last executing test programs: 6.674950932s ago: executing program 1 (id=858): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x1}}, 0x2c, 0x3) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0xc13, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$FUSE_INIT(r1, &(0x7f0000000480)={0x50, 0xffffffffffffffd1, 0x0, {0x7, 0x2d, 0x6, 0x1000000a, 0x4b, 0xef, 0x8, 0xffffff29, 0x0, 0x0, 0x10, 0x8}}, 0x50) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e23, 0x4000, @empty, 0xfffffe01}}}, 0x108) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r6], 0x20}}, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x101040, 0x0) ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f00000002c0)={0x4, 0x26, 0x8, 0x18, 0x2, 0x101, 0x5, 0x36}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000340)={{0x1, 0x2000, 0x3, 0xad, 0x5, 0x4, 0x7f, 0x7, 0x0, 0x2b, 0x9}, {0x2, 0x30000, 0xf, 0x2c, 0x8, 0x0, 0x7f, 0x1, 0x3, 0xf4, 0x9}, {0x10000, 0x5000, 0x8, 0x5, 0x1, 0x2, 0x0, 0xb, 0x0, 0x5, 0xb, 0x9}, {0xdddd0000, 0xffff1000, 0x0, 0xe7, 0x4, 0x2, 0xc, 0x3c, 0x8, 0x8b, 0x9, 0xed}, {0x4, 0x8080000, 0xd, 0x3, 0x5, 0x86, 0x9, 0x7f, 0x2, 0x0, 0xc, 0x43}, {0x70000, 0x6000, 0xb, 0x7c, 0xb1, 0x24, 0x7f, 0xaf, 0x80, 0xc, 0x8, 0x3d}, {0xd000, 0x100002, 0x9, 0x3, 0x8, 0x5, 0x11, 0x3, 0x5, 0x7f, 0x3}, {0x5000, 0xffff1000, 0x10, 0x5, 0x9, 0xf, 0x3, 0x37, 0x0, 0x9, 0xf0, 0xfd}, {0xeeee8000, 0x2070}, {0x4000, 0x7}, 0x80000033, 0x0, 0xeeef0000, 0x2104, 0x0, 0x0, 0x80a0000, [0x1, 0x7, 0x7, 0x3]}) read$FUSE(r0, &(0x7f0000003240)={0x2020}, 0x206d) 6.556160862s ago: executing program 1 (id=859): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x900, 0x10, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x20, 0x3}}}}}]}}]}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @flat=@weak_binder={0x77622a85, 0x30a}, @flat=@binder={0x73622a85, 0x14, 0x3}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x800}) syz_usb_control_io(r0, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='comm\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x7}, 0x1c) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r9, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x802) dup3(r9, r7, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x13, 0x8, 0x6}]}, 0x10) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="02", 0x1}], 0x1}}], 0x1, 0x404c851) close_range(r5, 0xffffffffffffffff, 0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x2, 0xfffe, r4, 0x0, 0x0, 0x200000000000, 0x0, 0x2}]) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xc, 0x2b, {0x2b, 0x9, "0100002d6b00dada6e3ec5133ca0e4b26d769a0d748c3364bfe9b4960c9493f0e077b5f3f59d19b289"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.875996512s ago: executing program 2 (id=863): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010d21f07600000000000010902240001000000000904000001030000000921000000182299e9d54a275c0d46000000"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x500, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) pread64(0xffffffffffffffff, 0x0, 0x49, 0x10004) syz_usb_control_io(r1, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000500), 0xa, 0x1a1803) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="110000005a001f0010", 0x9) listen(0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x560f4fe66dd5fbe9, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x2710}, 0xffffffffffffff85) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000540)=""/108) r7 = accept4$inet6(r4, &(0x7f00000007c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000e00)=0x1c, 0x80000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r7, 0x80105873, &(0x7f0000000e40)) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00f193264e0057e7e46c9edc4840f9dd9358790ff973a0a90c353d1c8f3aa23c668dd2d476a42422a799671a0133a5cf592b081f03ac"], 0x0}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000028231db0d0e957b2b7e7f41ad5799fe38602ee29b0be6aa8cd5dbec0941fc326aaec027885d78d91"], &(0x7f00000005c0)=ANY=[@ANYBLOB="00033c0000003c030a2cb2761d4559b376910ccbd299a062dffcddf6ac17cace8dc7e3e1e2fd1251874250b320fdf3dcf0cd050000000000000043c27a073acb1d971ff3d19169dc937de2593089b1b723d60a13af8e9401e9fa86a955ecb820fa050215834f31b36edaca17565489f09c50a36aa1a911114602d553f715b0d211f0c78a92aa3e7ebe15b673122bc9b33f91e5997e07111a2d0ff042c1d7b652fff9646f54c42cc44b30df46e8b24388718a80c392c808faf9a9c5050633b59f2782b5569c5f5501114d88d72a7604049c28e7c45bdd00bb67f463b6ac79bbbf22f4dcea21b771b86787000000"]}, &(0x7f0000000380)={0x34, &(0x7f0000000d80)=ANY=[], &(0x7f0000000180)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000004c0)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000000300)={0x40, 0xa0, 0x4, 0x2}, &(0x7f0000000340)={0xc0, 0xa2, 0x2f, "759a67fa9d9637ff1c77d30f7f169b22cdc982312b3ef47ccc1d00b7aa73e78599162d27aead7751fda7beeb88c513"}}) 4.108276948s ago: executing program 1 (id=872): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="660f3880ba0e0000000f20e6b919060000b8b84e0000ba000000000f300f01ca660f3880062e260f01721766b853008ee066baf80cb83de4e581ef66bafc0cb000ee26263e660f68b810670000c4c2fd0909", 0x52}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe000000) 4.094757529s ago: executing program 0 (id=873): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = fsopen(&(0x7f0000000580)='tracefs\x00', 0x0) fcntl$dupfd(r1, 0x404, r1) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x1, 0x0, 0x1d}) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000009c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1dc7f39000080d00600000003a9f4f600000000400080", "129c9707", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080), 0x1) close(r0) 4.070656812s ago: executing program 1 (id=874): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000400)=""/85, 0x0, 0x80a0000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001680)) r4 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f0000000640)=""/191, 0x0, 0x4}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x0, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES8=r3, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 4.070372832s ago: executing program 0 (id=875): openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x1aba00, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x1aba00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0010006, 0x0, 0x90a7}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)) 3.954879882s ago: executing program 0 (id=876): r0 = socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000d1fafb3f76b44a0055000002002c994917286c7ab72dd9d17512325bf15b"], 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x88000, 0xb2) r4 = syz_create_resource$binfmt(&(0x7f0000000080)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) close(0xffffffffffffffff) (async) execveat$binfmt(r3, r4, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0x4}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@mcast2, 0x200000, 0x1, 0x0, 0xb, 0x7, 0x4f2}, 0x20) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x4}, 0x8) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x7, &(0x7f0000000000)={0x7, {{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10}}, {{0xa, 0x4e22, 0x18000, @remote, 0x8}}}, 0x108) 3.954469112s ago: executing program 0 (id=877): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0xc13, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746de664653d30303030303030303030183030303030303130303030302c75736d725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev2(r4, &(0x7f0000000000)=[{&(0x7f0000000500)="452e4500000000f9d8c1a2", 0xb}], 0x1, 0x3, 0x8080400, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x0, r5}, 0xc) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x4, 0x0, 0xfc, r5}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000040)=0xd, 0x4) read$FUSE(r0, &(0x7f0000003240)={0x2020}, 0x206d) 3.932893254s ago: executing program 0 (id=878): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x2, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="400305"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000180)={0x40, 0xf, 0x5, "6683bfb482"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="400da1000000a10d904b6e2378fa1d775a608b2f9041aefd76766fc4484256bceb12a55c50befc5d07b26d07e2d96fc466b252c41a9ecaf871fde446c4ef0aa99a362a3fd05111b8547dfb493fda570d2cf0125e5f56a89fff9dd4dd722140b228c3c0bf1c247acb0d697438b7d25fecd148e51e8d12439878316e298adf594faf80845bb0641fd553efceaaae03362774c9169c8c48ed287f02f9125c2792c547ac800c9ec11b"], &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41c}}, &(0x7f0000000280)={0x0, 0x22, 0x9, {[@global=@item_4={0x3, 0x1, 0x6, "72d70d51"}, @global=@item_012={0x1, 0x1, 0x7, "db"}, @main=@item_012={0x1, 0x0, 0x8, "ec"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0xff, 0x1, {0x22, 0x51c}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x0, 0xe, 0x19, "ed9f8035921c9fd70c74dbb1373728f4f25272674575fb9afe"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xe}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000000400)=ANY=[@ANYBLOB="2001ca000000c8fc37e60cb65769dcbb55801372529036974bf12b7f198ba85d852329e1336258d9dd03fb16de02b884997d62b71c1f58d65cc45939fcc43915883078f838c4b99f4288182a91c66bd966efe1ecce1748c08495a417c7e7c4a456ebe3267af038ecdab15cd299a87892d12ff45f79ed9b7602dd695e96a9a6c3b81f429935a870e1e8ab521540b58b9d5a533c1b5e5a3f13268062fa9085d551a53f63edab056921c43068156eaa4e3fcd41d92881de19a9acc053ddbfd921eadac80c2f38f7fcc1e40f6300000000"], &(0x7f0000000500)={0x20, 0x3, 0x1, 0x8}}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r2, 0xb}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xcfc}) 2.436845116s ago: executing program 3 (id=882): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="660f3880ba0e0000000f20e6b919060000b8b84e0000ba000000000f300f01ca660f3880062e260f01721766b853008ee066baf80cb83de4e581ef66bafc0cb000ee26263e660f68b810670000c4c2fd0909", 0x52}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x10000000) 2.428837866s ago: executing program 2 (id=883): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000100)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002880)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x17, {0x10, 0x80000000, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40080b0}, 0x8000) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002880)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x17, {0x10, 0x80000000, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40080b0}, 0x8000) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/192, 0xc0}, {&(0x7f0000001a40)=""/228, 0xe4}, {&(0x7f0000000a00)=""/4094, 0xffe}, {&(0x7f0000000800)=""/153, 0x99}, {&(0x7f0000000000)=""/119, 0x77}, {&(0x7f0000000740)=""/178, 0xb2}, {&(0x7f0000000940)=""/162, 0xa2}, {&(0x7f0000000580)=""/274, 0x112}], 0x8}, 0xc}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xd6}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}], [], 0x6b}}) 2.248200772s ago: executing program 2 (id=884): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000ff9000/0x4000)=nil}) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x400000, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x49bd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x8, 0xb17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffb, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0xe], [0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff00, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc045, 0x0, 0x0, 0x10000000, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5]}, 0x45c) (async) ioctl$UI_SET_PHYS(r2, 0x4008556c, 0x0) (async) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r1, 0x8010aebc, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000040)=0x200000) syz_clone3(&(0x7f0000000200)={0x40000000, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) 2.218356675s ago: executing program 3 (id=885): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2002, 0x11) sendmsg$AUDIT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x200, 0x70bd28, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x42, 0x0, &(0x7f0000000180)) 2.187271377s ago: executing program 3 (id=886): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0xc13, &(0x7f0000000340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000003240)={0x2020}, 0x206d) 2.032084131s ago: executing program 2 (id=887): epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84010000100001000000000800000000fe8800000000000000000000000000010000000000000000000000000000000000000000000000010000000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000000003c000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000007a050000000000008a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000002b0d00000000000000000000000000000a00010000000000000000004c001200726663343330392861757468656e6365736e286e68706f6c79313330352c637472286361737435292929000000000000000000000000000000000000000000000000000080010000480001"], 0x184}, 0x1, 0x0, 0x0, 0x60040000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000080), 0x8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) fchdir(r1) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x701) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r6, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = memfd_secret(0x0) syz_io_uring_setup(0x47a5, &(0x7f00000002c0)={0x0, 0x21bd, 0x2, 0x3, 0x2dd}, 0x0, 0x0) fcntl$lock(r7, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0xf2}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r8 = dup(r5) ioctl$PTP_EXTTS_REQUEST2(r8, 0x40383d0c, &(0x7f0000000040)={0x8}) 2.031888281s ago: executing program 3 (id=888): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="b04d", 0xfdef, 0x8c1, &(0x7f0000000140)={0x11, 0x1, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.966809337s ago: executing program 3 (id=889): open(&(0x7f0000000200)='./file0\x00', 0x108843, 0x98) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x48c, 0x0, 0x4}]}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) 1.199802605s ago: executing program 2 (id=890): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000200)="66410ff933640f005944420f01c3400fc7b151370000c744240000000000c744240200000000c7442406000000000f011c24440f20c03502000000440f22c066410f3834b4aa0000010066b8a5000f00d80f01d1b9720700000f32", 0x5b}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000180)={0xc5, 0x0, r1}) (async, rerun: 64) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0x2}) (async) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001509000000092140000001220f00090581d7"], 0x0) (async, rerun: 64) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) (rerun: 64) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_control_io(r6, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x80, 0x8, 0x67, '\b\x00', "07005412"}}, 0x0}, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x3e, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 618.930266ms ago: executing program 0 (id=891): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010d21f07600000000000010902240001000000000904000001030000000921000000182299e9d54a275c0d46000000"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x500, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) pread64(0xffffffffffffffff, 0x0, 0x49, 0x10004) syz_usb_control_io(r1, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000500), 0xa, 0x1a1803) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="110000005a001f0010", 0x9) listen(0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x560f4fe66dd5fbe9, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x2710}, 0xffffffffffffff85) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000540)=""/108) r7 = accept4$inet6(r4, &(0x7f00000007c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000e00)=0x1c, 0x80000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r7, 0x80105873, &(0x7f0000000e40)) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00f193264e0057e7e46c9edc4840f9dd9358790ff973a0a90c353d1c8f3aa23c668dd2d476a42422a799671a0133a5cf592b081f03ac"], 0x0}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000028231db0d0e957b2b7e7f41ad5799fe38602ee29b0be6aa8cd5dbec0941fc326aaec027885d78d91"], &(0x7f00000005c0)=ANY=[@ANYBLOB="00033c0000003c030a2cb2761d4559b376910ccbd299a062dffcddf6ac17cace8dc7e3e1e2fd1251874250b320fdf3dcf0cd050000000000000043c27a073acb1d971ff3d19169dc937de2593089b1b723d60a13af8e9401e9fa86a955ecb820fa050215834f31b36edaca17565489f09c50a36aa1a911114602d553f715b0d211f0c78a92aa3e7ebe15b673122bc9b33f91e5997e07111a2d0ff042c1d7b652fff9646f54c42cc44b30df46e8b24388718a80c392c808faf9a9c5050633b59f2782b5569c5f5501114d88d72a7604049c28e7c45bdd00bb67f463b6ac79bbbf22f4dcea21b771b86787000000"]}, &(0x7f0000000380)={0x34, &(0x7f0000000d80)=ANY=[], &(0x7f0000000180)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000004c0)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000000300)={0x40, 0xa0, 0x4, 0x2}, &(0x7f0000000340)={0xc0, 0xa2, 0x2f, "759a67fa9d9637ff1c77d30f7f169b22cdc982312b3ef47ccc1d00b7aa73e78599162d27aead7751fda7beeb88c513"}}) 88.221763ms ago: executing program 3 (id=892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x5, 0x81, 0x0, 0x9, 0xe, 0x5, 0x2, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1af2, 0x3, 0x8, 0xf, 0xf4, 0x9, '\x00', 0x5, 0x8}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x3) r4 = fsopen(&(0x7f00000003c0)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 87.809633ms ago: executing program 1 (id=893): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="4000000018fc150000000000ffffffff0a2000000202000000000000240009801c00000008000000140016"], 0x40}], 0x1}, 0x0) 58.040415ms ago: executing program 1 (id=894): getpid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) getpid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 0s ago: executing program 2 (id=895): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) unshare(0x6060600) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc42000, 0x40) r1 = openat(r0, &(0x7f0000004280)='.