T3790] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 163.606543][ T3790] ? _parse_integer_limit+0x195/0x1e0 [ 163.606561][ T3790] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 163.606583][ T3790] ? kstrtoull+0x13b/0x1e0 [ 163.606599][ T3790] ? kstrtouint+0x78/0xf0 [ 163.606615][ T3790] ? ioctl_has_perm+0x1bc/0x500 [ 163.606630][ T3790] ? __asan_memcpy+0x5a/0x80 [ 163.606646][ T3790] ? ioctl_has_perm+0x408/0x500 [ 163.606662][ T3790] ? has_cap_mac_admin+0xd0/0xd0 [ 163.606677][ T3790] ? __kasan_check_write+0x18/0x20 [ 163.606692][ T3790] ? mutex_lock_killable+0x97/0x1d0 [ 163.606708][ T3790] ? __cfi_mutex_lock_killable+0x10/0x10 [ 163.606724][ T3790] ? proc_fail_nth_write+0x184/0x220 [ 163.606760][ T3790] kvm_vcpu_ioctl+0xa43/0x1000 [ 163.606775][ T3790] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 163.606789][ T3790] ? __cfi_vfs_write+0x10/0x10 [ 163.606804][ T3790] ? __kasan_check_write+0x18/0x20 [ 163.606818][ T3790] ? mutex_unlock+0x90/0x240 [ 163.606832][ T3790] ? __cfi_mutex_unlock+0x10/0x10 [ 163.606848][ T3790] ? bpf_lsm_file_ioctl+0xd/0x20 [ 163.606867][ T3790] ? security_file_ioctl+0x3e/0x110 [ 163.606881][ T3790] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 163.606894][ T3790] __se_sys_ioctl+0x135/0x1b0 [ 163.606913][ T3790] __x64_sys_ioctl+0x7f/0xa0 [ 163.606930][ T3790] x64_sys_call+0x1878/0x2ee0 [ 163.606944][ T3790] do_syscall_64+0x57/0xf0 [ 163.606963][ T3790] ? clear_bhb_loop+0x50/0xa0 [ 163.606978][ T3790] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 163.607001][ T3790] RIP: 0033:0x7f992519e0d9 [ 163.607014][ T3790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.607026][ T3790] RSP: 002b:00007f9923be3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.607047][ T3790] RAX: ffffffffffffffda RBX: 00007f9925425fa0 RCX: 00007f992519e0d9 [ 163.607059][ T3790] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 163.607068][ T3790] RBP: 00007f9923be3090 R08: 0000000000000000 R09: 0000000000000000 [ 163.607077][ T3790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.607086][ T3790] R13: 00007f9925426038 R14: 00007f9925425fa0 R15: 00007ffc0e3e0508 [ 163.607098][ T3790] [ 164.084977][ T3801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1118'. [ 164.229975][ T564] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 164.279967][ T31] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 164.360010][ T564] usb 4-1: device descriptor read/64, error -71 [ 164.441160][ T31] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 164.452079][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.463494][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.473375][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 164.487419][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 164.496585][ T31] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 164.505189][ T31] usb 1-1: Manufacturer: syz [ 164.514521][ T31] usb 1-1: config 0 descriptor?? [ 164.589990][ T45] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 164.629955][ T564] usb 4-1: device descriptor read/64, error -71 [ 164.751396][ T45] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.764477][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 164.771531][ T45] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 164.780855][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.792520][ T45] usb 2-1: config 0 descriptor?? [ 164.889960][ T564] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 164.927005][ T31] appleir 0003:05AC:8243.002C: unknown main item tag 0x0 [ 164.942216][ T31] appleir 0003:05AC:8243.002C: No inputs registered, leaving [ 164.954230][ T31] appleir 0003:05AC:8243.002C: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 165.029936][ T564] usb 4-1: device descriptor read/64, error -71 [ 165.180510][ T31] usb 1-1: USB disconnect, device number 52 [ 165.190085][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 165.205035][ T45] input: HID 28bd:0933 