last executing test programs: 7.977001001s ago: executing program 3 (id=392): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x800, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6.41301828s ago: executing program 2 (id=395): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0xfffffff4, 0x6, 0x8, 0x155f, 0x10000003, 0x2, 0x4, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x3, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x15, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0xd, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x0, 0x80000004, 0x6, 0x80043b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x1000002, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0xffffffff, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa771, 0x6, 0xffffffff, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x3, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x1, 0x10000, 0x0, 0x8004, 0x7fff, 0x71c, 0x98, 0xf, 0xe, 0x4, 0x26e, 0x6, 0xd, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x0, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a"], 0xac}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1100000015002b"], 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.400326686s ago: executing program 2 (id=397): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 5.361308556s ago: executing program 1 (id=398): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0xfffffff4, 0x6, 0x8, 0x155f, 0x10000003, 0x2, 0x4, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x3, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x15, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0xd, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x0, 0x80000004, 0x6, 0x80043b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x1000002, 0xffffeffe, 0xfffe, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0xe3, 0x80, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f3, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0xffffffff, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x7, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa771, 0x6, 0xffffffff, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x3, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x6, 0x1ff, 0x2000803, 0x1, 0x10000, 0x0, 0x8004, 0x7fff, 0x71c, 0x10, 0xf, 0xe, 0x4, 0x26e, 0x6, 0xd, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x0, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a"], 0xac}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f00000002c0)="de64ad62e1", 0x5}], 0x1}, 0x800) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{0x0, 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.260124229s ago: executing program 1 (id=400): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, 0x0, 0x4) 5.251938159s ago: executing program 1 (id=401): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402020424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 5.128979322s ago: executing program 0 (id=404): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f01000000000000feff0006241a00000c0905810300"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x800, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 5.010974055s ago: executing program 3 (id=405): arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000140)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r2, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)={0x7f, 0x401}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.996842875s ago: executing program 3 (id=406): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0xfffffff4, 0x6, 0x8, 0x155f, 0x10000003, 0x2, 0x4, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x3, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x15, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0xd, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x0, 0x80000004, 0x6, 0x80043b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x1000002, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0xffffffff, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa771, 0x6, 0xffffffff, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x3, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x1, 0x10000, 0x0, 0x8004, 0x7fff, 0x71c, 0x98, 0xf, 0xe, 0x4, 0x26e, 0x6, 0xd, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x0, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a"], 0xac}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1100000015002b"], 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.071214948s ago: executing program 3 (id=407): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0xfffffff4, 0x6, 0x8, 0x155f, 0x10000003, 0x2, 0x4, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x3, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x15, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0xd, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x0, 0x80000004, 0x6, 0x80043b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x1000002, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0xffffffff, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa771, 0x6, 0xffffffff, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x3, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x1, 0x10000, 0x0, 0x8004, 0x7fff, 0x71c, 0x98, 0xf, 0xe, 0x4, 0x26e, 0x6, 0xd, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x0, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.121204262s ago: executing program 3 (id=408): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x2000000}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$rtl8150(0x3, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) r4 = syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x100, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) tgkill(r4, r4, 0x9) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4}, 0x0, &(0x7f00000005c0)}) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace(0x4208, r8) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000580)={0x14, &(0x7f0000000400)={0x20, 0x2, 0xfd, {0xfd, 0xd, "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"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="00ddd2477203008002000004"]}, &(0x7f0000000900)={0x44, &(0x7f00000006c0)={0x0, 0x14, 0x68, "9970004db2919426490a2156730c74205d62bdb63536a9d53c1263a78912e4351d8ace53510bf9453f186b0caba02264e96c6580b63fcf8a106e5ed006a063a6258b079e336652536aebcfb1d2a864bdc5e36883452293a69d53cad86baaf4f658a9727234610341"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000007c0)={0x20, 0x81, 0x1, "c0"}, &(0x7f00000000c0)=ANY=[@ANYBLOB="fcf4bb21c7bce52a61a5519f89f7a900000000000000"], &(0x7f0000000840)={0x20, 0x83, 0x2, "6417"}, &(0x7f0000000880)={0x20, 0x84, 0x2, "e6e7"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "7771b6"}}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 2.344951722s ago: executing program 2 (id=409): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 2.344728662s ago: executing program 2 (id=410): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0xfffffff4, 0x6, 0x8, 0x155f, 0x10000003, 0x2, 0x4, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x3, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x15, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0xd, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x0, 0x80000004, 0x6, 0x80043b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x1000002, 0xffffeffe, 0xfffe, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0xe3, 0x80, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f3, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0xffffffff, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x7, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa771, 0x6, 0xffffffff, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x3, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x6, 0x1ff, 0x2000803, 0x1, 0x10000, 0x0, 0x8004, 0x7fff, 0x71c, 0x10, 0xf, 0xe, 0x4, 0x26e, 0x6, 0xd, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x0, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a"], 0xac}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f00000002c0)="de64ad62e1", 0x5}], 0x1}, 0x800) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{0x0, 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.278090513s ago: executing program 2 (id=411): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0xfffffff4, 0x6, 0x8, 0x155f, 0x10000003, 0x2, 0x4, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x3, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x15, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0xd, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x0, 0x80000004, 0x6, 0x80043b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x1000002, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0xffffffff, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa771, 0x6, 0xffffffff, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x3, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x1, 0x10000, 0x0, 0x8004, 0x7fff, 0x71c, 0x98, 0xf, 0xe, 0x4, 0x26e, 0x6, 0xd, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x0, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xac}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.232081545s ago: executing program 1 (id=412): openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.170023566s ago: executing program 2 (id=413): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x800, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.151717416s ago: executing program 0 (id=414): sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102010100"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.105339477s ago: executing program 0 (id=415): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0xfffffff4, 0x6, 0x8, 0x155f, 0x10000003, 0x2, 0x4, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x3, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x15, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0xd, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x0, 0x80000004, 0x6, 0x80043b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x1000002, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0xffffffff, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa771, 0x6, 0xffffffff, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x3, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x1, 0x10000, 0x0, 0x8004, 0x7fff, 0x71c, 0x98, 0xf, 0xe, 0x4, 0x26e, 0x6, 0xd, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x0, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a"], 0xac}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1100000015002b"], 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.104784258s ago: executing program 1 (id=416): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0xfffffff4, 0x6, 0x8, 0x155f, 0x10000003, 0x2, 0x4, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x3, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x15, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0xd, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x0, 0x80000004, 0x6, 0x80043b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x1000002, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0xffffffff, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa771, 0x6, 0xffffffff, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x3, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x1, 0x10000, 0x0, 0x8004, 0x7fff, 0x71c, 0x98, 0xf, 0xe, 0x4, 0x26e, 0x6, 0xd, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x0, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.057516064s ago: executing program 1 (id=417): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 904.566438ms ago: executing program 0 (id=418): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 852.881299ms ago: executing program 0 (id=419): arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000140)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r2, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)={0x7f, 0x401}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 83.225008ms ago: executing program 3 (id=420): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402020424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 0s ago: executing program 0 (id=421): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0xfffffff4, 0x6, 0x8, 0x155f, 0x10000003, 0x2, 0x4, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x3, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x15, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0xd, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x0, 0x80000004, 0x6, 0x80043b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x1000002, 0xffffeffe, 0xfffe, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0xe3, 0x80, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f3, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0xffffffff, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x7, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa771, 0x6, 0xffffffff, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x3, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x6, 0x1ff, 0x2000803, 0x1, 0x10000, 0x0, 0x8004, 0x7fff, 0x71c, 0x10, 0xf, 0xe, 0x4, 0x26e, 0x6, 0xd, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x0, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a"], 0xac}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{0x0, 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): ce number 7 using dummy_hcd [ 42.642093][ T314] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 42.656380][ T330] usb 1-1: USB disconnect, device number 5 [ 42.744096][ T64] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 42.752498][ T64] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 42.770769][ T64] usb 4-1: config 220 has no interface number 2 [ 42.777269][ T64] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 42.793464][ T64] usb 4-1: config 220 interface 0 has no altsetting 0 [ 42.800278][ T64] usb 4-1: config 220 interface 76 has no altsetting 0 [ 42.809072][ T64] usb 4-1: config 220 interface 1 has no altsetting 0 [ 42.818958][ T64] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 42.823087][ T314] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.828369][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.847278][ T64] usb 4-1: Product: syz [ 42.851507][ T64] usb 4-1: Manufacturer: syz [ 42.852080][ T314] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.856402][ T64] usb 4-1: SerialNumber: syz [ 42.882088][ T314] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.896821][ T314] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.906238][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.914503][ T314] usb 3-1: Product: syz [ 42.918824][ T314] usb 3-1: Manufacturer: syz [ 42.929709][ T314] usb 3-1: SerialNumber: syz [ 43.084615][ T64] usb 4-1: selecting invalid altsetting 0 [ 43.090420][ T64] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 43.097094][ T64] usb 4-1: No valid video chain found. [ 43.110986][ T64] usb 4-1: USB disconnect, device number 7 [ 43.172091][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 43.323131][ T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 43.331506][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 43.341824][ T10] usb 1-1: config 220 has no interface number 2 [ 43.348116][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 43.361265][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 43.368082][ T10] usb 1-1: config 220 interface 76 has no altsetting 0 [ 43.374970][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 43.382081][ T330] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 43.383172][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 43.398810][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.406938][ T10] usb 1-1: Product: syz [ 43.411095][ T10] usb 1-1: Manufacturer: syz [ 43.415750][ T10] usb 1-1: SerialNumber: syz [ 43.532104][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 43.538310][ T330] usb 2-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 43.548575][ T330] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 43.561505][ T330] usb 2-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 43.570618][ T314] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 43.576643][ T314] cdc_ncm 3-1:1.0: bind() failure [ 43.582067][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.591138][ T314] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 43.598474][ T330] usb 2-1: config 0 descriptor?? [ 43.603504][ T314] cdc_ncm 3-1:1.1: bind() failure [ 43.612627][ T314] usb 3-1: USB disconnect, device number 7 [ 43.621153][ T330] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 43.631980][ T10] usb 1-1: selecting invalid altsetting 0 [ 43.638133][ T10] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 43.644951][ T10] usb 1-1: No valid video chain found. [ 43.671159][ T10] usb 1-1: USB disconnect, device number 6 [ 43.952149][ T441] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 44.102128][ T441] usb 4-1: Using ep0 maxpacket: 8 [ 44.108312][ T441] usb 4-1: config 0 interface 0 has no altsetting 0 [ 44.115080][ T441] usb 4-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 44.124147][ T441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.132953][ T441] usb 4-1: config 0 descriptor?? [ 44.182693][ T36] audit: type=1400 audit(1785520229.519:121): avc: denied { create } for pid=523 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.205800][ T36] audit: type=1400 audit(1785520229.529:122): avc: denied { create } for pid=523 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.227108][ T36] audit: type=1400 audit(1785520229.529:123): avc: denied { ioctl } for pid=523 comm="syz.1.76" path="socket:[7597]" dev="sockfs" ino=7597 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.262231][ T10] usb 2-1: USB disconnect, device number 8 [ 44.564103][ T441] usbhid 4-1:0.0: can't add hid device: -71 [ 44.573247][ T441] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 44.583949][ T441] usb 4-1: USB disconnect, device number 8 [ 44.772090][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 44.933094][ T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 44.941410][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 44.953283][ T330] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 44.973657][ T10] usb 1-1: config 220 has no interface number 2 [ 44.979983][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 44.993173][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 44.999970][ T10] usb 1-1: config 220 interface 76 has no altsetting 0 [ 45.006909][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 45.015228][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 45.024405][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.032437][ T10] usb 1-1: Product: syz [ 45.036611][ T10] usb 1-1: Manufacturer: syz [ 45.041215][ T10] usb 1-1: SerialNumber: syz [ 45.113257][ T330] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.131405][ T330] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.144162][ T330] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.160831][ T330] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.170247][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.178716][ T330] usb 3-1: Product: syz [ 45.184349][ T330] usb 3-1: Manufacturer: syz [ 45.188953][ T330] usb 3-1: SerialNumber: syz [ 45.250248][ T10] usb 1-1: selecting invalid altsetting 0 [ 45.256586][ T10] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 45.263029][ T10] usb 1-1: No valid video chain found. [ 45.277413][ T10] usb 1-1: USB disconnect, device number 7 [ 45.322090][ T441] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 45.493053][ T441] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 45.501347][ T441] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 45.512406][ T441] usb 4-1: config 220 has no interface number 2 [ 45.518704][ T441] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 45.531871][ T441] usb 4-1: config 220 interface 0 has no altsetting 0 [ 45.538679][ T441] usb 4-1: config 220 interface 76 has no altsetting 0 [ 45.545646][ T441] usb 4-1: config 220 interface 1 has no altsetting 0 [ 45.553924][ T441] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 45.563081][ T441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.571081][ T441] usb 4-1: Product: syz [ 45.575269][ T441] usb 4-1: Manufacturer: syz [ 45.579874][ T441] usb 4-1: SerialNumber: syz [ 45.792953][ T441] usb 4-1: selecting invalid altsetting 0 [ 45.798999][ T441] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 45.805517][ T330] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 45.811641][ T330] cdc_ncm 3-1:1.0: bind() failure [ 45.816726][ T441] usb 4-1: No valid video chain found. [ 45.822889][ T330] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 45.829680][ T330] cdc_ncm 3-1:1.1: bind() failure [ 45.837395][ T441] usb 4-1: USB disconnect, device number 9 [ 45.846911][ T330] usb 3-1: USB disconnect, device number 8 [ 46.162099][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 46.312117][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 46.323343][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 46.333830][ T595] FAULT_INJECTION: forcing a failure. [ 46.333830][ T595] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.342098][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 46.348555][ T595] CPU: 1 UID: 0 PID: 595 Comm: syz.2.103 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 46.348585][ T595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.348596][ T595] Call Trace: [ 46.348602][ T595] [ 46.348609][ T595] __dump_stack+0x21/0x30 [ 46.348647][ T595] dump_stack_lvl+0x140/0x1c0 [ 46.348670][ T595] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.348694][ T595] ? _parse_integer+0x2e/0x40 [ 46.348712][ T595] ? kstrtoull+0x13b/0x1e0 [ 46.348729][ T595] dump_stack+0x19/0x20 [ 46.348750][ T595] should_fail_ex+0x3c2/0x510 [ 46.348771][ T595] should_fail+0xf/0x20 [ 46.348789][ T595] should_fail_usercopy+0x1e/0x30 [ 46.348809][ T595] _copy_from_user+0x20/0xa0 [ 46.348831][ T595] ___sys_sendmsg+0x1c7/0x370 [ 46.348851][ T595] ? __sys_sendmsg+0x2a0/0x2a0 [ 46.348868][ T595] ? proc_fail_nth_write+0x184/0x220 [ 46.348892][ T595] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 46.348920][ T595] ? __fget_files+0x2bc/0x330 [ 46.348941][ T595] __x64_sys_sendmsg+0x206/0x2e0 [ 46.348958][ T595] ? fput+0x1a4/0x230 [ 46.348980][ T595] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 46.348997][ T595] ? ksys_write+0x1f3/0x260 [ 46.349016][ T595] ? __kasan_check_read+0x15/0x20 [ 46.349034][ T595] x64_sys_call+0x2a4c/0x2ee0 [ 46.349051][ T595] do_syscall_64+0x57/0xf0 [ 46.349070][ T595] ? clear_bhb_loop+0x50/0xa0 [ 46.349092][ T595] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.349114][ T595] RIP: 0033:0x7f134b99e019 [ 46.349130][ T595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.349147][ T595] RSP: 002b:00007f134c8b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.349166][ T595] RAX: ffffffffffffffda RBX: 00007f134bc25fa0 RCX: 00007f134b99e019 [ 46.349180][ T595] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000006 [ 46.349192][ T595] RBP: 00007f134c8b3090 R08: 0000000000000000 R09: 0000000000000000 [ 46.349203][ T595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.349215][ T595] R13: 00007f134bc26038 R14: 00007f134bc25fa0 R15: 00007ffc95d33148 [ 46.349230][ T595] [ 46.574629][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.583523][ T10] usb 1-1: config 0 descriptor?? [ 46.912105][ T330] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 47.063096][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 47.065721][ T330] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 47.069069][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 47.077749][ T330] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 47.090156][ T10] usb 1-1: USB disconnect, device number 8 [ 47.097559][ T330] usb 4-1: config 220 has no interface number 2 [ 47.110165][ T330] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 47.123458][ T330] usb 4-1: config 220 interface 0 has no altsetting 0 [ 47.130765][ T330] usb 4-1: config 220 interface 76 has no altsetting 0 [ 47.137683][ T330] usb 4-1: config 220 interface 1 has no altsetting 0 [ 47.154159][ T330] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 47.163271][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.171384][ T330] usb 4-1: Product: syz [ 47.175586][ T330] usb 4-1: Manufacturer: syz [ 47.180202][ T330] usb 4-1: SerialNumber: syz [ 47.388157][ T330] usb 4-1: selecting invalid altsetting 0 [ 47.392105][ T520] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 47.394189][ T330] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 47.407890][ T330] usb 4-1: No valid video chain found. [ 47.416933][ T330] usb 4-1: USB disconnect, device number 10 [ 47.543177][ T520] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 47.551506][ T520] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 47.561932][ T520] usb 2-1: config 220 has no interface number 2 [ 47.568283][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 47.575791][ T520] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 47.589232][ T520] usb 2-1: config 220 interface 0 has no altsetting 0 [ 47.596599][ T520] usb 2-1: config 220 interface 76 has no altsetting 0 [ 47.603928][ T520] usb 2-1: config 220 interface 1 has no altsetting 0 [ 47.612819][ T36] audit: type=1400 audit(1785520232.959:124): avc: denied { create } for pid=625 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.613686][ T520] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 47.641676][ T520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.641834][ T36] audit: type=1400 audit(1785520232.979:125): avc: denied { bind } for pid=625 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.649794][ T520] usb 2-1: Product: syz [ 47.649811][ T520] usb 2-1: Manufacturer: syz [ 47.649825][ T520] usb 2-1: SerialNumber: syz [ 47.679737][ T36] audit: type=1400 audit(1785520233.019:126): avc: denied { listen } for pid=625 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.701881][ T36] audit: type=1400 audit(1785520233.029:127): avc: denied { bind } for pid=625 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.721261][ T36] audit: type=1400 audit(1785520233.049:128): avc: denied { connect } for pid=625 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.747358][ T36] audit: type=1400 audit(1785520233.049:129): avc: denied { write } for pid=625 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.772589][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.782973][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.794334][ T10] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.808729][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.817921][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.826474][ T10] usb 3-1: Product: syz [ 47.830704][ T10] usb 3-1: Manufacturer: syz [ 47.835565][ T10] usb 3-1: SerialNumber: syz [ 47.887116][ T520] usb 2-1: selecting invalid altsetting 0 [ 47.892986][ T520] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 47.899803][ T520] usb 2-1: No valid video chain found. [ 47.915199][ T520] usb 2-1: USB disconnect, device number 9 [ 48.443917][ T10] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 48.449958][ T10] cdc_ncm 3-1:1.0: bind() failure [ 48.456278][ T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 48.463270][ T10] cdc_ncm 3-1:1.1: bind() failure [ 48.484103][ T10] usb 3-1: USB disconnect, device number 9 [ 48.504631][ T36] audit: type=1400 audit(1785520233.849:130): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 48.752133][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 48.922172][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 48.928431][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 48.940222][ T45] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 48.951265][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.975877][ T45] usb 2-1: config 0 descriptor?? [ 49.032106][ T441] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 49.183173][ T441] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 49.191599][ T441] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 49.201927][ T441] usb 1-1: config 220 has no interface number 2 [ 49.208247][ T441] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 49.221476][ T441] usb 1-1: config 220 interface 0 has no altsetting 0 [ 49.228293][ T441] usb 1-1: config 220 interface 76 has no altsetting 0 [ 49.235249][ T441] usb 1-1: config 220 interface 1 has no altsetting 0 [ 49.243398][ T441] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 49.252501][ T441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.260495][ T441] usb 1-1: Product: syz [ 49.262089][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 49.264770][ T441] usb 1-1: Manufacturer: syz [ 49.276953][ T441] usb 1-1: SerialNumber: syz [ 49.423155][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 49.431529][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 49.441885][ T10] usb 4-1: config 220 has no interface number 2 [ 49.444439][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 49.449796][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 49.454948][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 49.467434][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 49.477268][ T45] usb 2-1: USB disconnect, device number 10 [ 49.482103][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 49.494275][ T441] usb 1-1: selecting invalid altsetting 0 [ 49.496938][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 49.500961][ T441] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 49.508597][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 49.513724][ T441] usb 1-1: No valid video chain found. [ 49.522568][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.535571][ T441] usb 1-1: USB disconnect, device number 9 [ 49.538794][ T10] usb 4-1: Product: syz [ 49.546884][ T10] usb 4-1: Manufacturer: syz [ 49.551650][ T10] usb 4-1: SerialNumber: syz [ 49.760908][ T10] usb 4-1: selecting invalid altsetting 0 [ 49.767250][ T10] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 49.773818][ T10] usb 4-1: No valid video chain found. [ 49.788443][ T10] usb 4-1: USB disconnect, device number 11 [ 49.854235][ T684] FAULT_INJECTION: forcing a failure. [ 49.854235][ T684] name failslab, interval 1, probability 0, space 0, times 0 [ 49.872076][ T684] CPU: 0 UID: 0 PID: 684 Comm: syz.2.136 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 49.872109][ T684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.872120][ T684] Call Trace: [ 49.872128][ T684] [ 49.872136][ T684] __dump_stack+0x21/0x30 [ 49.872164][ T684] dump_stack_lvl+0x140/0x1c0 [ 49.872188][ T684] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.872212][ T684] ? avc_has_perm+0x155/0x240 [ 49.872232][ T684] ? __cfi_avc_has_perm+0x10/0x10 [ 49.872253][ T684] dump_stack+0x19/0x20 [ 49.872275][ T684] should_fail_ex+0x3c2/0x510 [ 49.872294][ T684] should_failslab+0xac/0x100 [ 49.872317][ T684] __kmalloc_cache_noprof+0x41/0x470 [ 49.872336][ T684] ? vhost_task_create+0x12c/0x3f0 [ 49.872357][ T684] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 49.872377][ T684] vhost_task_create+0x12c/0x3f0 [ 49.872396][ T684] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 49.872418][ T684] ? __cfi_vhost_task_create+0x10/0x10 [ 49.872438][ T684] ? __cfi_vhost_task_fn+0x10/0x10 [ 49.872456][ T684] ? __kasan_check_write+0x18/0x20 [ 49.872474][ T684] ? mutex_lock+0x97/0x1d0 [ 49.872497][ T684] ? __cfi_mutex_lock+0x10/0x10 [ 49.872520][ T684] ? kernel_text_address+0xa9/0xe0 [ 49.872545][ T684] kvm_mmu_post_init_vm+0x161/0x300 [ 49.872570][ T684] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 49.872594][ T684] ? _parse_integer_limit+0x195/0x1e0 [ 49.872614][ T684] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 49.872638][ T684] ? kstrtoull+0x13b/0x1e0 [ 49.872656][ T684] ? kstrtouint+0x78/0xf0 [ 49.872674][ T684] ? ioctl_has_perm+0x1bc/0x500 [ 49.872691][ T684] ? __asan_memcpy+0x5a/0x80 [ 49.872709][ T684] ? ioctl_has_perm+0x408/0x500 [ 49.872726][ T684] ? has_cap_mac_admin+0xd0/0xd0 [ 49.872743][ T684] ? __kasan_check_write+0x18/0x20 [ 49.872760][ T684] ? mutex_lock_killable+0x97/0x1d0 [ 49.872791][ T684] ? __cfi_mutex_lock_killable+0x10/0x10 [ 49.872815][ T684] ? proc_fail_nth_write+0x184/0x220 [ 49.872841][ T684] kvm_vcpu_ioctl+0xa43/0x1000 [ 49.872860][ T684] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 49.872877][ T684] ? __cfi_vfs_write+0x10/0x10 [ 49.872896][ T684] ? __kasan_check_write+0x18/0x20 [ 49.872913][ T684] ? mutex_unlock+0x90/0x240 [ 49.872936][ T684] ? __cfi_mutex_unlock+0x10/0x10 [ 49.872962][ T684] ? bpf_lsm_file_ioctl+0xd/0x20 [ 49.872984][ T684] ? security_file_ioctl+0x3e/0x110 [ 49.873010][ T684] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 49.873027][ T684] __se_sys_ioctl+0x132/0x1b0 [ 49.873049][ T684] __x64_sys_ioctl+0x7f/0xa0 [ 49.873070][ T684] x64_sys_call+0x1878/0x2ee0 [ 49.873087][ T684] do_syscall_64+0x57/0xf0 [ 49.873106][ T684] ? clear_bhb_loop+0x50/0xa0 [ 49.873130][ T684] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.873152][ T684] RIP: 0033:0x7f134b99e019 [ 49.873169][ T684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.873184][ T684] RSP: 002b:00007f134c8b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.873205][ T684] RAX: ffffffffffffffda RBX: 00007f134bc25fa0 RCX: 00007f134b99e019 [ 49.873219][ T684] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 49.873231][ T684] RBP: 00007f134c8b3090 R08: 0000000000000000 R09: 0000000000000000 [ 49.873243][ T684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.873255][ T684] R13: 00007f134bc26038 R14: 00007f134bc25fa0 R15: 00007ffc95d33148 [ 49.873271][ T684] [ 50.502079][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 50.673139][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.693324][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.714336][ T10] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.742843][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.751961][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.760096][ T10] usb 1-1: Product: syz [ 50.766386][ T10] usb 1-1: Manufacturer: syz [ 50.772064][ T10] usb 1-1: SerialNumber: syz [ 51.027895][ T36] audit: type=1400 audit(1785520236.369:131): avc: denied { execute } for pid=714 comm="syz.3.148" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=1025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.082084][ T314] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 51.192110][ T331] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 51.232228][ T314] usb 3-1: Using ep0 maxpacket: 8 [ 51.242590][ T314] usb 3-1: config 0 interface 0 has no altsetting 0 [ 51.249237][ T314] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 51.258532][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.267181][ T314] usb 3-1: config 0 descriptor?? [ 51.375040][ T331] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 51.384455][ T331] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 51.395823][ T10] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 51.401837][ T10] cdc_ncm 1-1:1.0: bind() failure [ 51.407717][ T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 51.414528][ T331] usb 2-1: config 220 has no interface number 2 [ 51.420815][ T331] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 51.434074][ T10] cdc_ncm 1-1:1.1: bind() failure [ 51.440133][ T10] usb 1-1: USB disconnect, device number 10 [ 51.447114][ T331] usb 2-1: config 220 interface 0 has no altsetting 0 [ 51.454485][ T331] usb 2-1: config 220 interface 76 has no altsetting 0 [ 51.461373][ T331] usb 2-1: config 220 interface 1 has no altsetting 0 [ 51.469555][ T331] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 51.478664][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.486695][ T331] usb 2-1: Product: syz [ 51.490864][ T331] usb 2-1: Manufacturer: syz [ 51.495605][ T331] usb 2-1: SerialNumber: syz [ 51.642094][ T441] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 51.686687][ T314] hid-led 0003:04D8:F372.0002: unknown main item tag 0x2 [ 51.693871][ T314] hid-led 0003:04D8:F372.0002: ignoring exceeding usage max [ 51.703510][ T314] hid-led 0003:04D8:F372.0002: hidraw0: USB HID v0.81 Device [HID 04d8:f372] on usb-dummy_hcd.2-1/input0 [ 51.704878][ T331] usb 2-1: selecting invalid altsetting 0 [ 51.720903][ T314] hid-led 0003:04D8:F372.0002: Greynut Luxafor initialized [ 51.739690][ T331] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 51.752066][ T331] usb 2-1: No valid video chain found. [ 51.765634][ T331] usb 2-1: USB disconnect, device number 11 [ 51.803182][ T441] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 51.811635][ T441] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 51.820691][ T441] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 51.830992][ T441] usb 4-1: config 220 has no interface number 2 [ 51.837299][ T441] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 51.850426][ T441] usb 4-1: config 220 interface 0 has no altsetting 0 [ 51.857219][ T441] usb 4-1: config 220 interface 76 has no altsetting 0 [ 51.864129][ T441] usb 4-1: config 220 interface 1 has no altsetting 0 [ 51.872254][ T441] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 51.881287][ T441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.889323][ T441] usb 4-1: Product: syz [ 51.893532][ T441] usb 4-1: Manufacturer: syz [ 51.898341][ T441] usb 4-1: SerialNumber: syz [ 51.943371][ T331] usb 3-1: USB disconnect, device number 10 [ 51.951616][ T10] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 51.960527][ T10] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 51.970067][ T10] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 51.978677][ T10] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 51.987361][ T10] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 52.000227][ T10] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 52.009603][ T10] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 52.018411][ T10] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 52.027722][ T10] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 52.041338][ T10] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 52.056351][ T10] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 52.064831][ T10] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 52.073087][ T10] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 52.081378][ T10] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 52.089820][ T10] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 52.098048][ T10] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 52.106375][ T10] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 52.111376][ T441] usb 4-1: selecting invalid altsetting 0 [ 52.114826][ T10] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 52.122486][ T441] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 52.134743][ T441] usb 4-1: No valid video chain found. [ 52.143139][ T441] usb 4-1: USB disconnect, device number 12 [ 52.292088][ T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 52.422096][ T45] usb 1-1: device descriptor read/64, error -71 [ 52.672100][ T45] usb 1-1: device descriptor read/64, error -71 [ 52.922101][ T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 52.992096][ T441] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 53.052089][ T45] usb 1-1: device descriptor read/64, error -71 [ 53.142216][ T331] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 53.150519][ T441] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.165903][ T441] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.176929][ T441] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.191126][ T441] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.200215][ T441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.208254][ T441] usb 3-1: Product: syz [ 53.212436][ T441] usb 3-1: Manufacturer: syz [ 53.217027][ T441] usb 3-1: SerialNumber: syz [ 53.303409][ T331] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 53.311744][ T331] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 53.312084][ T45] usb 1-1: device descriptor read/64, error -71 [ 53.322367][ T331] usb 4-1: config 220 has no interface number 2 [ 53.334816][ T331] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 53.348226][ T331] usb 4-1: config 220 interface 0 has no altsetting 0 [ 53.355035][ T331] usb 4-1: config 220 interface 76 has no altsetting 0 [ 53.361946][ T331] usb 4-1: config 220 interface 1 has no altsetting 0 [ 53.370165][ T331] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 53.379524][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.387543][ T331] usb 4-1: Product: syz [ 53.391708][ T331] usb 4-1: Manufacturer: syz [ 53.396336][ T331] usb 4-1: SerialNumber: syz [ 53.402077][ T520] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 53.432168][ T45] usb usb1-port1: attempt power cycle [ 53.552079][ T520] usb 2-1: Using ep0 maxpacket: 8 [ 53.558204][ T520] usb 2-1: config 0 interface 0 has no altsetting 0 [ 53.564954][ T520] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 53.574034][ T520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.582808][ T520] usb 2-1: config 0 descriptor?? [ 53.604175][ T331] usb 4-1: selecting invalid altsetting 0 [ 53.610027][ T331] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 53.617187][ T331] usb 4-1: No valid video chain found. [ 53.629010][ T331] usb 4-1: USB disconnect, device number 13 [ 53.772078][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 53.793173][ T45] usb 1-1: device descriptor read/8, error -71 [ 53.825771][ T441] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 53.831839][ T441] cdc_ncm 3-1:1.0: bind() failure [ 53.837759][ T441] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 53.844664][ T441] cdc_ncm 3-1:1.1: bind() failure [ 53.850877][ T441] usb 3-1: USB disconnect, device number 11 [ 53.923375][ T45] usb 1-1: device descriptor read/8, error -71 [ 53.995401][ T520] hid-led 0003:04D8:F372.0003: unknown main item tag 0x2 [ 54.002525][ T520] hid-led 0003:04D8:F372.0003: ignoring exceeding usage max [ 54.011077][ T520] hid-led 0003:04D8:F372.0003: hidraw0: USB HID v0.81 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0 [ 54.038697][ T520] hid-led 0003:04D8:F372.0003: Greynut Luxafor initialized [ 54.162118][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 54.183541][ T45] usb 1-1: device descriptor read/8, error -71 [ 54.252592][ T331] usb 2-1: USB disconnect, device number 12 [ 54.260812][ T10] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 54.269238][ T10] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 54.277663][ T10] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 54.285839][ T10] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 54.294382][ T520] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 54.302737][ T520] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 54.310881][ T520] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 54.319407][ T520] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 54.323080][ T45] usb 1-1: device descriptor read/8, error -71 [ 54.327874][ T520] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 54.341940][ T520] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 54.350342][ T520] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 54.359412][ T520] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 54.368208][ T520] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 54.376497][ T36] audit: type=1400 audit(1785520239.729:132): avc: denied { read write } for pid=770 comm="syz.2.169" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 54.376913][ T520] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 54.400924][ T36] audit: type=1400 audit(1785520239.729:133): avc: denied { open } for pid=770 comm="syz.2.169" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 54.408993][ T520] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 54.432400][ T36] audit: type=1400 audit(1785520239.759:134): avc: denied { mounton } for pid=770 comm="syz.2.169" path="/47/file0" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.438765][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 54.461574][ T45] usb usb1-port1: unable to enumerate USB device [ 54.468625][ T520] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 54.482843][ T520] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 54.491271][ T520] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 54.653161][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.664386][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 54.673452][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.681923][ T10] usb 4-1: config 0 descriptor?? [ 55.154370][ T10] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 55.165678][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0004/input/input4 [ 55.238558][ T10] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 55.374580][ T36] audit: type=1400 audit(1785520240.719:135): avc: denied { setopt } for pid=768 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 55.462101][ T441] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 55.616246][ T441] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 55.624541][ T441] usb 1-1: config 0 has no interface number 0 [ 55.630655][ T441] usb 1-1: config 0 interface 41 has no altsetting 0 [ 55.644458][ T441] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 55.654729][ T441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.662897][ T441] usb 1-1: Product: syz [ 55.667141][ T441] usb 1-1: Manufacturer: syz [ 55.671737][ T441] usb 1-1: SerialNumber: syz [ 55.677132][ T441] usb 1-1: config 0 descriptor?? [ 55.805266][ T787] fuse: Unknown parameter '0x0000000000000004' [ 55.822616][ T36] audit: type=1400 audit(1785520241.169:136): avc: denied { read write } for pid=788 comm="syz.1.174" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.846219][ T36] audit: type=1400 audit(1785520241.169:137): avc: denied { open } for pid=788 comm="syz.1.174" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.172071][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 56.333105][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 56.341457][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 56.351797][ T10] usb 2-1: config 220 has no interface number 2 [ 56.358102][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 56.371388][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 56.378183][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 56.385200][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 56.393329][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 56.402433][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.410441][ T10] usb 2-1: Product: syz [ 56.414621][ T10] usb 2-1: Manufacturer: syz [ 56.419236][ T10] usb 2-1: SerialNumber: syz [ 56.486794][ T441] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 56.628083][ T10] usb 2-1: selecting invalid altsetting 0 [ 56.633993][ T10] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 56.640371][ T10] usb 2-1: No valid video chain found. [ 56.648577][ T10] usb 2-1: USB disconnect, device number 13 [ 57.100957][ T778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.109870][ T778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.199452][ T314] usb 4-1: USB disconnect, device number 14 [ 57.224085][ T799] FAULT_INJECTION: forcing a failure. [ 57.224085][ T799] name failslab, interval 1, probability 0, space 0, times 0 [ 57.236738][ T799] CPU: 0 UID: 0 PID: 799 Comm: syz.3.178 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 57.236766][ T799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.236778][ T799] Call Trace: [ 57.236785][ T799] [ 57.236792][ T799] __dump_stack+0x21/0x30 [ 57.236819][ T799] dump_stack_lvl+0x140/0x1c0 [ 57.236833][ T799] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.236846][ T799] ? avc_has_perm+0x155/0x240 [ 57.236859][ T799] ? __cfi_avc_has_perm+0x10/0x10 [ 57.236870][ T799] dump_stack+0x19/0x20 [ 57.236883][ T799] should_fail_ex+0x3c2/0x510 [ 57.236895][ T799] should_failslab+0xac/0x100 [ 57.236908][ T799] __kmalloc_cache_noprof+0x41/0x470 [ 57.236919][ T799] ? vhost_task_create+0x12c/0x3f0 [ 57.236930][ T799] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 57.236943][ T799] vhost_task_create+0x12c/0x3f0 [ 57.236953][ T799] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 57.236966][ T799] ? __cfi_vhost_task_create+0x10/0x10 [ 57.236976][ T799] ? __cfi_vhost_task_fn+0x10/0x10 [ 57.236987][ T799] ? __kasan_check_write+0x18/0x20 [ 57.237005][ T799] ? mutex_lock+0x97/0x1d0 [ 57.237019][ T799] ? __cfi_mutex_lock+0x10/0x10 [ 57.237031][ T799] ? kernel_text_address+0xa9/0xe0 [ 57.237046][ T799] kvm_mmu_post_init_vm+0x161/0x300 [ 57.237060][ T799] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 57.237074][ T799] ? _parse_integer_limit+0x195/0x1e0 [ 57.237086][ T799] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 57.237099][ T799] ? kstrtoull+0x13b/0x1e0 [ 57.237109][ T799] ? kstrtouint+0x78/0xf0 [ 57.237119][ T799] ? ioctl_has_perm+0x1bc/0x500 [ 57.237128][ T799] ? __asan_memcpy+0x5a/0x80 [ 57.237138][ T799] ? ioctl_has_perm+0x408/0x500 [ 57.237147][ T799] ? has_cap_mac_admin+0xd0/0xd0 [ 57.237156][ T799] ? __kasan_check_write+0x18/0x20 [ 57.237166][ T799] ? mutex_lock_killable+0x97/0x1d0 [ 57.237180][ T799] ? __cfi_mutex_lock_killable+0x10/0x10 [ 57.237194][ T799] ? proc_fail_nth_write+0x184/0x220 [ 57.237209][ T799] kvm_vcpu_ioctl+0xa43/0x1000 [ 57.237219][ T799] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 57.237228][ T799] ? __cfi_vfs_write+0x10/0x10 [ 57.237238][ T799] ? __kasan_check_write+0x18/0x20 [ 57.237248][ T799] ? mutex_unlock+0x90/0x240 [ 57.237261][ T799] ? __cfi_mutex_unlock+0x10/0x10 [ 57.237275][ T799] ? bpf_lsm_file_ioctl+0xd/0x20 [ 57.237288][ T799] ? security_file_ioctl+0x3e/0x110 [ 57.237303][ T799] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 57.237313][ T799] __se_sys_ioctl+0x132/0x1b0 [ 57.237326][ T799] __x64_sys_ioctl+0x7f/0xa0 [ 57.237337][ T799] x64_sys_call+0x1878/0x2ee0 [ 57.237347][ T799] do_syscall_64+0x57/0xf0 [ 57.237358][ T799] ? clear_bhb_loop+0x50/0xa0 [ 57.237372][ T799] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.237385][ T799] RIP: 0033:0x7f47a259e019 [ 57.237396][ T799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.237404][ T799] RSP: 002b:00007f47a34e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.237417][ T799] RAX: ffffffffffffffda RBX: 00007f47a2825fa0 RCX: 00007f47a259e019 [ 57.237425][ T799] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000028 [ 57.237432][ T799] RBP: 00007f47a34e9090 R08: 0000000000000000 R09: 0000000000000000 [ 57.237438][ T799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.237445][ T799] R13: 00007f47a2826038 R14: 00007f47a2825fa0 R15: 00007ffd92210f58 [ 57.237453][ T799] [ 57.484542][ T36] audit: type=1400 audit(1785520242.819:138): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 57.606715][ T36] audit: type=1400 audit(1785520242.859:139): avc: denied { ioctl } for pid=800 comm="syz.1.180" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x556d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.631801][ T36] audit: type=1400 audit(1785520242.949:140): avc: denied { setopt } for pid=800 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.779267][ T814] fuse: Unknown parameter '0x0000000000000004' [ 57.807767][ T441] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 57.818489][ T441] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 57.835457][ T441] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 57.849713][ T441] usb 1-1: USB disconnect, device number 15 [ 57.862082][ T331] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 58.012097][ T331] usb 3-1: device descriptor read/64, error -71 [ 58.192099][ T311] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 58.252087][ T331] usb 3-1: device descriptor read/64, error -71 [ 58.353314][ T311] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 58.364617][ T311] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 58.374930][ T311] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 58.386764][ T311] usb 4-1: config 220 has no interface number 2 [ 58.394197][ T311] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 58.408170][ T311] usb 4-1: config 220 interface 0 has no altsetting 0 [ 58.415100][ T311] usb 4-1: config 220 interface 76 has no altsetting 0 [ 58.422356][ T311] usb 4-1: config 220 interface 1 has no altsetting 0 [ 58.431226][ T311] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 58.440947][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.449800][ T311] usb 4-1: Product: syz [ 58.454454][ T311] usb 4-1: Manufacturer: syz [ 58.459119][ T311] usb 4-1: SerialNumber: syz [ 58.492116][ T331] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 58.632089][ T331] usb 3-1: device descriptor read/64, error -71 [ 58.667975][ T311] usb 4-1: selecting invalid altsetting 0 [ 58.673873][ T311] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 58.680250][ T311] usb 4-1: No valid video chain found. [ 58.690360][ T311] usb 4-1: USB disconnect, device number 15 [ 58.872084][ T331] usb 3-1: device descriptor read/64, error -71 [ 58.982168][ T331] usb usb3-port1: attempt power cycle [ 59.189909][ T36] audit: type=1400 audit(1785520244.529:141): avc: denied { mount } for pid=836 comm="syz.3.192" name="/" dev="configfs" ino=2357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 59.212864][ T36] audit: type=1400 audit(1785520244.559:142): avc: denied { search } for pid=836 comm="syz.3.192" name="/" dev="configfs" ino=2357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.245964][ T36] audit: type=1400 audit(1785520244.589:143): avc: denied { mount } for pid=836 comm="syz.3.192" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 59.268944][ T36] audit: type=1400 audit(1785520244.609:144): avc: denied { read } for pid=836 comm="syz.3.192" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.291957][ T36] audit: type=1400 audit(1785520244.609:145): avc: denied { open } for pid=836 comm="syz.3.192" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.315446][ T36] audit: type=1400 audit(1785520244.609:146): avc: denied { ioctl } for pid=836 comm="syz.3.192" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.322097][ T331] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 59.394517][ T331] usb 3-1: device descriptor read/8, error -71 [ 59.472045][ T36] audit: type=1400 audit(1785520244.809:147): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 59.532717][ T331] usb 3-1: device descriptor read/8, error -71 [ 59.772134][ T331] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 59.782257][ T311] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 59.803346][ T331] usb 3-1: device descriptor read/8, error -71 [ 59.935244][ T311] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 59.941838][ T331] usb 3-1: device descriptor read/8, error -71 [ 59.944267][ T311] usb 1-1: config 0 has no interface number 0 [ 59.956254][ T311] usb 1-1: config 0 interface 41 has no altsetting 0 [ 59.964535][ T311] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 59.973839][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.982229][ T311] usb 1-1: Product: syz [ 59.986520][ T311] usb 1-1: Manufacturer: syz [ 59.991193][ T311] usb 1-1: SerialNumber: syz [ 59.998232][ T311] usb 1-1: config 0 descriptor?? [ 60.052229][ T331] usb usb3-port1: unable to enumerate USB device [ 60.748131][ T913] FAULT_INJECTION: forcing a failure. [ 60.748131][ T913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.761353][ T913] CPU: 0 UID: 0 PID: 913 Comm: syz.1.203 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 60.761387][ T913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.761398][ T913] Call Trace: [ 60.761403][ T913] [ 60.761409][ T913] __dump_stack+0x21/0x30 [ 60.761435][ T913] dump_stack_lvl+0x140/0x1c0 [ 60.761455][ T913] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.761477][ T913] ? vfs_write+0xbcf/0xfd0 [ 60.761494][ T913] dump_stack+0x19/0x20 [ 60.761513][ T913] should_fail_ex+0x3c2/0x510 [ 60.761530][ T913] should_fail+0xf/0x20 [ 60.761545][ T913] should_fail_usercopy+0x1e/0x30 [ 60.761562][ T913] _copy_from_user+0x20/0xa0 [ 60.761582][ T913] __se_sys_io_uring_setup+0x170/0x2b0 [ 60.761604][ T913] ? __kasan_check_write+0x18/0x20 [ 60.761621][ T913] ? __x64_sys_io_uring_setup+0x80/0x80 [ 60.761641][ T913] ? __kasan_check_read+0x15/0x20 [ 60.761655][ T913] __x64_sys_io_uring_setup+0x5f/0x80 [ 60.761675][ T913] x64_sys_call+0x22c0/0x2ee0 [ 60.761688][ T913] do_syscall_64+0x57/0xf0 [ 60.761705][ T913] ? clear_bhb_loop+0x50/0xa0 [ 60.761725][ T913] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.761745][ T913] RIP: 0033:0x7f6cdb39e019 [ 60.761759][ T913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.761772][ T913] RSP: 002b:00007f6cdc1bdee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 60.761790][ T913] RAX: ffffffffffffffda RBX: 0000200000000488 RCX: 00007f6cdb39e019 [ 60.761802][ T913] RDX: 0000200000000508 RSI: 0000200000000488 RDI: 000000000000001c [ 60.761813][ T913] RBP: 0000200000000480 R08: 0000200000001540 R09: 0000000000000000 [ 60.761823][ T913] R10: 0000200000000510 R11: 0000000000000206 R12: 0000200000000508 [ 60.761835][ T913] R13: 0000200000000510 R14: 00007f6cdc1bdfd8 R15: 0000000000000000 [ 60.761847][ T913] [ 60.952884][ T311] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 61.212101][ T314] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 61.367323][ T314] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 61.382068][ T314] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 61.390970][ T314] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 61.422072][ T314] usb 3-1: config 220 has no interface number 2 [ 61.428390][ T314] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 61.442391][ T314] usb 3-1: config 220 interface 0 has no altsetting 0 [ 61.449206][ T314] usb 3-1: config 220 interface 76 has no altsetting 0 [ 61.456845][ T314] usb 3-1: config 220 interface 1 has no altsetting 0 [ 61.465293][ T314] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 61.474649][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.494725][ T314] usb 3-1: Product: syz [ 61.498969][ T314] usb 3-1: Manufacturer: syz [ 61.503844][ T314] usb 3-1: SerialNumber: syz [ 61.567981][ T847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.577681][ T847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.717211][ T314] usb 3-1: selecting invalid altsetting 0 [ 61.723405][ T314] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 61.729926][ T314] usb 3-1: No valid video chain found. [ 61.740621][ T314] usb 3-1: USB disconnect, device number 16 [ 61.862208][ T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 61.972301][ T311] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 61.983453][ T311] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 61.993479][ T45] usb 4-1: device descriptor read/64, error -71 [ 62.000044][ T311] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 62.022437][ T311] usb 1-1: USB disconnect, device number 16 [ 62.242112][ T45] usb 4-1: device descriptor read/64, error -71 [ 62.492114][ T45] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 62.632090][ T45] usb 4-1: device descriptor read/64, error -71 [ 62.872078][ T45] usb 4-1: device descriptor read/64, error -71 [ 62.992173][ T45] usb usb4-port1: attempt power cycle [ 63.312121][ T311] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 63.342092][ T45] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 63.363041][ T45] usb 4-1: device descriptor read/8, error -71 [ 63.412070][ T314] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 63.473156][ T311] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 63.481332][ T311] usb 1-1: config 0 has no interface number 0 [ 63.487670][ T311] usb 1-1: config 0 interface 41 has no altsetting 0 [ 63.495637][ T45] usb 4-1: device descriptor read/8, error -71 [ 63.502963][ T311] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 63.512122][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.520119][ T311] usb 1-1: Product: syz [ 63.532291][ T311] usb 1-1: Manufacturer: syz [ 63.542101][ T311] usb 1-1: SerialNumber: syz [ 63.552335][ T314] usb 2-1: device descriptor read/64, error -71 [ 63.568501][ T311] usb 1-1: config 0 descriptor?? [ 63.742277][ T45] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 63.763198][ T45] usb 4-1: device descriptor read/8, error -71 [ 63.802115][ T314] usb 2-1: device descriptor read/64, error -71 [ 63.893203][ T45] usb 4-1: device descriptor read/8, error -71 [ 64.012262][ T45] usb usb4-port1: unable to enumerate USB device [ 64.052092][ T314] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 64.192081][ T314] usb 2-1: device descriptor read/64, error -71 [ 64.389171][ T311] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 64.432107][ T314] usb 2-1: device descriptor read/64, error -71 [ 64.542194][ T314] usb usb2-port1: attempt power cycle [ 64.712070][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 64.873724][ T45] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 64.882128][ T314] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 64.889776][ T45] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 64.899054][ T45] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 64.909507][ T45] usb 3-1: config 220 has no interface number 2 [ 64.915856][ T45] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 64.929348][ T45] usb 3-1: config 220 interface 0 has no altsetting 0 [ 64.936191][ T45] usb 3-1: config 220 interface 76 has no altsetting 0 [ 64.943179][ T45] usb 3-1: config 220 interface 1 has no altsetting 0 [ 64.952113][ T314] usb 2-1: device descriptor read/8, error -71 [ 64.962590][ T45] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 64.971675][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.979930][ T45] usb 3-1: Product: syz [ 64.984294][ T45] usb 3-1: Manufacturer: syz [ 64.988915][ T45] usb 3-1: SerialNumber: syz [ 65.005667][ T983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.014319][ T983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.083157][ T314] usb 2-1: device descriptor read/8, error -71 [ 65.200551][ T45] usb 3-1: selecting invalid altsetting 0 [ 65.210034][ T45] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 65.216714][ T45] usb 3-1: No valid video chain found. [ 65.230306][ T45] usb 3-1: USB disconnect, device number 17 [ 65.322093][ T314] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 65.343177][ T314] usb 2-1: device descriptor read/8, error -71 [ 65.412302][ T311] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 65.423352][ T311] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 65.433451][ T311] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 65.447711][ T311] usb 1-1: USB disconnect, device number 17 [ 65.473177][ T314] usb 