\x00', 0x185040, 0x180) pwrite64(r1, 0x0, 0x0, 0x7) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000000)=ANY=[@ANYBLOB="726c6f675f70616765733d3138343436373434303500003239365a5bf37b040538323433322c00"]) kernel console output (not intermixed with test programs): 8112][ T36] audit: type=1400 audit(2000000046.970:331): avc: denied { getopt } for pid=1821 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.032403][ T1828] netlink: 1143 bytes leftover after parsing attributes in process `syz.0.517'. [ 111.278371][ T663] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 111.428440][ T663] usb 1-1: Using ep0 maxpacket: 32 [ 111.434967][ T663] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 111.443542][ T663] usb 1-1: config 0 has no interface number 0 [ 111.451502][ T663] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 111.461296][ T663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.469698][ T663] usb 1-1: Product: syz [ 111.474207][ T663] usb 1-1: Manufacturer: syz [ 111.479264][ T663] usb 1-1: SerialNumber: syz [ 111.493299][ T663] usb 1-1: config 0 descriptor?? [ 111.501281][ T663] smsc95xx v2.0.0 [ 111.585969][ T339] usb 3-1: Cannot read MAC address [ 111.606023][ T339] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 111.623830][ T339] usb 3-1: USB disconnect, device number 35 [ 112.304265][ T663] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 112.327471][ T663] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 112.337656][ T663] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 112.349609][ T663] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 112.371774][ T663] usb 1-1: USB disconnect, device number 40 [ 113.148465][ T663] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 113.298370][ T663] usb 1-1: Using ep0 maxpacket: 32 [ 113.304794][ T663] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 113.313006][ T663] usb 1-1: config 0 has no interface number 0 [ 113.320907][ T663] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 113.330508][ T663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.338928][ T663] usb 1-1: Product: syz [ 113.344240][ T663] usb 1-1: Manufacturer: syz [ 113.349642][ T663] usb 1-1: SerialNumber: syz [ 113.359951][ T663] usb 1-1: config 0 descriptor?? [ 113.368970][ T663] smsc95xx v2.0.0 [ 113.590032][ T342] usb 2-1: USB disconnect, device number 41 [ 113.771530][ T663] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 113.806493][ T663] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 114.105613][ T1877] netlink: 1143 bytes leftover after parsing attributes in process `syz.2.532'. [ 114.398369][ T339] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 114.448363][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 114.498366][ T66] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 114.548370][ T339] usb 3-1: Using ep0 maxpacket: 32 [ 114.554778][ T339] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 114.563481][ T339] usb 3-1: config 0 has no interface number 0 [ 114.571303][ T339] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 114.580673][ T339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.588936][ T339] usb 3-1: Product: syz [ 114.593259][ T339] usb 3-1: Manufacturer: syz [ 114.597909][ T339] usb 3-1: SerialNumber: syz [ 114.600065][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.607155][ T339] usb 3-1: config 0 descriptor?? [ 114.619538][ T339] smsc95xx v2.0.0 [ 114.623563][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.633525][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 114.642643][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.655074][ T9] usb 4-1: config 0 descriptor?? [ 115.043869][ T663] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 115.059826][ T663] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 115.071594][ T663] usb 1-1: USB disconnect, device number 41 [ 115.270332][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 115.277695][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 115.291562][ T9] usb 4-1: USB disconnect, device number 39 [ 115.368386][ T663] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 115.424293][ T339] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 115.436174][ T339] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 115.446128][ T339] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 115.457500][ T339] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 115.467585][ T339] usb 3-1: USB disconnect, device number 36 [ 115.519610][ T663] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.533035][ T663] usb 1-1: config 0 interface 0 has no altsetting 0 [ 115.540024][ T663] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 115.549401][ T663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.562973][ T663] usb 1-1: config 0 descriptor?? [ 115.914241][ T36] audit: type=1400 audit(2000000051.930:332): avc: denied { bind } for pid=1886 comm="syz.3.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.919400][ T1887] netlink: 'syz.3.536': attribute type 1 has an invalid length. [ 115.965694][ T36] audit: type=1400 audit(2000000051.930:333): avc: denied { read } for pid=1886 comm="syz.3.536" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.992308][ T1887] SELinux: failed to load policy [ 116.238373][ T339] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 116.418431][ T339] usb 3-1: Using ep0 maxpacket: 16 [ 116.426263][ T339] usb 3-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 116.437795][ T339] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.452809][ T339] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 116.463581][ T339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.479838][ T339] usb 3-1: config 0 descriptor?? [ 116.515360][ T339] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 116.559711][ T663] usbhid 1-1:0.0: can't add hid device: -71 [ 116.573781][ T663] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 116.615069][ T663] usb 1-1: USB disconnect, device number 42 [ 116.988502][ T663] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 117.160118][ T663] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 117.169005][ T663] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.309937][ T663] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 117.321558][ T663] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 117.333160][ T663] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.336497][ T1914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.545'. [ 117.346932][ T663] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.364348][ T663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.373189][ T663] usb 1-1: config 0 descriptor?? [ 117.378940][ T1908] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 117.398128][ T36] audit: type=1400 audit(2000000053.410:334): avc: denied { mounton } for pid=1913 comm="syz.3.545" path="/127/file0" dev="incremental-fs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.433749][ T1916] netlink: 1143 bytes leftover after parsing attributes in process `syz.1.546'. [ 117.789205][ T663] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 117.798200][ T663] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 117.809154][ T663] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 117.888380][ T66] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 118.038378][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 118.044983][ T66] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 118.053514][ T66] usb 2-1: config 0 has no interface number 0 [ 118.060379][ T9] usb 1-1: USB disconnect, device number 43 [ 118.070057][ T66] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 118.084523][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.088462][ T342] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 118.100529][ T66] usb 2-1: Product: syz [ 118.104870][ T66] usb 2-1: Manufacturer: syz [ 118.109940][ T66] usb 2-1: SerialNumber: syz [ 118.121540][ T66] usb 2-1: config 0 descriptor?? [ 118.129422][ T66] smsc95xx v2.0.0 [ 118.931238][ T66] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 118.946689][ T66] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 118.960737][ T66] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 118.973833][ T66] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 119.017490][ T66] usb 2-1: USB disconnect, device number 43 [ 119.111897][ T1544] usb 3-1: USB disconnect, device number 37 [ 119.571092][ T1946] x_tables: unsorted underflow at hook 1 [ 119.608070][ T1953] fuse: Bad value for 'fd' [ 119.778422][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 119.933395][ T1967] netlink: 1143 bytes leftover after parsing attributes in process `syz.1.564'. [ 119.942635][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 119.954838][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 119.963146][ T9] usb 3-1: config 0 has no interface number 0 [ 119.971026][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 119.980783][ T728] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 119.988423][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.996699][ T9] usb 3-1: Product: syz [ 120.000996][ T9] usb 3-1: Manufacturer: syz [ 120.005870][ T9] usb 3-1: SerialNumber: syz [ 120.016084][ T9] usb 3-1: config 0 descriptor?? [ 120.024319][ T9] smsc95xx v2.0.0 [ 120.148375][ T728] usb 1-1: Using ep0 maxpacket: 16 [ 120.155014][ T728] usb 1-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 120.165753][ T728] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.179262][ T728] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 120.188795][ T728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.198427][ T1544] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 120.210913][ T728] usb 1-1: config 0 descriptor?? [ 120.219974][ T728] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 120.348369][ T1544] usb 2-1: Using ep0 maxpacket: 32 [ 120.354800][ T1544] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 120.363332][ T1544] usb 2-1: config 0 has no interface number 0 [ 120.371715][ T1544] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 120.381249][ T1544] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.389506][ T1544] usb 2-1: Product: syz [ 120.393942][ T1544] usb 2-1: Manufacturer: syz [ 120.398626][ T1544] usb 2-1: SerialNumber: syz [ 120.408470][ T1544] usb 2-1: config 0 descriptor?? [ 120.416935][ T1544] smsc95xx v2.0.0 [ 120.432108][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 120.442970][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 121.219092][ T1544] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 121.238414][ T1544] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 121.248399][ T1544] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 121.260586][ T1544] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 121.290571][ T1544] usb 2-1: USB disconnect, device number 44 [ 121.609920][ T1980] fuse: Bad value for 'fd' [ 121.667681][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 121.678732][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 121.688005][ T9] usb 3-1: USB disconnect, device number 38 [ 121.933844][ T2005] 9pnet_fd: Insufficient options for proto=fd [ 122.011876][ T2010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.576'. [ 122.098464][ T339] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 122.258424][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 122.408468][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 122.422341][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 122.433244][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.442166][ T9] usb 2-1: Product: syz [ 122.448186][ T9] usb 2-1: Manufacturer: syz [ 122.454391][ T9] usb 2-1: SerialNumber: syz [ 122.502773][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 122.513828][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 122.878201][ T2012] fuse: Bad value for 'fd' [ 122.905227][ T9] usb 1-1: USB disconnect, device number 44 [ 122.911863][ T2014] netlink: 1143 bytes leftover after parsing attributes in process `syz.3.578'. [ 123.040459][ T46] r8152-cfgselector 2-1: USB disconnect, device number 45 [ 123.158386][ T66] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 123.268362][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 123.308355][ T66] usb 4-1: Using ep0 maxpacket: 32 [ 123.314727][ T66] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 123.323089][ T66] usb 4-1: config 0 has no interface number 0 [ 123.331066][ T66] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 123.340601][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.349124][ T66] usb 4-1: Product: syz [ 123.353398][ T66] usb 4-1: Manufacturer: syz [ 123.358048][ T66] usb 4-1: SerialNumber: syz [ 123.363991][ T66] usb 4-1: config 0 descriptor?? [ 123.372606][ T66] smsc95xx v2.0.0 [ 123.428371][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 123.435096][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 123.444167][ T9] usb 1-1: config 0 has no interface number 0 [ 123.451986][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 123.461251][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.469310][ T9] usb 1-1: Product: syz [ 123.473783][ T9] usb 1-1: Manufacturer: syz [ 123.478447][ T9] usb 1-1: SerialNumber: syz [ 123.484315][ T9] usb 1-1: config 0 descriptor?? [ 123.490285][ T9] smsc95xx v2.0.0 [ 123.575132][ T36] audit: type=1400 audit(2000000059.584:335): avc: denied { write } for pid=2017 comm="syz.1.580" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 123.598418][ T2018] overlayfs: missing 'lowerdir' [ 123.893388][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 123.906909][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 124.175180][ T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 124.190994][ T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 124.205743][ T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 124.217237][ T66] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 124.232225][ T66] usb 4-1: USB disconnect, device number 41 [ 125.106802][ T2044] FAULT_INJECTION: forcing a failure. [ 125.106802][ T2044] name failslab, interval 1, probability 0, space 0, times 0 [ 125.119939][ T2044] CPU: 0 UID: 0 PID: 2044 Comm: syz.1.589 Not tainted syzkaller #0 ec67a0b9c3f9090985a335a00964337a606b4ed6 [ 125.119973][ T2044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.119984][ T2044] Call Trace: [ 125.119993][ T2044] [ 125.120000][ T2044] __dump_stack+0x21/0x30 [ 125.120027][ T2044] dump_stack_lvl+0x140/0x1c0 [ 125.120046][ T2044] ? __cfi_dump_stack_lvl+0x10/0x10 [ 125.120067][ T2044] ? __cfi_avc_has_perm+0x10/0x10 [ 125.120088][ T2044] ? kasan_save_alloc_info+0x40/0x50 [ 125.120107][ T2044] dump_stack+0x19/0x20 [ 125.120126][ T2044] should_fail_ex+0x3d7/0x530 [ 125.120149][ T2044] should_failslab+0xac/0x100 [ 125.120172][ T2044] __kmalloc_cache_noprof+0x41/0x470 [ 125.120193][ T2044] ? vhost_task_create+0x12c/0x400 [ 125.120219][ T2044] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 125.120246][ T2044] vhost_task_create+0x12c/0x400 [ 125.120269][ T2044] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 125.120297][ T2044] ? __cfi_vhost_task_create+0x10/0x10 [ 125.120322][ T2044] ? __cfi_vhost_task_fn+0x10/0x10 [ 125.120345][ T2044] ? __kasan_check_write+0x18/0x20 [ 125.120364][ T2044] ? mutex_lock+0x97/0x1d0 [ 125.120384][ T2044] ? __cfi_mutex_lock+0x10/0x10 [ 125.120402][ T2044] ? kernel_text_address+0xa9/0xe0 [ 125.120422][ T2044] kvm_mmu_post_init_vm+0x161/0x300 [ 125.120443][ T2044] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 125.120464][ T2044] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 125.120484][ T2044] ? kstrtoull+0x13b/0x1e0 [ 125.120499][ T2044] ? kstrtouint+0x78/0xf0 [ 125.120521][ T2044] ? ioctl_has_perm+0x1bc/0x500 [ 125.120537][ T2044] ? __asan_memcpy+0x5a/0x80 [ 125.120557][ T2044] ? ioctl_has_perm+0x408/0x500 [ 125.120573][ T2044] ? has_cap_mac_admin+0xd0/0xd0 [ 125.120590][ T2044] ? __kasan_check_write+0x18/0x20 [ 125.120608][ T2044] ? mutex_lock_killable+0x97/0x1d0 [ 125.120628][ T2044] ? __cfi_mutex_lock_killable+0x10/0x10 [ 125.120648][ T2044] ? proc_fail_nth_write+0x184/0x220 [ 125.120666][ T2044] kvm_vcpu_ioctl+0xa48/0x1000 [ 125.120690][ T2044] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 125.120713][ T2044] ? __cfi_vfs_write+0x10/0x10 [ 125.120733][ T2044] ? __kasan_check_write+0x18/0x20 [ 125.120752][ T2044] ? mutex_unlock+0x90/0x240 [ 125.120773][ T2044] ? __cfi_mutex_unlock+0x10/0x10 [ 125.120792][ T2044] ? __fget_files+0x2c5/0x340 [ 125.120816][ T2044] ? __fget_files+0x2c5/0x340 [ 125.120838][ T2044] ? bpf_lsm_file_ioctl+0xd/0x20 [ 125.120854][ T2044] ? security_file_ioctl+0x3e/0x110 [ 125.120870][ T2044] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 125.120892][ T2044] __se_sys_ioctl+0x135/0x1b0 [ 125.120916][ T2044] __x64_sys_ioctl+0x7f/0xa0 [ 125.120938][ T2044] x64_sys_call+0x1878/0x2ee0 [ 125.120960][ T2044] do_syscall_64+0x57/0xf0 [ 125.120975][ T2044] ? clear_bhb_loop+0x50/0xa0 [ 125.120992][ T2044] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 125.121018][ T2044] RIP: 0033:0x7fb8e019c629 [ 125.121032][ T2044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.121047][ T2044] RSP: 002b:00007fb8e1053028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.121065][ T2044] RAX: ffffffffffffffda RBX: 00007fb8e0416090 RCX: 00007fb8e019c629 [ 125.121078][ T2044] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 125.121089][ T2044] RBP: 00007fb8e1053090 R08: 0000000000000000 R09: 0000000000000000 [ 125.121099][ T2044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.121110][ T2044] R13: 00007fb8e0416128 R14: 00007fb8e0416090 R15: 00007ffc2cb88c28 [ 125.121124][ T2044] [ 125.480029][ T728] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 125.491114][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 125.501945][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 125.512360][ T9] usb 1-1: USB disconnect, device number 45 [ 125.548468][ T339] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 125.618365][ T728] usb 4-1: device descriptor read/64, error -71 [ 125.708405][ T339] usb 3-1: Using ep0 maxpacket: 16 [ 125.715117][ T339] usb 3-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 125.726155][ T339] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.744644][ T339] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 125.754063][ T339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.770084][ T339] usb 3-1: config 0 descriptor?? [ 125.789469][ T339] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 125.878400][ T728] usb 4-1: device descriptor read/64, error -71 [ 126.118581][ T728] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 126.158391][ T339] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 126.258443][ T728] usb 4-1: device descriptor read/64, error -71 [ 126.498400][ T728] usb 4-1: device descriptor read/64, error -71 [ 126.628924][ T728] usb usb4-port1: attempt power cycle [ 126.891488][ T2075] netlink: 1143 bytes leftover after parsing attributes in process `syz.1.598'. [ 126.978379][ T728] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 126.999449][ T728] usb 4-1: device descriptor read/8, error -71 [ 127.129732][ T728] usb 4-1: device descriptor read/8, error -71 [ 127.138398][ T1544] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 127.288393][ T1544] usb 2-1: Using ep0 maxpacket: 32 [ 127.295362][ T1544] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 127.304038][ T1544] usb 2-1: config 0 has no interface number 0 [ 127.312120][ T1544] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 127.321568][ T1544] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.329778][ T1544] usb 2-1: Product: syz [ 127.334051][ T1544] usb 2-1: Manufacturer: syz [ 127.338887][ T1544] usb 2-1: SerialNumber: syz [ 127.345862][ T1544] usb 2-1: config 0 descriptor?? [ 127.353022][ T1544] smsc95xx v2.0.0 [ 127.368397][ T728] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 127.399645][ T728] usb 4-1: device descriptor read/8, error -71 [ 127.530030][ T728] usb 4-1: device descriptor read/8, error -71 [ 127.638595][ T728] usb usb4-port1: unable to enumerate USB device [ 128.021824][ T66] usb 3-1: USB disconnect, device number 40 [ 128.156763][ T1544] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 128.179447][ T1544] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 128.189216][ T1544] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 128.200303][ T1544] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 128.224623][ T1544] usb 2-1: USB disconnect, device number 46 [ 128.353186][ T2084] FAULT_INJECTION: forcing a failure. [ 128.353186][ T2084] name failslab, interval 1, probability 0, space 0, times 0 [ 128.366876][ T2084] CPU: 0 UID: 0 PID: 2084 Comm: syz.2.601 Not tainted syzkaller #0 ec67a0b9c3f9090985a335a00964337a606b4ed6 [ 128.366911][ T2084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.366925][ T2084] Call Trace: [ 128.366931][ T2084] [ 128.366940][ T2084] __dump_stack+0x21/0x30 [ 128.366977][ T2084] dump_stack_lvl+0x140/0x1c0 [ 128.367002][ T2084] ? __cfi_dump_stack_lvl+0x10/0x10 [ 128.367034][ T2084] dump_stack+0x19/0x20 [ 128.367057][ T2084] should_fail_ex+0x3d7/0x530 [ 128.367079][ T2084] should_failslab+0xac/0x100 [ 128.367128][ T2084] kmem_cache_alloc_node_noprof+0x45/0x420 [ 128.367154][ T2084] ? dup_task_struct+0xc1/0xd50 [ 128.367176][ T2084] ? kasan_save_alloc_info+0x40/0x50 [ 128.367198][ T2084] ? __kasan_kmalloc+0x96/0xb0 [ 128.367225][ T2084] ? __kmalloc_cache_noprof+0x23c/0x470 [ 128.367254][ T2084] dup_task_struct+0xc1/0xd50 [ 128.367276][ T2084] ? __kasan_check_write+0x18/0x20 [ 128.367299][ T2084] ? _raw_spin_lock_irq+0x93/0x120 [ 128.367318][ T2084] ? copy_process+0x3220/0x3220 [ 128.367340][ T2084] ? __kasan_check_write+0x18/0x20 [ 128.367363][ T2084] copy_process+0x55a/0x3220 [ 128.367390][ T2084] ? __cfi_copy_process+0x10/0x10 [ 128.367411][ T2084] ? __kmalloc_cache_noprof+0x23c/0x470 [ 128.367451][ T2084] ? __kasan_check_write+0x18/0x20 [ 128.367476][ T2084] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 128.367517][ T2084] vhost_task_create+0x1f7/0x400 [ 128.367546][ T2084] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 128.367585][ T2084] ? __cfi_vhost_task_create+0x10/0x10 [ 128.367615][ T2084] ? __cfi_vhost_task_fn+0x10/0x10 [ 128.367646][ T2084] ? __kasan_check_write+0x18/0x20 [ 128.367670][ T2084] ? mutex_lock+0x97/0x1d0 [ 128.367693][ T2084] ? __cfi_mutex_lock+0x10/0x10 [ 128.367715][ T2084] ? kernel_text_address+0xa9/0xe0 [ 128.367740][ T2084] kvm_mmu_post_init_vm+0x161/0x300 [ 128.367767][ T2084] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 128.367796][ T2084] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 128.367819][ T2084] ? kstrtoull+0x13b/0x1e0 [ 128.367838][ T2084] ? kstrtouint+0x78/0xf0 [ 128.367857][ T2084] ? ioctl_has_perm+0x1bc/0x500 [ 128.367877][ T2084] ? __asan_memcpy+0x5a/0x80 [ 128.367900][ T2084] ? ioctl_has_perm+0x408/0x500 [ 128.367924][ T2084] ? has_cap_mac_admin+0xd0/0xd0 [ 128.367945][ T2084] ? __kasan_check_write+0x18/0x20 [ 128.367968][ T2084] ? mutex_lock_killable+0x97/0x1d0 [ 128.367991][ T2084] ? __cfi_mutex_lock_killable+0x10/0x10 [ 128.368016][ T2084] ? proc_fail_nth_write+0x184/0x220 [ 128.368037][ T2084] kvm_vcpu_ioctl+0xa48/0x1000 [ 128.368069][ T2084] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 128.368097][ T2084] ? __cfi_vfs_write+0x10/0x10 [ 128.368121][ T2084] ? __kasan_check_write+0x18/0x20 [ 128.368145][ T2084] ? mutex_unlock+0x90/0x240 [ 128.368168][ T2084] ? __cfi_mutex_unlock+0x10/0x10 [ 128.368197][ T2084] ? __fget_files+0x2c5/0x340 [ 128.368225][ T2084] ? __fget_files+0x2c5/0x340 [ 128.368252][ T2084] ? bpf_lsm_file_ioctl+0xd/0x20 [ 128.368272][ T2084] ? security_file_ioctl+0x3e/0x110 [ 128.368292][ T2084] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 128.368321][ T2084] __se_sys_ioctl+0x135/0x1b0 [ 128.368352][ T2084] __x64_sys_ioctl+0x7f/0xa0 [ 128.368379][ T2084] x64_sys_call+0x1878/0x2ee0 [ 128.368407][ T2084] do_syscall_64+0x57/0xf0 [ 128.368425][ T2084] ? clear_bhb_loop+0x50/0xa0 [ 128.368444][ T2084] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 128.368477][ T2084] RIP: 0033:0x7f10d059c629 [ 128.368494][ T2084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.368518][ T2084] RSP: 002b:00007f10d13e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.368540][ T2084] RAX: ffffffffffffffda RBX: 00007f10d0816090 RCX: 00007f10d059c629 [ 128.368555][ T2084] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 128.368568][ T2084] RBP: 00007f10d13e8090 R08: 0000000000000000 R09: 0000000000000000 [ 128.368581][ T2084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.368593][ T2084] R13: 00007f10d0816128 R14: 00007f10d0816090 R15: 00007ffe03ddd5a8 [ 128.368614][ T2084] [ 128.428604][ T663] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 128.881317][ T36] audit: type=1400 audit(2000000064.894:336): avc: denied { bpf } for pid=2085 comm="syz.1.602" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.938437][ T663] usb 4-1: Using ep0 maxpacket: 32 [ 128.944897][ T663] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 128.953127][ T663] usb 4-1: config 0 has no interface number 0 [ 128.979865][ T663] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 128.989105][ T663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.997182][ T663] usb 4-1: Product: syz [ 129.001451][ T663] usb 4-1: Manufacturer: syz [ 129.006151][ T663] usb 4-1: SerialNumber: syz [ 129.016086][ T663] usb 4-1: config 0 descriptor?? [ 129.022889][ T663] smsc95xx v2.0.0 [ 129.422720][ T663] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 129.433766][ T66] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 129.441572][ T663] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 129.618332][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 129.624860][ T66] usb 3-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 129.635929][ T66] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.649819][ T66] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 129.659610][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.685003][ T66] usb 3-1: config 0 descriptor?? [ 129.692719][ T66] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 130.058758][ T2111] fuse: Bad value for 'group_id' [ 130.063794][ T2111] fuse: Bad value for 'group_id' [ 130.093776][ T2116] netlink: 1143 bytes leftover after parsing attributes in process `syz.1.611'. [ 130.338429][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 130.378382][ T339] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 130.488346][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 130.494927][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 130.503640][ T9] usb 2-1: config 0 has no interface number 0 [ 130.511651][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 130.521106][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.529422][ T9] usb 2-1: Product: syz [ 130.533767][ T9] usb 2-1: Manufacturer: syz [ 130.539024][ T9] usb 2-1: SerialNumber: syz [ 130.546165][ T9] usb 2-1: config 0 descriptor?? [ 130.556524][ T9] smsc95xx v2.0.0 [ 130.679778][ T663] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 130.701685][ T663] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 130.712794][ T663] usb 4-1: USB disconnect, device number 46 [ 131.028349][ T663] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 131.179680][ T663] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.191155][ T663] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.197902][ T663] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 131.207651][ T663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.219105][ T663] usb 4-1: config 0 descriptor?? [ 131.356872][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 131.371115][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 131.381038][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 131.392680][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 131.404049][ T9] usb 2-1: USB disconnect, device number 47 [ 131.907490][ T2121] FAULT_INJECTION: forcing a failure. [ 131.907490][ T2121] name failslab, interval 1, probability 0, space 0, times 0 [ 131.920439][ T2121] CPU: 0 UID: 0 PID: 2121 Comm: syz.1.613 Not tainted syzkaller #0 ec67a0b9c3f9090985a335a00964337a606b4ed6 [ 131.920473][ T2121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 131.920486][ T2121] Call Trace: [ 131.920492][ T2121] [ 131.920500][ T2121] __dump_stack+0x21/0x30 [ 131.920534][ T2121] dump_stack_lvl+0x140/0x1c0 [ 131.920560][ T2121] ? __cfi_dump_stack_lvl+0x10/0x10 [ 131.920587][ T2121] dump_stack+0x19/0x20 [ 131.920610][ T2121] should_fail_ex+0x3d7/0x530 [ 131.920632][ T2121] should_failslab+0xac/0x100 [ 131.920663][ T2121] __kmalloc_cache_node_noprof+0x46/0x430 [ 131.920692][ T2121] ? kasan_save_track+0x4f/0x80 [ 131.920717][ T2121] ? __get_vm_area_node+0x14d/0x3d0 [ 131.920738][ T2121] ? __kasan_slab_alloc+0x73/0x90 [ 131.920765][ T2121] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 131.920791][ T2121] ? dup_task_struct+0xc1/0xd50 [ 131.920816][ T2121] __get_vm_area_node+0x14d/0x3d0 [ 131.920837][ T2121] __vmalloc_node_range_noprof+0x30e/0x1480 [ 131.920860][ T2121] ? copy_process+0x55a/0x3220 [ 131.920885][ T2121] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 131.920907][ T2121] ? kasan_save_alloc_info+0x40/0x50 [ 131.920932][ T2121] ? __kasan_slab_alloc+0x73/0x90 [ 131.920961][ T2121] ? arch_dup_task_struct+0x5b/0xe0 [ 131.920996][ T2121] ? __asan_memcpy+0x5a/0x80 [ 131.921021][ T2121] dup_task_struct+0x5d6/0xd50 [ 131.921043][ T2121] ? copy_process+0x55a/0x3220 [ 131.921066][ T2121] ? _raw_spin_lock_irq+0x93/0x120 [ 131.921088][ T2121] ? copy_process+0x3220/0x3220 [ 131.921108][ T2121] ? __kasan_check_write+0x18/0x20 [ 131.921132][ T2121] copy_process+0x55a/0x3220 [ 131.921155][ T2121] ? __cfi_copy_process+0x10/0x10 [ 131.921176][ T2121] ? __kmalloc_cache_noprof+0x23c/0x470 [ 131.921204][ T2121] ? __kasan_check_write+0x18/0x20 [ 131.921229][ T2121] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 131.921263][ T2121] vhost_task_create+0x1f7/0x400 [ 131.921292][ T2121] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 131.921326][ T2121] ? __cfi_vhost_task_create+0x10/0x10 [ 131.921359][ T2121] ? __cfi_vhost_task_fn+0x10/0x10 [ 131.921388][ T2121] ? __kasan_check_write+0x18/0x20 [ 131.921411][ T2121] ? mutex_lock+0x97/0x1d0 [ 131.921434][ T2121] ? __cfi_mutex_lock+0x10/0x10 [ 131.921455][ T2121] ? kernel_text_address+0xa9/0xe0 [ 131.921502][ T2121] kvm_mmu_post_init_vm+0x161/0x300 [ 131.921527][ T2121] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 131.921553][ T2121] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 131.921577][ T2121] ? kstrtoull+0x13b/0x1e0 [ 