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0933.002D/input/input27 [ 165.218451][ T45] uclogic 0003:28BD:0933.002D: input,hidraw0: USB HID v10.01 Mouse [HID 28bd:0933] on usb-dummy_hcd.1-1/input0 [ 165.270011][ T564] usb 4-1: device descriptor read/64, error -71 [ 165.319971][ T10] usb 3-1: device descriptor read/64, error -71 [ 165.380067][ T564] usb usb4-port1: attempt power cycle [ 165.405121][ T9] usb 2-1: USB disconnect, device number 59 [ 165.569985][ T10] usb 3-1: device descriptor read/64, error -71 [ 165.719981][ T564] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 165.741075][ T564] usb 4-1: device descriptor read/8, error -71 [ 165.809994][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 165.871090][ T564] usb 4-1: device descriptor read/8, error -71 [ 165.951415][ T10] usb 3-1: device descriptor read/64, error -71 [ 166.110284][ T564] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 166.132135][ T564] usb 4-1: device descriptor read/8, error -71 [ 166.199969][ T10] usb 3-1: device descriptor read/64, error -71 [ 166.261254][ T564] usb 4-1: device descriptor read/8, error -71 [ 166.319965][ T10] usb usb3-port1: attempt power cycle [ 166.359973][ T31] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 166.380093][ T564] usb usb4-port1: unable to enumerate USB device [ 166.499973][ T31] usb 2-1: device descriptor read/64, error -71 [ 166.659971][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 166.681049][ T10] usb 3-1: device descriptor read/8, error -71 [ 166.759980][ T31] usb 2-1: device descriptor read/64, error -71 [ 166.811060][ T10] usb 3-1: device descriptor read/8, error -71 [ 167.009975][ T31] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 167.059952][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 167.078831][ T36] audit: type=1400 audit(1787599383.390:883): avc: denied { mounton } for pid=3855 comm="syz.3.1134" path="/276/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 167.093739][ T10] usb 3-1: device descriptor read/8, error -71 [ 167.107620][ T3856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.120383][ T3856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.169967][ T31] usb 2-1: device descriptor read/64, error -71 [ 167.241279][ T10] usb 3-1: device descriptor read/8, error -71 [ 167.350153][ T10] usb usb3-port1: unable to enumerate USB device [ 167.409976][ T362] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 167.419973][ T31] usb 2-1: device descriptor read/64, error -71 [ 167.530089][ T31] usb usb2-port1: attempt power cycle [ 167.552442][ T362] usb 4-1: device descriptor read/64, error -71 [ 167.562505][ T3869] fuse: Unknown parameter 'roormode' [ 167.799963][ T362] usb 4-1: device descriptor read/64, error -71 [ 167.869981][ T31] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 167.892408][ T31] usb 2-1: device descriptor read/8, error -71 [ 168.006895][ T3872] SELinux: failed to load policy [ 168.021110][ T31] usb 2-1: device descriptor read/8, error -71 [ 168.069943][ T362] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 168.199943][ T362] usb 4-1: device descriptor read/64, error -71 [ 168.279945][ T31] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 168.310956][ T31] usb 2-1: device descriptor read/8, error -71 [ 168.441060][ T31] usb 2-1: device descriptor read/8, error -71 [ 168.449953][ T362] usb 4-1: device descriptor read/64, error -71 [ 168.550051][ T31] usb usb2-port1: unable to enumerate USB device [ 168.560057][ T362] usb usb4-port1: attempt power cycle [ 168.919971][ T362] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 168.950975][ T362] usb 4-1: device descriptor read/8, error -71 [ 169.061950][ T3892] rust_binder: 3891:3892 got reply transaction with no transaction stack [ 169.070596][ T3892] rust_binder: 3891:3892 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 169.080456][ T31] rust_binder: 3891: undelivered TRANSACTION_COMPLETE [ 169.090118][ T362] usb 4-1: device descriptor read/8, error -71 [ 169.097475][ T31] rust_binder: 3891: undelivered TRANSACTION_ERROR: 29201 [ 169.224162][ T3896] input: syz1 as /devices/virtual/input/input28 [ 169.329960][ T362] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 169.359965][ T31] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 169.371015][ T362] usb 4-1: device descriptor read/8, error -71 [ 169.509965][ T31] usb 3-1: device descriptor read/64, error -71 [ 169.516486][ T362] usb 4-1: device descriptor read/8, error -71 [ 169.619987][ T45] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 169.630032][ T362] usb usb4-port1: unable to enumerate USB device [ 169.759959][ T31] usb 3-1: device descriptor read/64, error -71 [ 169.780019][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 169.786772][ T45] usb 2-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 169.797843][ T45] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.808936][ T45] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 169.822213][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 169.828868][ T45] usb 2-1: New USB device found, idVendor=18d1, idProduct=5050, bcdDevice= 0.00 [ 169.838158][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.848182][ T45] usb 2-1: config 0 descriptor?? [ 169.999966][ T31] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 170.056576][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 170.062638][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 170.072877][ T45] usb 2-1: USB disconnect, device number 64 [ 170.130027][ T31] usb 3-1: device descriptor read/64, error -71 [ 170.370311][ T31] usb 3-1: device descriptor read/64, error -71 [ 170.480069][ T31] usb usb3-port1: attempt power cycle [ 170.839977][ T31] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 170.891015][ T31] usb 3-1: device descriptor read/8, error -71 [ 171.032847][ T31] usb 3-1: device descriptor read/8, error -71 [ 171.105815][ T36] audit: type=1400 audit(1787599387.420:884): avc: denied { ioctl } for pid=3934 comm="syz.0.1162" path="socket:[62505]" dev="sockfs" ino=62505 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.289948][ T31] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 171.330984][ T31] usb 3-1: device descriptor read/8, error -71 [ 171.461026][ T31] usb 3-1: device descriptor read/8, error -71 [ 171.572412][ T31] usb usb3-port1: unable to enumerate USB device [ 172.394180][ T36] audit: type=1400 audit(1787599388.710:885): avc: denied { bind } for pid=3975 comm="syz.2.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.669979][ T45] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 172.689987][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 172.830021][ T10] usb 1-1: device descriptor read/64, error -71 [ 172.841273][ T45] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 172.864864][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.879564][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 172.893702][ T45] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 172.903571][ T45] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 172.912300][ T45] usb 3-1: Manufacturer: syz [ 172.924738][ T45] usb 3-1: config 0 descriptor?? [ 172.932444][ T45] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 172.960182][ T3993] FAULT_INJECTION: forcing a failure. [ 172.960182][ T3993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.973366][ T3993] CPU: 0 UID: 0 PID: 3993 Comm: syz.1.1184 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 172.973406][ T3993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.973425][ T3993] Call Trace: [ 172.973439][ T3993] [ 172.973449][ T3993] __dump_stack+0x21/0x30 [ 172.973500][ T3993] dump_stack_lvl+0x140/0x1c0 [ 172.973558][ T3993] ? __cfi_dump_stack_lvl+0x10/0x10 [ 172.973601][ T3993] ? __sched_text_start+0x10/0x10 [ 172.973656][ T3993] dump_stack+0x19/0x20 [ 172.973695][ T3993] should_fail_ex+0x3c2/0x510 [ 172.973731][ T3993] should_fail+0xf/0x20 [ 172.973761][ T3993] should_fail_usercopy+0x1e/0x30 [ 172.973796][ T3993] _copy_from_user+0x20/0xa0 [ 172.973836][ T3993] __se_sys_io_uring_setup+0x170/0x2b0 [ 172.973875][ T3993] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 172.973917][ T3993] ? __x64_sys_io_uring_setup+0x80/0x80 [ 172.973959][ T3993] ? __kasan_check_read+0x15/0x20 [ 172.973988][ T3993] __x64_sys_io_uring_setup+0x5f/0x80 [ 172.974029][ T3993] x64_sys_call+0x22c0/0x2ee0 [ 172.974058][ T3993] do_syscall_64+0x57/0xf0 [ 172.974094][ T3993] ? clear_bhb_loop+0x50/0xa0 [ 172.974133][ T3993] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 172.974178][ T3993] RIP: 0033:0x7f992519e0d9 [ 172.974202][ T3993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.974228][ T3993] RSP: 002b:00007f9923be2ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 172.974257][ T3993] RAX: ffffffffffffffda RBX: 00002000000008a8 RCX: 00007f992519e0d9 [ 172.974287][ T3993] RDX: 0000200000000928 RSI: 00002000000008a8 RDI: 0000000000000e26 [ 172.974305][ T3993] RBP: 00002000000008a0 R08: 0000000000000008 R09: 0000000000000000 [ 172.974343][ T3993] R10: 0000200000000930 R11: 0000000000000206 R12: 0000200000000928 [ 172.974367][ T3993] R13: 0000200000000930 R14: 00007f9923be2fd8 R15: 0000000000000001 [ 172.974390][ T3993] [ 173.229951][ T10] usb 1-1: device descriptor read/64, error -71 [ 173.388836][ T4002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1186'. [ 173.469951][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 173.552567][ T4008] FAULT_INJECTION: forcing a failure. [ 173.552567][ T4008] name failslab, interval 1, probability 0, space 0, times 0 [ 173.579924][ T4008] CPU: 1 UID: 0 PID: 4008 Comm: syz.3.1187 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 173.579962][ T4008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.579977][ T4008] Call Trace: [ 173.579986][ T4008] [ 173.579997][ T4008] __dump_stack+0x21/0x30 [ 173.580035][ T4008] dump_stack_lvl+0x140/0x1c0 [ 173.580067][ T4008] ? __cfi_dump_stack_lvl+0x10/0x10 [ 173.580101][ T4008] dump_stack+0x19/0x20 [ 173.580132][ T4008] should_fail_ex+0x3c2/0x510 [ 173.580159][ T4008] should_failslab+0xac/0x100 [ 173.580187][ T4008] kmem_cache_alloc_node_noprof+0x45/0x420 [ 173.580213][ T4008] ? dup_task_struct+0xc1/0xd80 [ 173.580242][ T4008] dup_task_struct+0xc1/0xd80 [ 173.580271][ T4008] ? __kasan_check_write+0x18/0x20 [ 173.580312][ T4008] ? _raw_spin_lock_irq+0x93/0x120 [ 173.580345][ T4008] ? copy_process+0x3350/0x3350 [ 173.580374][ T4008] ? __kasan_check_write+0x18/0x20 [ 173.580399][ T4008] copy_process+0x57c/0x3350 [ 173.580428][ T4008] ? kstrtouint_from_user+0x117/0x170 [ 173.580456][ T4008] ? selinux_file_permission+0x318/0xb60 [ 173.580484][ T4008] ? __cfi_copy_process+0x10/0x10 [ 173.580512][ T4008] ? proc_fail_nth_write+0x184/0x220 [ 173.580556][ T4008] kernel_clone+0x233/0x810 [ 173.580588][ T4008] ? __cfi_kernel_clone+0x10/0x10 [ 173.580633][ T4008] __x64_sys_clone+0x1b7/0x230 [ 173.580664][ T4008] ? __cfi___x64_sys_clone+0x10/0x10 [ 173.580715][ T4008] ? __kasan_check_read+0x15/0x20 [ 173.580740][ T4008] x64_sys_call+0x2b3c/0x2ee0 [ 173.580763][ T4008] do_syscall_64+0x57/0xf0 [ 173.580801][ T4008] ? clear_bhb_loop+0x50/0xa0 [ 173.580826][ T4008] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 173.580864][ T4008] RIP: 0033:0x7fb2c359e0d9 [ 173.580884][ T4008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.580905][ T4008] RSP: 002b:00007fb2c445efd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 173.580930][ T4008] RAX: ffffffffffffffda RBX: 00007fb2c3826090 RCX: 00007fb2c359e0d9 [ 173.580954][ T4008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001080 [ 173.580970][ T4008] RBP: 00007fb2c445f090 R08: 0000000000000000 R09: 0000000000000000 [ 173.580986][ T4008] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 173.581002][ T4008] R13: 00007fb2c3826128 R14: 00007fb2c3826090 R15: 00007ffeec2f84f8 [ 173.581023][ T4008] [ 173.610094][ T10] usb 1-1: device descriptor read/64, error -71 [ 173.844670][ T36] audit: type=1400 audit(1787599390.160:886): avc: denied { connect } for pid=3978 comm="syz.2.