2-1: device descriptor read/8, error -71 [ 65.592326][ T314] usb usb2-port1: unable to enumerate USB device [ 65.746200][ T1015] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.763408][ T1015] netlink: 'syz.2.230': attribute type 1 has an invalid length. [ 65.781306][ T1015] netlink: 9 bytes leftover after parsing attributes in process `syz.2.230'. [ 65.852512][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 65.852529][ T36] audit: type=1400 audit(1785520251.199:151): avc: denied { write } for pid=1017 comm="syz.2.231" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.887903][ T36] audit: type=1400 audit(1785520251.199:152): avc: denied { open } for pid=1017 comm="syz.2.231" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.122084][ T311] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 66.303033][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 66.309424][ T311] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 66.317924][ T311] usb 3-1: config 0 has no interface number 0 [ 66.324260][ T311] usb 3-1: config 0 interface 184 has no altsetting 0 [ 66.336734][ T311] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 66.346070][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.358140][ T311] usb 3-1: Product: syz [ 66.366109][ T311] usb 3-1: Manufacturer: syz [ 66.375089][ T311] usb 3-1: SerialNumber: syz [ 66.384886][ T311] usb 3-1: config 0 descriptor?? [ 66.409434][ T311] smsc75xx v1.0.0 [ 66.522167][ T331] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 66.623286][ T36] audit: type=1400 audit(1785520251.969:153): avc: denied { read write } for pid=1017 comm="syz.2.231" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.652524][ T36] audit: type=1400 audit(1785520251.969:154): avc: denied { open } for pid=1017 comm="syz.2.231" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.675728][ T331] usb 2-1: device descriptor read/64, error -71 [ 66.692617][ T36] audit: type=1400 audit(1785520251.969:155): avc: denied { ioctl } for pid=1017 comm="syz.2.231" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.717459][ T36] audit: type=1400 audit(1785520251.969:156): avc: denied { name_bind } for pid=1017 comm="syz.2.231" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 66.739236][ T36] audit: type=1400 audit(1785520251.969:157): avc: denied { node_bind } for pid=1017 comm="syz.2.231" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 66.912083][ T331] usb 2-1: device descriptor read/64, error -71 [ 67.050501][ T36] audit: type=1400 audit(1785520252.389:158): avc: denied { mounton } for pid=1017 comm="syz.2.231" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 67.050587][ T1018] incfs: Options parsing error. -22 [ 67.079363][ T1018] incfs: mount failed -22 [ 67.088779][ T311] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 67.099678][ T441] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 67.107280][ T311] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 67.116928][ T311] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 67.127740][ T311] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 67.137428][ T311] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 67.147710][ T311] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 67.157162][ T311] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 67.162084][ T331] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 67.166764][ T311] usb 3-1: USB disconnect, device number 18 [ 67.178916][ T45] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 67.263140][ T441] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 67.271277][ T441] usb 1-1: config 0 has no interface number 0 [ 67.277418][ T441] usb 1-1: config 0 interface 41 has no altsetting 0 [ 67.285471][ T441] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 67.294577][ T441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.302658][ T441] usb 1-1: Product: syz [ 67.306843][ T441] usb 1-1: Manufacturer: syz [ 67.311417][ T441] usb 1-1: SerialNumber: syz [ 67.312080][ T331] usb 2-1: device descriptor read/64, error -71 [ 67.316842][ T441] usb 1-1: config 0 descriptor?? [ 67.333017][ T45] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 67.341290][ T45] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 67.350794][ T45] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 67.361637][ T45] usb 4-1: config 220 has no interface number 2 [ 67.367937][ T45] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 67.381080][ T45] usb 4-1: config 220 interface 0 has no altsetting 0 [ 67.387877][ T45] usb 4-1: config 220 interface 76 has no altsetting 0 [ 67.394872][ T45] usb 4-1: config 220 interface 1 has no altsetting 0 [ 67.403027][ T45] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 67.412109][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.420199][ T45] usb 4-1: Product: syz [ 67.424476][ T45] usb 4-1: Manufacturer: syz [ 67.429098][ T45] usb 4-1: SerialNumber: syz [ 67.562092][ T331] usb 2-1: device descriptor read/64, error -71 [ 67.637314][ T45] usb 4-1: selecting invalid altsetting 0 [ 67.643289][ T45] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 67.650018][ T45] usb 4-1: No valid video chain found. [ 67.662906][ T45] usb 4-1: USB disconnect, device number 20 [ 67.672254][ T331] usb usb2-port1: attempt power cycle [ 68.012088][ T331] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 68.043082][ T331] usb 2-1: device descriptor read/8, error -71 [ 68.129802][ T441] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 68.183112][ T331] usb 2-1: device descriptor read/8, error -71 [ 68.227048][ T1050] FAULT_INJECTION: forcing a failure. [ 68.227048][ T1050] name failslab, interval 1, probability 0, space 0, times 0 [ 68.239737][ T1050] CPU: 0 UID: 0 PID: 1050 Comm: syz.3.243 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 68.239769][ T1050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.239781][ T1050] Call Trace: [ 68.239789][ T1050] [ 68.239797][ T1050] __dump_stack+0x21/0x30 [ 68.239824][ T1050] dump_stack_lvl+0x140/0x1c0 [ 68.239846][ T1050] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.239875][ T1050] ? iov_iter_get_pages2+0x68/0xb0 [ 68.239898][ T1050] dump_stack+0x19/0x20 [ 68.239918][ T1050] should_fail_ex+0x3c2/0x510 [ 68.239934][ T1050] should_failslab+0xac/0x100 [ 68.239957][ T1050] __kmalloc_cache_noprof+0x41/0x470 [ 68.239975][ T1050] ? fuse_copy_do+0x151/0x2c0 [ 68.239997][ T1050] ? fuse_dev_do_write+0xb27/0x3c40 [ 68.240020][ T1050] fuse_dev_do_write+0xb27/0x3c40 [ 68.240046][ T1050] ? is_bpf_text_address+0x17b/0x1a0 [ 68.240075][ T1050] ? folio_mapped+0x120/0x120 [ 68.240098][ T1050] ? __kernel_text_address+0x11/0x40 [ 68.240122][ T1050] ? unwind_get_return_address+0x51/0x90 [ 68.240149][ T1050] ? arch_stack_walk+0x10a/0x170 [ 68.240169][ T1050] ? _parse_integer_limit+0x195/0x1e0 [ 68.240191][ T1050] ? _parse_integer+0x2e/0x40 [ 68.240210][ T1050] ? kstrtoull+0x13b/0x1e0 [ 68.240229][ T1050] ? kstrtouint+0x78/0xf0 [ 68.240247][ T1050] ? kstrtouint_from_user+0x117/0x170 [ 68.240278][ T1050] fuse_dev_write+0x176/0x210 [ 68.240301][ T1050] ? __cfi_fuse_dev_write+0x10/0x10 [ 68.240324][ T1050] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 68.240354][ T1050] vfs_write+0x762/0xfd0 [ 68.240373][ T1050] ? __cfi_vfs_write+0x10/0x10 [ 68.240396][ T1050] ksys_write+0x145/0x260 [ 68.240416][ T1050] ? __cfi_ksys_write+0x10/0x10 [ 68.240436][ T1050] ? __kasan_check_read+0x15/0x20 [ 68.240456][ T1050] __x64_sys_write+0x7f/0x90 [ 68.240476][ T1050] x64_sys_call+0x271c/0x2ee0 [ 68.240495][ T1050] do_syscall_64+0x57/0xf0 [ 68.240517][ T1050] ? clear_bhb_loop+0x50/0xa0 [ 68.240542][ T1050] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.240567][ T1050] RIP: 0033:0x7f47a259e019 [ 68.240585][ T1050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.240604][ T1050] RSP: 002b:00007f47a34e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.240626][ T1050] RAX: ffffffffffffffda RBX: 00007f47a2825fa0 RCX: 00007f47a259e019 [ 68.240643][ T1050] RDX: 0000000000000029 RSI: 0000200000000280 RDI: 0000000000000003 [ 68.240656][ T1050] RBP: 00007f47a34e9090 R08: 0000000000000000 R09: 0000000000000000 [ 68.240669][ T1050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.240682][ T1050] R13: 00007f47a2826038 R14: 00007f47a2825fa0 R15: 00007ffd92210f58 [ 68.240699][ T1050] [ 68.632084][ T331] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 68.655664][ T331] usb 2-1: device descriptor read/8, error -71 [ 68.750846][ T1037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.770769][ T1037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.783150][ T331] usb 2-1: device descriptor read/8, error -71 [ 68.892178][ T331] usb usb2-port1: unable to enumerate USB device [ 69.152284][ T441] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 69.172078][ T441] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 69.191977][ T441] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 69.212153][ T441] usb 1-1: USB disconnect, device number 18 [ 69.308950][ T36] audit: type=1400 audit(1785520254.649:159): avc: denied { read } for pid=1069 comm="syz.0.250" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.340931][ T1070] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 69.358167][ T36] audit: type=1400 audit(1785520254.679:160): avc: denied { open } for pid=1069 comm="syz.0.250" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.518079][ T1078] page size migration: [1078 (syz.1.253)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 69.632993][ T441] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 69.824197][ T441] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 69.833196][ T441] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 69.842770][ T441] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 69.855742][ T441] usb 1-1: config 220 has no interface number 2 [ 69.862253][ T441] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 69.875772][ T441] usb 1-1: config 220 interface 0 has no altsetting 0 [ 69.882736][ T441] usb 1-1: config 220 interface 76 has no altsetting 0 [ 69.889772][ T441] usb 1-1: config 220 interface 1 has no altsetting 0 [ 69.898472][ T441] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 69.909469][ T441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.918222][ T441] usb 1-1: Product: syz [ 69.922634][ T441] usb 1-1: Manufacturer: syz [ 69.927268][ T441] usb 1-1: SerialNumber: syz [ 70.012085][ T331] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 70.142537][ T441] usb 1-1: selecting invalid altsetting 0 [ 70.155802][ T441] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 70.168903][ T441] usb 1-1: No valid video chain found. [ 70.172091][ T331] usb 2-1: device descriptor read/64, error -71 [ 70.186954][ T441] usb 1-1: USB disconnect, device number 19 [ 70.422084][ T331] usb 2-1: device descriptor read/64, error -71 [ 70.692089][ T331] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 70.792083][ T484] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 70.842096][ T331] usb 2-1: device descriptor read/64, error -71 [ 70.943095][ T484] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 70.951228][ T484] usb 4-1: config 0 has no interface number 0 [ 70.972153][ T484] usb 4-1: config 0 interface 41 has no altsetting 0 [ 70.980382][ T484] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 71.002062][ T484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.010100][ T484] usb 4-1: Product: syz [ 71.014352][ T484] usb 4-1: Manufacturer: syz [ 71.018960][ T484] usb 4-1: SerialNumber: syz [ 71.032314][ T484] usb 4-1: config 0 descriptor?? [ 71.102084][ T331] usb 2-1: device descriptor read/64, error -71 [ 71.212179][ T331] usb usb2-port1: attempt power cycle [ 71.355540][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 71.355559][ T36] audit: type=1400 audit(1785520256.699:168): avc: denied { unlink } for pid=296 comm="syz-executor" name="file5" dev="tmpfs" ino=361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 71.484526][ T36] audit: type=1400 audit(1785520256.829:169): avc: denied { setopt } for pid=1112 comm="syz.2.266" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.506413][ T36] audit: type=1400 audit(1785520256.849:170): avc: denied { connect } for pid=1112 comm="syz.2.266" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.531211][ T36] audit: type=1400 audit(1785520256.849:171): avc: denied { write } for pid=1112 comm="syz.2.266" path="socket:[18473]" dev="sockfs" ino=18473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.558476][ T36] audit: type=1400 audit(1785520256.899:172): avc: denied { nlmsg_write } for pid=1112 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 71.562080][ T331] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 71.592118][ T1114] cgroup: Bad value for 'name' [ 71.648051][ T331] usb 2-1: device descriptor read/8, error -71 [ 71.783090][ T331] usb 2-1: device descriptor read/8, error -71 [ 71.840110][ T484] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 72.022080][ T331] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 72.053157][ T331] usb 2-1: device descriptor read/8, error -71 [ 72.183090][ T331] usb 2-1: device descriptor read/8, error -71 [ 72.302124][ T331] usb usb2-port1: unable to enumerate USB device [ 72.463758][ T1096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.480549][ T1096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.798702][ T36] audit: type=1400 audit(1785520258.139:173): avc: denied { write } for pid=1129 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.819355][ T36] audit: type=1400 audit(1785520258.139:174): avc: denied { nlmsg_write } for pid=1129 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.872071][ T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 73.025575][ T31] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 73.043986][ T31] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 73.057747][ T31] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 73.069267][ T31] usb 3-1: config 220 has no interface number 2 [ 73.075935][ T31] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 73.090626][ T484] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 73.092816][ T31] usb 3-1: config 220 interface 0 has no altsetting 0 [ 73.108175][ T484] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 73.108824][ T31] usb 3-1: config 220 interface 76 has no altsetting 0 [ 73.126974][ T31] usb 3-1: config 220 interface 1 has no altsetting 0 [ 73.133830][ T484] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 73.135478][ T31] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 73.152270][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.152371][ T484] usb 4-1: USB disconnect, device number 21 [ 73.160339][ T31] usb 3-1: Product: syz [ 73.171510][ T31] usb 3-1: Manufacturer: syz [ 73.176433][ T31] usb 3-1: SerialNumber: syz [ 73.400182][ T31] usb 3-1: selecting invalid altsetting 0 [ 73.407831][ T31] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 73.414629][ T31] usb 3-1: No valid video chain found. [ 73.426548][ T31] usb 3-1: USB disconnect, device number 19 [ 73.522082][ T441] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 73.634241][ T36] audit: type=1400 audit(1785520258.979:175): avc: denied { ioctl } for pid=1141 comm="syz.3.276" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18000 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.660493][ T36] audit: type=1400 audit(1785520258.979:176): avc: denied { read } for pid=1141 comm="syz.3.276" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 73.685231][ T36] audit: type=1400 audit(1785520258.979:177): avc: denied { open } for pid=1141 comm="syz.3.276" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 73.712133][ T441] usb 2-1: New USB device found, idVendor=0e41, idProduct=5044, bcdDevice= 