131.921596][ T2121] ? kstrtouint+0x78/0xf0 [ 131.921618][ T2121] ? ioctl_has_perm+0x1bc/0x500 [ 131.921639][ T2121] ? __asan_memcpy+0x5a/0x80 [ 131.921663][ T2121] ? ioctl_has_perm+0x408/0x500 [ 131.921682][ T2121] ? has_cap_mac_admin+0xd0/0xd0 [ 131.921702][ T2121] ? __kasan_check_write+0x18/0x20 [ 131.921725][ T2121] ? mutex_lock_killable+0x97/0x1d0 [ 131.921753][ T2121] ? __cfi_mutex_lock_killable+0x10/0x10 [ 131.921778][ T2121] ? proc_fail_nth_write+0x184/0x220 [ 131.921800][ T2121] kvm_vcpu_ioctl+0xa48/0x1000 [ 131.921828][ T2121] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 131.921856][ T2121] ? __cfi_vfs_write+0x10/0x10 [ 131.921883][ T2121] ? __kasan_check_write+0x18/0x20 [ 131.921908][ T2121] ? mutex_unlock+0x90/0x240 [ 131.921930][ T2121] ? __cfi_mutex_unlock+0x10/0x10 [ 131.921953][ T2121] ? __fget_files+0x2c5/0x340 [ 131.921982][ T2121] ? __fget_files+0x2c5/0x340 [ 131.922020][ T2121] ? bpf_lsm_file_ioctl+0xd/0x20 [ 131.922041][ T2121] ? security_file_ioctl+0x3e/0x110 [ 131.922060][ T2121] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 131.922087][ T2121] __se_sys_ioctl+0x135/0x1b0 [ 131.922115][ T2121] __x64_sys_ioctl+0x7f/0xa0 [ 131.922145][ T2121] x64_sys_call+0x1878/0x2ee0 [ 131.922174][ T2121] do_syscall_64+0x57/0xf0 [ 131.922193][ T2121] ? clear_bhb_loop+0x50/0xa0 [ 131.922213][ T2121] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 131.922244][ T2121] RIP: 0033:0x7fb8e019c629 [ 131.922262][ T2121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.922281][ T2121] RSP: 002b:00007fb8e1074028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.922305][ T2121] RAX: ffffffffffffffda RBX: 00007fb8e0415fa0 RCX: 00007fb8e019c629 [ 131.922321][ T2121] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 131.922334][ T2121] RBP: 00007fb8e1074090 R08: 0000000000000000 R09: 0000000000000000 [ 131.922347][ T2121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.922359][ T2121] R13: 00007fb8e0416038 R14: 00007fb8e0415fa0 R15: 00007ffc2cb88c28 [ 131.922377][ T2121] [ 131.922386][ T2121] syz.1.613: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 132.297103][ T663] usbhid 4-1:0.0: can't add hid device: -71 [ 132.405598][ T663] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 132.433894][ T2121] ,cpuset=syz1,mems_allowed=0 [ 132.439576][ T2121] CPU: 0 UID: 0 PID: 2121 Comm: syz.1.613 Not tainted syzkaller #0 ec67a0b9c3f9090985a335a00964337a606b4ed6 [ 132.439611][ T2121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 132.439627][ T2121] Call Trace: [ 132.439635][ T2121] [ 132.439644][ T2121] __dump_stack+0x21/0x30 [ 132.439678][ T2121] dump_stack_lvl+0x140/0x1c0 [ 132.439707][ T2121] ? __cfi_dump_stack_lvl+0x10/0x10 [ 132.439737][ T2121] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 132.439764][ T2121] dump_stack+0x19/0x20 [ 132.439791][ T2121] warn_alloc+0x1e7/0x2c0 [ 132.439813][ T2121] ? __kasan_kmalloc+0x28/0xb0 [ 132.439847][ T2121] ? __cfi_warn_alloc+0x10/0x10 [ 132.439869][ T2121] ? kasan_save_track+0x4f/0x80 [ 132.439900][ T2121] ? dup_task_struct+0xc1/0xd50 [ 132.439926][ T2121] ? __get_vm_area_node+0x3bd/0x3d0 [ 132.439952][ T2121] __vmalloc_node_range_noprof+0x333/0x1480 [ 132.439995][ T2121] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 132.440022][ T2121] ? kasan_save_alloc_info+0x40/0x50 [ 132.440048][ T2121] ? __kasan_slab_alloc+0x73/0x90 [ 132.440080][ T2121] ? arch_dup_task_struct+0x5b/0xe0 [ 132.440111][ T2121] ? __asan_memcpy+0x5a/0x80 [ 132.440139][ T2121] dup_task_struct+0x5d6/0xd50 [ 132.440164][ T2121] ? copy_process+0x55a/0x3220 [ 132.440189][ T2121] ? _raw_spin_lock_irq+0x93/0x120 [ 132.440211][ T2121] ? copy_process+0x3220/0x3220 [ 132.440237][ T2121] ? __kasan_check_write+0x18/0x20 [ 132.440265][ T2121] copy_process+0x55a/0x3220 [ 132.440293][ T2121] ? __cfi_copy_process+0x10/0x10 [ 132.440318][ T2121] ? __kmalloc_cache_noprof+0x23c/0x470 [ 132.440346][ T2121] ? __kasan_check_write+0x18/0x20 [ 132.440372][ T2121] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 132.440409][ T2121] vhost_task_create+0x1f7/0x400 [ 132.440442][ T2121] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 132.440480][ T2121] ? __cfi_vhost_task_create+0x10/0x10 [ 132.440516][ T2121] ? __cfi_vhost_task_fn+0x10/0x10 [ 132.440550][ T2121] ? __kasan_check_write+0x18/0x20 [ 132.440581][ T2121] ? mutex_lock+0x97/0x1d0 [ 132.440613][ T2121] ? __cfi_mutex_lock+0x10/0x10 [ 132.440639][ T2121] ? kernel_text_address+0xa9/0xe0 [ 132.440667][ T2121] kvm_mmu_post_init_vm+0x161/0x300 [ 132.440697][ T2121] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 132.440727][ T2121] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 132.440757][ T2121] ? kstrtoull+0x13b/0x1e0 [ 132.440780][ T2121] ? kstrtouint+0x78/0xf0 [ 132.440800][ T2121] ? ioctl_has_perm+0x1bc/0x500 [ 132.440823][ T2121] ? __asan_memcpy+0x5a/0x80 [ 132.440848][ T2121] ? ioctl_has_perm+0x408/0x500 [ 132.440873][ T2121] ? has_cap_mac_admin+0xd0/0xd0 [ 132.440896][ T2121] ? __kasan_check_write+0x18/0x20 [ 132.440923][ T2121] ? mutex_lock_killable+0x97/0x1d0 [ 132.440951][ T2121] ? __cfi_mutex_lock_killable+0x10/0x10 [ 132.440988][ T2121] ? proc_fail_nth_write+0x184/0x220 [ 132.441014][ T2121] kvm_vcpu_ioctl+0xa48/0x1000 [ 132.441050][ T2121] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 132.441084][ T2121] ? __cfi_vfs_write+0x10/0x10 [ 132.441111][ T2121] ? __kasan_check_write+0x18/0x20 [ 132.441138][ T2121] ? mutex_unlock+0x90/0x240 [ 132.441166][ T2121] ? __cfi_mutex_unlock+0x10/0x10 [ 132.441192][ T2121] ? __fget_files+0x2c5/0x340 [ 132.441226][ T2121] ? __fget_files+0x2c5/0x340 [ 132.441257][ T2121] ? bpf_lsm_file_ioctl+0xd/0x20 [ 132.441280][ T2121] ? security_file_ioctl+0x3e/0x110 [ 132.441302][ T2121] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 132.441334][ T2121] __se_sys_ioctl+0x135/0x1b0 [ 132.441368][ T2121] __x64_sys_ioctl+0x7f/0xa0 [ 132.441399][ T2121] x64_sys_call+0x1878/0x2ee0 [ 132.441432][ T2121] do_syscall_64+0x57/0xf0 [ 132.441455][ T2121] ? clear_bhb_loop+0x50/0xa0 [ 132.441478][ T2121] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 132.441512][ T2121] RIP: 0033:0x7fb8e019c629 [ 132.441532][ T2121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.441553][ T2121] RSP: 002b:00007fb8e1074028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.441579][ T2121] RAX: ffffffffffffffda RBX: 00007fb8e0415fa0 RCX: 00007fb8e019c629 [ 132.441597][ T2121] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 132.441612][ T2121] RBP: 00007fb8e1074090 R08: 0000000000000000 R09: 0000000000000000 [ 132.441627][ T2121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.441640][ T2121] R13: 00007fb8e0416038 R14: 00007fb8e0415fa0 R15: 00007ffc2cb88c28 [ 132.441661][ T2121] [ 132.441714][ T2121] Mem-Info: [ 132.445169][ T36] audit: type=1400 audit(2000000068.454:337): avc: denied { bind } for pid=2124 comm="syz.3.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.456673][ T2121] active_anon:8094 inactive_anon:0 isolated_anon:0 [ 132.456673][ T2121] active_file:17988 inactive_file:2528 isolated_file:0 [ 132.456673][ T2121] unevictable:0 dirty:183 writeback:0 [ 132.456673][ T2121] slab_reclaimable:5471 slab_unreclaimable:70990 [ 132.456673][ T2121] mapped:24855 shmem:168 pagetables:920 [ 132.456673][ T2121] sec_pagetables:0 bounce:0 [ 132.456673][ T2121] kernel_misc_reclaimable:0 [ 132.456673][ T2121] free:1523837 free_pcp:2119 free_cma:0 [ 132.466738][ T663] usb 4-1: USB disconnect, device number 47 [ 132.952260][ T2121] Node 0 active_anon:32376kB inactive_anon:0kB active_file:71952kB inactive_file:10112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99420kB dirty:732kB writeback:0kB shmem:672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5524kB pagetables:3680kB sec_pagetables:0kB all_unreclaimable? no [ 132.984286][ T2121] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963364kB mlocked:0kB bounce:0kB free_pcp:5200kB local_pcp:5200kB free_cma:0kB [ 132.994493][ T66] usb 3-1: USB disconnect, device number 41 [ 133.059754][ T2121] lowmem_reserve[]: 0 3921 3921 [ 133.064798][ T2121] Normal free:3130752kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32476kB inactive_anon:0kB active_file:75952kB inactive_file:10112kB unevictable:1200kB writepending:732kB present:5242880kB managed:4015864kB mlocked:1200kB bounce:0kB free_pcp:4020kB local_pcp:2360kB free_cma:0kB [ 133.139923][ T2121] lowmem_reserve[]: 0 0 0 [ 133.144559][ T2121] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 5*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 133.161124][ T2121] Normal: 6*4kB (ME) 84*8kB (UME) 116*16kB (UE) 338*32kB (UME) 434*64kB (UME) 49*128kB (UME) 17*256kB (UM) 7*512kB (UME) 5*1024kB (UME) 3*2048kB (UM) 747*4096kB (UM) = 3126328kB [ 133.179977][ T2121] 22029 total pagecache pages [ 133.184845][ T2121] 0 pages in swap cache [ 133.189158][ T2121] Free swap = 124448kB [ 133.193521][ T2121] Total swap = 124996kB [ 133.197846][ T2121] 2097051 pages RAM [ 133.201830][ T2121] 0 pages HighMem/MovableOnly [ 133.206717][ T2121] 352244 pages reserved [ 133.211139][ T2121] 0 pages cma reserved [ 133.259123][ T2121] Memory allocations: [ 133.263519][ T2121] 0 B 0 init/main.c:1477 func:do_initcalls [ 133.270964][ T2121] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 133.279603][ T2121] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 133.287423][ T2121] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 133.295758][ T2121] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 133.304120][ T2121] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 133.313286][ T2121] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 133.321387][ T2121] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 133.329694][ T2121] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 133.337742][ T2121] 0 B 0 init/initramfs.c:101 func:find_link [ 133.593606][ T36] audit: type=1400 audit(2000000069.604:338): avc: denied { setattr } for pid=2136 comm="syz.1.620" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 133.728712][ T339] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 133.989744][ T2146] netlink: 1143 bytes leftover after parsing attributes in process `syz.1.622'. [ 133.999765][ T339] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.009526][ T339] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 134.019517][ T339] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.034148][ T339] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 134.043310][ T339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 134.051826][ T339] usb 1-1: Product: syz [ 134.056232][ T339] usb 1-1: Manufacturer: syz [ 134.061411][ T339] usb 1-1: SerialNumber: syz [ 134.258392][ T728] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 134.268825][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 134.271072][ T339] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 134.318416][ T66] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 134.408365][ T728] usb 2-1: Using ep0 maxpacket: 32 [ 134.414643][ T728] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 134.422909][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 134.428093][ T728] usb 2-1: config 0 has no interface number 0 [ 134.435452][ T9] usb 4-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 134.445916][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.459045][ T9] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 134.468198][ T728] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 134.477291][ T2134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.477491][ T728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.489499][ T2134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.493901][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.502153][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 134.511083][ T728] usb 2-1: Product: syz [ 134.519102][ T728] usb 2-1: Manufacturer: syz [ 134.520593][ T2134] overlayfs: failed to resolve './file1': -2 [ 134.524223][ T728] usb 2-1: SerialNumber: syz [ 134.533689][ T66] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 134.535574][ T9] usb 4-1: config 0 descriptor?? [ 134.543850][ T66] usb 3-1: config 0 has no interface number 0 [ 134.554621][ T728] usb 2-1: config 0 descriptor?? [ 134.557770][ T66] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 134.567628][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 134.570998][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.580536][ T728] smsc95xx v2.0.0 [ 134.587384][ T31] usb 1-1: USB disconnect, device number 48 [ 134.596934][ T31] usblp0: removed [ 134.603045][ T66] usb 3-1: Product: syz [ 134.607376][ T66] usb 3-1: Manufacturer: syz [ 134.612047][ T66] usb 3-1: SerialNumber: syz [ 134.617550][ T66] usb 3-1: config 0 descriptor?? [ 134.624088][ T66] smsc95xx v2.0.0 [ 135.025546][ T66] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 135.036518][ T66] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 135.381973][ T728] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 135.394898][ T728] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 135.404658][ T728] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 135.415864][ T728] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 135.429062][ T728] usb 2-1: USB disconnect, device number 48 [ 136.172389][ T2168] SELinux: policydb version 887511281 does not match my version range 15-33 [ 136.181851][ T2168] SELinux: failed to load policy [ 136.189563][ T36] audit: type=1326 audit(2000000072.204:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.0.631" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8674d9c629 code=0x0 [ 136.253649][ T66] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 136.268516][ T66] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 136.279734][ T66] usb 3-1: USB disconnect, device number 42 [ 137.189556][ T728] usb 4-1: USB disconnect, device number 48 [ 137.329632][ T2191] netlink: 1143 bytes leftover after parsing attributes in process `syz.2.639'. [ 137.588338][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 137.598354][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 137.748342][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 137.755128][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 137.763321][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 137.768792][ T10] usb 3-1: config 0 has no interface number 0 [ 137.780566][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 137.791574][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 137.805589][ T9] usb 1-1: config 0 has no interface number 0 [ 137.814461][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.830187][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 137.842325][ T10] usb 3-1: Product: syz [ 137.846702][ T10] usb 3-1: Manufacturer: syz [ 137.855811][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.872494][ T10] usb 3-1: SerialNumber: syz [ 137.880448][ T9] usb 1-1: Product: syz [ 137.884769][ T9] usb 1-1: Manufacturer: syz [ 137.893133][ T10] usb 3-1: config 0 descriptor?? [ 137.907178][ T10] smsc95xx v2.0.0 [ 137.912795][ T9] usb 1-1: SerialNumber: syz [ 137.924225][ T9] usb 1-1: config 0 descriptor?? [ 137.939691][ T9] smsc95xx v2.0.0 [ 138.346519][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 138.357366][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 138.398367][ T1544] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 138.438431][ T31] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 138.550486][ T1544] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 138.558925][ T1544] usb 2-1: config 179 has no interface number 0 [ 138.565288][ T1544] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 138.576817][ T1544] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 138.587194][ T1544] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 138.598668][ T1544] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 138.608594][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 138.610206][ T1544] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 138.617540][ T31] usb 4-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 138.628683][ T1544] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 138.640376][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.648251][ T1544] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.661832][ T31] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 138.678463][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.679482][ T2205] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 138.694992][ T1544] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 138.696244][ T31] usb 4-1: config 0 descriptor?? [ 138.707105][ T1544] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 138.718870][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 138.731235][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 138.741920][ T31] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 138.743922][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 138.760226][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 138.769625][ T10] usb 3-1: USB disconnect, device number 43 [ 138.909865][ T2205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.918654][ T2205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.926997][ T1544] usb 2-1: USB disconnect, device number 49 [ 139.604460][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 139.652335][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 139.698487][ T9] usb 1-1: USB disconnect, device number 49 [ 140.178397][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 140.187680][ T2228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'. [ 140.205230][ T36] audit: type=1400 audit(2000000076.214:340): avc: denied { execute } for pid=2227 comm="syz.2.653" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 140.263511][ T2236] netlink: 1143 bytes leftover after parsing attributes in process `syz.2.656'. [ 140.328439][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 140.342224][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 140.354302][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 140.365975][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 140.381146][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 140.393490][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 140.434461][ T9] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 140.444402][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.457936][ T9] usb 1-1: Product: syz [ 140.464282][ T9] usb 1-1: Manufacturer: syz [ 140.470007][ T9] usb 1-1: SerialNumber: syz [ 140.505177][ T9] usb 1-1: config 0 descriptor?? [ 140.510456][ T1544] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 140.527801][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 140.668329][ T1544] usb 3-1: Using ep0 maxpacket: 32 [ 140.681858][ T1544] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 140.693242][ T1544] usb 3-1: config 0 has no interface number 0 [ 140.708519][ T1544] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 140.722016][ T1544] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.732912][ T31] usb 1-1: USB disconnect, device number 50 [ 140.749388][ T1544] usb 3-1: Product: syz [ 140.756023][ T1544] usb 3-1: Manufacturer: syz [ 140.761626][ T1544] usb 3-1: SerialNumber: syz [ 140.783689][ T1544] usb 3-1: config 0 descriptor?? [ 140.797178][ T1544] smsc95xx v2.0.0 [ 141.231535][ T10] usb 4-1: USB disconnect, device number 49 [ 141.358398][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 142.551853][ T1544] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 142.565361][ T1544] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 142.577834][ T1544] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 142.592654][ T1544] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 142.608711][ T1544] usb 3-1: USB disconnect, device number 44 [ 142.638510][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 142.646490][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 142.654728][ T9] usb 2-1: config 0 has no interface number 0 [ 142.668873][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 142.678239][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.686438][ T9] usb 2-1: Product: syz [ 142.690778][ T9] usb 2-1: Manufacturer: syz [ 142.695417][ T9] usb 2-1: SerialNumber: syz [ 142.704786][ T9] usb 2-1: config 0 descriptor?? [ 142.716034][ T9] smsc95xx v2.0.0 [ 142.838344][ T342] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 142.968345][ T342] usb 4-1: device descriptor read/64, error -71 [ 143.117377][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 143.128655][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 143.208347][ T342] usb 4-1: device descriptor read/64, error -71 [ 143.348361][ T66] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 143.448360][ T342] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 143.508344][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 143.514921][ T66] usb 3-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 143.525547][ T66] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.538740][ T66] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 143.549328][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.558208][ T66] usb 3-1: config 0 descriptor?? [ 143.569896][ T66] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 143.578356][ T342] usb 4-1: device descriptor read/64, error -71 [ 143.818397][ T342] usb 4-1: device descriptor read/64, error -71 [ 143.868352][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 143.928500][ T342] usb usb4-port1: attempt power cycle [ 143.998354][ T10] usb 1-1: device descriptor read/64, error -71 [ 144.238371][ T10] usb 1-1: device descriptor read/64, error -71 [ 144.268354][ T342] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 144.289535][ T342] usb 4-1: device descriptor read/8, error -71 [ 144.344345][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 144.357966][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 144.367366][ T9] usb 2-1: USB disconnect, device number 50 [ 144.419839][ T342] usb 4-1: device descriptor read/8, error -71 [ 144.478421][ T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 144.608385][ T10] usb 1-1: device descriptor read/64, error -71 [ 144.658355][ T342] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 144.679649][ T342] usb 4-1: device descriptor read/8, error -71 [ 144.809716][ T342] usb 4-1: device descriptor read/8, error -71 [ 144.848416][ T10] usb 1-1: device descriptor read/64, error -71 [ 144.918461][ T342] usb usb4-port1: unable to enumerate USB device [ 144.963427][ T10] usb usb1-port1: attempt power cycle [ 145.021684][ T2270] fuse: Invalid rootmode [ 145.308387][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 145.329792][ T10] usb 1-1: device descriptor read/8, error -71 [ 145.459992][ T10] usb 1-1: device descriptor read/8, error -71 [ 145.698445][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 145.720586][ T10] usb 1-1: device descriptor read/8, error -71 [ 148.628598][ T10] usb 1-1: device descriptor read/8, error -71 [ 148.687957][ T31] usb 3-1: USB disconnect, device number 45 [ 148.715379][ T2292] netlink: 1143 bytes leftover after parsing attributes in process `syz.1.677'. [ 148.738686][ T10] usb usb1-port1: unable to enumerate USB device [ 148.968352][ T66] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 149.108335][ T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 149.118319][ T66] usb 4-1: Using ep0 maxpacket: 32 [ 149.124963][ T66] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 149.133356][ T66] usb 4-1: config 0 has no interface number 0 [ 149.141214][ T66] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 149.150570][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.158992][ T66] usb 4-1: Product: syz [ 149.163268][ T66] usb 4-1: Manufacturer: syz [ 149.167920][ T66] usb 4-1: SerialNumber: syz [ 149.175106][ T66] usb 4-1: config 0 descriptor?? [ 149.183598][ T66] smsc95xx v2.0.0 [ 149.269440][ T10] usb 1-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 149.298344][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.317168][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 149.338426][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.360785][ T10] usb 1-1: config 0 descriptor?? [ 149.599719][ T2296] netlink: 56 bytes leftover after parsing attributes in process `syz.0.679'. [ 149.628695][ T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 149.639755][ T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 149.828723][ T31] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 149.998338][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 150.004825][ T31] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 150.014295][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.032636][ T31] usb 3-1: config 0 descriptor?? [ 150.041420][ T31] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 150.452701][ T10] usb 1-1: string descriptor 0 read error: -71 [ 150.460016][ T10] usb 1-1: USB disconnect, device number 55 [ 150.838578][ T36] audit: type=1400 audit(2000000086.844:341): avc: denied { map } for pid=2308 comm="syz.0.683" path="socket:[20395]" dev="sockfs" ino=20395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 150.867597][ T31] usb 3-1: Detected FT232A [ 150.878468][ T31] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 150.897282][ T31] usb 3-1: USB disconnect, device number 46 [ 150.910973][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 150.922307][ T31] ftdi_sio 3-1:0.0: device disconnected [ 151.296450][ T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 151.312505][ T66] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 151.324649][ T66] usb 4-1: USB disconnect, device number 54 [ 151.418405][ T31] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 151.568325][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 151.574899][ T31] usb 3-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 151.585619][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.598850][ T31] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 151.608550][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.619023][ T31] usb 3-1: config 0 descriptor?? [ 151.629575][ T31] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 153.090170][ T2330] netlink: 1143 bytes leftover after parsing attributes in process `syz.0.688'. [ 153.659782][ T36] audit: type=1400 audit(2000000089.674:342): avc: denied { connect } for pid=2341 comm="syz.0.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.978341][ T66] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 154.138343][ T66] usb 1-1: Using ep0 maxpacket: 32 [ 154.144908][ T66] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 154.153440][ T66] usb 1-1: config 0 has no interface number 0 [ 154.162020][ T66] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 154.171408][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.179647][ T66] usb 1-1: Product: syz [ 154.183940][ T66] usb 1-1: Manufacturer: syz [ 154.188804][ T66] usb 1-1: SerialNumber: syz [ 154.195866][ T66] usb 1-1: config 0 descriptor?? [ 154.203099][ T66] smsc95xx v2.0.0 [ 154.603424][ T66] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 154.614303][ T66] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 155.831693][ T66] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 155.848929][ T66] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 155.862047][ T66] usb 1-1: USB disconnect, device number 56 [ 155.930342][ T31] usb 3-1: USB disconnect, device number 47 [ 156.816411][ T2365] netlink: 1143 bytes leftover after parsing attributes in process `syz.3.701'. [ 157.330302][ T2370] cgroup: noprefix used incorrectly [ 157.416380][ T2378] FAULT_INJECTION: forcing a failure. [ 157.416380][ T2378] name failslab, interval 1, probability 0, space 0, times 0 [ 157.439707][ T2378] CPU: 1 UID: 0 PID: 2378 Comm: syz.3.707 Not tainted syzkaller #0 ec67a0b9c3f9090985a335a00964337a606b4ed6 [ 157.439750][ T2378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.439766][ T2378] Call Trace: [ 157.439775][ T2378] [ 157.439785][ T2378] __dump_stack+0x21/0x30 [ 157.439821][ T2378] dump_stack_lvl+0x140/0x1c0 [ 157.439851][ T2378] ? __cfi_dump_stack_lvl+0x10/0x10 [ 157.439883][ T2378] dump_stack+0x19/0x20 [ 157.439911][ T2378] should_fail_ex+0x3d7/0x530 [ 157.439938][ T2378] should_failslab+0xac/0x100 [ 157.439973][ T2378] __kmalloc_node_noprof+0x6c/0x4f0 [ 157.440004][ T2378] ? __kvmalloc_node_noprof+0x128/0x300 [ 157.440034][ T2378] __kvmalloc_node_noprof+0x128/0x300 [ 157.440062][ T2378] ? __kasan_check_write+0x18/0x20 [ 157.440092][ T2378] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 157.440120][ T2378] ? selinux_file_permission+0x318/0xb60 [ 157.440148][ T2378] seq_read_iter+0x21f/0xfd0 [ 157.440183][ T2378] ? __kasan_check_write+0x18/0x20 [ 157.440211][ T2378] ? proc_fail_nth_write+0x184/0x220 [ 157.440233][ T2378] vfs_read+0x654/0xcb0 [ 157.440259][ T2378] ? __cfi_vfs_read+0x10/0x10 [ 157.440287][ T2378] ? __cfi_mutex_lock+0x10/0x10 [ 157.440319][ T2378] ksys_read+0x145/0x260 [ 157.440347][ T2378] ? __cfi_ksys_read+0x10/0x10 [ 157.440377][ T2378] ? __kasan_check_read+0x15/0x20 [ 157.440406][ T2378] __x64_sys_read+0x7f/0x90 [ 157.440435][ T2378] x64_sys_call+0x2638/0x2ee0 [ 157.440480][ T2378] do_syscall_64+0x57/0xf0 [ 157.440503][ T2378] ? clear_bhb_loop+0x50/0xa0 [ 157.440527][ T2378] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 157.440564][ T2378] RIP: 0033:0x7fc64999c629 [ 157.440585][ T2378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.440607][ T2378] RSP: 002b:00007fc64a8f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.440634][ T2378] RAX: ffffffffffffffda RBX: 00007fc649c15fa0 RCX: 00007fc64999c629 [ 157.440653][ T2378] RDX: 000000000000206d RSI: 0000200000003240 RDI: 0000000000000003 [ 157.440671][ T2378] RBP: 00007fc64a8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 157.440687][ T2378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.440703][ T2378] R13: 00007fc649c16038 R14: 00007fc649c15fa0 R15: 00007ffee5909d48 [ 157.440731][ T2378] [ 157.804997][ T2383] overlayfs: lower data-only dirs require metacopy support. [ 157.813176][ T2384] overlayfs: lower data-only dirs require metacopy support. [ 157.948316][ T31] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 158.138351][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 158.147795][ T31] usb 4-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 158.158836][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 158.171845][ T31] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 158.181053][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.194551][ T31] usb 4-1: config 0 descriptor?? [ 158.203277][ T31] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 158.278385][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 158.328415][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 158.428494][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 158.434786][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.445752][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.455647][ T10] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 158.464835][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.473021][ T342] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 158.481588][ T10] usb 2-1: config 0 descriptor?? [ 158.488328][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 158.494644][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 158.502854][ T9] usb 3-1: config 0 has no interface number 0 [ 158.510875][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 158.520068][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.528251][ T9] usb 3-1: Product: syz [ 158.532563][ T9] usb 3-1: Manufacturer: syz [ 158.537373][ T9] usb 3-1: SerialNumber: syz [ 158.543138][ T9] usb 3-1: config 0 descriptor?? [ 158.549254][ T9] smsc95xx v2.0.0 [ 158.628328][ T342] usb 1-1: Using ep0 maxpacket: 32 [ 158.634747][ T342] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 158.642948][ T342] usb 1-1: config 0 has no interface number 0 [ 158.650828][ T342] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 158.660028][ T342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.668200][ T342] usb 1-1: Product: syz [ 158.672609][ T342] usb 1-1: Manufacturer: syz [ 158.677249][ T342] usb 1-1: SerialNumber: syz [ 158.682824][ T342] usb 1-1: config 0 descriptor?? [ 158.689187][ T342] smsc95xx v2.0.0 [ 158.889892][ T10] zydacron 0003:13EC:0006.000F: item fetching failed at