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 174.069951][ T10] usb 1-1: device descriptor read/64, error -71 [ 174.189960][ T10] usb usb1-port1: attempt power cycle [ 174.529979][ T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 174.551162][ T10] usb 1-1: device descriptor read/8, error -71 [ 174.559975][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 174.681073][ T10] usb 1-1: device descriptor read/8, error -71 [ 174.689980][ T9] usb 4-1: device descriptor read/64, error -71 [ 174.920000][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 174.929997][ T9] usb 4-1: device descriptor read/64, error -71 [ 174.949386][ T10] usb 1-1: device descriptor read/8, error -71 [ 174.995764][ T4019] kvm: user requested TSC rate below hardware speed [ 175.081015][ T10] usb 1-1: device descriptor read/8, error -71 [ 175.169979][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 175.190062][ T10] usb usb1-port1: unable to enumerate USB device [ 175.259989][ T372] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 175.299977][ T9] usb 4-1: device descriptor read/64, error -71 [ 175.410432][ T372] usb 2-1: Using ep0 maxpacket: 16 [ 175.417361][ T372] usb 2-1: config 255 has an invalid interface number: 209 but max is 0 [ 175.425879][ T372] usb 2-1: config 255 has no interface number 0 [ 175.432271][ T372] usb 2-1: config 255 interface 209 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 175.448583][ T10] usb 3-1: USB disconnect, device number 64 [ 175.460189][ T372] usb 2-1: config 255 interface 209 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 32 [ 175.473353][ T372] usb 2-1: config 255 interface 209 altsetting 2 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 175.485535][ T372] usb 2-1: config 255 interface 209 altsetting 2 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 175.503300][ T372] usb 2-1: config 255 interface 209 altsetting 2 endpoint 0x85 has an invalid bInterval 122, changing to 10 [ 175.515960][ T372] usb 2-1: config 255 interface 209 altsetting 2 endpoint 0x85 has invalid maxpacket 9497, setting to 1024 [ 175.527453][ T372] usb 2-1: config 255 interface 209 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 175.532988][ T36] audit: type=1400 audit(1787599391.840:887): avc: denied { write } for pid=4023 comm="syz.0.1193" name="bcdUSB" dev="configfs" ino=64528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 175.540933][ T9] usb 4-1: device descriptor read/64, error -71 [ 175.564060][ T36] audit: type=1400 audit(1787599391.880:888): avc: denied { open } for pid=4023 comm="syz.0.1193" path="/291/cfg/usb_gadget/g1/bcdUSB" dev="configfs" ino=64528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 175.570028][ T372] usb 2-1: config 255 interface 209 has no altsetting 0 [ 175.607657][ T372] usb 2-1: New USB device found, idVendor=0b57, idProduct=dfc7, bcdDevice=1a.f7 [ 175.616779][ T372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.624876][ T372] usb 2-1: Product: syz [ 175.629097][ T372] usb 2-1: Manufacturer: syz [ 175.633837][ T372] usb 2-1: SerialNumber: syz [ 175.642970][ T4019] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 175.650438][ T4019] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 175.710073][ T9] usb usb4-port1: attempt power cycle [ 175.890013][ T45] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 175.908062][ T372] usb 2-1: USB disconnect, device number 65 [ 175.939968][ T439] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 176.039960][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 176.046827][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 176.050114][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 176.055620][ T45] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 