0.40 [ 73.721357][ T441] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.729669][ T441] usb 2-1: Product: ꍯ耆◃换ᤱﬦ쭨ᇯ펙듇솞㴃禊鞣◿೷ḽᇒ劜꼽鱷켏컞祡⁶驽㯂㨖ꅾ黤牮憒⽭ꯘ솬쵉烕鮴旽탴郻讬㲫죠꒞쨵겖৒䆸☒［㒐ᶼ⋎ꀖצּ瘛慓鷱쎏梷 [ 73.761753][ T441] usb 2-1: Manufacturer: 䅳楆롮跅殩輺卯⩄⨒姹鎿ᛂ㋛诖蜆䂮꿢搬휙翓㈳㝂頵醟썓箹〛༸ᩅ醼괇閾ꞈ邻燊풦ሼ牖컆嘡꨷懈ꡄ陋㶊윛釰㴋똠寃耴각쉝폞㼔⚳끊拓㣙宅⏭⽮咦ᐽ⒮楢㑷㍥나蛗႘骖췴沌饃 [ 73.795239][ T441] usb 2-1: SerialNumber: 钠썡ߒ出윂㶩ᐢ틦ᚬ桢║ꬿ㏭ع覺뵙᧴﬊洠눘듯呭嗆銏栒僭鎄鉩咖憑潻㌎칳㈟솚꠶崰陖㍗梽벓穾＿䦵䵽臺熢ꫝ䘇䛲➴乶뛛똖醯荠ࢥ鸐섻沃䊈䉸엝篮ລ䒍菔్驤鷛狍᭓舠⻌䎷╅雾厓ຽ瘐뫩丮ᚕ躌➟椮籠察ܢ흐鉚顜嶇鋥୽Ꟁ䬼䳊蕘粢㼱먷渉⴩繹 [ 74.041498][ T441] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 74.063005][ T441] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 74.079569][ T441] usb 2-1: USB disconnect, device number 26 [ 74.093782][ T365] udevd[365]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.272077][ T484] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 74.412068][ T484] usb 3-1: device descriptor read/64, error -71 [ 74.662947][ T484] usb 3-1: device descriptor read/64, error -71 [ 74.884975][ T1176] tipc: Started in network mode [ 74.890051][ T1176] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 74.899758][ T1176] tipc: Enabled bearer , priority 10 [ 74.919126][ T484] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 75.032208][ T9] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 75.062077][ T484] usb 3-1: device descriptor read/64, error -71 [ 75.183289][ T9] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 75.191424][ T9] usb 2-1: config 0 has no interface number 0 [ 75.197982][ T9] usb 2-1: config 0 interface 41 has no altsetting 0 [ 75.206456][ T9] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 75.215951][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.224210][ T9] usb 2-1: Product: syz [ 75.228566][ T9] usb 2-1: Manufacturer: syz [ 75.233450][ T9] usb 2-1: SerialNumber: syz [ 75.242300][ T9] usb 2-1: config 0 descriptor?? [ 75.312170][ T484] usb 3-1: device descriptor read/64, error -71 [ 75.422186][ T484] usb usb3-port1: attempt power cycle [ 75.782081][ T484] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 75.803144][ T484] usb 3-1: device descriptor read/8, error -71 [ 75.822131][ T311] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 75.933100][ T484] usb 3-1: device descriptor read/8, error -71 [ 75.973279][ T311] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 75.984915][ T311] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.995081][ T311] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41845, setting to 64 [ 76.006411][ T311] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 76.012083][ T331] tipc: Node number set to 4269801492 [ 76.020538][ T311] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.034252][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 76.042534][ T311] usb 4-1: SerialNumber: syz [ 76.048420][ T1185] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 76.055903][ T9] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 76.058372][ T311] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 76.182081][ T484] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 76.203053][ T484] usb 3-1: device descriptor read/8, error -71 [ 76.266965][ T311] usb 4-1: USB disconnect, device number 22 [ 76.333092][ T484] usb 3-1: device descriptor read/8, error -71 [ 76.452088][ T484] usb usb3-port1: unable to enumerate USB device [ 76.693486][ T1170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.702010][ T1170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.725435][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 76.725453][ T36] audit: type=1400 audit(1785520262.069:182): avc: denied { create } for pid=1192 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.751937][ T36] audit: type=1400 audit(1785520262.069:183): avc: denied { write } for pid=1192 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.962239][ T484] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 77.113649][ T484] usb 1-1: unable to get BOS descriptor or descriptor too short [ 77.122265][ T484] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 77.142599][ T484] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 77.156197][ T484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.164790][ T484] usb 1-1: Product: syz [ 77.169069][ T484] usb 1-1: Manufacturer: syz [ 77.174355][ T484] usb 1-1: SerialNumber: syz [ 77.323187][ T9] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 77.334242][ T9] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 77.344007][ T9] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 77.353900][ T9] usb 2-1: USB disconnect, device number 27 [ 77.382789][ T36] audit: type=1400 audit(1785520262.729:184): avc: denied { create } for pid=1192 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.403481][ T36] audit: type=1400 audit(1785520262.749:185): avc: denied { connect } for pid=1192 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.412591][ T484] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 77.423022][ T36] audit: type=1400 audit(1785520262.749:186): avc: denied { write } for pid=1192 comm="syz.0.294" path="socket:[19329]" dev="sockfs" ino=19329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.623234][ T484] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 77.631680][ T484] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 77.774235][ T36] audit: type=1400 audit(1785520263.119:187): avc: denied { listen } for pid=1209 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.794453][ T1210] netlink: 20 bytes leftover after parsing attributes in process `syz.3.300'. [ 77.825095][ T1210] team_slave_1: entered promiscuous mode [ 77.832406][ T36] audit: type=1400 audit(1785520263.169:188): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 77.853357][ T1210] team_slave_1: entered allmulticast mode [ 77.862262][ T36] audit: type=1400 audit(1785520263.199:189): avc: denied { read } for pid=149 comm="dhcpcd" name="n32" dev="tmpfs" ino=2644 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.895442][ T36] audit: type=1400 audit(1785520263.219:190): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n32" dev="tmpfs" ino=2644 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.919361][ T36] audit: type=1400 audit(1785520263.219:191): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n32" dev="tmpfs" ino=2644 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.024453][ T484] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 78.083424][ T484] usb 1-1: USB disconnect, device number 20 [ 78.135848][ T365] udevd[365]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.322111][ T441] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 78.483266][ T441] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.493682][ T441] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 78.503265][ T441] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.518078][ T441] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.527530][ T441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.535784][ T441] usb 3-1: Product: syz [ 78.540291][ T441] usb 3-1: Manufacturer: syz [ 78.545267][ T441] usb 3-1: SerialNumber: syz [ 78.553186][ T441] cdc_ncm 3-1:1.0: skipping garbage [ 78.558423][ T441] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 78.567197][ T441] cdc_ncm 3-1:1.0: bind() failure [ 79.152076][ T484] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 79.323164][ T484] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 79.331513][ T484] usb 4-1: config 0 has no interface number 0 [ 79.337799][ T484] usb 4-1: config 0 interface 41 has no altsetting 0 [ 79.346780][ T484] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 79.366245][ T484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.374323][ T484] usb 4-1: Product: syz [ 79.378566][ T484] usb 4-1: Manufacturer: syz [ 79.383243][ T484] usb 4-1: SerialNumber: syz [ 79.388820][ T484] usb 4-1: config 0 descriptor?? [ 79.642615][ T1269] : renamed from vlan0 (while UP) [ 79.649947][ T1269] FAULT_INJECTION: forcing a failure. [ 79.649947][ T1269] name failslab, interval 1, probability 0, space 0, times 0 [ 79.662612][ T1269] CPU: 0 UID: 0 PID: 1269 Comm: syz.0.313 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 79.662637][ T1269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.662648][ T1269] Call Trace: [ 79.662653][ T1269] [ 79.662660][ T1269] __dump_stack+0x21/0x30 [ 79.662686][ T1269] dump_stack_lvl+0x140/0x1c0 [ 79.662707][ T1269] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.662732][ T1269] ? release_sock+0x171/0x1f0 [ 79.662755][ T1269] dump_stack+0x19/0x20 [ 79.662778][ T1269] should_fail_ex+0x3c2/0x510 [ 79.662798][ T1269] should_failslab+0xac/0x100 [ 79.662821][ T1269] kmem_cache_alloc_node_noprof+0x45/0x420 [ 79.662842][ T1269] ? netlink_data_ready+0x20/0x20 [ 79.662868][ T1269] ? __alloc_skb+0x10c/0x360 [ 79.662893][ T1269] __alloc_skb+0x10c/0x360 [ 79.662918][ T1269] netlink_alloc_large_skb+0xf7/0x1b0 [ 79.662945][ T1269] netlink_sendmsg+0x576/0xad0 [ 79.662966][ T1269] ? __cfi_netlink_sendmsg+0x10/0x10 [ 79.662986][ T1269] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 79.663007][ T1269] ? security_socket_sendmsg+0x3d/0x100 [ 79.663031][ T1269] ____sys_sendmsg+0x99e/0xa00 [ 79.663050][ T1269] ? __import_iovec+0x5b9/0x7d0 [ 79.663074][ T1269] ? __sys_sendmsg_sock+0x50/0x50 [ 79.663092][ T1269] ? import_iovec+0x80/0xb0 [ 79.663117][ T1269] ___sys_sendmsg+0x2a6/0x370 [ 79.663135][ T1269] ? __sys_sendmsg+0x2a0/0x2a0 [ 79.663154][ T1269] ? proc_fail_nth_write+0x184/0x220 [ 79.663189][ T1269] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 79.663218][ T1269] ? __fget_files+0x2bc/0x330 [ 79.663240][ T1269] __x64_sys_sendmsg+0x206/0x2e0 [ 79.663258][ T1269] ? fput+0x1a4/0x230 [ 79.663281][ T1269] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 79.663299][ T1269] ? ksys_write+0x1f3/0x260 [ 79.663319][ T1269] ? __kasan_check_read+0x15/0x20 [ 79.663337][ T1269] x64_sys_call+0x2a4c/0x2ee0 [ 79.663355][ T1269] do_syscall_64+0x57/0xf0 [ 79.663375][ T1269] ? clear_bhb_loop+0x50/0xa0 [ 79.663398][ T1269] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.663420][ T1269] RIP: 0033:0x7f879119e019 [ 79.663437][ T1269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.663453][ T1269] RSP: 002b:00007f8791f8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.663473][ T1269] RAX: ffffffffffffffda RBX: 00007f8791425fa0 RCX: 00007f879119e019 [ 79.663487][ T1269] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 79.663499][ T1269] RBP: 00007f8791f8e090 R08: 0000000000000000 R09: 0000000000000000 [ 79.663512][ T1269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.663523][ T1269] R13: 00007f8791426038 R14: 00007f8791425fa0 R15: 00007ffd6f4b3e18 [ 79.663539][ T1269] [ 80.302070][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 80.341198][ T484] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 80.452066][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 80.458465][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.468789][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.479447][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.488646][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.497622][ T31] usb 2-1: Product: syz [ 80.501851][ T31] usb 2-1: Manufacturer: syz [ 80.506667][ T31] usb 2-1: SerialNumber: syz [ 80.956331][ T1261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.972239][ T1261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.087952][ T9] usb 3-1: USB disconnect, device number 24 [ 81.302069][ T311] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 81.432093][ T311] usb 1-1: device descriptor read/64, error -71 [ 81.562979][ T484] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 81.576213][ T484] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 81.585738][ T484] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 81.598695][ T484] usb 4-1: USB disconnect, device number 23 [ 81.682088][ T311] usb 1-1: device descriptor read/64, error -71 [ 81.922075][ T311] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 82.042397][ T1305] : renamed from vlan0 (while UP) [ 82.052286][ T1305] netlink: 'syz.2.324': attribute type 33 has an invalid length. [ 82.062207][ T311] usb 1-1: device descriptor read/64, error -71 [ 82.123964][ T1309] netlink: 'syz.2.326': attribute type 33 has an invalid length. [ 82.294309][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 82.294334][ T36] audit: type=1400 audit(1785520267.639:198): avc: denied { mount } for pid=1321 comm="syz.3.330" name="/" dev="configfs" ino=2357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 82.323285][ T311] usb 1-1: device descriptor read/64, error -71 [ 82.337329][ T36] audit: type=1400 audit(1785520267.639:199): avc: denied { read } for pid=1321 comm="syz.3.330" name="/" dev="configfs" ino=2357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.359473][ T36] audit: type=1400 audit(1785520267.639:200): avc: denied { open } for pid=1321 comm="syz.3.330" path="/88/config" dev="configfs" ino=2357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.382346][ T36] audit: type=1400 audit(1785520267.639:201): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 82.432246][ T311] usb usb1-port1: attempt power cycle [ 82.782100][ T311] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 82.813249][ T311] usb 1-1: device descriptor read/8, error -71 [ 82.950331][ T1329] FAULT_INJECTION: forcing a failure. [ 82.950331][ T1329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.953866][ T311] usb 1-1: device descriptor read/8, error -71 [ 82.992058][ T1329] CPU: 1 UID: 0 PID: 1329 Comm: syz.3.333 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 82.992097][ T1329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.992114][ T1329] Call Trace: [ 82.992121][ T1329] [ 82.992132][ T1329] __dump_stack+0x21/0x30 [ 82.992164][ T1329] dump_stack_lvl+0x140/0x1c0 [ 82.992191][ T1329] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.992219][ T1329] ? check_stack_object+0x138/0x150 [ 82.992241][ T1329] dump_stack+0x19/0x20 [ 82.992266][ T1329] should_fail_ex+0x3c2/0x510 [ 82.992289][ T1329] should_fail+0xf/0x20 [ 82.992308][ T1329] should_fail_usercopy+0x1e/0x30 [ 82.992331][ T1329] _copy_to_user+0x24/0xa0 [ 82.992356][ T1329] simple_read_from_buffer+0xed/0x160 [ 82.992384][ T1329] proc_fail_nth_read+0x1aa/0x220 [ 82.992412][ T1329] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 82.992438][ T1329] ? bpf_lsm_file_permission+0xd/0x20 [ 82.992472][ T1329] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 82.992498][ T1329] vfs_read+0x28b/0xc70 [ 82.992519][ T1329] ? __cfi_vfs_read+0x10/0x10 [ 82.992537][ T1329] ? __kasan_check_write+0x18/0x20 [ 82.992558][ T1329] ? mutex_lock+0x97/0x1d0 [ 82.992583][ T1329] ? __cfi_mutex_lock+0x10/0x10 [ 82.992611][ T1329] ksys_read+0x145/0x260 [ 82.992630][ T1329] ? __cfi_ksys_read+0x10/0x10 [ 82.992651][ T1329] ? __kasan_check_read+0x15/0x20 [ 82.992670][ T1329] __x64_sys_read+0x7f/0x90 [ 82.992690][ T1329] x64_sys_call+0x2638/0x2ee0 [ 82.992708][ T1329] do_syscall_64+0x57/0xf0 [ 82.992729][ T1329] ? clear_bhb_loop+0x50/0xa0 [ 82.992755][ T1329] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.992780][ T1329] RIP: 0033:0x7f47a255e84e [ 82.992797][ T1329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 82.992815][ T1329] RSP: 002b:00007f47a34e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.992838][ T1329] RAX: ffffffffffffffda RBX: 00007f47a34e96c0 RCX: 00007f47a255e84e [ 82.992853][ T1329] RDX: 000000000000000f RSI: 00007f47a34e90a0 RDI: 0000000000000004 [ 82.992868][ T1329] RBP: 00007f47a34e9090 R08: 0000000000000000 R09: 0000000000000000 [ 82.992881][ T1329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.992893][ T1329] R13: 00007f47a2826038 R14: 00007f47a2825fa0 R15: 00007ffd92210f58 [ 82.992910][ T1329] [ 83.277761][ T31] usb 2-1: 0:2 : does