offset 0/2 [ 158.899461][ T10] zydacron 0003:13EC:0006.000F: parse failed [ 158.905515][ T10] zydacron 0003:13EC:0006.000F: probe with driver zydacron failed with error -22 [ 159.089563][ T342] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 159.108321][ T342] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 159.551075][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 159.567364][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 159.586435][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 159.608631][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 159.628882][ T9] usb 3-1: USB disconnect, device number 48 [ 160.332232][ T342] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 160.350681][ T342] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 160.368492][ T342] usb 1-1: USB disconnect, device number 57 [ 160.508312][ T9] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 160.669775][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.685555][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 160.708840][ T9] usb 3-1: too many endpoints for config 1 interface 0 altsetting 7: 254, using maximum allowed: 30 [ 160.731776][ T9] usb 3-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 160.757809][ T9] usb 3-1: config 1 interface 0 has no altsetting 1 [ 160.773097][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 160.789165][ T31] usb 4-1: USB disconnect, device number 55 [ 160.792407][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.814126][ T9] usb 3-1: Product: syz [ 160.822935][ T9] usb 3-1: Manufacturer: syz [ 160.833067][ T9] usb 3-1: SerialNumber: syz [ 160.856089][ T2408] FAULT_INJECTION: forcing a failure. [ 160.856089][ T2408] name failslab, interval 1, probability 0, space 0, times 0 [ 160.869390][ T2408] CPU: 1 UID: 0 PID: 2408 Comm: syz.3.718 Not tainted syzkaller #0 ec67a0b9c3f9090985a335a00964337a606b4ed6 [ 160.869430][ T2408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.869446][ T2408] Call Trace: [ 160.869455][ T2408] [ 160.869465][ T2408] __dump_stack+0x21/0x30 [ 160.869500][ T2408] dump_stack_lvl+0x140/0x1c0 [ 160.869531][ T2408] ? __cfi_dump_stack_lvl+0x10/0x10 [ 160.869562][ T2408] ? vsnprintf+0x7b4/0x1ad0 [ 160.869598][ T2408] dump_stack+0x19/0x20 [ 160.869626][ T2408] should_fail_ex+0x3d7/0x530 [ 160.869651][ T2408] ? __cfi_cgroup_show_path+0x10/0x10 [ 160.869686][ T2408] should_failslab+0xac/0x100 [ 160.869722][ T2408] __kmalloc_cache_noprof+0x41/0x470 [ 160.869752][ T2408] ? cgroup_show_path+0xc4/0x4a0 [ 160.869785][ T2408] ? seq_printf+0x1e3/0x290 [ 160.869822][ T2408] ? __cfi_cgroup_show_path+0x10/0x10 [ 160.869856][ T2408] cgroup_show_path+0xc4/0x4a0 [ 160.869889][ T2408] ? __cfi_cgroup_show_path+0x10/0x10 [ 160.869924][ T2408] kernfs_sop_show_path+0x120/0x160 [ 160.869955][ T2408] ? __cfi_kernfs_sop_show_path+0x10/0x10 [ 160.869986][ T2408] show_path+0xa7/0xe0 [ 160.870016][ T2408] show_mountinfo+0x1ce/0xb40 [ 160.870042][ T2408] ? __cfi_show_mountinfo+0x10/0x10 [ 160.870067][ T2408] ? __kvmalloc_node_noprof+0x173/0x300 [ 160.870097][ T2408] ? selinux_file_permission+0x318/0xb60 [ 160.870124][ T2408] m_show+0x7f/0x90 [ 160.870196][ T2408] seq_read_iter+0xae3/0xfd0 [ 160.870236][ T2408] vfs_read+0x654/0xcb0 [ 160.870265][ T2408] ? __cfi_vfs_read+0x10/0x10 [ 160.870300][ T2408] ? __cfi_mutex_lock+0x10/0x10 [ 160.870331][ T2408] ksys_read+0x145/0x260 [ 160.870360][ T2408] ? __cfi_ksys_read+0x10/0x10 [ 160.870389][ T2408] ? __kasan_check_read+0x15/0x20 [ 160.870418][ T2408] __x64_sys_read+0x7f/0x90 [ 160.870447][ T2408] x64_sys_call+0x2638/0x2ee0 [ 160.870479][ T2408] do_syscall_64+0x57/0xf0 [ 160.870502][ T2408] ? clear_bhb_loop+0x50/0xa0 [ 160.870527][ T2408] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 160.870563][ T2408] RIP: 0033:0x7fc64999c629 [ 160.870584][ T2408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.870612][ T2408] RSP: 002b:00007fc64a8f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.870646][ T2408] RAX: ffffffffffffffda RBX: 00007fc649c15fa0 RCX: 00007fc64999c629 [ 160.870665][ T2408] RDX: 000000000000206d RSI: 0000200000003240 RDI: 0000000000000003 [ 160.870682][ T2408] RBP: 00007fc64a8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 160.870703][ T2408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.870726][ T2408] R13: 00007fc649c16038 R14: 00007fc649c15fa0 R15: 00007ffee5909d48 [ 160.870747][ T2408] [ 160.980924][ T10] usb 2-1: USB disconnect, device number 51 [ 161.261385][ T46] usb 3-1: USB disconnect, device number 49 [ 162.463205][ T2421] syzkaller0: entered promiscuous mode [ 162.486727][ T2421] syzkaller0: entered allmulticast mode [ 162.728360][ T46] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 162.808402][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 162.878537][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 162.886215][ T46] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 163.846501][ T46] usb 4-1: config 0 has no interface number 0 [ 163.854867][ T46] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 163.864186][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.868388][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 163.872803][ T46] usb 4-1: Product: syz [ 163.879397][ T10] usb 2-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 163.882241][ T46] usb 4-1: Manufacturer: syz [ 163.893109][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.896774][ T46] usb 4-1: SerialNumber: syz [ 163.910260][ T1544] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 164.866210][ T46] usb 4-1: config 0 descriptor?? [ 164.874477][ T46] smsc95xx v2.0.0 [ 164.875919][ T10] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 164.889025][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.898647][ T10] usb 2-1: config 0 descriptor?? [ 164.908321][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 165.818321][ T1544] usb 1-1: Using ep0 maxpacket: 32 [ 165.831559][ T10] usb 2-1: USB disconnect, device number 52 [ 165.861141][ T1544] usb 1-1: device descriptor read/all, error -71 [ 165.908910][ T2454] FAULT_INJECTION: forcing a failure. [ 165.908910][ T2454] name failslab, interval 1, probability 0, space 0, times 0 [ 165.924308][ T2454] CPU: 1 UID: 0 PID: 2454 Comm: syz.0.734 Not tainted syzkaller #0 ec67a0b9c3f9090985a335a00964337a606b4ed6 [ 165.924353][ T2454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.924385][ T2454] Call Trace: [ 165.924394][ T2454] [ 165.924404][ T2454] __dump_stack+0x21/0x30 [ 165.924438][ T2454] dump_stack_lvl+0x140/0x1c0 [ 165.924467][ T2454] ? __cfi_dump_stack_lvl+0x10/0x10 [ 165.924498][ T2454] ? vsnprintf+0x7b4/0x1ad0 [ 165.924532][ T2454] dump_stack+0x19/0x20 [ 165.924560][ T2454] should_fail_ex+0x3d7/0x530 [ 165.924586][ T2454] ? __cfi_cgroup_show_path+0x10/0x10 [ 165.924633][ T2454] should_failslab+0xac/0x100 [ 165.924667][ T2454] __kmalloc_cache_noprof+0x41/0x470 [ 165.924696][ T2454] ? cgroup_show_path+0xc4/0x4a0 [ 165.924729][ T2454] ? seq_printf+0x1e3/0x290 [ 165.924764][ T2454] ? __cfi_cgroup_show_path+0x10/0x10 [ 165.924806][ T2454] cgroup_show_path+0xc4/0x4a0 [ 165.924840][ T2454] ? __cfi_cgroup_show_path+0x10/0x10 [ 165.924874][ T2454] kernfs_sop_show_path+0x120/0x160 [ 165.924904][ T2454] ? __cfi_kernfs_sop_show_path+0x10/0x10 [ 165.924934][ T2454] show_path+0xa7/0xe0 [ 165.924964][ T2454] show_mountinfo+0x1ce/0xb40 [ 165.924991][ T2454] ? __cfi_show_mountinfo+0x10/0x10 [ 165.925015][ T2454] ? __kvmalloc_node_noprof+0x173/0x300 [ 165.925044][ T2454] ? selinux_file_permission+0x318/0xb60 [ 165.925070][ T2454] m_show+0x7f/0x90 [ 165.925094][ T2454] seq_read_iter+0xae3/0xfd0 [ 165.925133][ T2454] vfs_read+0x654/0xcb0 [ 165.925163][ T2454] ? __cfi_vfs_read+0x10/0x10 [ 165.925191][ T2454] ? __cfi_mutex_lock+0x10/0x10 [ 165.925223][ T2454] ksys_read+0x145/0x260 [ 165.925251][ T2454] ? __cfi_ksys_read+0x10/0x10 [ 165.925280][ T2454] ? __kasan_check_read+0x15/0x20 [ 165.925308][ T2454] __x64_sys_read+0x7f/0x90 [ 165.925347][ T2454] x64_sys_call+0x2638/0x2ee0 [ 165.925428][ T2454] do_syscall_64+0x57/0xf0 [ 165.925473][ T2454] ? clear_bhb_loop+0x50/0xa0 [ 165.925556][ T2454] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 165.925614][ T2454] RIP: 0033:0x7f8674d9c629 [ 165.925646][ T2454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.925692][ T2454] RSP: 002b:00007f8675c2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 165.925738][ T2454] RAX: ffffffffffffffda RBX: 00007f8675015fa0 RCX: 00007f8674d9c629 [ 165.925762][ T2454] RDX: 000000000000206d RSI: 0000200000003240 RDI: 0000000000000003 [ 165.925779][ T2454] RBP: 00007f8675c2c090 R08: 0000000000000000 R09: 0000000000000000 [ 165.925802][ T2454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.925817][ T2454] R13: 00007f8675016038 R14: 00007f8675015fa0 R15: 00007fff381f72d8 [ 165.925839][ T2454] [ 166.292727][ T36] audit: type=1400 audit(2000000102.304:343): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 167.558375][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 167.661036][ T46] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 167.682956][ T46] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 167.692702][ T46] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 167.703942][ T46] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 167.713909][ T46] usb 4-1: USB disconnect, device number 56 [ 167.738328][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 167.748563][ T10] usb 3-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 167.764638][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.781221][ T2483] FAULT_INJECTION: forcing a failure. [ 167.781221][ T2483] name failslab, interval 1, probability 0, space 0, times 0 [ 167.796709][ T10] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 167.805983][ T2483] CPU: 0 UID: 0 PID: 2483 Comm: syz.1.744 Not tainted syzkaller #0 ec67a0b9c3f9090985a335a00964337a606b4ed6 [ 167.806017][ T2483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 167.806031][ T2483] Call Trace: [ 167.806039][ T2483] [ 167.806047][ T2483] __dump_stack+0x21/0x30 [ 167.806079][ T2483] dump_stack_lvl+0x140/0x1c0 [ 167.806106][ T2483] ? __cfi_dump_stack_lvl+0x10/0x10 [ 167.806134][ T2483] ? vsnprintf+0x7b4/0x1ad0 [ 167.806169][ T2483] dump_stack+0x19/0x20 [ 167.806203][ T2483] should_fail_ex+0x3d7/0x530 [ 167.806226][ T2483] ? __cfi_cgroup_show_path+0x10/0x10 [ 167.806261][ T2483] should_failslab+0xac/0x100 [ 167.806295][ T2483] __kmalloc_cache_noprof+0x41/0x470 [ 167.806326][ T2483] ? cgroup_show_path+0xc4/0x4a0 [ 167.806361][ T2483] ? seq_printf+0x1e3/0x290 [ 167.806498][ T2483] ? __cfi_cgroup_show_path+0x10/0x10 [ 167.806534][ T2483] cgroup_show_path+0xc4/0x4a0 [ 167.806566][ T2483] ? __cfi_cgroup_show_path+0x10/0x10 [ 167.806599][ T2483] kernfs_sop_show_path+0x120/0x160 [ 167.806630][ T2483] ? __cfi_kernfs_sop_show_path+0x10/0x10 [ 167.806659][ T2483] show_path+0xa7/0xe0 [ 167.806690][ T2483] show_mountinfo+0x1ce/0xb40 [ 167.806715][ T2483] ? __cfi_show_mountinfo+0x10/0x10 [ 167.806739][ T2483] ? __kvmalloc_node_noprof+0x173/0x300 [ 167.806769][ T2483] ? selinux_file_permission+0x318/0xb60 [ 167.806796][ T2483] m_show+0x7f/0x90 [ 167.806820][ T2483] seq_read_iter+0xae3/0xfd0 [ 167.806858][ T2483] vfs_read+0x654/0xcb0 [ 167.806888][ T2483] ? __cfi_vfs_read+0x10/0x10 [ 167.806917][ T2483] ? __cfi_mutex_lock+0x10/0x10 [ 167.806949][ T2483] ksys_read+0x145/0x260 [ 167.806978][ T2483] ? __cfi_ksys_read+0x10/0x10 [ 167.807007][ T2483] ? __kasan_check_read+0x15/0x20 [ 167.807036][ T2483] __x64_sys_read+0x7f/0x90 [ 167.807066][ T2483] x64_sys_call+0x2638/0x2ee0 [ 167.807099][ T2483] do_syscall_64+0x57/0xf0 [ 167.807122][ T2483] ? clear_bhb_loop+0x50/0xa0 [ 167.807146][ T2483] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 167.807183][ T2483] RIP: 0033:0x7fb8e019c629 [ 167.807205][ T2483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.807226][ T2483] RSP: 002b:00007fb8e1074028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.807252][ T2483] RAX: ffffffffffffffda RBX: 00007fb8e0415fa0 RCX: 00007fb8e019c629 [ 167.807270][ T2483] RDX: 000000000000206d RSI: 0000200000003240 RDI: 0000000000000003 [ 167.807287][ T2483] RBP: 00007fb8e1074090 R08: 0000000000000000 R09: 0000000000000000 [ 167.807304][ T2483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.807320][ T2483] R13: 00007fb8e0416038 R14: 00007fb8e0415fa0 R15: 00007ffc2cb88c28 [ 167.807342][ T2483] [ 168.077518][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.086473][ T10] usb 3-1: config 0 descriptor?? [ 168.088446][ T46] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 168.094075][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 168.101561][ T31] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 168.268418][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 168.273625][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 168.280523][ T31] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 168.291068][ T46] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 168.299317][ T46] usb 4-1: config 0 has no interface number 0 [ 168.305674][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.316411][ T46] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 168.325732][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.334965][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.343051][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.357073][ T46] usb 4-1: Product: syz [ 168.361760][ T31] usb 1-1: Product: syz [ 168.366008][ T31] usb 1-1: Manufacturer: syz [ 168.372647][ T46] usb 4-1: Manufacturer: syz [ 168.377454][ T46] usb 4-1: SerialNumber: syz [ 168.382229][ T31] usb 1-1: SerialNumber: syz [ 168.387870][ T46] usb 4-1: config 0 descriptor?? [ 168.396488][ T46] smsc95xx v2.0.0 [ 168.616357][ T31] usb 1-1: 0:2 : does not exist [ 168.624752][ T31] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 168.635830][ T31] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 168.646269][ T31] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 168.656396][ T31] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 168.670672][ T31] usb 1-1: USB disconnect, device number 60 [ 168.680990][ T745] udevd[745]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 168.801209][ T46] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 168.812071][ T46] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 170.368363][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 170.509749][ T1544] usb 3-1: USB disconnect, device number 50 [ 170.520342][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 170.531205][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 170.536665][ T2511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.753'. [ 170.539638][ T10] usb 2-1: config 0 has no interface number 0 [ 170.556244][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 170.565546][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.573655][ T10] usb 2-1: Product: syz [ 170.577902][ T10] usb 2-1: Manufacturer: syz [ 170.582811][ T10] usb 2-1: SerialNumber: syz [ 170.588764][ T10] usb 2-1: config 0 descriptor?? [ 170.597193][ T10] smsc95xx v2.0.0 [ 170.815735][ T36] audit: type=1400 audit(2000000106.824:344): avc: denied { lock } for pid=2522 comm="syz.2.758" path="socket:[22667]" dev="sockfs" ino=22667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 170.863059][ T2523] syzkaller0: entered promiscuous mode [ 170.868657][ T2523] syzkaller0: entered allmulticast mode [ 170.916067][ T46] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 170.927122][ T46] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 170.936970][ T46] usb 4-1: USB disconnect, device number 57 [ 172.366245][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 172.378000][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 172.388841][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 172.415162][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 172.820730][ T10] usb 2-1: USB disconnect, device number 53 [ 172.828720][ T31] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 172.978371][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 172.985455][ T31] usb 4-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 172.996236][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.011618][ T31] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 