176.070125][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.070139][ T439] usb 1-1: device descriptor read/64, error -71 [ 176.082038][ T9] usb 4-1: device descriptor read/8, error -71 [ 176.084583][ T45] usb 3-1: Product: syz [ 176.094854][ T45] usb 3-1: Manufacturer: ൒渪䂣뉦襨䥕䭿Ꙣ縡ᇔ֙鷛྘⛙ᣉ伝鰴Ά迭짪Ｒޯ㄃䃑柞랑எ飞臺Ⴠ謏婇䥿렬쫨Ο䴹ᒢ麏乬ุ崻솾蓩﮳｣ᄓ틕㽀嚯럣ᔓ讯浗 鐊᷺滺廻헳껰㨿鮄鸅掜썱䜈⦨料ᨴꇵ [ 176.119414][ T45] usb 3-1: SerialNumber: syz [ 176.221071][ T9] usb 4-1: device descriptor read/8, error -71 [ 176.309969][ T439] usb 1-1: device descriptor read/64, error -71 [ 176.459968][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 176.481115][ T9] usb 4-1: device descriptor read/8, error -71 [ 176.549967][ T439] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 176.611548][ T9] usb 4-1: device descriptor read/8, error -71 [ 176.689998][ T439] usb 1-1: device descriptor read/64, error -71 [ 176.720037][ T9] usb usb4-port1: unable to enumerate USB device [ 176.930210][ T439] usb 1-1: device descriptor read/64, error -71 [ 177.049955][ T439] usb usb1-port1: attempt power cycle [ 177.059969][ T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 177.209967][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 177.216345][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 177.223075][ T9] usb 2-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 177.232176][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.241026][ T9] usb 2-1: config 0 descriptor?? [ 177.390025][ T439] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 177.431503][ T439] usb 1-1: device descriptor read/8, error -71 [ 177.449320][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 177.458890][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 177.474149][ T9] usb 2-1: USB disconnect, device number 66 [ 177.570830][ T439] usb 1-1: device descriptor read/8, error -71 [ 177.809978][ T439] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 177.840985][ T439] usb 1-1: device descriptor read/8, error -71 [ 177.971045][ T439] usb 1-1: device descriptor read/8, error -71 [ 178.090010][ T439] usb usb1-port1: unable to enumerate USB device [ 178.275476][ T4123] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1204'. [ 178.390112][ T954] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 178.421943][ T4129] cgroup: Invalid name [ 178.429037][ T4129] dummy_hcd dummy_hcd.0: remove, state 4 [ 178.434833][ T4129] usb usb1: USB disconnect, device number 1 [ 178.445472][ T4129] dummy_hcd dummy_hcd.0: stopped [ 178.450884][ T4129] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 178.477799][ T45] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 65 if 0 alt 4 proto 2 vid 0x04B8 pid 0x0202 [ 178.492810][ T45] usb 3-1: USB disconnect, device number 65 [ 178.507752][ T45] usblp0: removed [ 178.544746][ T954] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 178.561838][ T954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.574116][ T954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.584145][ T954] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 178.598310][ T954] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 178.608077][ T954] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 178.616704][ T954] usb 2-1: Manufacturer: syz [ 178.627002][ T954] usb 2-1: config 0 descriptor?? [ 178.692829][ T4141] FAULT_INJECTION: forcing a failure. [ 178.692829][ T4141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.706009][ T4141] CPU: 0 UID: 0 PID: 4141 Comm: syz.2.1210 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 178.706045][ T4141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.706060][ T4141] Call Trace: [ 178.706068][ T4141] [ 178.706077][ T4141] __dump_stack+0x21/0x30 [ 178.706127][ T4141] dump_stack_lvl+0x140/0x1c0 [ 178.706157][ T4141] ? __cfi_dump_stack_lvl+0x10/0x10 [ 178.706188][ T4141] ? check_stack_object+0x138/0x150 [ 178.706212][ T4141] dump_stack+0x19/0x20 [ 178.706241][ T4141] should_fail_ex+0x3c2/0x510 [ 178.706286][ T4141] should_fail+0xf/0x20 [ 178.706311][ T4141] should_fail_usercopy+0x1e/0x30 [ 178.706340][ T4141] _copy_to_user+0x24/0xa0 [ 178.706372][ T4141] simple_read_from_buffer+0xed/0x160 [ 178.706406][ T4141] proc_fail_nth_read+0x1aa/0x220 [ 178.706440][ T4141] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 178.706473][ T4141] ? vfs_writev+0xaea/0xe90 [ 178.706503][ T4141] ? bpf_lsm_file_permission+0xd/0x20 [ 178.706534][ T4141] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 178.706567][ T4141] vfs_read+0x288/0xc70 [ 178.706592][ T4141] ? __cfi_vfs_read+0x10/0x10 [ 178.706615][ T4141] ? __kasan_check_write+0x18/0x20 [ 178.706638][ T4141] ? mutex_lock+0x97/0x1d0 [ 178.706662][ T4141] ? __cfi_mutex_lock+0x10/0x10 [ 178.706687][ T4141] ksys_read+0x145/0x260 [ 178.706711][ T4141] ? __cfi_ksys_read+0x10/0x10 [ 178.706735][ T4141] ? __kasan_check_read+0x15/0x20 [ 178.706758][ T4141] __x64_sys_read+0x7f/0x90 [ 178.706783][ T4141] x64_sys_call+0x2638/0x2ee0 [ 178.706812][ T4141] do_syscall_64+0x57/0xf0 [ 178.706842][ T4141] ? clear_bhb_loop+0x50/0xa0 [ 178.706865][ T4141] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 178.706902][ T4141] RIP: 0033:0x7f08b015e90e [ 178.706921][ T4141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 178.706940][ T4141] RSP: 002b:00007f08b1088fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.706964][ T4141] RAX: ffffffffffffffda RBX: 00007f08b10896c0 RCX: 00007f08b015e90e [ 178.706982][ T4141] RDX: 000000000000000f RSI: 00007f08b10890a0 RDI: 0000000000000007 [ 178.706998][ T4141] RBP: 00007f08b1089090 R08: 0000000000000000 R09: 0000000000000000 [ 178.707013][ T4141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.707027][ T4141] R13: 00007f08b0426038 R14: 00007f08b0425fa0 R15: 00007ffc03c7a2d8 [ 178.707048][ T4141] [ 178.713627][ T4029] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 178.960436][ T4029] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 178.968845][ T4029] CPU: 1 UID: 0 PID: 4029 Comm: syz.0.1194 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 178.980411][ T4029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.990478][ T4029] RIP: 0010:set_link_state+0x2a/0x1240 [ 178.996091][ T4029] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 8d bc cd fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 b8 98 26 fe 4d 8b 75 00 49 8d 95 93 [ 179.015711][ T4029] RSP: 0018:ffffc9000d80f718 EFLAGS: 00010046 [ 179.021785][ T4029] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888133bba600 [ 179.029760][ T4029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.037733][ T4029] RBP: ffffc9000d80f7a0 R08: 0000000000000003 R09: 0000000000000004 [ 179.045709][ T4029] R10: dffffc0000000000 R11: fffff52001b01ee0 R12: 0000000000000000 [ 179.053684][ T4029] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888104bb0000 [ 179.061656][ T4029] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 179.070592][ T4029] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.077190][ T4029] CR2: 00007f08b1088ff8 CR3: 0000000127cf4000 CR4: 00000000003526b0 [ 179.085191][ T4029] Call Trace: [ 179.088488][ T4029] [ 179.091430][ T4029] ? __kasan_check_write+0x18/0x20 [ 179.096547][ T4029] dummy_pullup+0xd1/0x130 [ 179.100989][ T4029] ? __cfi_dummy_pullup+0x10/0x10 [ 179.106026][ T4029] usb_gadget_disconnect_locked+0x14e/0x400 [ 179.111920][ T4029] gadget_unbind_driver+0xaf/0x3f0 [ 179.117034][ T4029] ? __cfi_gadget_unbind_driver+0x10/0x10 [ 179.122779][ T4029] device_release_driver_internal+0x4ad/0x830 [ 179.128857][ T4029] driver_detach+0x1f5/0x2d0 [ 179.133470][ T4029] bus_remove_driver+0x254/0x2b0 [ 179.138431][ T4029] driver_unregister+0x79/0xb0 [ 179.143219][ T4029] usb_gadget_unregister_driver+0x52/0x80 [ 179.148960][ T4029] raw_release+0xdb/0x280 [ 179.153295][ T4029] ? __cfi_raw_release+0x10/0x10 [ 179.158244][ T4029] __fput+0x20b/0xa30 [ 179.162234][ T4029] ____fput+0x20/0x30 [ 179.166218][ T4029] task_work_run+0x1e8/0x260 [ 179.170814][ T4029] ? __cfi_task_work_run+0x10/0x10 [ 179.175931][ T4029] ? __kasan_check_write+0x18/0x20 [ 179.181065][ T4029] do_exit+0xa46/0x2850 [ 179.185248][ T4029] ? hrtimer_cancel+0x31/0x60 [ 179.189938][ T4029] ? __cfi_do_exit+0x10/0x10 [ 179.194538][ T4029] ? futex_wait+0x23c/0x7c0 [ 179.199044][ T4029] ? __cfi_futex_wait+0x10/0x10 [ 179.203912][ T4029] ? __kasan_check_write+0x18/0x20 [ 179.209038][ T4029] ? _raw_spin_lock_irq+0x93/0x120 [ 179.214184][ T4029] do_group_exit+0x21f/0x2f0 [ 179.218780][ T4029] ? __kasan_check_write+0x18/0x20 [ 179.223887][ T4029] ? recalc_sigpending+0x184/0x1d0 [ 179.228996][ T4029] get_signal+0x134c/0x1490 [ 179.230063][ T439] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 179.233514][ T4029] arch_do_signal_or_restart+0xbc/0x700 [ 179.246606][ T4029] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 179.252553][ T36] audit: type=1400 audit(1787599395.550:889): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 179.252770][ T4029] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 179.280627][ T4029] syscall_exit_to_user_mode+0x57/0xb0 [ 179.281041][ T36] audit: type=1400 audit(1787599395.550:890): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.286112][ T4029] do_syscall_64+0x63/0xf0 [ 179.309250][ T36] audit: type=1400 audit(1787599395.550:891): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.311776][ T4029] ? clear_bhb_loop+0x50/0xa0 [ 179.311821][ T4029] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 179.333850][ T36] audit: type=1400 audit(1787599395.550:892): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.337698][ T4029] RIP: 0033:0x7f958e19e0d9 [ 179.344156][ T36] audit: type=1400 audit(1787599395.550:893): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.364053][ T4029] Code: Unable to access opcode bytes at 0x7f958e19e0af. [ 179.364068][ T4029] RSP: 002b:00007ffdda74f318 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 179.369305][ T36] audit: type=1400 audit(1787599395.550:894): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.388929][ T4029] RAX: fffffffffffffdfc RBX: 000000000002ae33 RCX: 00007f958e19e0d9 [ 179.388948][ T4029] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f958e425fac [ 179.388963][ T4029] RBP: 0000000000000bea R08: 4000000000000000 R09: 0000000000000000 [ 179.388977][ T4029] R10: 00007ffdda74f420 R11: 0000000000000246 R12: 00007ffdda74f440 [ 179.389002][ T4029] R13: 00007f958e425fac R14: 000000000002ba1d R15: 00007ffdda74f420 [ 179.397323][ T36] audit: type=1400 audit(1787599395.550:895): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.404442][ T4029] [ 179.404452][ T4029] Modules linked in: [ 179.404467][ T4029] ---[ end trace 0000000000000000 ]--- [ 179.428030][ T36] audit: type=1400 audit(1787599395.620:896): avc: denied { ioctl } for pid=4143 comm="syz.2.1211" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.435290][ T4029] RIP: 0010:set_link_state+0x2a/0x1240 [ 179.532198][ T4029] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 8d bc cd fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 b8 98 26 fe 4d 8b 75 00 49 8d 95 93 [ 179.551930][ T4029] RSP: 0018:ffffc9000d80f718 EFLAGS: 00010046 [ 179.558034][ T4029] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888133bba600 [ 179.566027][ T4029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.574014][ T4029] RBP: ffffc9000d80f7a0 R08: 0000000000000003 R09: 0000000000000004 [ 179.582006][ T4029] R10: dffffc0000000000 R11: fffff52001b01ee0 R12: 0000000000000000 [ 179.589991][ T4029] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888104bb0000 [ 179.597975][ T4029] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 179.606924][ T4029] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.613531][ T4029] CR2: 00007f08b1088ff8 CR3: 0000000127cf4000 CR4: 00000000003526b0 [ 179.621531][ T4029] Kernel panic - not syncing: Fatal exception [ 179.628204][ T4029] Kernel Offset: disabled [ 179.632534][ T4029] Rebooting in 86400 seconds..