not exist [ 83.290852][ T31] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 83.312904][ T31] usb 2-1: USB disconnect, device number 28 [ 83.372066][ T311] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 83.393154][ T311] usb 1-1: device descriptor read/8, error -71 [ 83.472141][ T45] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 83.523212][ T311] usb 1-1: device descriptor read/8, error -71 [ 83.623161][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.634299][ T45] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 83.643412][ T311] usb usb1-port1: unable to enumerate USB device [ 83.650534][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.659143][ T45] usb 4-1: config 0 descriptor?? [ 83.732086][ T31] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 83.862066][ T31] usb 3-1: device descriptor read/64, error -71 [ 84.105575][ T31] usb 3-1: device descriptor read/64, error -71 [ 84.141737][ T45] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 84.170312][ T45] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0005/input/input6 [ 84.241342][ T36] audit: type=1400 audit(1785520269.579:202): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=585 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.264318][ T45] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 84.301001][ T36] audit: type=1400 audit(1785520269.579:203): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=585 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.324434][ T36] audit: type=1400 audit(1785520269.579:204): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=585 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.342072][ T31] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 84.502093][ T31] usb 3-1: device descriptor read/64, error -71 [ 84.752093][ T31] usb 3-1: device descriptor read/64, error -71 [ 84.873035][ T31] usb usb3-port1: attempt power cycle [ 85.222101][ T31] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 85.243242][ T31] usb 3-1: device descriptor read/8, error -71 [ 85.302079][ T520] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 85.373129][ T31] usb 3-1: device descriptor read/8, error -71 [ 85.432068][ T520] usb 2-1: device descriptor read/64, error -71 [ 85.622093][ T31] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 85.643156][ T31] usb 3-1: device descriptor read/8, error -71 [ 85.672078][ T520] usb 2-1: device descriptor read/64, error -71 [ 85.773155][ T31] usb 3-1: device descriptor read/8, error -71 [ 85.892238][ T31] usb usb3-port1: unable to enumerate USB device [ 85.912072][ T520] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 86.062067][ T520] usb 2-1: device descriptor read/64, error -71 [ 86.246777][ T9] usb 4-1: USB disconnect, device number 24 [ 86.302133][ T31] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 86.302162][ T520] usb 2-1: device descriptor read/64, error -71 [ 86.422140][ T520] usb usb2-port1: attempt power cycle [ 86.453035][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.463220][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 86.472133][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.486354][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.495484][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.503505][ T31] usb 1-1: Product: syz [ 86.508030][ T31] usb 1-1: Manufacturer: syz [ 86.512832][ T31] usb 1-1: SerialNumber: syz [ 86.518946][ T31] cdc_ncm 1-1:1.0: skipping garbage [ 86.524232][ T31] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 86.531035][ T31] cdc_ncm 1-1:1.0: bind() failure [ 86.572113][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 86.702301][ T9] usb 4-1: device descriptor read/64, error -71 [ 86.762098][ T520] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 86.783237][ T520] usb 2-1: device descriptor read/8, error -71 [ 86.913163][ T520] usb 2-1: device descriptor read/8, error -71 [ 86.952069][ T9] usb 4-1: device descriptor read/64, error -71 [ 87.162062][ T520] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 87.183585][ T520] usb 2-1: device descriptor read/8, error -71 [ 87.202143][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 87.313029][ T520] usb 2-1: device descriptor read/8, error -71 [ 87.342142][ T9] usb 4-1: device descriptor read/64, error -71 [ 87.422310][ T520] usb usb2-port1: unable to enumerate USB device [ 87.582081][ T9] usb 4-1: device descriptor read/64, error -71 [ 87.692203][ T9] usb usb4-port1: attempt power cycle [ 88.032079][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 88.073122][ T9] usb 4-1: device descriptor read/8, error -71 [ 88.213127][ T9] usb 4-1: device descriptor read/8, error -71 [ 88.462310][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 88.493080][ T9] usb 4-1: device descriptor read/8, error -71 [ 88.633232][ T9] usb 4-1: device descriptor read/8, error -71 [ 88.752503][ T9] usb usb4-port1: unable to enumerate USB device [ 89.062092][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 89.070562][ T31] usb 1-1: USB disconnect, device number 25 [ 89.129035][ T36] audit: type=1400 audit(1785520274.469:205): avc: denied { search } for pid=1410 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.151175][ T36] audit: type=1400 audit(1785520274.469:206): avc: denied { read } for pid=1411 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.174458][ T36] audit: type=1400 audit(1785520274.469:207): avc: denied { open } for pid=1411 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.215031][ T36] audit: type=1400 audit(1785520274.469:208): avc: denied { getattr } for pid=1411 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.247689][ T36] audit: type=1400 audit(1785520274.519:209): avc: denied { write } for pid=1410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.270702][ T45] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 89.285685][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.298755][ T36] audit: type=1400 audit(1785520274.519:210): avc: denied { add_name } for pid=1410 comm="dhcpcd-run-hook" name="resolv.conf.team_slave_1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.299649][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 89.330853][ T36] audit: type=1400 audit(1785520274.559:211): avc: denied { remove_name } for pid=1421 comm="rm" name="resolv.conf.team_slave_1.ipv4ll" dev="tmpfs" ino=3049 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.355327][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.365486][ T9] usb 3-1: config 0 descriptor?? [ 89.452097][ T45] usb 2-1: device descriptor read/64, error -71 [ 89.702072][ T441] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 89.709751][ T45] usb 2-1: device descriptor read/64, error -71 [ 89.842118][ T441] usb 4-1: device descriptor read/64, error -71 [ 89.952122][ T45] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 90.082066][ T45] usb 2-1: device descriptor read/64, error -71 [ 90.088386][ T441] usb 4-1: device descriptor read/64, error -71 [ 90.322072][ T45] usb 2-1: device descriptor read/64, error -71 [ 90.332235][ T441] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 90.432199][ T45] usb usb2-port1: attempt power cycle [ 90.462065][ T441] usb 4-1: device descriptor read/64, error -71 [ 90.702073][ T441] usb 4-1: device descriptor read/64, error -71 [ 90.772074][ T45] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 90.793164][ T45] usb 2-1: device descriptor read/8, error -71 [ 90.812197][ T441] usb usb4-port1: attempt power cycle [ 90.923206][ T45] usb 2-1: device descriptor read/8, error -71 [ 91.152087][ T441] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 91.162067][ T45] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 91.173100][ T441] usb 4-1: device descriptor read/8, error -71 [ 91.183225][ T45] usb 2-1: device descriptor read/8, error -71 [ 91.303240][ T441] usb 4-1: device descriptor read/8, error -71 [ 91.313263][ T45] usb 2-1: device descriptor read/8, error -71 [ 91.422184][ T45] usb usb2-port1: unable to enumerate USB device [ 91.542170][ T441] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 91.563162][ T441] usb 4-1: device descriptor read/8, error -71 [ 91.693155][ T441] usb 4-1: device descriptor read/8, error -71 [ 91.802210][ T441] usb usb4-port1: unable to enumerate USB device [ 91.847965][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 91.862080][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 91.882188][ T9] usb 3-1: USB disconnect, device number 29 [ 92.332066][ T441] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 92.422074][ T520] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 92.472096][ T441] usb 1-1: device descriptor read/64, error -71 [ 92.573124][ T520] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.592111][ T520] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 92.612103][ T520] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.633530][ T520] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.644965][ T520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.660630][ T520] usb 2-1: Product: syz [ 92.668142][ T520] usb 2-1: Manufacturer: syz [ 92.682039][ T520] usb 2-1: SerialNumber: syz [ 92.688247][ T520] cdc_ncm 2-1:1.0: skipping garbage [ 92.696815][ T520] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 92.712069][ T520] cdc_ncm 2-1:1.0: bind() failure [ 92.732093][ T441] usb 1-1: device descriptor read/64, error -71 [ 93.002072][ T441] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 93.142061][ T441] usb 1-1: device descriptor read/64, error -71 [ 93.392072][ T441] usb 1-1: device descriptor read/64, error -71 [ 93.502207][ T441] usb usb1-port1: attempt power cycle [ 93.682078][ T520] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 93.833257][ T520] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.844248][ T520] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 93.852118][ T441] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 93.853467][ T520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.869416][ T520] usb 4-1: config 0 descriptor?? [ 93.883118][ T441] usb 1-1: device descriptor read/8, error -71 [ 94.002068][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 94.013036][ T441] usb 1-1: device descriptor read/8, error -71 [ 94.132062][ T9] usb 3-1: device descriptor read/64, error -71 [ 94.252068][ T441] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 94.273138][ T441] usb 1-1: device descriptor read/8, error -71 [ 94.372099][ T9] usb 3-1: device descriptor read/64, error -71 [ 94.403095][ T441] usb 1-1: device descriptor read/8, error -71 [ 94.512231][ T441] usb usb1-port1: unable to enumerate USB device [ 94.612074][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 94.742079][ T9] usb 3-1: device descriptor read/64, error -71 [ 94.982098][ T9] usb 3-1: device descriptor read/64, error -71 [ 95.044057][ T484] usb 2-1: USB disconnect, device number 37 [ 95.092246][ T9] usb usb3-port1: attempt power cycle [ 95.432071][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 95.473135][ T9] usb 3-1: device descriptor read/8, error -71 [ 95.522160][ T441] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 95.613058][ T9] usb 3-1: device descriptor read/8, error -71 [ 95.662067][ T441] usb 1-1: device descriptor read/64, error -71 [ 95.862072][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 95.902805][ T441] usb 1-1: device descriptor read/64, error -71 [ 95.910258][ T9] usb 3-1: device descriptor read/8, error -71 [ 96.053052][ T9] usb 3-1: device descriptor read/8, error -71 [ 96.142619][ T441] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 96.162541][ T9] usb usb3-port1: unable to enumerate USB device [ 96.272130][ T441] usb 1-1: device descriptor read/64, error -71 [ 96.454070][ T520] usbhid 4-1:0.0: can't add hid device: -71 [ 96.462115][ T520] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 96.483099][ T520] usb 4-1: USB disconnect, device number 33 [ 96.522092][ T441] usb 1-1: device descriptor read/64, error -71 [ 96.642210][ T441] usb usb1-port1: attempt power cycle [ 96.982088][ T441] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 97.017562][ T441] usb 1-1: device descriptor read/8, error -71 [ 97.173485][ T441] usb 1-1: device descriptor read/8, error -71 [ 97.282069][ T520] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 97.322064][ T45] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 97.424334][ T441] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 97.432068][ T520] usb 2-1: device descriptor read/64, error -71 [ 97.453070][ T441] usb 1-1: device descriptor read/8, error -71 [ 97.477287][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.487615][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.496727][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.508565][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.520023][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.529296][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.537519][ T45] usb 3-1: Product: syz [ 97.541698][ T45] usb 3-1: Manufacturer: syz [ 97.546787][ T45] usb 3-1: SerialNumber: syz [ 97.553333][ T45] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 97.560142][ T45] cdc_ncm 3-1:1.0: bind() failure [ 97.583203][ T441] usb 1-1: device descriptor read/8, error -71 [ 97.672067][ T520] usb 2-1: device descriptor read/64, error -71 [ 97.692183][ T441] usb usb1-port1: unable to enumerate USB device [ 97.932067][ T520] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 98.072067][ T520] usb 2-1: device descriptor read/64, error -71 [ 98.312058][ T520] usb 2-1: device descriptor read/64, error -71 [ 98.422152][ T520] usb usb2-port1: attempt power cycle [ 98.532077][ T441] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 98.683234][ T441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.694177][ T441] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 98.703863][ T441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.712208][ T331] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 98.720250][ T441] usb 1-1: config 0 descriptor?? [ 98.772061][ T520] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 98.793113][ T520] usb 2-1: device descriptor read/8, error -71 [ 98.842059][ T331] usb 4-1: device descriptor read/64, error -71 [ 98.923147][ T520] usb 2-1: device descriptor read/8, error -71 [ 99.082098][ T331] usb 4-1: device descriptor read/64, error -71 [ 99.162094][ T520] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 99.183282][ T520] usb 2-1: device descriptor read/8, error -71 [ 99.313134][ T520] usb 2-1: device descriptor read/8, error -71 [ 99.322059][ T331] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 99.422187][ T520] usb usb2-port1: unable to enumerate USB device [ 99.452090][ T331] usb 4-1: device descriptor read/64, error -71 [ 99.692062][ T331] usb 4-1: device descriptor read/64, error -71 [ 99.802216][ T331] usb usb4-port1: attempt power cycle [ 100.066886][ T45] usb 3-1: USB disconnect, device number 34 [ 100.143326][ T331] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 100.183095][ T331] usb 4-1: device descriptor read/8, error -71 [ 100.313089][ T331] usb 4-1: device descriptor read/8, error -71 [ 100.552069][ T331] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 100.593093][ T331] usb 4-1: device descriptor read/8, error -71 [ 100.733823][ T331] usb 4-1: device descriptor read/8, error -71 [ 100.842192][ T331] usb usb4-port1: unable to enumerate USB device [ 101.158460][ T441] usbhid 1-1:0.0: can't add hid device: -71 [ 101.165125][ T441] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 101.174990][ T441] usb 1-1: USB disconnect, device number 34 [ 101.332065][ T45] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 101.462130][ T45] usb 3-1: device descriptor read/64, error -71 [ 