173.022044][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.031415][ T31] usb 4-1: config 0 descriptor?? [ 173.037883][ T31] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 173.088001][ T2543] FAULT_INJECTION: forcing a failure. [ 173.088001][ T2543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.103324][ T2543] CPU: 0 UID: 0 PID: 2543 Comm: syz.2.765 Not tainted syzkaller #0 ec67a0b9c3f9090985a335a00964337a606b4ed6 [ 173.103357][ T2543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.103371][ T2543] Call Trace: [ 173.103378][ T2543] [ 173.103386][ T2543] __dump_stack+0x21/0x30 [ 173.103416][ T2543] dump_stack_lvl+0x140/0x1c0 [ 173.103442][ T2543] ? __cfi_dump_stack_lvl+0x10/0x10 [ 173.103468][ T2543] ? __cfi_seq_printf+0x10/0x10 [ 173.103498][ T2543] dump_stack+0x19/0x20 [ 173.103521][ T2543] should_fail_ex+0x3d7/0x530 [ 173.103544][ T2543] should_fail+0xf/0x20 [ 173.103563][ T2543] should_fail_usercopy+0x1e/0x30 [ 173.103586][ T2543] _copy_to_iter+0x1a9/0x1510 [ 173.103611][ T2543] ? __cfi_fuse_show_options+0x10/0x10 [ 173.103631][ T2543] ? show_mountinfo+0x978/0xb40 [ 173.103652][ T2543] ? __virt_addr_valid+0x2a6/0x380 [ 173.103672][ T2543] ? __cfi__copy_to_iter+0x10/0x10 [ 173.103697][ T2543] ? __check_object_size+0x527/0x830 [ 173.103722][ T2543] ? __cfi___check_object_size+0x10/0x10 [ 173.103748][ T2543] ? __kasan_check_write+0x18/0x20 [ 173.103772][ T2543] ? up_read+0x26/0x1c0 [ 173.103797][ T2543] seq_read_iter+0xd34/0xfd0 [ 173.103828][ T2543] vfs_read+0x654/0xcb0 [ 173.103872][ T2543] ? __cfi_vfs_read+0x10/0x10 [ 173.103896][ T2543] ? __cfi_mutex_lock+0x10/0x10 [ 173.103924][ T2543] ksys_read+0x145/0x260 [ 173.103948][ T2543] ? __cfi_ksys_read+0x10/0x10 [ 173.103972][ T2543] ? __kasan_check_read+0x15/0x20 [ 173.103996][ T2543] __x64_sys_read+0x7f/0x90 [ 173.104021][ T2543] x64_sys_call+0x2638/0x2ee0 [ 173.104059][ T2543] do_syscall_64+0x57/0xf0 [ 173.104079][ T2543] ? clear_bhb_loop+0x50/0xa0 [ 173.104099][ T2543] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 173.104130][ T2543] RIP: 0033:0x7f10d059c629 [ 173.104149][ T2543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.104167][ T2543] RSP: 002b:00007f10d1409028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 173.104189][ T2543] RAX: ffffffffffffffda RBX: 00007f10d0815fa0 RCX: 00007f10d059c629 [ 173.104205][ T2543] RDX: 000000000000206d RSI: 0000200000003240 RDI: 0000000000000003 [ 173.104219][ T2543] RBP: 00007f10d1409090 R08: 0000000000000000 R09: 0000000000000000 [ 173.104233][ T2543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.104246][ T2543] R13: 00007f10d0816038 R14: 00007f10d0815fa0 R15: 00007ffe03ddd5a8 [ 173.104264][ T2543] [ 174.618317][ T46] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 174.768338][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 174.774886][ T46] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 174.783598][ T46] usb 3-1: config 0 has no interface number 0 [ 174.791668][ T46] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 174.801315][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.809554][ T46] usb 3-1: Product: syz [ 174.813991][ T46] usb 3-1: Manufacturer: syz [ 174.818902][ T46] usb 3-1: SerialNumber: syz [ 174.842364][ T46] usb 3-1: config 0 descriptor?? [ 174.849821][ T46] smsc95xx v2.0.0 [ 175.249850][ T46] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 175.270481][ T46] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 176.324197][ T36] audit: type=1400 audit(2000000112.334:345): avc: denied { validate_trans } for pid=2571 comm="syz.0.774" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 176.484228][ T46] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 176.501560][ T46] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 176.512542][ T46] usb 3-1: USB disconnect, device number 51 [ 176.678426][ T31] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 176.808325][ T31] usb 1-1: device descriptor read/64, error -71 [ 177.048331][ T31] usb 1-1: device descriptor read/64, error -71 [ 177.288363][ T31] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 177.299084][ T46] usb 4-1: USB disconnect, device number 58 [ 177.321204][ T2578] FAULT_INJECTION: forcing a failure. [ 177.321204][ T2578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.334513][ T2578] CPU: 1 UID: 0 PID: 2578 Comm: syz.3.776 Not tainted syzkaller #0 ec67a0b9c3f9090985a335a00964337a606b4ed6 [ 177.334552][ T2578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 177.334569][ T2578] Call Trace: [ 177.334577][ T2578] [ 177.334586][ T2578] __dump_stack+0x21/0x30 [ 177.334621][ T2578] dump_stack_lvl+0x140/0x1c0 [ 177.334651][ T2578] ? __cfi_dump_stack_lvl+0x10/0x10 [ 177.334681][ T2578] ? check_stack_object+0x12b/0x150 [ 177.334711][ T2578] dump_stack+0x19/0x20 [ 177.334739][ T2578] should_fail_ex+0x3d7/0x530 [ 177.334765][ T2578] should_fail+0xf/0x20 [ 177.334788][ T2578] should_fail_usercopy+0x1e/0x30 [ 177.334816][ T2578] _copy_to_user+0x24/0xa0 [ 177.334846][ T2578] simple_read_from_buffer+0xed/0x160 [ 177.334884][ T2578] proc_fail_nth_read+0x1aa/0x220 [ 177.334909][ T2578] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 177.334934][ T2578] ? bpf_lsm_file_permission+0xd/0x20 [ 177.334957][ T2578] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 177.334981][ T2578] vfs_read+0x289/0xcb0 [ 177.335020][ T2578] ? __cfi_vfs_read+0x10/0x10 [ 177.335047][ T2578] ? __kasan_check_write+0x18/0x20 [ 177.335075][ T2578] ? mutex_lock+0x97/0x1d0 [ 177.335103][ T2578] ? __cfi_mutex_lock+0x10/0x10 [ 177.335131][ T2578] ? __fget_files+0x2c5/0x340 [ 177.335165][ T2578] ksys_read+0x145/0x260 [ 177.335193][ T2578] ? __cfi_ksys_read+0x10/0x10 [ 177.335222][ T2578] ? __kasan_check_read+0x15/0x20 [ 177.335250][ T2578] __x64_sys_read+0x7f/0x90 [ 177.335279][ T2578] x64_sys_call+0x2638/0x2ee0 [ 177.335311][ T2578] do_syscall_64+0x57/0xf0 [ 177.335333][ T2578] ? clear_bhb_loop+0x50/0xa0 [ 177.335357][ T2578] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 177.335393][ T2578] RIP: 0033:0x7fc64995cece [ 177.335413][ T2578] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 177.335434][ T2578] RSP: 002b:00007fc64a8f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.335461][ T2578] RAX: ffffffffffffffda RBX: 00007fc64a8f66c0 RCX: 00007fc64995cece [ 177.335480][ T2578] RDX: 000000000000000f RSI: 00007fc64a8f60a0 RDI: 0000000000000006 [ 177.335496][ T2578] RBP: 00007fc64a8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 177.335511][ T2578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.335527][ T2578] R13: 00007fc649c16038 R14: 00007fc649c15fa0 R15: 00007ffee5909d48 [ 177.335548][ T2578] [ 177.622953][ T36] audit: type=1400 audit(2000000113.624:346): avc: denied { checkpoint_restore } for pid=2581 comm="syz.3.778" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 177.645240][ T31] usb 1-1: device descriptor read/64, error -71 [ 177.888366][ T31] usb 1-1: device descriptor read/64, error -71 [ 177.988337][ T46] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 177.999729][ T31] usb usb1-port1: attempt power cycle [ 178.068124][ T36] audit: type=1400 audit(2000000114.074:347): avc: denied { mounton } for pid=2591 comm="syz.2.782" path="/199/file0" dev="tmpfs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 178.068147][ T2592] fuse: Unknown parameter 'f9A€*uuæiå³íˆÁ/ú-¾ì÷9+„ÈB`¯’´' [ 178.098930][ T36] audit: type=1400 audit(2000000114.074:348): avc: denied { append } for pid=2591 comm="syz.2.782" name="netlink" dev="proc" ino=4026532392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 178.178350][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 178.185207][ T46] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 178.193826][ T46] usb 4-1: config 0 has no interface number 0 [ 178.201632][ T46] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 178.210943][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.219480][ T46] usb 4-1: Product: syz [ 178.223676][ T46] usb 4-1: Manufacturer: syz [ 178.228346][ T46] usb 4-1: SerialNumber: syz [ 178.233652][ T46] usb 4-1: config 0 descriptor?? [ 178.239668][ T46] smsc95xx v2.0.0 [ 178.308354][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 178.368314][ T31] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 178.389394][ T31] usb 1-1: device descriptor read/8, error -71 [ 178.438366][ T10] usb 3-1: device descriptor read/64, error -71 [ 178.520982][ T31] usb 1-1: device descriptor read/8, error -71 [ 178.768328][ T31] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 178.799441][ T31] usb 1-1: device descriptor read/8, error -71 [ 178.929428][ T31] usb 1-1: device descriptor read/8, error -71 [ 179.038509][ T31] usb usb1-port1: unable to enumerate USB device [ 179.245718][ T46] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 179.258919][ T46] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 179.268459][ T46] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 179.280366][ T46] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 179.290741][ T46] usb 4-1: USB disconnect, device number 59 [ 179.584141][ T10] usb 3-1: device descriptor read/64, error -71 [ 179.998353][ T46] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 180.018322][ T663] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 180.148345][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 180.154976][ T46] usb 1-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 180.165566][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 180.178939][ T46] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 180.188114][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.197065][ T663] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 180.208850][ T46] usb 1-1: config 0 descriptor?? [ 180.217443][ T663] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.228529][ T46] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 180.238143][ T663] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 180.252829][ T663] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 180.266210][ T663] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 180.275458][ T663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.288008][ T663] usb 4-1: config 0 descriptor?? [ 180.293534][ T2601] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 180.706339][ T663] konepure 0003:1E7D:2DBE.0010: unknown main item tag 0x3 [ 180.715094][ T663] konepure 0003:1E7D:2DBE.0010: hidraw0: USB HID v0.07 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0 [ 180.758326][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 180.888298][ T10] usb 3-1: device descriptor read/64, error -71 [ 180.904967][ T663] usb 4-1: USB disconnect, device number 60 [ 182.278354][ T10] usb 3-1: device descriptor read/64, error -71 [ 182.388705][ T10] usb usb3-port1: attempt power cycle [ 182.468492][ T502] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 182.618408][ T502] usb 2-1: Using ep0 maxpacket: 32 [ 182.625122][ T502] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 182.633373][ T502] usb 2-1: config 0 has no interface number 0 [ 182.641281][ T502] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 182.650455][ T502] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.658537][ T502] usb 2-1: Product: syz [ 182.662755][ T502] usb 2-1: Manufacturer: syz [ 182.667537][ T502] usb 2-1: SerialNumber: syz [ 182.673351][ T502] usb 2-1: config 0 descriptor?? [ 182.683036][ T502] smsc95xx v2.0.0 [ 182.728431][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 182.748794][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 182.754746][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 182.763592][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 182.772577][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.783003][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 182.792578][ T10] usb 3-1: config 1 has no interface number 1 [ 182.798994][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 182.812186][ T10] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.825397][ T10] usb 3-1: config 1 interface 2 has no altsetting 0 [ 182.833530][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.842775][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.850895][ T10] usb 3-1: Product: syz [ 182.852980][ T663] usb 1-1: USB disconnect, device number 65 [ 182.855313][ T10] usb 3-1: Manufacturer: syz [ 182.866005][ T10] usb 3-1: SerialNumber: syz [ 182.885842][ T36] audit: type=1400 audit(2000000118.894:349): avc: denied { append } for pid=2627 comm="syz.0.793" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 183.083078][ T502] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 183.094825][ T502] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 183.106931][ T10] usb 3-1: USB disconnect, device number 54 [ 183.208462][ T663] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 184.278303][ T663] usb 1-1: Using ep0 maxpacket: 32 [ 184.296615][ T663] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 184.316083][ T663] usb 1-1: config 0 has no interface number 0 [ 185.277789][ T663] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 185.290776][ T663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.305004][ T502] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 185.318203][ T502] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 185.332022][ T502] usb 2-1: USB disconnect, device number 54 [ 185.353121][ T663] usb 1-1: Product: syz [ 185.383290][ T663] usb 1-1: Manufacturer: syz [ 185.387975][ T663] usb 1-1: SerialNumber: syz [ 185.399164][ T663] usb 1-1: config 0 descriptor?? [ 185.405051][ T663] smsc95xx v2.0.0 [ 185.526733][ T2643] ext4: Unknown parameter ''' [ 185.528633][ T36] audit: type=1400 audit(2000000121.534:350): avc: denied { mounton } for pid=2642 comm="syz.2.798" path="/201/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 185.730209][ T2666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.804'. [ 185.798435][ T46] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 185.948296][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 185.955003][ T46] usb 4-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 185.965416][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.978610][ T46] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 185.987680][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.996484][ T46] usb 4-1: config 0 descriptor?? [ 186.002823][ T46] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 186.421038][ T663] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 186.431914][ T663] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 186.441325][ T663] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 186.452251][ T663] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 186.462070][ T663] usb 1-1: USB disconnect, device number 66 [ 188.078325][ T502] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 188.228366][ T502] usb 3-1: Using ep0 maxpacket: 32 [ 188.234884][ T502] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 188.243418][ T502] usb 3-1: config 0 has no interface number 0 [ 188.251433][ T502] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 188.260841][ T502] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.268961][ T502] usb 3-1: Product: syz [ 188.273268][ T502] usb 3-1: Manufacturer: syz [ 188.277907][ T502] usb 3-1: SerialNumber: syz [ 188.283566][ T502] usb 3-1: config 0 descriptor?? [ 188.290124][ T502] smsc95xx v2.0.0 [ 188.690227][ T502] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 188.701601][ T502] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 188.749101][ T9] usb 4-1: USB disconnect, device number 61 [ 188.893088][ T2697] tipc: Started in network mode [ 188.898031][ T2697] tipc: Node identity dabd0b80e67, cluster identity 4711 [ 188.906397][ T2697] tipc: Enabled bearer , priority 0 [ 188.921296][ T2697] tipc: Disabling bearer [ 191.168324][ T46] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 191.299285][ T502] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 191.310671][ T502] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 191.322628][ T502] usb 3-1: USB disconnect, device number 55 [ 191.333934][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 191.346597][ T46] usb 1-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 