101.482052][ T31] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 101.612103][ T31] usb 2-1: device descriptor read/64, error -71 [ 101.642081][ T441] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 101.702072][ T45] usb 3-1: device descriptor read/64, error -71 [ 101.793319][ T441] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.803665][ T441] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 101.813410][ T441] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.824726][ T441] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.836538][ T441] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.845969][ T441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.854246][ T31] usb 2-1: device descriptor read/64, error -71 [ 101.860818][ T441] usb 1-1: Product: syz [ 101.865306][ T441] usb 1-1: Manufacturer: syz [ 101.869977][ T441] usb 1-1: SerialNumber: syz [ 101.877800][ T441] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 101.885833][ T441] cdc_ncm 1-1:1.0: bind() failure [ 101.942070][ T45] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 102.072072][ T45] usb 3-1: device descriptor read/64, error -71 [ 102.102070][ T31] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 102.242068][ T31] usb 2-1: device descriptor read/64, error -71 [ 102.312075][ T45] usb 3-1: device descriptor read/64, error -71 [ 102.422258][ T45] usb usb3-port1: attempt power cycle [ 102.482061][ T31] usb 2-1: device descriptor read/64, error -71 [ 102.592212][ T31] usb usb2-port1: attempt power cycle [ 102.772070][ T45] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 102.793181][ T45] usb 3-1: device descriptor read/8, error -71 [ 102.923173][ T45] usb 3-1: device descriptor read/8, error -71 [ 102.942064][ T31] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 102.963147][ T31] usb 2-1: device descriptor read/8, error -71 [ 103.093148][ T31] usb 2-1: device descriptor read/8, error -71 [ 103.162072][ T45] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 103.183517][ T45] usb 3-1: device descriptor read/8, error -71 [ 103.313908][ T45] usb 3-1: device descriptor read/8, error -71 [ 103.332111][ T31] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 103.369630][ T31] usb 2-1: device descriptor read/8, error -71 [ 103.422246][ T45] usb usb3-port1: unable to enumerate USB device [ 103.503034][ T31] usb 2-1: device descriptor read/8, error -71 [ 103.612072][ T484] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 103.612174][ T31] usb usb2-port1: unable to enumerate USB device [ 103.763364][ T484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.774365][ T484] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 103.783438][ T484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.792137][ T484] usb 4-1: config 0 descriptor?? [ 104.266645][ T484] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 104.277401][ T484] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0006/input/input7 [ 104.329490][ T45] usb 1-1: USB disconnect, device number 35 [ 104.351935][ T484] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 104.562058][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 104.563282][ T36] audit: type=1400 audit(1785520289.909:212): avc: denied { read } for pid=1616 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 104.702083][ T10] usb 3-1: device descriptor read/64, error -71 Stopping sshd: [ 104.942045][ T10] usb 3-1: device descriptor read/64, error -71 stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) [ 105.193453][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd Stopping network: [ 105.344429][ T10] usb 3-1: device descriptor read/64, error -71 [ 105.381586][ T36] audit: type=1400 audit(1785520290.719:213): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 OK Stopping iptables: [ 105.438401][ T36] audit: type=1400 audit(1785520290.779:214): avc: denied { search } for pid=1642 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 OK [ 105.466654][ T36] audit: type=1400 audit(1785520290.779:215): avc: denied { write } for pid=1642 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.489036][ T36] audit: type=1400 audit(1785520290.779:216): avc: denied { add_name } for pid=1642 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.510430][ T36] audit: type=1400 audit(1785520290.779:217): avc: denied { create } for pid=1642 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.531722][ T36] audit: type=1400 audit(1785520290.779:218): avc: denied { read open } for pid=1642 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=3541 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Stopping system [ 105.555544][ T36] audit: type=1400 audit(1785520290.779:219): avc: denied { lock } for pid=1642 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=3541 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 message bus: [ 105.652778][ T36] audit: type=1400 audit(1785520290.999:220): avc: denied { ioctl } for pid=1643 comm="syz.1.417" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.692157][ T10] usb 3-1: device descriptor read/64, error -71 done [ 105.712099][ T441] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 105.802206][ T10] usb usb3-port1: attempt power cycle [ 105.852048][ T441] usb 2-1: device descriptor read/64, error -71 Stopping klogd: OK Stopping acpid: [ 105.976108][ T36] audit: type=1400 audit(1785520291.319:221): avc: denied { write } for pid=95 comm="acpid" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.142134][ T441] usb 2-1: device descriptor read/64, error -71 [ 106.152066][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 106.173050][ T10] usb 3-1: device descriptor read/8, error -71 [ 106.313045][ T10] usb 3-1: device descriptor read/8, error -71 [ 106.382358][ T441] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 106.397408][ T331] usb 4-1: USB disconnect, device number 38 [ 106.522073][ T441] usb 2-1: device descriptor read/64, error -71 [ 106.562216][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 106.583118][ T10] usb 3-1: device descriptor read/8, error -71 [ 106.732718][ T10] usb 3-1: device descriptor read/8, error -71 [ 106.772048][ T441] usb 2-1: device descriptor read/64, error -71 [ 106.772046][ T331] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 106.842139][ T10] usb usb3-port1: unable to enumerate USB device [ 106.892243][ T441] usb usb2-port1: attempt power cycle [ 106.902057][ T331] usb 4-1: device descriptor read/64, error -71 OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK umount: can't remount debugfs read-only [ 107.142058][ T331] usb 4-1: device descriptor read/64, error -71 Connection to 10.128.0.222 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read[ 107.242060][ T441] usb 2-1: new high-speed USB device number 48 using dummy_hcd -only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 107.318000][ T441] usb 2-1: device descriptor read/8, error -71 [ 107.412072][ T331] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 107.435212][ T872] bridge_slave_1: left allmulticast mode [ 107.440977][ T872] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.448402][ T872] bridge_slave_0: left allmulticast mode [ 107.454095][ T872] bridge_slave_0: left promiscuous mode [ 107.459728][ T872] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.480641][ T441] usb 2-1: device descriptor read/8, error -71 [ 107.584678][ T872] veth1_macvtap: left promiscuous mode [ 107.590205][ T872] veth0_vlan: left promiscuous mode [ 107.792940][ T872] ------------[ cut here ]------------ [ 107.798428][ T872] WARNING: CPU: 0 PID: 872 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 107.808461][ T872] Modules linked in: [ 107.812364][ T872] CPU: 0 UID: 0 PID: 872 Comm: kworker/u8:24 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 107.824160][ T872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.834333][ T872] Workqueue: netns cleanup_net [ 107.839111][ T872] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 107.845138][ T872] Code: e8 a1 e6 d6 fc 4b 83 3c 3e 00 75 19 e8 a5 23 7e fc 49 81 ff f8 07 00 00 74 1b e8 97 23 7e fc 49 83 c7 08 eb c9 e8 8c 23 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 107.864782][ T872] RSP: 0018:ffffc900106f7b90 EFLAGS: 00010293 [ 107.870844][ T872] RAX: ffffffff85094e34 RBX: ffff888103fd58c0 RCX: ffff888118790000 [ 107.878841][ T872] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888104324580 [ 107.886831][ T872] RBP: ffffc900106f7bb0 R08: ffffffff87d420e7 R09: 1ffffffff0fa841c [ 107.894819][ T872] R10: dffffc0000000000 R11: fffffbfff0fa841d R12: dffffc0000000000 [ 107.902803][ T872] R13: dffffc0000000000 R14: ffff888104324000 R15: 0000000000000580 [ 107.910770][ T872] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 107.919715][ T872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.926328][ T872] CR2: 00007f4d525f84c0 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 107.934333][ T872] Call Trace: [ 107.937606][ T872] [ 107.940520][ T872] cleanup_net+0x6bd/0xc90 [ 107.944951][ T872] ? __cfi_cleanup_net+0x10/0x10 [ 107.949886][ T872] ? kick_pool+0xb9/0x540 [ 107.954230][ T872] process_scheduled_works+0x7f7/0x1060 [ 107.959768][ T872] worker_thread+0xc99/0x13f0 [ 107.964460][ T872] kthread+0x2c7/0x360 [ 107.968531][ T872] ? __cfi_worker_thread+0x10/0x10 [ 107.973686][ T872] ? __cfi_kthread+0x10/0x10 [ 107.978285][ T872] ret_from_fork+0x67/0xa0 [ 107.982739][ T872] ? __cfi_kthread+0x10/0x10 [ 107.987316][ T872] ret_from_fork_asm+0x1a/0x30 [ 107.992088][ T872] [ 107.995099][ T872] ---[ end trace 0000000000000000 ]--- [ 108.000768][ T872] ------------[ cut here ]------------ [ 108.006265][ T872] WARNING: CPU: 1 PID: 872 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 108.016356][ T872] Modules linked in: [ 108.020234][ T872] CPU: 1 UID: 0 PID: 872 Comm: kworker/u8:24 Tainted: G W syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 108.033460][ T872] Tainted: [W]=WARN [ 108.037335][ T872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.047465][ T872] Workqueue: netns cleanup_net [ 108.052265][ T872] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 108.058326][ T872] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 50 23 7e fc 49 81 ff f8 07 00 00 74 1b e8 42 23 7e fc 49 83 c7 08 eb c5 e8 37 23 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 27 23 7e fc 5b 41 5c 41 5e 41 [ 108.078045][ T872] RSP: 0018:ffffc900106f7b90 EFLAGS: 00010293 [ 108.084112][ T872] RAX: ffffffff85094e89 RBX: ffff888104324800 RCX: ffff888118790000 [ 108.092192][ T872] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888104324808 [ 108.100156][ T872] RBP: ffffc900106f7bb0 R08: ffffffff87d420e7 R09: 1ffffffff0fa841c [ 108.108216][ T872] R10: dffffc0000000000 R11: fffffbfff0fa841d R12: dffffc0000000000 [ 108.116209][ T872] R13: dffffc0000000000 R14: ffff888104324000 R15: 0000000000000008 [ 108.124196][ T872] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 108.133144][ T872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.139714][ T872] CR2: 00007fad96cc0e9c CR3: 000000010afb6000 CR4: 00000000003526b0 [ 108.147833][ T872] Call Trace: [ 108.151110][ T872] [ 108.154059][ T872] cleanup_net+0x6bd/0xc90 [ 108.158473][ T872] ? __cfi_cleanup_net+0x10/0x10 [ 108.163450][ T872] ? kick_pool+0xb9/0x540 [ 108.167851][ T872] process_scheduled_works+0x7f7/0x1060 [ 108.173446][ T872] worker_thread+0xc99/0x13f0 [ 108.178145][ T872] kthread+0x2c7/0x360 [ 108.182226][ T872] ? __cfi_worker_thread+0x10/0x10 [ 108.187335][ T872] ? __cfi_kthread+0x10/0x10 [ 108.191904][ T872] ret_from_fork+0x67/0xa0 [ 108.196348][ T872] ? __cfi_kthread+0x10/0x10 [ 108.200931][ T872] ret_from_fork_asm+0x1a/0x30 [ 108.205703][ T872] [ 108.208713][ T872] ---[ end trace 0000000000000000 ]--- [ 108.215876][ T872] ------------[ cut here ]------------ [ 108.221360][ T872] WARNING: CPU: 0 PID: 872 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 108.230878][ T872] Modules linked in: [ 108.234787][ T872] CPU: 0 UID: 0 PID: 872 Comm: kworker/u8:24 Tainted: G W syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 108.248028][ T872] Tainted: [W]=WARN [ 108.251817][ T872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.261880][ T872] Workqueue: netns cleanup_net [ 108.266686][ T872] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 108.272243][ T872] Code: 3c 20 00 74 08 48 89 df e8 df a4 f1 fc 48 8b 3b e8 f7 97 dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 e1 98 fc <0f> 0b e9 b0 fd ff ff e8 c6 e1 98 fc 0f 0b e9 18 fe ff ff e8 ba e1 [ 108.291874][ T872] RSP: 0018:ffffc900106f7b70 EFLAGS: 00010293 [ 108.297967][ T872] RAX: ffffffff84ee8fee RBX: ffff888103fd58c0 RCX: ffff888118790000 [ 108.306162][ T872] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888118790000 [ 108.314166][ T872] RBP: ffffc900106f7b98 R08: ffffffff87d420e7 R09: 1ffffffff0fa841c [ 108.322264][ T872] R10: dffffc0000000000 R11: fffffbfff0fa841d R12: 1ffffffff0fa8170 [ 108.330266][ T872] R13: dffffc0000000000 R14: ffff888103fd64c0 R15: dffffc0000000000 [ 108.338295][ T872] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 108.347337][ T872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.353942][ T872] CR2: 00007f4d525f84c0 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 108.361915][ T872] Call Trace: [ 108.365239][ T872] [ 108.368163][ T872] xfrm_net_exit+0x31/0x80 [ 108.372633][ T872] cleanup_net+0x6bd/0xc90 [ 108.377053][ T872] ? __cfi_cleanup_net+0x10/0x10 [ 108.381971][ T872] ? kick_pool+0xb9/0x540 [ 108.386323][ T872] process_scheduled_works+0x7f7/0x1060 [ 108.391847][ T872] worker_thread+0xc99/0x13f0 Sent SIGKILL to[ 108.396540][ T872] kthread+0x2c7/0x360 all processes [ 108.402173][ T872] ? __cfi_worker_thread+0x10/0x10 [ 108.408528][ T872] ? __cfi_kthread+0x10/0x10 [ 108.413160][ T872] ret_from_fork+0x67/0xa0 Requesting syst[ 108.417589][ T872] ? __cfi_kthread+0x10/0x10 em poweroff [ 108.423800][ T872] ret_from_fork_asm+0x1a/0x30 [ 108.429564][ T872] [ 108.432610][ T872] ---[ end trace 0000000000000000 ]--- [ 108.473733][ T872] bridge_slave_1: left allmulticast mode [ 108.479386][ T872] bridge_slave_1: left promiscuous mode [ 108.485027][ T872] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.492503][ T872] bridge_slave_0: left allmulticast mode [ 108.498132][ T872] bridge_slave_0: left promiscuous mode [ 108.503815][ T872] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.511382][ T872] bridge_slave_1: left allmulticast mode [ 108.517154][ T872] bridge_slave_1: left promiscuous mode [ 108.522759][ T872] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.530103][ T872] bridge_slave_0: left allmulticast mode [ 108.535853][ T872] bridge_slave_0: left promiscuous mode [ 108.541448][ T872] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.549033][ T872] bridge_slave_1: left allmulticast mode [ 108.554811][ T872] bridge_slave_1: left promiscuous mode [ 108.560424][ T872] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.567839][ T872] bridge_slave_0: left allmulticast mode [ 108.573542][ T872] bridge_slave_0: left promiscuous mode [ 108.579114][ T872] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.794691][ T872] tipc: Disabling bearer [ 108.800059][ T872] tipc: Left network mode [ 108.806761][ T872] veth1_macvtap: left promiscuous mode [ 108.812466][ T872] veth0_vlan: left promiscuous mode [ 108.817963][ T872] veth1_macvtap: left promiscuous mode [ 108.823467][ T872] veth0_vlan: left promiscuous mode [ 108.829351][ T872] veth1_macvtap: left promiscuous mode [ 108.835247][ T872] veth0_vlan: left promiscuous mode [ 109.419071][ T1676] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 109.426104][ T1676] ACPI: PM: Preparing to enter system sleep state S5 [ 109.433006][ T1676] kvm: exiting hardware virtualization [ 109.438679][ T1676] reboot: Power down serialport: VM disconnected.