191.361531][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 191.374732][ T46] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 191.384467][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.396886][ T46] usb 1-1: config 0 descriptor?? [ 191.412619][ T46] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 191.863105][ T2723] netlink: 328 bytes leftover after parsing attributes in process `syz.2.821'. [ 191.877755][ T2723] netlink: 328 bytes leftover after parsing attributes in process `syz.2.821'. [ 193.498333][ T502] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 193.648376][ T502] usb 2-1: Using ep0 maxpacket: 32 [ 193.654830][ T502] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 193.663020][ T502] usb 2-1: config 0 has no interface number 0 [ 193.670776][ T502] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 193.680032][ T502] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.688062][ T502] usb 2-1: Product: syz [ 193.692323][ T502] usb 2-1: Manufacturer: syz [ 193.697042][ T502] usb 2-1: SerialNumber: syz [ 193.702625][ T502] usb 2-1: config 0 descriptor?? [ 193.708621][ T502] smsc95xx v2.0.0 [ 193.796083][ T36] audit: type=1400 audit(2000000129.804:351): avc: denied { rename } for pid=2751 comm="syz.2.831" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 193.891237][ T36] audit: type=1400 audit(2000000129.904:352): avc: denied { read } for pid=2756 comm="syz.2.832" path="socket:[26005]" dev="sockfs" ino=26005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.009327][ T10] usb 1-1: USB disconnect, device number 67 [ 194.114535][ T502] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 194.125466][ T502] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 194.304553][ T2769] netlink: 388 bytes leftover after parsing attributes in process `syz.0.837'. [ 195.648351][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 195.808302][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 195.814649][ T10] usb 3-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 195.825191][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.838330][ T10] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 195.847451][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.858580][ T10] usb 3-1: config 0 descriptor?? [ 195.867851][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 196.098371][ T46] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 196.159230][ T502] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 196.172268][ T502] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 196.182436][ T502] usb 2-1: USB disconnect, device number 55 [ 196.250025][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.261183][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.271150][ T46] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 196.280392][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.289168][ T46] usb 4-1: config 0 descriptor?? [ 196.683850][ T2798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.692494][ T2798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.701673][ T46] cp2112 0003:10C4:EA90.0011: item fetching failed at offset 5/7 [ 196.709674][ T46] cp2112 0003:10C4:EA90.0011: parse failed [ 196.715613][ T46] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -22 [ 196.899286][ T2793] fuse: Bad value for 'user_id' [ 196.904340][ T2793] fuse: Bad value for 'user_id' [ 196.910070][ T10] usb 4-1: USB disconnect, device number 62 [ 196.918379][ T502] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 197.968308][ T502] usb 1-1: Using ep0 maxpacket: 8 [ 197.973852][ T502] usb 1-1: too many configurations: 153, using maximum allowed: 8 [ 197.982843][ T502] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 197.990762][ T502] usb 1-1: can't read configurations, error -61 [ 198.118295][ T502] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 198.268305][ T663] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 198.268320][ T502] usb 1-1: Using ep0 maxpacket: 8 [ 198.281234][ T502] usb 1-1: too many configurations: 153, using maximum allowed: 8 [ 198.290259][ T502] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 198.298033][ T502] usb 1-1: can't read configurations, error -61 [ 198.428298][ T663] usb 4-1: Using ep0 maxpacket: 32 [ 198.434746][ T663] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 198.443153][ T663] usb 4-1: config 0 has no interface number 0 [ 198.451102][ T663] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 198.460538][ T663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.468841][ T663] usb 4-1: Product: syz [ 198.473137][ T663] usb 4-1: Manufacturer: syz [ 198.477841][ T663] usb 4-1: SerialNumber: syz [ 198.484959][ T663] usb 4-1: config 0 descriptor?? [ 198.491732][ T663] smsc95xx v2.0.0 [ 198.495765][ T663] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 198.506177][ T663] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 199.255749][ T502] usb usb1-port1: attempt power cycle [ 199.309111][ T663] usb 3-1: USB disconnect, device number 56 [ 199.698298][ T663] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 199.848304][ T663] usb 3-1: Using ep0 maxpacket: 8 [ 199.854708][ T663] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.865125][ T663] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.871928][ T663] usb 3-1: New USB device found, idVendor=28bd, idProduct=1920, bcdDevice= 0.00 [ 199.881244][ T663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.893569][ T663] usb 3-1: config 0 descriptor?? [ 200.305449][ T663] hid-generic 0003:28BD:1920.0012: unknown main item tag 0x0 [ 200.318597][ T663] hid-generic 0003:28BD:1920.0012: hidraw0: USB HID v0.00 Device [HID 28bd:1920] on usb-dummy_hcd.2-1/input0 [ 200.503440][ T2824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.512157][ T2824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.521822][ T10] usb 3-1: USB disconnect, device number 57 [ 200.658779][ T502] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 200.678738][ T502] usb 1-1: Using ep0 maxpacket: 8 [ 200.685167][ T502] usb 1-1: config 0 interface 0 altsetting 35 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.696421][ T502] usb 1-1: config 0 interface 0 has no altsetting 0 [ 200.703373][ T502] usb 1-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 200.712553][ T502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.721739][ T502] usb 1-1: config 0 descriptor?? [ 200.788334][ T1544] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 200.938296][ T1544] usb 2-1: Using ep0 maxpacket: 32 [ 200.944919][ T1544] usb 2-1: config 0 interface 0 has no altsetting 0 [ 200.951725][ T1544] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 200.960908][ T1544] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.969921][ T1544] usb 2-1: config 0 descriptor?? [ 201.047032][ T10] usb 4-1: USB disconnect, device number 63 [ 201.134748][ T502] uclogic 0003:28BD:0075.0013: interface is invalid, ignoring [ 201.177262][ T2836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 201.177326][ T2836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:542 [ 201.186877][ T36] audit: type=1400 audit(2000000137.184:353): avc: denied { call } for pid=2835 comm="syz.1.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 201.291604][ T2850] rust_binder: Write failure EINVAL in pid:599 [ 201.335011][ T46] usb 1-1: USB disconnect, device number 70 [ 202.405309][ T1544] usbhid 2-1:0.0: can't add hid device: -71 [ 202.411641][ T1544] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 202.425715][ T1544] usb 2-1: USB disconnect, device number 56 [ 202.428144][ T663] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 202.598319][ T663] usb 3-1: Using ep0 maxpacket: 16 [ 202.604732][ T663] usb 3-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 202.615106][ T663] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.628072][ T663] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 202.637165][ T663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.646033][ T663] usb 3-1: config 0 descriptor?? [ 202.652360][ T663] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 202.708376][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 202.756228][ T2861] fuse: Unknown parameter 'smackfsroot' [ 202.805557][ T2866] syzkaller1: entered promiscuous mode [ 202.811160][ T2866] syzkaller1: entered allmulticast mode [ 202.826107][ T2866] syz.0.869 (2866): attempted to duplicate a private mapping with mremap. This is not supported. [ 202.859665][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.870694][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.880564][ T9] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 202.889755][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.898932][ T9] usb 4-1: config 0 descriptor?? [ 203.080547][ T2878] kvm: kvm [2877]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x90a7 [ 203.180148][ T2888] fuse: Unknown parameter 'rootmæde' [ 203.187101][ T2888] bridge0: entered allmulticast mode [ 203.193097][ T2888] bridge0: left allmulticast mode [ 203.310937][ T2859] rust_binder: Read failure Err(EAGAIN) in pid:607 [ 203.458337][ T663] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 203.513403][ T2859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.524011][ T2859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.628289][ T663] usb 1-1: Using ep0 maxpacket: 32 [ 203.640208][ T663] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 203.649662][ T663] usb 1-1: config 0 has no interface number 0 [ 203.663866][ T663] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 203.676313][ T663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.693410][ T663] usb 1-1: Product: syz [ 203.702180][ T663] usb 1-1: Manufacturer: syz [ 203.712331][ T663] usb 1-1: SerialNumber: syz [ 203.813414][ T663] usb 1-1: config 0 descriptor?? [ 203.823712][ T663] smsc95xx v2.0.0 [ 204.093744][ T9] holtek_kbd 0003:04D9:A055.0014: unknown main item tag 0x3 [ 204.101234][ T9] holtek_kbd 0003:04D9:A055.0014: item fetching failed at offset 4/7 [ 204.109680][ T9] holtek_kbd 0003:04D9:A055.0014: probe with driver holtek_kbd failed with error -22 [ 204.121164][ T9] usb 4-1: USB disconnect, device number 64 [ 204.224047][ T663] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 204.245128][ T663] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 204.400306][ T2904] cgroup: Bad value for 'name' [ 204.711844][ T46] usb 3-1: USB disconnect, device number 58 [ 204.756145][ T2910] tipc: Enabling not permitted [ 204.772559][ T2910] tipc: Enabling of bearer rejected, failed to enable media [ 204.798108][ T2913] tipc: Enabling not permitted [ 204.814198][ T2913] tipc: Enabling of bearer rejected, failed to enable media [ 204.966556][ T36] audit: type=1400 audit(2000000140.974:354): avc: denied { write } for pid=2922 comm="syz.3.886" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 204.966993][ T2923] random: crng reseeded on system resumption [ 205.021778][ T36] audit: type=1400 audit(2000000140.974:355): avc: denied { open } for pid=2922 comm="syz.3.886" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 205.129752][ T36] audit: type=1400 audit(2000000141.144:356): avc: denied { read } for pid=2925 comm="syz.2.887" dev="sockfs" ino=27751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 205.466619][ T663] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 205.488339][ T663] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 205.500315][ T663] usb 1-1: USB disconnect, device number 71 [ 206.768314][ T663] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 206.918303][ T663] usb 1-1: Using ep0 maxpacket: 16 [ 206.924911][ T663] usb 1-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 206.943110][ T663] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.960269][ T663] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 206.969911][ T663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.982598][ T663] usb 1-1: config 0 descriptor?? [ 206.997192][ T663] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 207.060963][ T2942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64536 sclass=netlink_route_socket pid=2942 comm=syz.1.893 [ 207.149448][ T2947] ------------[ cut here ]------------ [ 207.155174][ T2947] WARNING: CPU: 1 PID: 2947 at mm/page_alloc.c:5268 __alloc_pages_noprof+0x109/0x7e0 [ 207.164933][ T2947] Modules linked in: [ 207.169025][ T2947] CPU: 1 UID: 0 PID: 2947 Comm: syz.2.895 Not tainted syzkaller #0 ec67a0b9c3f9090985a335a00964337a606b4ed6 [ 207.180582][ T2947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 207.190828][ T2947] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 207.196961][ T2947] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d ea aa 0b 06 00 0f 85 c2 00 00 00 c6 05 dd aa 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 207.216950][ T2947] RSP: 0018:ffffc9000f84f860 EFLAGS: 00010246 [ 207.223307][ T2947] RAX: 0000000000000000 RBX: 000000000000001f RCX: 0000000000000000 [ 207.231357][ T2947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000f84f918 [ 207.239410][ T2947] RBP: ffffc9000f84f988 R08: ffffc9000f84f917 R09: 0000000000000000 [ 207.247422][ T2947] R10: ffffc9000f84f900 R11: fffff52001f09f23 R12: ffffc9000f84f8a0 [ 207.255614][ T2947] R13: dffffc0000000000 R14: 1ffff92001f09f10 R15: 0000000000000000 [ 207.263946][ T2947] FS: 00007f10d14096c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 207.273009][ T2947] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.279678][ T2947] CR2: 00007f10d064e9d3 CR3: 000000013192a000 CR4: 00000000003526b0 [ 207.287793][ T2947] Call Trace: [ 207.291163][ T2947] [ 207.294138][ T2947] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 207.300303][ T2947] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 207.306080][ T2947] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 207.311787][ T2947] ___kmalloc_large_node+0x81/0x210 [ 207.317154][ T2947] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 207.323381][ T2947] __kmalloc_large_node_noprof+0x1e/0xd0 [ 207.329462][ T2947] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 207.335141][ T2947] __kmalloc_noprof+0x326/0x500 [ 207.340158][ T2947] ? __cfi_lockref_get+0x10/0x10 [ 207.345251][ T2947] incfs_realloc_mount_info+0xa7/0x4d0 [ 207.350891][ T2947] ? incfs_add_sysfs_node+0x118/0x230 [ 207.356325][ T2947] incfs_alloc_mount_info+0x478/0x5f0 [ 207.361805][ T2947] incfs_mount_fs+0x3ca/0x970 [ 207.366810][ T2947] ? __cfi_incfs_mount_fs+0x10/0x10 [ 207.372157][ T2947] ? vfs_parse_fs_string+0x10f/0x180 [ 207.377506][ T2947] ? selinux_capable+0x38/0x50 [ 207.382370][ T2947] legacy_get_tree+0x106/0x1b0 [ 207.387200][ T2947] ? __cfi_incfs_mount_fs+0x10/0x10 [ 207.392504][ T2947] vfs_get_tree+0x9e/0x290 [ 207.397064][ T2947] do_new_mount+0x251/0xb30 [ 207.401666][ T2947] ? security_capable+0x44/0x130 [ 207.406667][ T2947] path_mount+0x682/0x1010 [ 207.411152][ T2947] __se_sys_mount+0x2bf/0x480 [ 207.415872][ T2947] ? __x64_sys_mount+0xf0/0xf0 [ 207.420717][ T2947] ? __x64_sys_pwrite64+0x173/0x230 [ 207.426008][ T2947] ? __kasan_check_write+0x18/0x20 [ 207.431210][ T2947] ? fpregs_restore_userregs+0x11c/0x260 [ 207.436917][ T2947] __x64_sys_mount+0xc3/0xf0 [ 207.441639][ T2947] x64_sys_call+0x2021/0x2ee0 [ 207.446370][ T2947] do_syscall_64+0x57/0xf0 [ 207.450852][ T2947] ? clear_bhb_loop+0x50/0xa0 [ 207.455615][ T2947] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 207.461629][ T2947] RIP: 0033:0x7f10d059c629 [ 207.466105][ T2947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.485788][ T2947] RSP: 002b:00007f10d1409028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 207.494301][ T2947] RAX: ffffffffffffffda RBX: 00007f10d0815fa0 RCX: 00007f10d059c629 [ 207.502380][ T2947] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 207.510481][ T2947] RBP: 00007f10d0632b39 R08: 0000200000000000 R09: 0000000000000000 [ 207.518664][ T2947] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 207.526684][ T2947] R13: 00007f10d0816038 R14: 00007f10d0815fa0 R15: 00007ffe03ddd5a8 [ 207.534760][ T2947] [ 207.537817][ T2947] ---[ end trace 0000000000000000 ]--- [ 207.543448][ T2947] incfs: Error allocating mount info. -12 [ 207.549450][ T2947] incfs: mount failed -12 [ 209.599061][ T46] usb 1-1: USB disconnect, device number 72